Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft
File:                     tZ39tQipur3Pjaqv4_PeaVn7E6o.mft (raw, json)
Hash identifier:          7Wg3H0pNgVlZlg1Lpfd2uVWljIlFrbiYPLXGSmLfP8U=
Subject key identifier:   11:F4:AC:2A:8E:DF:32:86:96:85:47:AA:8D:67:A1:7B:89:8C:4C:91
Authority key identifier: B5:9D:FD:B5:08:A9:BA:BD:CF:8D:AA:AF:E3:F3:DE:69:59:FB:13:AA
Certificate issuer:       /CN=A91D1A9C/serialNumber=B59DFDB508A9BABDCF8DAAAFE3F3DE6959FB13AA
Certificate serial:       6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZ39tQipur3Pjaqv4_PeaVn7E6o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft
Manifest number:          6A
Signing time:             Fri 31 Jan 2025 05:59:11 +0000
Manifest this update:     Fri 31 Jan 2025 05:59:11 +0000
Manifest next update:     Fri 07 Feb 2025 05:59:11 +0000
Files and hashes:         1: tZ39tQipur3Pjaqv4_PeaVn7E6o.crl (hash: tprYv/XcLor12rN9H2tEp2WucogKloUSx4CNVfLcy+Y=)
                          2: 31A71E34407111EFAC14A640C4F9AE02.roa (hash: o7hk30ShUIz7UkIOVQj3yZK9QaxLJPC0RUpttTojnJI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1A9C/serialNumber=B59DFDB508A9BABDCF8DAAAFE3F3DE6959FB13AA
        Validity
            Not Before: Jan 31 05:59:11 2025 GMT
            Not After : Feb  7 05:59:11 2025 GMT
        Subject: CN=679c66af-d239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:50:67:4f:e7:a5:27:21:6b:93:59:71:77:8e:
                    e3:3d:60:9f:4a:07:e9:45:b9:36:91:ad:25:16:9d:
                    8b:81:3d:7e:f0:30:1d:cf:60:2b:35:7c:ed:ee:fe:
                    79:2b:88:e9:89:d7:c1:d9:a5:2b:24:9c:66:15:0e:
                    36:83:65:b8:3a:d9:f8:bc:a9:25:a1:39:0b:ea:d3:
                    8f:06:13:1f:82:60:8f:ae:21:b0:fa:83:4d:59:41:
                    f0:88:c6:68:e0:05:c5:70:5d:ad:a3:52:7e:70:90:
                    b7:9e:5d:32:54:71:16:3f:8b:a0:40:c6:43:43:dd:
                    e7:bc:86:00:4c:ee:1b:b6:24:6b:2d:9b:f9:af:9f:
                    88:99:bb:11:ad:71:c5:8b:d5:de:71:0e:d2:42:4c:
                    0d:c3:51:43:7c:42:75:91:f9:79:d3:d8:1e:7f:03:
                    4f:48:73:b0:ff:7e:cf:d1:b5:e0:0c:4a:58:b7:f1:
                    05:26:c2:e6:0a:b2:d2:58:95:8f:cb:c1:a8:06:b4:
                    31:a6:9d:78:df:ab:4d:c4:ac:12:c8:de:1b:42:ea:
                    0d:17:d4:af:61:c3:23:54:4a:9f:16:c9:5f:b7:78:
                    be:8c:90:51:6d:32:0b:94:94:c1:19:6e:e2:c2:5b:
                    50:2b:b9:a4:0b:f6:21:9d:9a:3c:49:64:78:df:bb:
                    19:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:F4:AC:2A:8E:DF:32:86:96:85:47:AA:8D:67:A1:7B:89:8C:4C:91
            X509v3 Authority Key Identifier:
                keyid:B5:9D:FD:B5:08:A9:BA:BD:CF:8D:AA:AF:E3:F3:DE:69:59:FB:13:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZ39tQipur3Pjaqv4_PeaVn7E6o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:dc:c5:42:da:45:50:e8:35:ff:06:5b:47:a7:83:29:7b:f6:
         f1:96:27:a7:b3:0e:f6:22:7a:cf:4f:83:e6:11:41:0b:da:67:
         fc:35:e1:73:a1:2a:b7:a5:83:95:87:aa:de:ca:57:4a:c0:19:
         72:b6:bd:90:1e:65:cc:62:71:7d:86:db:59:74:39:56:14:5f:
         86:ac:96:ea:16:fb:f0:9c:cd:d2:69:3c:88:e6:d2:35:83:7f:
         77:31:90:4c:2c:66:c7:30:c4:99:8c:86:9f:a0:84:37:7e:02:
         ce:64:07:84:af:46:e3:eb:72:44:ff:b0:ac:f4:ce:6d:91:26:
         f7:f4:e6:fd:a5:cb:31:9d:57:da:7a:44:d9:08:34:d4:53:dc:
         73:d3:d2:08:1c:20:d6:ef:3e:36:39:43:54:ac:8e:b5:6c:01:
         86:2e:b5:d9:46:c7:76:91:5c:c7:12:a1:11:64:f2:d0:f0:34:
         b7:e8:03:e4:4f:17:56:9f:6f:45:71:08:22:9f:cb:e4:b6:08:
         e0:88:60:37:2c:26:8d:27:08:c0:95:6e:5f:9f:6e:5b:e5:76:
         ae:65:e3:f6:d0:ca:94:cf:38:dc:9f:5d:fb:84:ff:2f:c7:28:
         c3:87:f6:b6:22:0a:30:7d:3e:31:f6:8c:bb:00:fb:77:7e:1b:
         94:78:5f:62
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
MUE5QzExMC8GA1UEBRMoQjU5REZEQjUwOEE5QkFCRENGOERBQUFGRTNGM0RFNjk1
OUZCMTNBQTAeFw0yNTAxMzEwNTU5MTFaFw0yNTAyMDcwNTU5MTFaMBgxFjAUBgNV
BAMTDTY3OWM2NmFmLWQyMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCfUGdP56UnIWuTWXF3juM9YJ9KB+lFuTaRrSUWnYuBPX7wMB3PYCs1fO3u/nkr
iOmJ18HZpSsknGYVDjaDZbg62fi8qSWhOQvq048GEx+CYI+uIbD6g01ZQfCIxmjg
BcVwXa2jUn5wkLeeXTJUcRY/i6BAxkND3ee8hgBM7hu2JGstm/mvn4iZuxGtccWL
1d5xDtJCTA3DUUN8QnWR+XnT2B5/A09Ic7D/fs/RteAMSli38QUmwuYKstJYlY/L
wagGtDGmnXjfq03ErBLI3htC6g0X1K9hwyNUSp8WyV+3eL6MkFFtMguUlMEZbuLC
W1AruaQL9iGdmjxJZHjfuxl1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEfSsKo7f
MoaWhUeqjWehe4mMTJEwHwYDVR0jBBgwFoAUtZ39tQipur3Pjaqv4/PeaVn7E6ow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQxQTlDLzhFOEIzRTdFNDA3
MDExRUZCNEExODAwQUM0RjlBRTAyL3RaMzl0UWlwdXIzUGphcXY0X1BlYVZuN0U2
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvdFozOXRRaXB1cjNQamFxdjRfUGVhVm43RTZvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQx
QTlDLzhFOEIzRTdFNDA3MDExRUZCNEExODAwQUM0RjlBRTAyL3RaMzl0UWlwdXIz
UGphcXY0X1BlYVZuN0U2by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAJHcxULaRVDoNf8GW0engyl79vGWJ6ezDvYies9Pg+YRQQvaZ/w14XOh
Krelg5WHqt7KV0rAGXK2vZAeZcxicX2G21l0OVYUX4asluoW+/CczdJpPIjm0jWD
f3cxkEwsZscwxJmMhp+ghDd+As5kB4SvRuPrckT/sKz0zm2RJvf05v2lyzGdV9p6
RNkINNRT3HPT0ggcINbvPjY5Q1SsjrVsAYYutdlGx3aRXMcSoRFk8tDwNLfoA+RP
F1afb0VxCCKfy+S2COCIYDcsJo0nCMCVbl+fblvldq5l4/bQypTPONyfXfuE/y/H
KMOH9rYiCjB9PjH2jLsA+3d+G5R4X2I=
-----END CERTIFICATE-----