Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.mft
File:                     7yfjyfFbWDsVypzMPJBdIpzi8NA.mft (raw, json)
Hash identifier:          +VYhv2rdyCrave+yjSuaTu+lPKK2CkStQSfgpPNjDcQ=
Subject key identifier:   DA:45:9B:E1:D5:C4:BE:85:AB:C9:32:B9:F3:DB:DF:0E:72:87:46:03
Authority key identifier: EF:27:E3:C9:F1:5B:58:3B:15:CA:9C:CC:3C:90:5D:22:9C:E2:F0:D0
Certificate issuer:       /CN=A91C1814/serialNumber=EF27E3C9F15B583B15CA9CCC3C905D229CE2F0D0
Certificate serial:       059E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7yfjyfFbWDsVypzMPJBdIpzi8NA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.mft
Manifest number:          0599
Signing time:             Thu 30 Jan 2025 23:12:32 +0000
Manifest this update:     Thu 30 Jan 2025 23:12:31 +0000
Manifest next update:     Thu 06 Feb 2025 23:12:31 +0000
Files and hashes:         1: 7yfjyfFbWDsVypzMPJBdIpzi8NA.crl (hash: y/cIj6MAkrnGmnjL6GX28GDkrR1pqr9SSpLDHS4mW70=)
                          2: 38378A3EBA3411EBB94A527CC4F9AE02.roa (hash: bXfsV+JRththOFdM9JTTJyhVvibLKGVpju+gIvVc/Sk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1438 (0x59e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1814/serialNumber=EF27E3C9F15B583B15CA9CCC3C905D229CE2F0D0
        Validity
            Not Before: Jan 30 23:12:31 2025 GMT
            Not After : Feb  6 23:12:31 2025 GMT
        Subject: CN=679c0760-8649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:88:b3:57:f7:b9:11:6b:3f:db:ea:41:a6:62:
                    71:c3:14:53:fa:65:bd:d1:11:e4:77:37:41:1e:47:
                    dd:e6:c5:83:e3:a1:aa:84:89:16:6b:a4:69:9f:e8:
                    13:aa:51:52:23:9a:f0:b3:97:ce:85:41:c4:c3:61:
                    8f:64:e1:57:42:3b:32:9b:28:e3:6b:53:13:f6:13:
                    8b:6c:d1:e7:fe:6c:e1:d3:1b:ca:89:68:dc:0a:6f:
                    6b:2b:20:a1:29:50:07:b1:bb:0a:d0:87:25:be:6f:
                    ba:ab:22:dd:6d:65:d0:fa:d9:f6:7c:34:f6:17:69:
                    2e:05:0d:17:94:1c:b4:ba:fd:09:56:b3:a6:64:22:
                    d6:45:15:f4:d2:b3:27:d5:57:86:34:99:c3:a2:84:
                    29:a9:db:75:e4:9d:6f:b5:c3:34:d3:13:92:2a:91:
                    d7:f6:31:17:58:71:90:ee:d5:1a:e0:eb:80:49:35:
                    2e:76:bf:02:a3:63:c9:f6:59:a2:51:85:1a:f1:46:
                    b9:1f:ac:67:21:c0:2f:4b:bd:02:09:89:52:f1:27:
                    45:ae:74:37:92:bf:ab:97:a8:44:5a:9a:c7:48:be:
                    24:3c:46:ba:33:90:a0:c8:c1:6d:2a:fb:cb:57:22:
                    7d:44:bf:af:33:43:14:a6:70:bf:48:6d:3f:97:d3:
                    42:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:45:9B:E1:D5:C4:BE:85:AB:C9:32:B9:F3:DB:DF:0E:72:87:46:03
            X509v3 Authority Key Identifier:
                keyid:EF:27:E3:C9:F1:5B:58:3B:15:CA:9C:CC:3C:90:5D:22:9C:E2:F0:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7yfjyfFbWDsVypzMPJBdIpzi8NA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:f4:9d:3a:5e:6b:e6:13:fa:3d:7c:b3:b2:86:63:77:cd:37:
         e0:00:fe:ed:db:d3:00:78:ce:f1:e0:f1:da:9c:3e:b2:68:d9:
         da:a9:e5:8d:dd:8c:9f:3a:16:2e:b1:1d:20:f4:fd:51:06:35:
         8d:b3:3c:0e:12:1d:7e:6f:81:61:af:c6:95:e6:be:79:26:cc:
         6f:1f:ca:d4:d8:b3:f7:c3:b3:b7:01:30:3d:0a:51:f3:48:60:
         ea:98:87:1a:47:d1:bb:ff:7d:8a:2a:69:4b:51:ee:e5:37:18:
         6a:ed:ff:49:c7:51:cc:c9:8b:9f:a4:37:a6:72:3e:6e:ab:43:
         48:63:8f:95:8c:97:47:19:c0:0b:8a:7b:2f:c7:30:03:c7:19:
         a2:71:8c:45:22:57:a8:22:be:d6:5d:b3:de:ac:94:96:23:9c:
         14:69:e7:df:4a:3f:cd:7f:33:ac:bc:cf:6b:b5:ed:c3:37:4e:
         e1:1e:98:b9:a9:ea:56:7f:5a:64:82:f8:a2:9b:f6:cb:71:2c:
         06:a2:e7:16:c8:e6:f1:99:7b:d9:7a:10:28:3f:ec:f1:c7:34:
         69:1e:01:b2:d2:ec:dd:ba:e3:d7:f2:f4:cf:cd:ee:0d:74:67:
         7a:df:9d:f2:45:97:8f:85:5a:4f:65:f5:55:1e:4a:35:df:16:
         66:35:96:6a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzE4MTQxMTAvBgNVBAUTKEVGMjdFM0M5RjE1QjU4M0IxNUNBOUNDQzNDOTA1RDIy
OUNFMkYwRDAwHhcNMjUwMTMwMjMxMjMxWhcNMjUwMjA2MjMxMjMxWjAYMRYwFAYD
VQQDEw02NzljMDc2MC04NjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmoizV/e5EWs/2+pBpmJxwxRT+mW90RHkdzdBHkfd5sWD46GqhIkWa6Rpn+gT
qlFSI5rws5fOhUHEw2GPZOFXQjsymyjja1MT9hOLbNHn/mzh0xvKiWjcCm9rKyCh
KVAHsbsK0Iclvm+6qyLdbWXQ+tn2fDT2F2kuBQ0XlBy0uv0JVrOmZCLWRRX00rMn
1VeGNJnDooQpqdt15J1vtcM00xOSKpHX9jEXWHGQ7tUa4OuASTUudr8Co2PJ9lmi
UYUa8Ua5H6xnIcAvS70CCYlS8SdFrnQ3kr+rl6hEWprHSL4kPEa6M5CgyMFtKvvL
VyJ9RL+vM0MUpnC/SG0/l9NCCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNpFm+HV
xL6Fq8kyufPb3w5yh0YDMB8GA1UdIwQYMBaAFO8n48nxW1g7FcqczDyQXSKc4vDQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTgxNC9GM0M4NTM5RUJB
MzExMUVCOUM2OUMxNzhDNEY5QUUwMi83eWZqeWZGYldEc1Z5cHpNUEpCZElwemk4
TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzd5Zmp5ZkZiV0RzVnlwek1QSkJkSXB6aThOQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MTgxNC9GM0M4NTM5RUJBMzExMUVCOUM2OUMxNzhDNEY5QUUwMi83eWZqeWZGYldE
c1Z5cHpNUEpCZElwemk4TkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBd9J06XmvmE/o9fLOyhmN3zTfgAP7t29MAeM7x4PHanD6yaNnaqeWN
3YyfOhYusR0g9P1RBjWNszwOEh1+b4Fhr8aV5r55JsxvH8rU2LP3w7O3ATA9ClHz
SGDqmIcaR9G7/32KKmlLUe7lNxhq7f9Jx1HMyYufpDemcj5uq0NIY4+VjJdHGcAL
insvxzADxxmicYxFIleoIr7WXbPerJSWI5wUaeffSj/NfzOsvM9rte3DN07hHpi5
qepWf1pkgviim/bLcSwGoucWyObxmXvZehAoP+zxxzRpHgGy0uzduuPX8vTPze4N
dGd6353yRZePhVpPZfVVHko13xZmNZZq
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:45:57 2025 by rpki-client