Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.mft
File:                     09zhcUP5z134AE-MZZf7LIzMcEY.mft (raw, json)
Hash identifier:          nE6HOLDLuyoNezI9vtnVkl4tDRpBOQpuV7IOMQmxAtM=
Subject key identifier:   40:68:FE:AF:38:AD:C1:BF:59:4D:19:78:B2:99:5F:AA:81:82:FC:34
Authority key identifier: D3:DC:E1:71:43:F9:CF:5D:F8:00:4F:8C:65:97:FB:2C:8C:CC:70:46
Certificate issuer:       /CN=A91F7D74/serialNumber=D3DCE17143F9CF5DF8004F8C6597FB2C8CCC7046
Certificate serial:       56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09zhcUP5z134AE-MZZf7LIzMcEY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.mft
Manifest number:          53
Signing time:             Fri 31 Jan 2025 06:19:34 +0000
Manifest this update:     Fri 31 Jan 2025 06:19:34 +0000
Manifest next update:     Fri 07 Feb 2025 06:19:34 +0000
Files and hashes:         1: 09zhcUP5z134AE-MZZf7LIzMcEY.crl (hash: cgulsPLjbXsLn3xKb49wwoPDnLVA4+om4KiuQvbqlCY=)
                          2: 6A3FA88A693C11EF8B032237C4F9AE02.roa (hash: 2nR72gd8fEEO90sm8QM92ng7Ua1iEJ7Ic792MqQQzEM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7D74/serialNumber=D3DCE17143F9CF5DF8004F8C6597FB2C8CCC7046
        Validity
            Not Before: Jan 31 06:19:34 2025 GMT
            Not After : Feb  7 06:19:34 2025 GMT
        Subject: CN=679c6b76-c94d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:77:43:16:e4:09:59:3b:9f:55:44:d8:ef:a2:
                    d9:f7:a0:44:93:60:87:d2:f4:db:98:8f:20:97:fc:
                    0f:0d:e9:dc:f5:5c:d8:56:e2:74:1c:cf:0f:d1:ff:
                    5a:d4:23:d3:05:99:49:17:57:15:f1:95:04:9b:f5:
                    5c:c4:c5:ff:0b:c9:c4:b8:06:5a:3f:0f:5b:8e:47:
                    8c:c3:5e:d8:15:3b:a8:7f:86:b3:7e:c8:04:f0:55:
                    0b:3a:d3:2b:33:eb:a0:8b:3a:6f:e7:64:a8:5c:00:
                    52:62:85:ad:9f:51:04:73:fa:b8:b1:11:40:f1:df:
                    38:74:85:c7:7f:17:0e:71:0b:07:11:37:18:f5:be:
                    2f:2b:6f:0c:43:9f:aa:96:8a:00:e2:e9:3f:36:e6:
                    dc:e3:1f:ef:9d:64:39:60:bf:6f:fb:23:39:d1:a9:
                    d4:52:3b:1a:d7:7f:90:c6:20:cd:f8:22:f5:ea:b0:
                    db:9f:bd:18:8f:b9:53:2b:30:4c:3f:46:35:c6:a0:
                    28:93:8c:72:a2:0c:82:a8:a6:f3:39:a3:93:82:ee:
                    1f:2a:8c:e9:1d:b8:76:1c:96:dc:b0:df:21:bd:68:
                    0a:d7:3d:ab:57:ca:a1:9f:b3:46:b0:41:c9:f6:8f:
                    63:3a:64:7a:31:7e:cc:05:aa:0b:49:70:1d:3b:4d:
                    a4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:68:FE:AF:38:AD:C1:BF:59:4D:19:78:B2:99:5F:AA:81:82:FC:34
            X509v3 Authority Key Identifier:
                keyid:D3:DC:E1:71:43:F9:CF:5D:F8:00:4F:8C:65:97:FB:2C:8C:CC:70:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09zhcUP5z134AE-MZZf7LIzMcEY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:75:af:94:c7:de:f0:a9:09:be:e7:11:6d:e8:ae:44:71:5a:
         4c:84:2f:50:8a:55:ac:ff:57:66:19:f5:29:e3:aa:78:5c:2d:
         43:da:74:e2:95:5e:61:b6:42:b3:40:f3:47:8e:9e:c9:b5:ae:
         f8:16:9e:20:e2:34:25:59:32:d5:8c:6e:96:e9:c7:31:a6:98:
         78:25:bf:99:2f:a0:de:23:11:25:a8:ea:d8:5e:d5:05:2d:d3:
         6d:21:05:2e:c3:c4:9b:53:dc:e6:70:80:81:5f:58:d9:17:1f:
         b8:a8:3f:b5:79:87:ee:6c:c2:3c:e3:4c:6c:d3:fe:39:0a:91:
         f7:15:11:38:34:89:85:a6:5a:06:c8:2e:01:e3:90:fa:c9:53:
         a8:a4:fd:46:32:7e:40:09:97:bc:11:74:80:2f:7c:14:93:a6:
         01:4d:a1:34:7c:0f:61:65:63:0f:12:9b:f5:9a:d2:82:10:81:
         08:77:d7:6c:f4:b2:14:2a:18:8a:36:a8:5e:9a:d0:d1:7d:4d:
         38:81:0e:80:e2:d4:4f:ad:59:9d:ea:89:13:cf:0d:73:91:17:
         49:48:a2:a9:69:b1:fe:a1:b2:47:32:ef:b0:99:ea:0b:8a:ac:
         cb:04:3f:2c:3b:f7:9c:ae:5b:00:5c:ea:53:82:90:7b:9e:d1:
         6b:67:49:b8
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
N0Q3NDExMC8GA1UEBRMoRDNEQ0UxNzE0M0Y5Q0Y1REY4MDA0RjhDNjU5N0ZCMkM4
Q0NDNzA0NjAeFw0yNTAxMzEwNjE5MzRaFw0yNTAyMDcwNjE5MzRaMBgxFjAUBgNV
BAMTDTY3OWM2Yjc2LWM5NGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCxd0MW5AlZO59VRNjvotn3oESTYIfS9NuYjyCX/A8N6dz1XNhW4nQczw/R/1rU
I9MFmUkXVxXxlQSb9VzExf8LycS4Blo/D1uOR4zDXtgVO6h/hrN+yATwVQs60ysz
66CLOm/nZKhcAFJiha2fUQRz+rixEUDx3zh0hcd/Fw5xCwcRNxj1vi8rbwxDn6qW
igDi6T825tzjH++dZDlgv2/7IznRqdRSOxrXf5DGIM34IvXqsNufvRiPuVMrMEw/
RjXGoCiTjHKiDIKopvM5o5OC7h8qjOkduHYcltyw3yG9aArXPatXyqGfs0awQcn2
j2M6ZHoxfswFqgtJcB07TaT7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQGj+rzit
wb9ZTRl4splfqoGC/DQwHwYDVR0jBBgwFoAU09zhcUP5z134AE+MZZf7LIzMcEYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3RDc0LzM3OEQ5QTBBNjky
ODExRUZBRjcxMTQ4N0M0RjlBRTAyLzA5emhjVVA1ejEzNEFFLU1aWmY3TEl6TWNF
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvMDl6aGNVUDV6MTM0QUUtTVpaZjdMSXpNY0VZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3
RDc0LzM3OEQ5QTBBNjkyODExRUZBRjcxMTQ4N0M0RjlBRTAyLzA5emhjVVA1ejEz
NEFFLU1aWmY3TEl6TWNFWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAHp1r5TH3vCpCb7nEW3orkRxWkyEL1CKVaz/V2YZ9SnjqnhcLUPadOKV
XmG2QrNA80eOnsm1rvgWniDiNCVZMtWMbpbpxzGmmHglv5kvoN4jESWo6the1QUt
020hBS7DxJtT3OZwgIFfWNkXH7ioP7V5h+5swjzjTGzT/jkKkfcVETg0iYWmWgbI
LgHjkPrJU6ik/UYyfkAJl7wRdIAvfBSTpgFNoTR8D2FlYw8Sm/Wa0oIQgQh312z0
shQqGIo2qF6a0NF9TTiBDoDi1E+tWZ3qiRPPDXORF0lIoqlpsf6hskcy77CZ6guK
rMsEPyw795yuWwBc6lOCkHue0WtnSbg=
-----END CERTIFICATE-----