Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.mft
File:                     5HfTiqrEo3zG3xZlvxyICvmbe08.mft (raw, json)
Hash identifier:          ifcMX1zj3H+el/3OJnnLLtkzchnhBalQWzh0Rlic0+w=
Subject key identifier:   76:43:FB:E3:11:0F:44:F7:A1:E2:95:35:87:A6:48:B1:B7:B4:F7:6E
Authority key identifier: E4:77:D3:8A:AA:C4:A3:7C:C6:DF:16:65:BF:1C:88:0A:F9:9B:7B:4F
Certificate issuer:       /CN=A91E504E/serialNumber=E477D38AAAC4A37CC6DF1665BF1C880AF99B7B4F
Certificate serial:       0382
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5HfTiqrEo3zG3xZlvxyICvmbe08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.mft
Manifest number:          0376
Signing time:             Fri 31 Jan 2025 00:58:23 +0000
Manifest this update:     Fri 31 Jan 2025 00:58:23 +0000
Manifest next update:     Fri 07 Feb 2025 00:58:23 +0000
Files and hashes:         1: 5HfTiqrEo3zG3xZlvxyICvmbe08.crl (hash: rtfS/NaKJNqHBLvT/pxriKzZfVPkXjVVyxW2Wb4BIyA=)
                          2: 5F9FA12E0CA411ED96936D79C4F9AE02.roa (hash: 0ekBq+u3qTtCrN1H3WBpcyEBXqtT/nmRB1wnzUy864Q=)
                          3: 06820D08961011ECA540626AC4F9AE02.roa (hash: AajhgEbZBOC20FRVNZHV44NbIbhPj9V3ePlv/pPgwT4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 898 (0x382)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E504E/serialNumber=E477D38AAAC4A37CC6DF1665BF1C880AF99B7B4F
        Validity
            Not Before: Jan 31 00:58:23 2025 GMT
            Not After : Feb  7 00:58:23 2025 GMT
        Subject: CN=679c202f-1566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7b:b1:2b:07:c2:3e:2b:35:41:25:64:e4:32:
                    f8:f2:40:f7:f5:cd:56:22:09:82:0e:b0:55:9d:25:
                    2b:2d:61:5e:9d:4f:32:fe:25:21:bd:92:c9:1c:d4:
                    26:e4:25:fc:0e:11:a4:2d:b3:52:54:97:eb:75:af:
                    ac:0f:f4:3e:c8:3c:e7:6a:3b:77:b9:e8:85:9b:5a:
                    30:15:bf:1c:4f:83:9c:0f:bf:9e:db:0f:4c:bd:d1:
                    9d:57:28:cb:80:d5:51:69:4a:9d:5d:d6:0e:e6:af:
                    07:63:e5:4c:2f:0d:f4:5f:cb:02:a3:13:3a:bf:c8:
                    6d:36:cc:15:61:34:0b:00:55:68:1f:dc:72:fb:ee:
                    fe:47:5f:21:b3:a4:d6:e4:bd:03:e4:bb:b0:51:86:
                    92:f7:4b:a2:1b:66:ee:f0:43:aa:b1:53:fa:40:4d:
                    f0:0d:8e:82:bf:a1:b4:1d:7e:1d:f2:16:05:a7:fa:
                    99:ff:81:fe:d7:7e:bd:22:31:14:15:01:88:f4:8f:
                    d4:dd:a1:2c:43:da:ed:30:37:20:3b:06:f3:16:c9:
                    c2:f3:c3:a7:9b:c5:e9:26:f9:68:a6:aa:60:f4:88:
                    7f:cb:c7:37:b6:19:e5:67:23:62:ca:fa:08:5f:a9:
                    a8:25:c4:c0:c9:1c:26:cb:6a:3a:a5:40:3e:e0:32:
                    ed:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:43:FB:E3:11:0F:44:F7:A1:E2:95:35:87:A6:48:B1:B7:B4:F7:6E
            X509v3 Authority Key Identifier:
                keyid:E4:77:D3:8A:AA:C4:A3:7C:C6:DF:16:65:BF:1C:88:0A:F9:9B:7B:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5HfTiqrEo3zG3xZlvxyICvmbe08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:cb:22:6a:9a:da:4b:2a:bf:36:d1:0b:e9:68:2e:38:fd:28:
         92:61:33:e5:31:03:e3:71:2d:b9:1f:aa:27:12:41:23:92:8a:
         a4:e0:19:a8:da:08:55:d0:73:45:a2:4f:4c:77:eb:bf:ed:29:
         d0:cb:6c:d2:99:d0:56:b1:3e:3e:57:bd:13:74:3a:3a:37:24:
         5e:a4:6d:04:91:ab:fd:0a:68:2b:b8:7f:ee:2e:78:da:8b:29:
         71:bb:af:95:64:4c:fd:60:da:e6:b8:a9:a2:35:05:6d:66:25:
         99:45:9b:8d:74:71:7a:97:ab:88:4e:1c:a4:f7:07:4e:66:e9:
         77:5b:49:be:84:2b:4c:a2:bc:61:9b:57:51:f5:2b:c0:73:10:
         1d:be:eb:8a:64:1f:04:0a:6c:5d:92:87:fa:83:48:2b:c3:0b:
         f5:66:07:da:4f:46:32:9a:ed:4e:37:a3:ec:2b:07:e7:6b:ad:
         9c:10:26:2b:c5:da:c3:aa:7d:c1:84:46:36:39:d0:f6:1f:0b:
         61:dd:4a:bd:e0:08:3e:06:34:5a:4f:c1:7c:39:2d:fa:ce:fc:
         88:0e:64:98:2f:52:a7:64:ab:4b:af:a6:61:71:06:31:41:99:
         ad:9f:fc:f5:6e:f6:89:c2:db:41:a2:df:e7:b5:c8:bf:06:28:
         01:18:ed:64
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA4IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTUwNEUxMTAvBgNVBAUTKEU0NzdEMzhBQUFDNEEzN0NDNkRGMTY2NUJGMUM4ODBB
Rjk5QjdCNEYwHhcNMjUwMTMxMDA1ODIzWhcNMjUwMjA3MDA1ODIzWjAYMRYwFAYD
VQQDEw02NzljMjAyZi0xNTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuXuxKwfCPis1QSVk5DL48kD39c1WIgmCDrBVnSUrLWFenU8y/iUhvZLJHNQm
5CX8DhGkLbNSVJfrda+sD/Q+yDznajt3ueiFm1owFb8cT4OcD7+e2w9MvdGdVyjL
gNVRaUqdXdYO5q8HY+VMLw30X8sCoxM6v8htNswVYTQLAFVoH9xy++7+R18hs6TW
5L0D5LuwUYaS90uiG2bu8EOqsVP6QE3wDY6Cv6G0HX4d8hYFp/qZ/4H+1369IjEU
FQGI9I/U3aEsQ9rtMDcgOwbzFsnC88Onm8XpJvlopqpg9Ih/y8c3thnlZyNiyvoI
X6moJcTAyRwmy2o6pUA+4DLt2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHZD++MR
D0T3oeKVNYemSLG3tPduMB8GA1UdIwQYMBaAFOR304qqxKN8xt8WZb8ciAr5m3tP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTA0RS80RTNFMzY3RTk2
MDgxMUVDQTA0QTAwODZDNEY5QUUwMi81SGZUaXFyRW8zekczeFpsdnh5SUN2bWJl
MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzVIZlRpcXJFbzN6RzN4Wmx2eHlJQ3ZtYmUwOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NTA0RS80RTNFMzY3RTk2MDgxMUVDQTA0QTAwODZDNEY5QUUwMi81SGZUaXFyRW8z
ekczeFpsdnh5SUN2bWJlMDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB9yyJqmtpLKr820QvpaC44/SiSYTPlMQPjcS25H6onEkEjkoqk4Bmo
2ghV0HNFok9Md+u/7SnQy2zSmdBWsT4+V70TdDo6NyRepG0Ekav9CmgruH/uLnja
iylxu6+VZEz9YNrmuKmiNQVtZiWZRZuNdHF6l6uIThyk9wdOZul3W0m+hCtMorxh
m1dR9SvAcxAdvuuKZB8ECmxdkof6g0grwwv1ZgfaT0Yymu1ON6PsKwfna62cECYr
xdrDqn3BhEY2OdD2Hwth3Uq94Ag+BjRaT8F8OS36zvyIDmSYL1KnZKtLr6ZhcQYx
QZmtn/z1bvaJwttBot/ntci/BigBGO1k
-----END CERTIFICATE-----