Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft
File:                     FgxyzFd72N5TouywCYwi81pRqp4.mft (raw, json)
Hash identifier:          YboHWaGtxPki4Bey/GKgTjmTJIRriUnVDmTVcnE91QQ=
Subject key identifier:   E5:92:C4:E7:6B:A1:C8:4B:56:20:36:45:FA:C4:D0:47:83:C9:9C:98
Authority key identifier: 16:0C:72:CC:57:7B:D8:DE:53:A2:EC:B0:09:8C:22:F3:5A:51:AA:9E
Certificate issuer:       /CN=A91C8066/serialNumber=160C72CC577BD8DE53A2ECB0098C22F35A51AA9E
Certificate serial:       0184
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft
Manifest number:          0180
Signing time:             Fri 31 Jan 2025 02:58:14 +0000
Manifest this update:     Fri 31 Jan 2025 02:58:14 +0000
Manifest next update:     Fri 07 Feb 2025 02:58:14 +0000
Files and hashes:         1: FgxyzFd72N5TouywCYwi81pRqp4.crl (hash: g//lroXEBR3C8ThT/ZpXIefKr2exo+SUsNNuRIDCy5A=)
                          2: 452D9EF494F811ED85ADE381C4F9AE02.roa (hash: XNcFF969T4muviYB6d8eP/rEqpj8zfL+B4W5dgWu14E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 388 (0x184)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8066/serialNumber=160C72CC577BD8DE53A2ECB0098C22F35A51AA9E
        Validity
            Not Before: Jan 31 02:58:14 2025 GMT
            Not After : Feb  7 02:58:14 2025 GMT
        Subject: CN=679c3c46-159e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:39:80:a1:28:29:7c:bd:79:b8:b9:b4:77:72:
                    e6:c9:79:0d:d2:a3:b2:ac:69:9f:5e:b2:b0:c9:85:
                    e9:05:ce:55:c0:4c:80:01:d2:13:6e:16:71:c7:14:
                    d4:d1:80:17:13:b3:44:b7:0d:10:5d:0e:8a:20:66:
                    77:3e:1b:30:ea:25:3c:98:68:cd:80:85:a7:38:b8:
                    9e:72:dd:a3:23:bb:38:f1:fe:f1:3f:dd:a4:79:cd:
                    ed:d8:a2:60:d0:b4:cb:01:64:bf:a2:69:40:ee:08:
                    7c:9f:2c:17:33:7a:73:c9:34:59:0f:3d:44:1d:9e:
                    67:8e:69:3d:e8:20:96:fd:36:3d:b8:0d:6d:f0:6d:
                    c8:fc:3e:eb:e7:33:38:90:de:75:b8:99:30:c3:17:
                    41:3f:90:fd:b5:82:d2:ad:0e:72:40:45:2c:e2:99:
                    ce:43:d8:30:89:13:44:47:b4:31:e6:88:6a:ed:8f:
                    bd:77:c5:bd:dc:3f:3c:62:20:57:df:98:5a:86:98:
                    aa:54:8f:d2:65:cc:c9:cc:b5:82:0f:7d:8c:6c:50:
                    de:7f:83:70:5d:8f:59:31:2e:57:56:fc:ce:00:78:
                    b2:2e:18:4d:77:7b:82:8c:fd:83:52:0b:92:3b:c4:
                    c7:84:f8:12:be:04:01:59:f1:f7:79:cb:96:86:86:
                    eb:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:92:C4:E7:6B:A1:C8:4B:56:20:36:45:FA:C4:D0:47:83:C9:9C:98
            X509v3 Authority Key Identifier:
                keyid:16:0C:72:CC:57:7B:D8:DE:53:A2:EC:B0:09:8C:22:F3:5A:51:AA:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:15:2e:7d:1a:79:ee:a8:e0:c4:e2:17:25:41:80:62:c1:0c:
         85:a4:00:72:aa:99:3b:73:54:91:79:c9:c1:85:2e:f1:9d:f9:
         1c:5d:4c:86:88:82:bb:1c:ff:0b:3d:db:bf:7b:fa:1b:5f:9d:
         c7:ba:d0:e0:23:dd:50:e4:86:3e:49:c4:50:46:9b:c7:e4:2c:
         2c:7a:2b:c3:de:07:77:7f:ff:c4:bd:ef:75:c1:5e:2d:b1:94:
         b3:d7:97:5a:c0:4b:8a:c5:80:06:42:23:60:77:b4:29:8e:13:
         fe:f4:1f:c0:df:95:5d:96:b2:6d:30:e4:99:17:7f:6c:32:46:
         a7:54:17:01:29:52:a7:42:35:a5:4b:1f:21:36:b0:9c:7d:75:
         26:49:c4:e2:f7:07:40:20:56:b5:86:a4:b7:17:f2:69:e5:9a:
         ef:26:93:9d:c5:20:d0:e8:cf:07:dd:83:5c:cc:f6:bf:03:d4:
         5f:70:e6:3a:26:9a:18:2b:0e:10:09:2a:cf:65:e8:c8:7f:f2:
         8b:4f:7e:52:2c:66:58:a1:bf:73:fe:f1:c8:94:96:ae:a8:95:
         51:3a:0e:b5:ed:5e:8d:e7:70:d4:96:9f:cc:a8:56:4e:a5:61:
         b8:aa:4d:b6:6d:4b:32:32:87:d4:38:9f:dd:ab:43:9d:c8:41:
         44:85:db:4d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzgwNjYxMTAvBgNVBAUTKDE2MEM3MkNDNTc3QkQ4REU1M0EyRUNCMDA5OEMyMkYz
NUE1MUFBOUUwHhcNMjUwMTMxMDI1ODE0WhcNMjUwMjA3MDI1ODE0WjAYMRYwFAYD
VQQDEw02NzljM2M0Ni0xNTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyzmAoSgpfL15uLm0d3LmyXkN0qOyrGmfXrKwyYXpBc5VwEyAAdITbhZxxxTU
0YAXE7NEtw0QXQ6KIGZ3Phsw6iU8mGjNgIWnOLiect2jI7s48f7xP92kec3t2KJg
0LTLAWS/omlA7gh8nywXM3pzyTRZDz1EHZ5njmk96CCW/TY9uA1t8G3I/D7r5zM4
kN51uJkwwxdBP5D9tYLSrQ5yQEUs4pnOQ9gwiRNER7Qx5ohq7Y+9d8W93D88YiBX
35hahpiqVI/SZczJzLWCD32MbFDef4NwXY9ZMS5XVvzOAHiyLhhNd3uCjP2DUguS
O8THhPgSvgQBWfH3ecuWhobr2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOWSxOdr
ochLViA2RfrE0EeDyZyYMB8GA1UdIwQYMBaAFBYMcsxXe9jeU6LssAmMIvNaUaqe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODA2Ni8xOEE1MTI0ODk0
RjUxMUVEQjEwQkMyN0RDNEY5QUUwMi9GZ3h5ekZkNzJONVRvdXl3Q1l3aTgxcFJx
cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZneHl6RmQ3Mk41VG91eXdDWXdpODFwUnFwNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
ODA2Ni8xOEE1MTI0ODk0RjUxMUVEQjEwQkMyN0RDNEY5QUUwMi9GZ3h5ekZkNzJO
NVRvdXl3Q1l3aTgxcFJxcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBlFS59GnnuqODE4hclQYBiwQyFpAByqpk7c1SRecnBhS7xnfkcXUyG
iIK7HP8LPdu/e/obX53HutDgI91Q5IY+ScRQRpvH5CwseivD3gd3f//Eve91wV4t
sZSz15dawEuKxYAGQiNgd7QpjhP+9B/A35VdlrJtMOSZF39sMkanVBcBKVKnQjWl
Sx8hNrCcfXUmScTi9wdAIFa1hqS3F/Jp5ZrvJpOdxSDQ6M8H3YNczPa/A9RfcOY6
JpoYKw4QCSrPZejIf/KLT35SLGZYob9z/vHIlJauqJVROg617V6N53DUlp/MqFZO
pWG4qk22bUsyMofUOJ/dq0OdyEFEhdtN
-----END CERTIFICATE-----
Generated at Sat Apr 26 02:19:23 2025 by rpki-client