Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.mft
File:                     imIbx3o91BcMuRA_-HiLyQkAgtE.mft (raw, json)
Hash identifier:          xrI+ojzXKQya5YBC2gbC7eYc84WRm1R7h2guNMbo4U8=
Subject key identifier:   15:E0:CE:CA:0D:75:01:3F:96:34:9E:FD:70:79:B6:21:59:59:CE:92
Authority key identifier: 8A:62:1B:C7:7A:3D:D4:17:0C:B9:10:3F:F8:78:8B:C9:09:00:82:D1
Certificate issuer:       /CN=A91C24C5/serialNumber=8A621BC77A3DD4170CB9103FF8788BC9090082D1
Certificate serial:       E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imIbx3o91BcMuRA_-HiLyQkAgtE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.mft
Manifest number:          E5
Signing time:             Fri 31 Jan 2025 04:33:02 +0000
Manifest this update:     Fri 31 Jan 2025 04:33:02 +0000
Manifest next update:     Fri 07 Feb 2025 04:33:02 +0000
Files and hashes:         1: imIbx3o91BcMuRA_-HiLyQkAgtE.crl (hash: 2EMS0mWiHbVoMBJ+rtEyDmoOLYgyJISaRxxrTFPnEmY=)
                          2: 872F5E22835A11EE9FFEC146C4F9AE02.roa (hash: MIl/OMgyucN0EutmGHMH29cPoxdMejUcwQsKGNX20nw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 232 (0xe8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C24C5/serialNumber=8A621BC77A3DD4170CB9103FF8788BC9090082D1
        Validity
            Not Before: Jan 31 04:33:02 2025 GMT
            Not After : Feb  7 04:33:02 2025 GMT
        Subject: CN=679c527e-817b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:48:f5:36:f1:0f:3e:82:17:fb:97:74:ba:6e:
                    70:d6:39:36:31:89:9c:77:2d:c7:e9:97:bc:e9:d9:
                    ac:a9:05:64:e2:bb:32:0f:41:46:61:3d:6d:38:7c:
                    3b:55:cd:e1:cb:f1:1c:13:29:89:43:f0:57:e8:d0:
                    02:05:c1:42:fc:99:cf:db:48:52:45:f4:cc:87:32:
                    3b:26:c5:61:e8:7f:14:92:92:e6:42:6e:c7:a6:0a:
                    80:a9:16:0e:d6:46:47:d5:27:8e:40:9c:bc:21:72:
                    3b:3c:15:e1:5f:8b:97:79:d8:a8:80:91:f2:05:cf:
                    41:42:09:45:a7:28:12:03:4a:78:3c:14:f7:12:dc:
                    00:41:6f:2b:89:c8:eb:a1:50:3d:86:b2:76:08:a8:
                    c0:1a:89:9f:5b:e4:03:56:18:ae:51:6a:a2:c5:40:
                    bc:2b:0e:50:10:99:f2:38:80:78:44:ee:e7:e2:d9:
                    5e:27:30:51:7b:38:72:50:7a:cb:57:bd:0b:6c:f6:
                    c4:78:63:48:5f:2d:32:1f:d7:49:ce:f6:ff:98:1f:
                    6e:e2:4f:0b:6e:df:bb:f6:b2:3b:c0:2b:17:b0:55:
                    e4:d6:7a:17:1d:d4:85:d7:42:bf:e9:3c:14:d9:2e:
                    3b:87:85:22:07:fa:44:8e:f0:2c:67:18:ef:35:61:
                    52:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E0:CE:CA:0D:75:01:3F:96:34:9E:FD:70:79:B6:21:59:59:CE:92
            X509v3 Authority Key Identifier:
                keyid:8A:62:1B:C7:7A:3D:D4:17:0C:B9:10:3F:F8:78:8B:C9:09:00:82:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imIbx3o91BcMuRA_-HiLyQkAgtE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:d0:10:5a:bf:75:fd:7a:82:88:02:76:0b:7b:11:c4:95:be:
         9a:78:f4:b4:24:19:5c:ff:78:34:6a:47:55:60:0e:cf:4b:40:
         7d:46:44:af:02:0e:8d:9d:ae:61:4c:1c:f0:53:27:08:37:2d:
         c2:6d:22:6b:be:27:d1:b2:a8:5c:96:70:85:53:39:3c:29:18:
         a6:61:56:22:ae:28:9f:ac:ef:57:25:7d:61:1f:89:e6:f7:6e:
         03:9c:3c:b1:ae:8b:cc:be:c4:9c:09:56:b2:1d:f3:23:ef:1f:
         97:53:ca:da:2d:6d:85:1f:fa:43:fb:2f:c5:01:2a:3f:63:80:
         6a:da:d2:ff:06:1b:c6:86:8a:b0:1a:a2:b4:56:f4:c6:cf:fc:
         d4:cd:cc:eb:6d:3d:f2:3a:f3:2b:1d:7f:02:2c:5d:fb:0b:a0:
         83:a8:bb:36:4d:b1:cc:4a:a0:d1:a3:69:bc:b5:18:2a:f4:16:
         d8:c2:eb:f8:cd:c8:44:29:1b:b5:f6:aa:1b:68:42:dc:ad:60:
         7e:aa:0e:35:38:31:48:c1:be:8c:65:ec:f7:6f:8a:de:3c:68:
         6e:e2:cc:06:f6:6e:98:1d:65:22:28:b1:53:63:83:9c:32:9f:
         54:80:10:58:59:53:9d:99:5f:5a:7d:57:06:e6:0d:da:f1:9d:
         85:ba:95:68
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzI0QzUxMTAvBgNVBAUTKDhBNjIxQkM3N0EzREQ0MTcwQ0I5MTAzRkY4Nzg4QkM5
MDkwMDgyRDEwHhcNMjUwMTMxMDQzMzAyWhcNMjUwMjA3MDQzMzAyWjAYMRYwFAYD
VQQDEw02NzljNTI3ZS04MTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyEj1NvEPPoIX+5d0um5w1jk2MYmcdy3H6Ze86dmsqQVk4rsyD0FGYT1tOHw7
Vc3hy/EcEymJQ/BX6NACBcFC/JnP20hSRfTMhzI7JsVh6H8UkpLmQm7HpgqAqRYO
1kZH1SeOQJy8IXI7PBXhX4uXediogJHyBc9BQglFpygSA0p4PBT3EtwAQW8ricjr
oVA9hrJ2CKjAGomfW+QDVhiuUWqixUC8Kw5QEJnyOIB4RO7n4tleJzBRezhyUHrL
V70LbPbEeGNIXy0yH9dJzvb/mB9u4k8Lbt+79rI7wCsXsFXk1noXHdSF10K/6TwU
2S47h4UiB/pEjvAsZxjvNWFSGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBXgzsoN
dQE/ljSe/XB5tiFZWc6SMB8GA1UdIwQYMBaAFIpiG8d6PdQXDLkQP/h4i8kJAILR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjRDNS9EMUUyRDk2ODgz
NTkxMUVFQjI1Q0YxNDRDNEY5QUUwMi9pbUlieDNvOTFCY011UkFfLUhpTHlRa0Fn
dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ltSWJ4M285MUJjTXVSQV8tSGlMeVFrQWd0RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MjRDNS9EMUUyRDk2ODgzNTkxMUVFQjI1Q0YxNDRDNEY5QUUwMi9pbUlieDNvOTFC
Y011UkFfLUhpTHlRa0FndEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBo0BBav3X9eoKIAnYLexHElb6aePS0JBlc/3g0akdVYA7PS0B9RkSv
Ag6Nna5hTBzwUycINy3CbSJrvifRsqhclnCFUzk8KRimYVYiriifrO9XJX1hH4nm
924DnDyxrovMvsScCVayHfMj7x+XU8raLW2FH/pD+y/FASo/Y4Bq2tL/BhvGhoqw
GqK0VvTGz/zUzczrbT3yOvMrHX8CLF37C6CDqLs2TbHMSqDRo2m8tRgq9BbYwuv4
zchEKRu19qobaELcrWB+qg41ODFIwb6MZez3b4rePGhu4swG9m6YHWUiKLFTY4Oc
Mp9UgBBYWVOdmV9afVcG5g3a8Z2FupVo
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:59:49 2025 by rpki-client