Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.mft
File:                     s--n1q4ZnRRYLdTsuRY6PJ2EF1k.mft (raw, json)
Hash identifier:          TVyeCFDbxXvdDxEz6wVuSH+hLRNiNzkQxhEfXiNDYrk=
Subject key identifier:   79:7B:86:45:D7:24:3E:24:7C:6A:BA:BB:D9:5E:BA:01:1C:03:2A:0F
Authority key identifier: B3:EF:A7:D6:AE:19:9D:14:58:2D:D4:EC:B9:16:3A:3C:9D:84:17:59
Certificate issuer:       /CN=A91EF17A/serialNumber=B3EFA7D6AE199D14582DD4ECB9163A3C9D841759
Certificate serial:       82
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.mft
Manifest number:          77
Signing time:             Fri 31 Jan 2025 05:58:20 +0000
Manifest this update:     Fri 31 Jan 2025 05:58:19 +0000
Manifest next update:     Fri 07 Feb 2025 05:58:19 +0000
Files and hashes:         1: s--n1q4ZnRRYLdTsuRY6PJ2EF1k.crl (hash: TxKmE7/IW+qxCJWWSjsG8/zF7Eu/N2Df4KEVZ4QQ8Rs=)
                          2: B4F165084F1F11EFA3B1F709C4F9AE02.roa (hash: Opc7LOJ46e70z/QSejyn173p++8Jd/mWqo5v6tc2Z4E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130 (0x82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF17A/serialNumber=B3EFA7D6AE199D14582DD4ECB9163A3C9D841759
        Validity
            Not Before: Jan 31 05:58:19 2025 GMT
            Not After : Feb  7 05:58:19 2025 GMT
        Subject: CN=679c667c-5037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e4:c0:d0:a0:7f:76:27:ce:e0:79:6d:c2:8f:
                    60:4f:00:12:d1:5f:3e:e6:d3:a5:ec:c3:6f:ba:c9:
                    1e:c3:38:e1:c1:15:5b:cf:b6:ac:a9:72:95:47:76:
                    21:e9:ed:bc:b3:c0:70:5b:3d:6d:c6:2d:46:cc:9a:
                    cb:c6:ff:4c:36:24:4e:9f:9c:3e:c2:fc:d9:18:0e:
                    fc:2b:5b:f9:a2:1c:2c:6d:7e:fa:03:81:ba:7d:f3:
                    55:a6:bf:0c:a4:eb:30:3f:d8:58:2e:31:bc:58:a9:
                    d4:5b:b4:ec:c8:32:8b:c5:cf:c0:d3:12:38:4b:49:
                    33:e9:e3:98:1a:56:6e:c7:a7:0f:eb:5d:ed:ef:52:
                    89:76:93:e3:10:c9:51:30:f5:46:37:76:93:3b:83:
                    cd:18:ba:8f:46:2b:ba:b9:20:66:00:86:fc:bb:61:
                    a4:4b:13:be:f6:81:58:10:01:d5:94:4c:06:14:96:
                    f2:6d:71:f7:59:c2:5b:30:50:58:3d:13:09:d9:1c:
                    b7:9f:c1:4f:8f:ac:93:a0:99:37:d8:40:1e:cd:25:
                    81:14:b7:76:86:fa:07:73:f9:94:3a:fb:37:c3:e6:
                    e5:33:15:9b:0b:60:f0:a7:da:cc:0c:a2:cf:e8:67:
                    5e:b5:16:3f:a5:5b:14:c5:09:4c:30:4f:71:51:4e:
                    b0:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:7B:86:45:D7:24:3E:24:7C:6A:BA:BB:D9:5E:BA:01:1C:03:2A:0F
            X509v3 Authority Key Identifier:
                keyid:B3:EF:A7:D6:AE:19:9D:14:58:2D:D4:EC:B9:16:3A:3C:9D:84:17:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:98:b7:37:dc:92:a8:99:c5:b4:a4:0d:a1:5d:91:b9:01:73:
         62:44:82:c9:db:42:77:87:b5:f6:37:c4:0f:aa:95:4d:5f:57:
         1e:9f:5c:26:e2:84:7d:60:d8:05:4f:6c:5f:74:f1:5b:9e:48:
         f1:3d:2c:d1:08:f2:3b:3e:20:a2:40:3f:41:68:16:fe:78:33:
         8d:0b:b0:39:e3:ae:f8:87:da:22:e9:33:50:b1:f5:18:88:16:
         6b:91:2a:61:2d:cf:a0:59:34:de:d2:2d:cb:e2:50:24:d9:07:
         eb:16:32:1a:1a:a5:31:03:ab:5a:3b:b5:8d:43:1f:65:8d:6d:
         82:82:69:b5:b3:19:3b:af:95:41:35:ec:14:68:bb:50:94:51:
         40:a4:80:9c:a0:43:ff:0b:79:6b:f0:c4:b8:85:79:44:bc:34:
         ce:96:24:03:04:0b:99:ab:30:ea:fd:8d:23:69:d7:31:3a:4f:
         05:6d:bb:03:94:e1:63:bd:9e:f6:cb:dd:1b:cc:08:0d:14:d5:
         fb:32:36:2c:bd:41:ea:ef:14:c5:2e:bd:61:24:84:29:9b:30:
         93:15:9a:c2:eb:07:f1:06:ed:ef:3c:77:15:70:b9:09:8a:34:
         e5:e0:45:68:cf:37:43:a5:57:10:f9:d0:37:1c:84:ee:25:b8:
         20:05:f0:ad
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUYxN0ExMTAvBgNVBAUTKEIzRUZBN0Q2QUUxOTlEMTQ1ODJERDRFQ0I5MTYzQTND
OUQ4NDE3NTkwHhcNMjUwMTMxMDU1ODE5WhcNMjUwMjA3MDU1ODE5WjAYMRYwFAYD
VQQDEw02NzljNjY3Yy01MDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3OTA0KB/difO4Hltwo9gTwAS0V8+5tOl7MNvuskewzjhwRVbz7asqXKVR3Yh
6e28s8BwWz1txi1GzJrLxv9MNiROn5w+wvzZGA78K1v5ohwsbX76A4G6ffNVpr8M
pOswP9hYLjG8WKnUW7TsyDKLxc/A0xI4S0kz6eOYGlZux6cP613t71KJdpPjEMlR
MPVGN3aTO4PNGLqPRiu6uSBmAIb8u2GkSxO+9oFYEAHVlEwGFJbybXH3WcJbMFBY
PRMJ2Ry3n8FPj6yToJk32EAezSWBFLd2hvoHc/mUOvs3w+blMxWbC2Dwp9rMDKLP
6GdetRY/pVsUxQlMME9xUU6w1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHl7hkXX
JD4kfGq6u9leugEcAyoPMB8GA1UdIwQYMBaAFLPvp9auGZ0UWC3U7LkWOjydhBdZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE3QS83NEJCMjREMjNG
NUQxMUVGOEJGNzg2MEVDNEY5QUUwMi9zLS1uMXE0Wm5SUllMZFRzdVJZNlBKMkVG
MWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3MtLW4xcTRablJSWUxkVHN1Ulk2UEoyRUYxay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RjE3QS83NEJCMjREMjNGNUQxMUVGOEJGNzg2MEVDNEY5QUUwMi9zLS1uMXE0Wm5S
UllMZFRzdVJZNlBKMkVGMWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA9mLc33JKomcW0pA2hXZG5AXNiRILJ20J3h7X2N8QPqpVNX1cen1wm
4oR9YNgFT2xfdPFbnkjxPSzRCPI7PiCiQD9BaBb+eDONC7A54674h9oi6TNQsfUY
iBZrkSphLc+gWTTe0i3L4lAk2QfrFjIaGqUxA6taO7WNQx9ljW2Cgmm1sxk7r5VB
NewUaLtQlFFApICcoEP/C3lr8MS4hXlEvDTOliQDBAuZqzDq/Y0jadcxOk8FbbsD
lOFjvZ72y90bzAgNFNX7MjYsvUHq7xTFLr1hJIQpmzCTFZrC6wfxBu3vPHcVcLkJ
ijTl4EVozzdDpVcQ+dA3HITuJbggBfCt
-----END CERTIFICATE-----