Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft
File:                     xzON8bdowFB0za7Q_bGkwUrfuLU.mft (raw, json)
Hash identifier:          e0dqYOBTpFrJwPFkFEK88ikk7Uz8KCmYZhwJYgSxbGQ=
Subject key identifier:   2E:2B:9D:AC:70:56:20:E1:29:53:DC:02:53:F5:49:38:6B:69:A9:1E
Authority key identifier: C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5
Certificate issuer:       /CN=A91C167F/serialNumber=C7338DF1B768C05074CDAED0FDB1A4C14ADFB8B5
Certificate serial:       F3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft
Manifest number:          DB
Signing time:             Fri 31 Jan 2025 05:03:51 +0000
Manifest this update:     Fri 31 Jan 2025 05:03:50 +0000
Manifest next update:     Fri 07 Feb 2025 05:03:50 +0000
Files and hashes:         1: xzON8bdowFB0za7Q_bGkwUrfuLU.crl (hash: PJvqntfOhBcZL9APSR172Bw5sCB40zkx/4gCbkb19ak=)
                          2: A2516E42DE4511EF8C37E320C4F9AE02.roa (hash: hGl1Jdq6ILlJZqMuHMt/RUb16PguE9DNMzDeEt3UsJk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 243 (0xf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C167F/serialNumber=C7338DF1B768C05074CDAED0FDB1A4C14ADFB8B5
        Validity
            Not Before: Jan 31 05:03:50 2025 GMT
            Not After : Feb  7 05:03:50 2025 GMT
        Subject: CN=679c59b6-c4d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:06:4b:eb:82:66:5b:61:a7:fa:c0:49:1c:a1:
                    ab:95:2a:ab:8a:d2:c1:05:c0:52:1e:73:55:ae:32:
                    25:3b:ca:7c:86:d0:32:27:4a:b1:d1:a7:6e:ea:01:
                    21:bb:d0:18:00:d1:5b:01:05:fe:f2:f7:23:9d:5b:
                    12:e3:75:da:80:35:6e:eb:27:c0:28:52:0a:89:26:
                    dd:4e:f1:ea:e6:d6:f8:3a:47:bd:69:dc:e4:ba:8c:
                    44:1a:b8:f7:77:01:21:2e:04:86:ad:83:6b:26:26:
                    04:64:63:8e:87:2b:d2:dc:3d:3f:9d:90:99:8f:96:
                    c7:5f:c7:ac:eb:2f:92:22:5b:2c:9f:a3:bc:47:d6:
                    3f:2c:b2:49:14:6a:65:e3:3a:0b:4c:e0:84:35:0f:
                    6a:e0:59:fb:b0:df:98:d7:63:33:48:55:0e:c6:26:
                    8f:b6:9f:fa:a7:1c:19:16:2c:e7:53:35:9d:de:fe:
                    e0:27:30:36:68:e6:aa:d9:78:18:fb:fc:b2:62:7e:
                    43:11:2f:c6:5b:40:b8:b7:4f:11:04:96:78:65:42:
                    4d:9b:6a:f6:6d:e9:22:8e:1f:a7:4f:54:60:ab:58:
                    49:bc:30:7b:96:92:15:d8:c9:bd:b8:41:69:31:df:
                    c2:f6:cf:8e:57:db:b4:b5:ca:04:d7:3b:5a:94:54:
                    02:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:2B:9D:AC:70:56:20:E1:29:53:DC:02:53:F5:49:38:6B:69:A9:1E
            X509v3 Authority Key Identifier:
                keyid:C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:17:f0:0f:3b:c0:73:63:fc:2e:4a:4c:0d:1d:b1:56:1f:8d:
         b1:86:0c:89:a4:99:39:b4:bb:e4:b4:54:dc:0c:f0:96:fe:bd:
         df:05:30:94:d4:a6:52:17:e7:89:fe:89:40:96:1a:87:44:a2:
         c2:de:88:cf:bd:07:5c:74:f2:b8:e6:a2:67:6d:47:cd:af:8d:
         90:67:e5:93:11:70:0b:0b:37:01:a3:ba:f5:95:77:81:ce:67:
         6d:66:be:2f:d8:ac:84:1f:0a:8e:7e:67:22:07:5f:26:8b:84:
         d3:91:a4:3f:cd:ea:10:24:83:3c:b3:60:aa:ec:d4:41:87:b0:
         c5:ea:3b:e0:e8:d4:a4:7d:a2:8e:a9:a8:14:e0:ea:ba:5c:cf:
         d9:38:bf:d2:04:53:db:cf:b3:0e:ed:a1:f2:86:8f:dd:9c:84:
         4d:d2:b9:d6:63:f3:59:34:d2:d8:20:a4:76:2e:2b:5a:8c:25:
         bd:37:e0:6f:b0:3e:4f:de:c8:ee:b2:91:cc:0c:d6:a9:c5:bb:
         cf:7a:cd:4c:4f:27:9f:da:a2:b5:1f:c8:9e:d1:0b:d1:3d:18:
         0b:ae:b3:a1:cd:30:03:e1:14:a1:52:75:ab:e8:10:fa:64:5c:
         3b:86:f9:96:1d:a5:63:a4:c5:ef:8c:8c:54:5a:07:c6:d3:ba:
         1d:3e:5a:f8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzE2N0YxMTAvBgNVBAUTKEM3MzM4REYxQjc2OEMwNTA3NENEQUVEMEZEQjFBNEMx
NEFERkI4QjUwHhcNMjUwMTMxMDUwMzUwWhcNMjUwMjA3MDUwMzUwWjAYMRYwFAYD
VQQDEw02NzljNTliNi1jNGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAogZL64JmW2Gn+sBJHKGrlSqritLBBcBSHnNVrjIlO8p8htAyJ0qx0adu6gEh
u9AYANFbAQX+8vcjnVsS43XagDVu6yfAKFIKiSbdTvHq5tb4Oke9adzkuoxEGrj3
dwEhLgSGrYNrJiYEZGOOhyvS3D0/nZCZj5bHX8es6y+SIlssn6O8R9Y/LLJJFGpl
4zoLTOCENQ9q4Fn7sN+Y12MzSFUOxiaPtp/6pxwZFiznUzWd3v7gJzA2aOaq2XgY
+/yyYn5DES/GW0C4t08RBJZ4ZUJNm2r2bekijh+nT1Rgq1hJvDB7lpIV2Mm9uEFp
Md/C9s+OV9u0tcoE1ztalFQCeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC4rnaxw
ViDhKVPcAlP1SThraakeMB8GA1UdIwQYMBaAFMczjfG3aMBQdM2u0P2xpMFK37i1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTY3Ri80QUFCN0JDQUM0
N0QxMUVFOUZDN0M4MEZDNEY5QUUwMi94ek9OOGJkb3dGQjB6YTdRX2JHa3dVcmZ1
TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3h6T044YmRvd0ZCMHphN1FfYkdrd1VyZnVMVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MTY3Ri80QUFCN0JDQUM0N0QxMUVFOUZDN0M4MEZDNEY5QUUwMi94ek9OOGJkb3dG
QjB6YTdRX2JHa3dVcmZ1TFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCFF/APO8BzY/wuSkwNHbFWH42xhgyJpJk5tLvktFTcDPCW/r3fBTCU
1KZSF+eJ/olAlhqHRKLC3ojPvQdcdPK45qJnbUfNr42QZ+WTEXALCzcBo7r1lXeB
zmdtZr4v2KyEHwqOfmciB18mi4TTkaQ/zeoQJIM8s2Cq7NRBh7DF6jvg6NSkfaKO
qagU4Oq6XM/ZOL/SBFPbz7MO7aHyho/dnIRN0rnWY/NZNNLYIKR2LitajCW9N+Bv
sD5P3sjuspHMDNapxbvPes1MTyef2qK1H8ie0QvRPRgLrrOhzTAD4RShUnWr6BD6
ZFw7hvmWHaVjpMXvjIxUWgfG07odPlr4
-----END CERTIFICATE-----
Generated at Mon Apr 28 14:52:54 2025 by rpki-client