Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft
File:                     TzMtwIyXR6ybyBxUfRujRWQ_drc.mft (raw, json)
Hash identifier:          5/NzXuXNJmJS/Dq6TR7r/tfRvSjqzS80OH7G76BIsOU=
Subject key identifier:   14:D2:98:69:07:51:2E:7D:41:F7:6A:2B:E2:E6:82:D6:00:84:5F:2F
Authority key identifier: 4F:33:2D:C0:8C:97:47:AC:9B:C8:1C:54:7D:1B:A3:45:64:3F:76:B7
Certificate issuer:       /CN=A91E4042/serialNumber=4F332DC08C9747AC9BC81C547D1BA345643F76B7
Certificate serial:       052D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft
Manifest number:          0528
Signing time:             Thu 30 Jan 2025 23:34:28 +0000
Manifest this update:     Thu 30 Jan 2025 23:34:27 +0000
Manifest next update:     Thu 06 Feb 2025 23:34:27 +0000
Files and hashes:         1: TzMtwIyXR6ybyBxUfRujRWQ_drc.crl (hash: MNShLbHiEfDbdBVXn6gp8gq6JKUNOHO1AElDm6u5aDU=)
                          2: 26F1B59437A511ECB73C9852C4F9AE02.roa (hash: qsrO8yS/1EvYraDqXGU2ot/FTw/eeb+gKYOfP/J5WaU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1325 (0x52d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4042/serialNumber=4F332DC08C9747AC9BC81C547D1BA345643F76B7
        Validity
            Not Before: Jan 30 23:34:27 2025 GMT
            Not After : Feb  6 23:34:27 2025 GMT
        Subject: CN=679c0c83-578e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:67:10:3d:73:02:29:cd:26:59:cb:1b:8b:f9:
                    98:97:0a:e7:50:7c:8e:07:02:87:df:31:25:7c:4e:
                    26:bd:ae:ad:01:26:c5:18:b2:b3:b8:e0:ff:db:f6:
                    b3:b4:05:f9:92:65:17:88:68:8a:78:19:e3:52:32:
                    f9:8e:7b:f2:f0:62:de:d0:4d:5a:db:98:85:39:db:
                    10:52:ee:12:34:ed:25:3d:6e:9f:3c:5b:c0:96:a0:
                    a2:bb:11:26:c7:0b:de:6e:85:c8:2e:d9:80:82:6f:
                    4f:98:c6:95:8f:12:77:94:c9:0e:5d:0d:85:35:8a:
                    1a:9f:ec:6e:7a:56:18:22:f9:4e:51:5f:d1:09:30:
                    1e:5a:c9:83:3b:c8:9f:a5:80:75:d2:e0:8e:8f:98:
                    5b:17:76:97:d0:18:cb:c0:eb:d0:1f:ee:5a:ff:f4:
                    89:6a:fb:ab:74:bc:e0:93:55:1e:e6:28:e0:1b:aa:
                    fd:9b:b5:5e:0e:a5:6b:bb:8f:7b:32:0d:b2:c0:20:
                    13:b4:57:9f:a4:53:91:24:3c:63:6d:c0:04:5f:bb:
                    38:8e:ae:fa:ef:15:50:ca:47:c6:bd:97:55:20:42:
                    d4:ee:fd:b2:0c:1f:53:81:5a:af:da:23:53:cc:1a:
                    5e:0f:8a:40:0f:27:19:ed:82:37:da:1d:ef:48:ae:
                    83:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:D2:98:69:07:51:2E:7D:41:F7:6A:2B:E2:E6:82:D6:00:84:5F:2F
            X509v3 Authority Key Identifier:
                keyid:4F:33:2D:C0:8C:97:47:AC:9B:C8:1C:54:7D:1B:A3:45:64:3F:76:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:19:a5:4a:ab:fc:3b:72:27:df:23:90:e6:ef:3a:ee:dc:b6:
         4a:26:2f:5c:6c:a5:2e:93:c5:07:d1:8a:c4:dd:64:78:da:c5:
         3e:77:a8:15:7e:14:46:50:7e:74:4d:62:ec:7e:72:b5:50:bc:
         b6:33:70:66:83:4e:8b:a9:f8:a2:74:9a:c9:5f:e8:2a:3a:ae:
         24:ea:e7:a3:e7:e3:65:27:1a:a4:a6:fa:a8:76:40:6a:09:a5:
         ec:6d:a5:66:85:d3:f0:90:29:65:ca:75:b8:80:ad:c2:e3:d6:
         1e:50:d9:41:0b:87:e1:98:01:8a:5a:4c:56:68:de:8b:19:bb:
         7b:22:12:03:6f:f3:4a:33:cd:50:06:fe:09:c6:56:50:ea:6f:
         33:73:19:da:a6:24:01:5b:a2:8f:47:63:c5:e0:a7:a8:fd:62:
         e0:1c:30:c8:d2:14:f1:92:cc:a5:ba:c0:94:12:1d:4f:3a:a3:
         e4:47:74:78:49:cb:22:5e:76:d4:1a:d9:d0:0b:fa:e9:f2:df:
         4d:d6:b9:57:54:28:9b:fd:c0:61:90:d8:a1:fa:56:24:64:75:
         41:5a:75:ba:9b:fe:54:82:57:61:87:5a:b6:be:ba:ba:70:e8:
         3e:bd:4c:51:3e:85:38:c7:88:9e:5f:87:17:9f:c1:a9:96:ea:
         dc:1a:9f:e6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTQwNDIxMTAvBgNVBAUTKDRGMzMyREMwOEM5NzQ3QUM5QkM4MUM1NDdEMUJBMzQ1
NjQzRjc2QjcwHhcNMjUwMTMwMjMzNDI3WhcNMjUwMjA2MjMzNDI3WjAYMRYwFAYD
VQQDEw02NzljMGM4My01NzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmWcQPXMCKc0mWcsbi/mYlwrnUHyOBwKH3zElfE4mva6tASbFGLKzuOD/2/az
tAX5kmUXiGiKeBnjUjL5jnvy8GLe0E1a25iFOdsQUu4SNO0lPW6fPFvAlqCiuxEm
xwveboXILtmAgm9PmMaVjxJ3lMkOXQ2FNYoan+xuelYYIvlOUV/RCTAeWsmDO8if
pYB10uCOj5hbF3aX0BjLwOvQH+5a//SJavurdLzgk1Ue5ijgG6r9m7VeDqVru497
Mg2ywCATtFefpFORJDxjbcAEX7s4jq767xVQykfGvZdVIELU7v2yDB9TgVqv2iNT
zBpeD4pADycZ7YI32h3vSK6DDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBTSmGkH
US59QfdqK+LmgtYAhF8vMB8GA1UdIwQYMBaAFE8zLcCMl0esm8gcVH0bo0VkP3a3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDA0Mi9FRkM5OERFNkU1
MzYxMUVCOTkyNjU1NkJDNEY5QUUwMi9Uek10d0l5WFI2eWJ5QnhVZlJ1alJXUV9k
cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1R6TXR3SXlYUjZ5YnlCeFVmUnVqUldRX2RyYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NDA0Mi9FRkM5OERFNkU1MzYxMUVCOTkyNjU1NkJDNEY5QUUwMi9Uek10d0l5WFI2
eWJ5QnhVZlJ1alJXUV9kcmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCcGaVKq/w7ciffI5Dm7zru3LZKJi9cbKUuk8UH0YrE3WR42sU+d6gV
fhRGUH50TWLsfnK1ULy2M3Bmg06LqfiidJrJX+gqOq4k6uej5+NlJxqkpvqodkBq
CaXsbaVmhdPwkCllynW4gK3C49YeUNlBC4fhmAGKWkxWaN6LGbt7IhIDb/NKM81Q
Bv4JxlZQ6m8zcxnapiQBW6KPR2PF4Keo/WLgHDDI0hTxksylusCUEh1POqPkR3R4
ScsiXnbUGtnQC/rp8t9N1rlXVCib/cBhkNih+lYkZHVBWnW6m/5Ugldhh1q2vrq6
cOg+vUxRPoU4x4ieX4cXn8GplurcGp/m
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:00:44 2025 by rpki-client