Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft
File:                     mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft (raw, json)
Hash identifier:          5lQz8uzKxMFaTYEUT9zKBTCEcU/E1ty7P3T48gh8a0c=
Subject key identifier:   66:00:D2:F1:B0:79:F3:7E:5F:9F:3B:83:30:3B:0B:8E:04:36:6B:F5
Authority key identifier: 9B:1E:81:88:CE:64:39:7E:8B:42:41:E6:75:8D:42:9D:A0:FF:2E:70
Certificate issuer:       /CN=A91CB21D/serialNumber=9B1E8188CE64397E8B4241E6758D429DA0FF2E70
Certificate serial:       0176
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx6BiM5kOX6LQkHmdY1CnaD_LnA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft
Manifest number:          0172
Signing time:             Fri 31 Jan 2025 03:03:14 +0000
Manifest this update:     Fri 31 Jan 2025 03:03:14 +0000
Manifest next update:     Fri 07 Feb 2025 03:03:14 +0000
Files and hashes:         1: mx6BiM5kOX6LQkHmdY1CnaD_LnA.crl (hash: fmQ3qeaSm4Q1Mk5/iRCsfcARndeNvbe9xB3u9leMYZs=)
                          2: 11F911FAA8D811ED90192E3CC4F9AE02.roa (hash: 1slDbS6OMsVzRicTRklA2Gp5/wmmSnjZBoyP9DPcUVQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 374 (0x176)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB21D/serialNumber=9B1E8188CE64397E8B4241E6758D429DA0FF2E70
        Validity
            Not Before: Jan 31 03:03:14 2025 GMT
            Not After : Feb  7 03:03:14 2025 GMT
        Subject: CN=679c3d72-976f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:38:fb:b7:ea:bc:4e:7c:52:0a:c2:f0:96:a0:
                    43:ea:11:6d:cf:cd:fe:8b:4d:ba:d0:6b:7f:9e:98:
                    27:b5:7b:2f:c7:d4:bb:83:4e:1f:74:39:31:76:68:
                    34:a7:65:60:28:24:80:b6:6b:a8:10:fe:c5:39:e5:
                    9f:af:71:59:29:66:8b:d1:6d:36:66:dd:75:58:a3:
                    c1:49:d8:9d:b1:ab:d2:b8:3b:79:ff:f9:77:55:b1:
                    2c:b6:d3:4b:f4:d3:08:d7:36:32:a4:42:1d:13:a7:
                    3c:67:0a:4a:23:94:76:7b:e4:3d:59:72:c0:e1:f5:
                    66:f2:2d:5c:d4:18:d0:3e:d2:cf:7a:14:a2:2f:62:
                    50:c7:44:2b:be:ed:03:98:e8:e7:02:43:c4:98:16:
                    b1:02:73:bc:ae:dd:39:80:8c:92:95:71:8d:1c:91:
                    7a:1a:19:44:cf:c5:14:6c:e9:38:2d:2f:23:eb:60:
                    ce:c3:80:88:af:a8:5e:b7:af:2b:3d:7d:45:3b:35:
                    e2:77:62:00:bb:f3:67:1d:b7:e4:31:b1:c8:ca:78:
                    42:dc:a1:ea:be:db:ac:3d:9b:61:68:05:e6:e2:da:
                    9f:4b:e5:92:d5:26:75:d3:6c:b4:17:37:36:d1:73:
                    ab:3a:98:fb:aa:47:40:f9:39:e4:e7:b9:b5:f8:b9:
                    6c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:00:D2:F1:B0:79:F3:7E:5F:9F:3B:83:30:3B:0B:8E:04:36:6B:F5
            X509v3 Authority Key Identifier:
                keyid:9B:1E:81:88:CE:64:39:7E:8B:42:41:E6:75:8D:42:9D:A0:FF:2E:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx6BiM5kOX6LQkHmdY1CnaD_LnA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:41:cf:8f:6b:51:2e:03:68:ec:4e:dd:26:7b:26:a6:14:08:
         d2:3c:67:d6:2f:0f:cb:b0:46:ee:23:3e:b3:36:16:49:3f:08:
         7b:79:a2:e9:1b:80:e7:50:e9:e7:c5:2e:e0:db:64:94:0f:8b:
         fd:58:3e:22:dc:86:4b:ef:1f:97:a5:1c:5f:56:ce:f7:f2:0f:
         da:df:b0:a8:bc:9b:5a:71:94:95:a1:62:6d:c0:36:0a:d2:b1:
         9e:21:ba:1a:b1:04:fd:2a:e8:cd:8b:99:85:99:e3:bd:7f:07:
         cf:e2:03:f8:d4:32:4a:07:27:cd:bd:39:df:29:cb:0b:74:eb:
         f5:29:09:e1:d1:83:6b:57:6f:58:ab:83:ed:38:69:24:8f:9d:
         f4:4b:73:dd:28:b8:b3:e2:ab:46:6c:79:a8:bb:c0:9e:0e:38:
         d8:13:85:9b:cb:88:51:26:9d:36:fe:b6:5f:a2:cc:4d:72:51:
         d9:6e:a7:b1:5e:23:0f:bc:64:e5:2c:51:a8:ff:29:fd:d5:67:
         49:c0:fe:39:1d:50:ca:52:a7:6a:46:d8:7d:d4:9e:6c:31:42:
         ec:21:e0:da:48:9d:8b:fc:c1:39:c5:e7:a4:e5:f1:d9:10:5f:
         b1:d2:ea:72:74:78:2f:de:b4:20:33:a5:69:22:41:2e:01:f3:
         c1:c2:d9:72
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0IyMUQxMTAvBgNVBAUTKDlCMUU4MTg4Q0U2NDM5N0U4QjQyNDFFNjc1OEQ0MjlE
QTBGRjJFNzAwHhcNMjUwMTMxMDMwMzE0WhcNMjUwMjA3MDMwMzE0WjAYMRYwFAYD
VQQDEw02NzljM2Q3Mi05NzZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyTj7t+q8TnxSCsLwlqBD6hFtz83+i0260Gt/npgntXsvx9S7g04fdDkxdmg0
p2VgKCSAtmuoEP7FOeWfr3FZKWaL0W02Zt11WKPBSdidsavSuDt5//l3VbEsttNL
9NMI1zYypEIdE6c8ZwpKI5R2e+Q9WXLA4fVm8i1c1BjQPtLPehSiL2JQx0Qrvu0D
mOjnAkPEmBaxAnO8rt05gIySlXGNHJF6GhlEz8UUbOk4LS8j62DOw4CIr6het68r
PX1FOzXid2IAu/NnHbfkMbHIynhC3KHqvtusPZthaAXm4tqfS+WS1SZ102y0Fzc2
0XOrOpj7qkdA+Tnk57m1+LlsnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGYA0vGw
efN+X587gzA7C44ENmv1MB8GA1UdIwQYMBaAFJsegYjOZDl+i0JB5nWNQp2g/y5w
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjIxRC82MzJDRDNFNkE3
RjYxMUVEQjlENjBDNDNDNEY5QUUwMi9teDZCaU01a09YNkxRa0htZFkxQ25hRF9M
bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL214NkJpTTVrT1g2TFFrSG1kWTFDbmFEX0xuQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QjIxRC82MzJDRDNFNkE3RjYxMUVEQjlENjBDNDNDNEY5QUUwMi9teDZCaU01a09Y
NkxRa0htZFkxQ25hRF9MbkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAnQc+Pa1EuA2jsTt0meyamFAjSPGfWLw/LsEbuIz6zNhZJPwh7eaLp
G4DnUOnnxS7g22SUD4v9WD4i3IZL7x+XpRxfVs738g/a37CovJtacZSVoWJtwDYK
0rGeIboasQT9KujNi5mFmeO9fwfP4gP41DJKByfNvTnfKcsLdOv1KQnh0YNrV29Y
q4PtOGkkj530S3PdKLiz4qtGbHmou8CeDjjYE4Wby4hRJp02/rZfosxNclHZbqex
XiMPvGTlLFGo/yn91WdJwP45HVDKUqdqRth91J5sMULsIeDaSJ2L/ME5xeek5fHZ
EF+x0upydHgv3rQgM6VpIkEuAfPBwtly
-----END CERTIFICATE-----