Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF89A/8C704744F88411EEA7B3A750C4F9AE02/YOVPYFHttB6nqVCJbNm71nASDWM.mft
File:                     YOVPYFHttB6nqVCJbNm71nASDWM.mft (raw, json)
Hash identifier:          DAcj7WigywBF39VQLEw1ropkMgodw3NeDdJTQ9eKU9Y=
Subject key identifier:   C8:00:A5:83:A3:E2:7F:A2:E7:52:51:8F:1C:39:24:70:47:02:8D:6B
Authority key identifier: 60:E5:4F:60:51:ED:B4:1E:A7:A9:50:89:6C:D9:BB:D6:70:12:0D:63
Certificate issuer:       /CN=A91FF89A/serialNumber=60E54F6051EDB41EA7A950896CD9BBD670120D63
Certificate serial:       99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YOVPYFHttB6nqVCJbNm71nASDWM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF89A/8C704744F88411EEA7B3A750C4F9AE02/YOVPYFHttB6nqVCJbNm71nASDWM.mft
Manifest number:          97
Signing time:             Fri 31 Jan 2025 05:28:31 +0000
Manifest this update:     Fri 31 Jan 2025 05:28:30 +0000
Manifest next update:     Fri 07 Feb 2025 05:28:30 +0000
Files and hashes:         1: YOVPYFHttB6nqVCJbNm71nASDWM.crl (hash: NMY4xr/KVch5qYhV8R+p3HbIi8AzfoPnBJ7Cirhx9L4=)
                          2: 99AA3580F88611EE8E9B3E71C4F9AE02.roa (hash: 5sqOGBsF1ucCZYwk5F1J19/8HxFnGjHNBCogN/tCysY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153 (0x99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF89A/serialNumber=60E54F6051EDB41EA7A950896CD9BBD670120D63
        Validity
            Not Before: Jan 31 05:28:30 2025 GMT
            Not After : Feb  7 05:28:30 2025 GMT
        Subject: CN=679c5f7f-63d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:2c:14:ba:ee:a0:7f:56:8c:2f:ff:b8:07:71:
                    2e:38:fd:03:20:d9:55:4d:de:13:1e:88:a8:5b:3c:
                    1a:21:73:6f:24:c8:98:3f:b8:de:bd:dd:fd:ba:73:
                    31:4c:10:41:2f:91:c7:f0:8c:ca:9e:b7:58:37:9e:
                    fb:04:c5:43:d3:c6:a0:95:f1:76:6b:6b:a4:f5:ab:
                    e7:02:87:04:12:f9:3b:ba:f7:c9:60:cf:19:b1:9c:
                    a8:ed:34:cb:ef:b1:14:ef:31:0e:5d:a4:a5:7b:9d:
                    fa:6f:fb:58:a1:96:0e:53:78:43:12:af:83:57:3b:
                    2b:f3:39:07:c6:3c:3c:8b:f9:18:cd:e1:dd:88:9e:
                    0b:6e:fb:79:dc:ff:6b:f8:29:1c:3b:8b:f7:6b:7f:
                    a2:0a:59:5f:6a:cc:7c:de:08:ed:21:a1:3f:8a:5b:
                    55:45:ce:3d:81:b8:25:72:ae:e5:d5:38:38:2d:d9:
                    a5:83:c9:0a:5e:67:96:fa:da:9b:80:5f:71:4d:fc:
                    5c:c9:80:f2:97:df:cf:98:79:a1:bc:f6:6f:0a:e8:
                    96:fc:84:f5:f2:6d:02:25:9d:d6:95:5a:95:2d:bc:
                    1b:0e:fe:6b:b6:16:f0:fd:8e:52:8e:34:1b:96:1c:
                    73:6e:9e:05:d7:28:c0:86:2a:a4:07:6e:5d:53:17:
                    10:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:00:A5:83:A3:E2:7F:A2:E7:52:51:8F:1C:39:24:70:47:02:8D:6B
            X509v3 Authority Key Identifier:
                keyid:60:E5:4F:60:51:ED:B4:1E:A7:A9:50:89:6C:D9:BB:D6:70:12:0D:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF89A/8C704744F88411EEA7B3A750C4F9AE02/YOVPYFHttB6nqVCJbNm71nASDWM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YOVPYFHttB6nqVCJbNm71nASDWM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF89A/8C704744F88411EEA7B3A750C4F9AE02/YOVPYFHttB6nqVCJbNm71nASDWM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:e9:b4:08:ee:25:46:e1:af:42:8c:8a:89:25:a1:45:88:1f:
         4e:a0:42:dc:a8:4d:d9:13:bc:a9:ca:80:57:5a:36:6f:2d:db:
         7c:d1:43:4b:14:ff:04:46:2e:ca:72:68:75:ff:cf:7f:32:c4:
         f1:62:a5:5d:ec:15:77:21:4f:48:b7:6b:ae:68:45:49:44:ba:
         d2:8a:bf:49:e1:0f:30:83:06:fd:89:61:08:a3:7f:30:48:83:
         e9:fd:2a:4d:c0:cc:53:be:0e:ed:f2:2c:ec:b5:ee:f5:ef:90:
         e3:d9:99:fb:37:80:52:60:27:44:8e:11:53:f5:45:94:3e:23:
         dd:e3:cd:98:55:93:e3:24:64:05:4c:e1:b2:4a:90:5d:73:27:
         d7:15:34:5a:1b:19:d7:50:ef:61:f6:49:6a:1b:cc:6e:06:8b:
         ac:08:73:f6:c4:02:8c:ae:79:93:34:94:3a:02:cd:4c:4f:c5:
         b3:6e:ee:44:54:53:47:91:bd:bb:28:cc:a7:6b:66:3b:dc:c5:
         8d:99:7d:aa:48:7d:0b:6f:c7:5a:ea:a2:de:80:91:b4:24:fb:
         e2:c7:f1:5a:78:25:4a:0d:0b:00:8f:30:27:64:2a:da:26:55:
         60:f4:6c:45:82:01:7b:4a:2a:02:13:52:b7:19:9a:8d:ec:2b:
         27:82:31:5a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkY4OUExMTAvBgNVBAUTKDYwRTU0RjYwNTFFREI0MUVBN0E5NTA4OTZDRDlCQkQ2
NzAxMjBENjMwHhcNMjUwMTMxMDUyODMwWhcNMjUwMjA3MDUyODMwWjAYMRYwFAYD
VQQDEw02NzljNWY3Zi02M2Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7SwUuu6gf1aML/+4B3EuOP0DINlVTd4THoioWzwaIXNvJMiYP7jevd39unMx
TBBBL5HH8IzKnrdYN577BMVD08aglfF2a2uk9avnAocEEvk7uvfJYM8ZsZyo7TTL
77EU7zEOXaSle536b/tYoZYOU3hDEq+DVzsr8zkHxjw8i/kYzeHdiJ4Lbvt53P9r
+CkcO4v3a3+iCllfasx83gjtIaE/iltVRc49gbglcq7l1Tg4Ldmlg8kKXmeW+tqb
gF9xTfxcyYDyl9/PmHmhvPZvCuiW/IT18m0CJZ3WlVqVLbwbDv5rthbw/Y5SjjQb
lhxzbp4F1yjAhiqkB25dUxcQSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMgApYOj
4n+i51JRjxw5JHBHAo1rMB8GA1UdIwQYMBaAFGDlT2BR7bQep6lQiWzZu9ZwEg1j
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjg5QS84QzcwNDc0NEY4
ODQxMUVFQTdCM0E3NTBDNEY5QUUwMi9ZT1ZQWUZIdHRCNm5xVkNKYk5tNzFuQVNE
V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lPVlBZRkh0dEI2bnFWQ0piTm03MW5BU0RXTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
Rjg5QS84QzcwNDc0NEY4ODQxMUVFQTdCM0E3NTBDNEY5QUUwMi9ZT1ZQWUZIdHRC
Nm5xVkNKYk5tNzFuQVNEV00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAu6bQI7iVG4a9CjIqJJaFFiB9OoELcqE3ZE7ypyoBXWjZvLdt80UNL
FP8ERi7Kcmh1/89/MsTxYqVd7BV3IU9It2uuaEVJRLrSir9J4Q8wgwb9iWEIo38w
SIPp/SpNwMxTvg7t8izste7175Dj2Zn7N4BSYCdEjhFT9UWUPiPd482YVZPjJGQF
TOGySpBdcyfXFTRaGxnXUO9h9klqG8xuBousCHP2xAKMrnmTNJQ6As1MT8Wzbu5E
VFNHkb27KMyna2Y73MWNmX2qSH0Lb8da6qLegJG0JPvix/FaeCVKDQsAjzAnZCra
JlVg9GxFggF7SioCE1K3GZqN7CsngjFa
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:01:29 2025 by rpki-client