Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.mft
File:                     VFxHwOQxMzjcm0QCwSuty06YV8E.mft (raw, json)
Hash identifier:          duK7a4vMHVMsrS2A6fTXZkCetphEkO2W8/fpfIfNaMc=
Subject key identifier:   72:46:29:3C:41:08:60:A6:EF:48:57:D0:68:A7:A0:10:08:49:95:B8
Authority key identifier: 54:5C:47:C0:E4:31:33:38:DC:9B:44:02:C1:2B:AD:CB:4E:98:57:C1
Certificate issuer:       /CN=A91FB103/serialNumber=545C47C0E4313338DC9B4402C12BADCB4E9857C1
Certificate serial:       ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFxHwOQxMzjcm0QCwSuty06YV8E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.mft
Manifest number:          E3
Signing time:             Fri 31 Jan 2025 04:43:57 +0000
Manifest this update:     Fri 31 Jan 2025 04:43:57 +0000
Manifest next update:     Fri 07 Feb 2025 04:43:57 +0000
Files and hashes:         1: VFxHwOQxMzjcm0QCwSuty06YV8E.crl (hash: wxPkU9yOYC0UU2sO/Vtd8HAipIVwTzH7Xd7QpLc9/OQ=)
                          2: 77F8EAD29CF811EFA2E0CD6AC4F9AE02.roa (hash: Ain3qdd9woinL4inH/8nG99VHakyMNpv4v8rmQWJ1Bs=)
                          3: 0F440AB26E7711EFAA4A1C1AC4F9AE02.roa (hash: O1np95hbIM7tMbwqTYjzC3DrWBrLxkB/hTITnk5MJww=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 237 (0xed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FB103/serialNumber=545C47C0E4313338DC9B4402C12BADCB4E9857C1
        Validity
            Not Before: Jan 31 04:43:57 2025 GMT
            Not After : Feb  7 04:43:57 2025 GMT
        Subject: CN=679c550d-fd73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:64:db:79:d1:be:58:44:b9:50:2b:94:ab:0c:
                    cd:4f:27:ca:d8:e1:c9:da:1f:01:de:c9:5e:82:8e:
                    14:3f:1a:3c:f4:15:71:c8:f4:86:72:f0:d2:fa:70:
                    3d:62:67:6a:1e:ac:b6:8d:04:2c:35:3d:21:03:5b:
                    a9:57:30:b0:ca:f0:61:4c:0d:2c:81:e0:6b:37:46:
                    c7:b2:fc:0b:2a:ae:92:1b:bb:f6:81:3b:c7:fd:f1:
                    80:ae:d7:6e:36:b4:0a:76:d6:ef:5f:c0:1f:61:57:
                    09:bc:9e:04:0c:06:f9:80:8b:96:1a:2f:6a:50:27:
                    a7:76:25:1d:89:6f:09:b0:12:2a:c4:fb:6e:96:2a:
                    a8:c6:29:0a:ae:e2:8f:6f:a6:35:21:fa:8e:73:f8:
                    21:ed:81:44:29:34:c0:16:81:70:51:f8:6f:0e:ed:
                    32:7d:3f:0f:d4:08:4a:2f:f2:1b:b5:a7:cb:3e:6b:
                    1d:bc:b3:56:92:6a:f5:50:32:3f:88:ab:cf:36:26:
                    e3:77:dc:e5:10:bb:c4:8c:12:8f:e2:a9:a4:2e:f1:
                    b8:b8:3c:0c:41:89:a6:d4:30:d0:60:50:14:98:29:
                    cb:f9:e1:ce:da:e8:31:4c:11:a7:ad:2c:5d:d4:23:
                    e1:e6:9a:96:f8:15:fa:a5:97:3a:52:24:ce:fb:52:
                    e7:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:46:29:3C:41:08:60:A6:EF:48:57:D0:68:A7:A0:10:08:49:95:B8
            X509v3 Authority Key Identifier:
                keyid:54:5C:47:C0:E4:31:33:38:DC:9B:44:02:C1:2B:AD:CB:4E:98:57:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFxHwOQxMzjcm0QCwSuty06YV8E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:3d:bb:cc:54:55:bf:bf:ab:1a:0a:48:06:82:12:cf:6a:48:
         a0:db:7e:59:f8:0a:a8:98:88:36:77:7e:09:24:5d:f6:15:8e:
         4b:0b:95:94:18:4a:83:91:75:7c:37:de:cd:cb:cb:cf:84:8b:
         2d:00:08:36:98:ca:4c:c6:38:9a:f8:a3:78:07:d3:9b:06:dd:
         77:7b:e3:e4:50:30:a8:a2:73:18:85:f1:48:32:fb:d5:a5:e9:
         82:96:4b:79:a3:76:8d:84:c6:70:6d:07:02:ae:76:6b:82:1f:
         bd:04:0d:03:f1:04:10:b2:3e:4b:55:1c:c9:8b:dd:36:30:fb:
         75:c4:e3:2f:ff:1c:98:68:e1:f9:eb:fc:94:3a:37:f0:ba:28:
         7c:d7:8b:ad:d7:a1:34:7a:84:90:17:e6:01:d9:2e:d5:47:f6:
         0f:45:c0:13:cf:d4:76:00:ec:b4:f9:00:b9:97:70:3c:cc:d1:
         0b:28:f3:26:76:10:db:8f:12:0b:ac:0c:72:89:74:c2:a8:4e:
         9e:a2:d0:60:86:37:42:cd:a4:17:cb:81:1e:43:3c:ad:df:b5:
         eb:0f:c9:73:8e:0d:6c:93:d4:2f:9c:c9:64:ea:c1:58:49:c6:
         d8:85:9a:35:8e:0e:db:56:07:2b:52:77:83:3c:2a:11:0c:00:
         f7:71:aa:9a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkIxMDMxMTAvBgNVBAUTKDU0NUM0N0MwRTQzMTMzMzhEQzlCNDQwMkMxMkJBRENC
NEU5ODU3QzEwHhcNMjUwMTMxMDQ0MzU3WhcNMjUwMjA3MDQ0MzU3WjAYMRYwFAYD
VQQDEw02NzljNTUwZC1mZDczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxmTbedG+WES5UCuUqwzNTyfK2OHJ2h8B3slego4UPxo89BVxyPSGcvDS+nA9
YmdqHqy2jQQsNT0hA1upVzCwyvBhTA0sgeBrN0bHsvwLKq6SG7v2gTvH/fGArtdu
NrQKdtbvX8AfYVcJvJ4EDAb5gIuWGi9qUCendiUdiW8JsBIqxPtuliqoxikKruKP
b6Y1IfqOc/gh7YFEKTTAFoFwUfhvDu0yfT8P1AhKL/IbtafLPmsdvLNWkmr1UDI/
iKvPNibjd9zlELvEjBKP4qmkLvG4uDwMQYmm1DDQYFAUmCnL+eHO2ugxTBGnrSxd
1CPh5pqW+BX6pZc6UiTO+1LnAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHJGKTxB
CGCm70hX0GinoBAISZW4MB8GA1UdIwQYMBaAFFRcR8DkMTM43JtEAsErrctOmFfB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjEwMy8yRkI5ODUwODkz
RkIxMUVFOTY4RUU0NDJDNEY5QUUwMi9WRnhId09ReE16amNtMFFDd1N1dHkwNllW
OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZGeEh3T1F4TXpqY20wUUN3U3V0eTA2WVY4RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QjEwMy8yRkI5ODUwODkzRkIxMUVFOTY4RUU0NDJDNEY5QUUwMi9WRnhId09ReE16
amNtMFFDd1N1dHkwNllWOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB4PbvMVFW/v6saCkgGghLPakig235Z+AqomIg2d34JJF32FY5LC5WU
GEqDkXV8N97Ny8vPhIstAAg2mMpMxjia+KN4B9ObBt13e+PkUDCoonMYhfFIMvvV
pemClkt5o3aNhMZwbQcCrnZrgh+9BA0D8QQQsj5LVRzJi902MPt1xOMv/xyYaOH5
6/yUOjfwuih814ut16E0eoSQF+YB2S7VR/YPRcATz9R2AOy0+QC5l3A8zNELKPMm
dhDbjxILrAxyiXTCqE6eotBghjdCzaQXy4EeQzyt37XrD8lzjg1sk9QvnMlk6sFY
ScbYhZo1jg7bVgcrUneDPCoRDAD3caqa
-----END CERTIFICATE-----
Generated at Mon Apr 28 16:09:47 2025 by rpki-client