Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/UVabSMA4kUVORphTpn25Cb7CytY.mft
File:                     UVabSMA4kUVORphTpn25Cb7CytY.mft (raw, json)
Hash identifier:          EfefdQi5eBadzuSqUmayTexn+LK1xIiktLowBwUFxP0=
Subject key identifier:   CB:AB:80:34:EF:2F:B1:91:1D:FB:46:07:BA:7F:C8:2D:13:C1:66:EB
Authority key identifier: 51:56:9B:48:C0:38:91:45:4E:46:98:53:A6:7D:B9:09:BE:C2:CA:D6
Certificate issuer:       /CN=A91C7672/serialNumber=51569B48C03891454E469853A67DB909BEC2CAD6
Certificate serial:       1BD6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UVabSMA4kUVORphTpn25Cb7CytY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/UVabSMA4kUVORphTpn25Cb7CytY.mft
Manifest number:          1BB9
Signing time:             Fri 31 Jan 2025 16:15:51 +0000
Manifest this update:     Fri 31 Jan 2025 16:15:50 +0000
Manifest next update:     Fri 07 Feb 2025 16:15:50 +0000
Files and hashes:         1: UVabSMA4kUVORphTpn25Cb7CytY.crl (hash: REIMPijbWPj8r2oabPe9t0XkoWWenSfkEWar4MXiw0U=)
                          2: 0A93D802C98211EE90C9B71DC4F9AE02.roa (hash: wDSYb3WQT7etul/IesOy0V9DTB8zpMuC+4DeX22WRy8=)
                          3: 2ADC134C973F11EEA24DBE15C4F9AE02.roa (hash: JZKHOUDlu06jRnQ1v4KmmKzdpSwhu9askiAeMGIAkyw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7126 (0x1bd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7672/serialNumber=51569B48C03891454E469853A67DB909BEC2CAD6
        Validity
            Not Before: Jan 31 16:15:50 2025 GMT
            Not After : Feb  7 16:15:50 2025 GMT
        Subject: CN=679cf736-5b88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:4a:a8:c8:a0:94:b2:0f:6f:ce:99:92:0f:32:
                    e8:ce:b4:38:36:f2:52:a3:e0:63:1b:79:76:87:98:
                    f8:38:06:f2:64:28:71:96:48:c9:35:9a:81:2c:6f:
                    45:2e:c6:4f:67:f4:b9:2d:a1:7d:3a:c8:7b:94:1f:
                    12:86:65:70:c8:f5:91:2a:a9:67:5c:1e:1c:ba:aa:
                    a3:79:c4:fc:a6:ad:35:3f:18:bc:60:0e:e6:02:a9:
                    3a:f6:f8:99:b9:7b:1e:96:a6:bf:eb:85:61:88:9c:
                    e0:3b:2d:a4:c3:00:a9:61:b2:61:51:c4:a0:a4:a8:
                    91:d5:64:11:8f:55:3b:93:d7:9d:d3:d2:ae:32:5c:
                    dd:35:8a:b4:e4:2e:79:74:79:cd:76:ab:78:08:4f:
                    23:ff:40:eb:af:b2:f8:25:a6:33:cb:af:cb:34:b8:
                    ad:ac:bb:89:37:44:6c:f2:8e:45:64:c9:bc:01:98:
                    e5:22:a1:85:0a:e2:3a:82:ae:4f:e5:9b:2b:23:18:
                    b7:90:7b:a9:3a:2a:ea:3d:3f:18:30:02:22:47:c2:
                    a9:67:54:73:e9:9d:ac:6a:40:91:18:ca:36:64:1f:
                    cc:14:a3:79:39:1e:99:59:00:47:fd:04:5e:dc:1e:
                    68:f6:c6:80:c1:51:0a:38:33:ad:5d:e8:b4:f8:2b:
                    c5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:AB:80:34:EF:2F:B1:91:1D:FB:46:07:BA:7F:C8:2D:13:C1:66:EB
            X509v3 Authority Key Identifier:
                keyid:51:56:9B:48:C0:38:91:45:4E:46:98:53:A6:7D:B9:09:BE:C2:CA:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/UVabSMA4kUVORphTpn25Cb7CytY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UVabSMA4kUVORphTpn25Cb7CytY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/UVabSMA4kUVORphTpn25Cb7CytY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:58:1c:0c:02:f7:ae:1d:3c:cd:4f:1f:67:ac:48:b8:67:51:
         ef:4f:05:0e:b3:d9:ff:72:92:b1:2f:75:40:57:0b:d9:2e:7f:
         e9:3d:81:ba:68:81:0f:c8:34:5a:52:d6:9e:a6:11:02:30:89:
         b6:37:c7:f6:06:c3:e9:4c:c7:71:f6:e5:9d:8f:21:64:c7:6e:
         c4:69:5c:c8:2a:70:2c:1d:e3:df:8d:f9:c7:24:af:8d:3a:5b:
         3c:a9:59:1b:26:68:fd:15:3a:22:b2:b9:40:9f:ca:2a:be:73:
         a5:ef:ad:84:ac:b2:75:e8:5f:c8:7e:b7:35:dc:0f:6c:c1:a3:
         63:32:41:25:42:ba:70:50:ef:ba:2b:18:63:17:de:94:3f:f0:
         36:18:ce:5e:cb:74:36:4d:66:6d:f5:df:c3:2b:d6:eb:13:21:
         b3:da:6b:b1:ae:3e:f2:c5:b3:bc:aa:8b:5b:2d:5a:c0:09:8a:
         09:38:d1:52:80:08:bf:9c:8e:c6:19:49:80:a8:de:ca:07:cd:
         42:b5:91:15:c3:b3:1e:2e:92:a2:ab:4e:37:08:5c:35:3d:a2:
         4f:f9:d0:1b:ee:9d:2d:15:cf:87:c0:74:1c:9c:42:6f:8c:e3:
         93:22:d7:5a:c8:44:c1:0c:fc:d9:4f:f6:bf:a6:a8:cb:8e:77:
         d7:df:43:f6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICG9YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qzc2NzIxMTAvBgNVBAUTKDUxNTY5QjQ4QzAzODkxNDU0RTQ2OTg1M0E2N0RCOTA5
QkVDMkNBRDYwHhcNMjUwMTMxMTYxNTUwWhcNMjUwMjA3MTYxNTUwWjAYMRYwFAYD
VQQDEw02NzljZjczNi01Yjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4EqoyKCUsg9vzpmSDzLozrQ4NvJSo+BjG3l2h5j4OAbyZChxlkjJNZqBLG9F
LsZPZ/S5LaF9Osh7lB8ShmVwyPWRKqlnXB4cuqqjecT8pq01Pxi8YA7mAqk69viZ
uXselqa/64VhiJzgOy2kwwCpYbJhUcSgpKiR1WQRj1U7k9ed09KuMlzdNYq05C55
dHnNdqt4CE8j/0Drr7L4JaYzy6/LNLitrLuJN0Rs8o5FZMm8AZjlIqGFCuI6gq5P
5ZsrIxi3kHupOirqPT8YMAIiR8KpZ1Rz6Z2sakCRGMo2ZB/MFKN5OR6ZWQBH/QRe
3B5o9saAwVEKODOtXei0+CvFOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMurgDTv
L7GRHftGB7p/yC0TwWbrMB8GA1UdIwQYMBaAFFFWm0jAOJFFTkaYU6Z9uQm+wsrW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzY3Mi80Mzc2NEJFQ0Y3
MjQxMUU2QUJGMDJCM0NDNEY5QUUwMi9VVmFiU01BNGtVVk9ScGhUcG4yNUNiN0N5
dFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VWYWJTTUE0a1VWT1JwaFRwbjI1Q2I3Q3l0WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NzY3Mi80Mzc2NEJFQ0Y3MjQxMUU2QUJGMDJCM0NDNEY5QUUwMi9VVmFiU01BNGtV
Vk9ScGhUcG4yNUNiN0N5dFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBgWBwMAveuHTzNTx9nrEi4Z1HvTwUOs9n/cpKxL3VAVwvZLn/pPYG6
aIEPyDRaUtaephECMIm2N8f2BsPpTMdx9uWdjyFkx27EaVzIKnAsHePfjfnHJK+N
Ols8qVkbJmj9FToisrlAn8oqvnOl762ErLJ16F/Ifrc13A9swaNjMkElQrpwUO+6
KxhjF96UP/A2GM5ey3Q2TWZt9d/DK9brEyGz2muxrj7yxbO8qotbLVrACYoJONFS
gAi/nI7GGUmAqN7KB81CtZEVw7MeLpKiq043CFw1PaJP+dAb7p0tFc+HwHQcnEJv
jOOTItdayETBDPzZT/a/pqjLjnfX30P2
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:44:59 2025 by rpki-client