Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/uN9D7us1RpuyzAulIS0b_yaKe24.mft
File:                     uN9D7us1RpuyzAulIS0b_yaKe24.mft (raw, json)
Hash identifier:          VgJGT+NFREoIynsM8EO0+9yKiug8wiotVhJOe92mQLE=
Subject key identifier:   BB:F3:F2:ED:6F:41:6B:EB:38:52:56:59:E6:DF:DA:F7:E9:F7:28:D1
Authority key identifier: B8:DF:43:EE:EB:35:46:9B:B2:CC:0B:A5:21:2D:1B:FF:26:8A:7B:6E
Certificate issuer:       /CN=A91F134A/serialNumber=B8DF43EEEB35469BB2CC0BA5212D1BFF268A7B6E
Certificate serial:       019B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uN9D7us1RpuyzAulIS0b_yaKe24.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/uN9D7us1RpuyzAulIS0b_yaKe24.mft
Manifest number:          0198
Signing time:             Fri 31 Jan 2025 02:42:38 +0000
Manifest this update:     Fri 31 Jan 2025 02:42:37 +0000
Manifest next update:     Fri 07 Feb 2025 02:42:37 +0000
Files and hashes:         1: uN9D7us1RpuyzAulIS0b_yaKe24.crl (hash: 5j5i5sP+e/bb9DqOH4lgrCBUoDFoHQNOiFpULFjN/cQ=)
                          2: 90269D3A716611ED9D80F448C4F9AE02.roa (hash: rsMkljZYE/Nxpn7AsH7vTnSee91hZSon99Otp+S0urI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 411 (0x19b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F134A/serialNumber=B8DF43EEEB35469BB2CC0BA5212D1BFF268A7B6E
        Validity
            Not Before: Jan 31 02:42:37 2025 GMT
            Not After : Feb  7 02:42:37 2025 GMT
        Subject: CN=679c389e-ec6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cd:e8:f0:1a:7f:0d:3f:82:e5:0a:8f:73:e4:
                    72:a5:80:d5:20:69:f7:3a:b1:9a:a8:af:db:a7:16:
                    33:7c:93:62:25:e8:d2:dc:1f:4d:59:05:96:c5:41:
                    7e:cd:47:1c:68:1b:2c:2e:f0:59:3d:e1:7a:38:5a:
                    f5:81:9b:4d:3b:5b:1c:67:82:00:6b:2e:ae:0f:f1:
                    05:70:21:e4:f6:df:71:96:c2:96:14:06:87:ce:cd:
                    3b:5e:f9:d7:1a:e1:d9:74:cd:01:86:9f:ac:7a:b5:
                    77:c1:89:1b:48:45:30:81:4b:ca:c4:3c:dd:38:72:
                    cd:e9:60:10:54:cd:9a:c8:08:94:f7:62:41:e6:a7:
                    73:d6:dd:07:9a:4f:fd:07:53:0c:fc:39:56:c2:86:
                    28:b5:81:b0:98:27:49:03:d3:ad:17:bc:6d:23:24:
                    5c:d5:93:7b:d9:3c:15:37:6d:20:89:64:dd:13:2f:
                    1e:a1:b9:61:69:54:a7:60:03:be:a3:d1:7e:10:64:
                    63:09:67:07:ce:26:5d:1d:d1:11:8b:0f:00:ee:92:
                    16:b2:73:7d:a4:06:e3:d3:f4:6a:60:52:2b:75:d6:
                    55:c7:7f:fa:f5:62:56:07:2e:11:3d:f8:0c:d1:b9:
                    f0:31:21:80:ce:ab:02:66:b5:af:7e:e1:fa:cf:65:
                    ab:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:F3:F2:ED:6F:41:6B:EB:38:52:56:59:E6:DF:DA:F7:E9:F7:28:D1
            X509v3 Authority Key Identifier:
                keyid:B8:DF:43:EE:EB:35:46:9B:B2:CC:0B:A5:21:2D:1B:FF:26:8A:7B:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/uN9D7us1RpuyzAulIS0b_yaKe24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uN9D7us1RpuyzAulIS0b_yaKe24.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/uN9D7us1RpuyzAulIS0b_yaKe24.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:18:db:d0:82:20:9f:ad:27:f8:d4:de:52:d6:dd:75:aa:e1:
         80:ef:e1:dd:a6:e3:03:8b:b9:d4:8e:f9:4b:32:eb:3c:a1:1e:
         a9:fc:b1:22:ba:5f:6c:0c:6c:df:94:73:55:bc:cc:71:79:c8:
         29:b6:4d:79:c2:fb:13:37:c3:2f:5a:f9:af:c4:31:d2:c2:fd:
         8f:42:24:a2:30:aa:4e:98:fb:e2:c2:ee:d0:a2:26:c5:e8:bb:
         cc:52:03:28:8d:5a:4f:74:ef:73:6d:8d:3a:40:0b:01:2f:08:
         32:cb:c4:a0:57:6e:87:ae:17:65:c5:1b:1f:a8:08:26:48:07:
         92:c8:ef:0a:fc:8b:fc:7f:54:57:67:43:11:5f:a4:63:03:47:
         7b:90:d4:07:78:01:db:9b:dc:be:1d:3f:c9:c8:61:11:31:31:
         d8:6b:00:6d:70:ba:c5:2f:4d:81:a0:9d:8b:19:18:75:73:fa:
         bd:10:20:6d:22:77:79:73:7f:82:90:9f:4b:36:9d:74:84:d5:
         24:94:2c:92:5a:f2:7c:4c:bb:95:c0:8e:7f:16:ae:27:10:2d:
         43:c9:3d:21:e4:2c:bd:61:64:54:cb:80:2d:2d:3a:28:ef:32:
         37:67:6d:aa:6e:1a:3d:b7:72:25:6d:8e:25:a8:99:c6:d1:12:
         c7:d5:e4:e3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjEzNEExMTAvBgNVBAUTKEI4REY0M0VFRUIzNTQ2OUJCMkNDMEJBNTIxMkQxQkZG
MjY4QTdCNkUwHhcNMjUwMTMxMDI0MjM3WhcNMjUwMjA3MDI0MjM3WjAYMRYwFAYD
VQQDEw02NzljMzg5ZS1lYzZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxc3o8Bp/DT+C5QqPc+RypYDVIGn3OrGaqK/bpxYzfJNiJejS3B9NWQWWxUF+
zUccaBssLvBZPeF6OFr1gZtNO1scZ4IAay6uD/EFcCHk9t9xlsKWFAaHzs07XvnX
GuHZdM0Bhp+serV3wYkbSEUwgUvKxDzdOHLN6WAQVM2ayAiU92JB5qdz1t0Hmk/9
B1MM/DlWwoYotYGwmCdJA9OtF7xtIyRc1ZN72TwVN20giWTdEy8eoblhaVSnYAO+
o9F+EGRjCWcHziZdHdERiw8A7pIWsnN9pAbj0/RqYFIrddZVx3/69WJWBy4RPfgM
0bnwMSGAzqsCZrWvfuH6z2Wr8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLvz8u1v
QWvrOFJWWebf2vfp9yjRMB8GA1UdIwQYMBaAFLjfQ+7rNUabsswLpSEtG/8mintu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTM0QS9GOTc2QkZEQTcx
NjIxMUVEODg5MzEzMzFDNEY5QUUwMi91TjlEN3VzMVJwdXl6QXVsSVMwYl95YUtl
MjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VOOUQ3dXMxUnB1eXpBdWxJUzBiX3lhS2UyNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MTM0QS9GOTc2QkZEQTcxNjIxMUVEODg5MzEzMzFDNEY5QUUwMi91TjlEN3VzMVJw
dXl6QXVsSVMwYl95YUtlMjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBYGNvQgiCfrSf41N5S1t11quGA7+HdpuMDi7nUjvlLMus8oR6p/LEi
ul9sDGzflHNVvMxxecgptk15wvsTN8MvWvmvxDHSwv2PQiSiMKpOmPviwu7QoibF
6LvMUgMojVpPdO9zbY06QAsBLwgyy8SgV26HrhdlxRsfqAgmSAeSyO8K/Iv8f1RX
Z0MRX6RjA0d7kNQHeAHbm9y+HT/JyGERMTHYawBtcLrFL02BoJ2LGRh1c/q9ECBt
Ind5c3+CkJ9LNp10hNUklCySWvJ8TLuVwI5/Fq4nEC1DyT0h5Cy9YWRUy4AtLToo
7zI3Z22qbho9t3IlbY4lqJnG0RLH1eTj
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:24:25 2025 by rpki-client