Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136C44/E80B03F4C08D11EC81B96171C4F9AE02/ZgRtJYV-AtAnNAPOdJIrjZVZ8mI.mft
File:                     ZgRtJYV-AtAnNAPOdJIrjZVZ8mI.mft (raw, json)
Hash identifier:          QA1QCvhzKx15j8rLlkk3MHiV8om8owP/Pv3M486GhCc=
Subject key identifier:   C0:DC:2A:2E:24:0C:2F:A8:AB:64:BC:A1:00:BF:2D:82:ED:37:AA:09
Authority key identifier: 66:04:6D:25:85:7E:02:D0:27:34:03:CE:74:92:2B:8D:95:59:F2:62
Certificate issuer:       /CN=A9136C44/serialNumber=66046D25857E02D0273403CE74922B8D9559F262
Certificate serial:       0225
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgRtJYV-AtAnNAPOdJIrjZVZ8mI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136C44/E80B03F4C08D11EC81B96171C4F9AE02/ZgRtJYV-AtAnNAPOdJIrjZVZ8mI.mft
Manifest number:          0225
Signing time:             Mon 11 Dec 2023 03:17:29 +0000
Manifest this update:     Mon 11 Dec 2023 03:17:28 +0000
Manifest next update:     Mon 18 Dec 2023 03:17:28 +0000
Files and hashes:         1: ZgRtJYV-AtAnNAPOdJIrjZVZ8mI.crl (hash: 0Asy1fWRbGPsY/T2zPNINxR3quKm5NyWeowIdE9SHps=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 549 (0x225)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136C44/serialNumber=66046D25857E02D0273403CE74922B8D9559F262
        Validity
            Not Before: Dec 11 03:17:28 2023 GMT
            Not After : Dec 18 03:17:28 2023 GMT
        Subject: CN=65767f48-46a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:5c:1b:d3:06:7f:5e:1c:c5:79:04:ae:49:95:
                    a4:04:8c:c7:29:e6:32:6c:94:9b:8b:f3:3b:20:9a:
                    f0:d3:5f:d4:d4:c5:75:00:3c:c2:ce:3d:3e:6e:ae:
                    4e:5b:e8:9b:e9:bd:0f:b1:82:f9:24:d8:50:1d:93:
                    63:43:7f:d9:fc:aa:6f:e1:8d:02:0e:f7:d1:81:82:
                    3e:8b:da:f5:60:65:3e:d2:86:e3:67:e8:22:c6:b7:
                    ba:3f:86:5d:6b:1a:3e:1a:24:f7:8c:5b:1c:8c:6e:
                    f9:8b:ff:57:a6:31:65:79:4b:67:63:eb:55:85:ba:
                    02:9d:8e:5a:ae:c5:eb:56:eb:2b:ac:a2:f0:88:e5:
                    be:a4:02:71:fa:b9:42:31:39:fd:ac:9c:54:4c:1b:
                    69:0a:1e:bb:af:6c:6a:a3:b5:2b:91:1c:ad:91:fb:
                    73:bf:88:8e:07:e7:b7:4a:c4:9b:5b:55:b9:06:b3:
                    cd:3f:85:a4:b7:fb:02:e2:8a:d6:46:37:02:51:57:
                    50:9a:3d:0c:bf:c3:7c:e9:bb:ba:4a:45:3a:b2:5c:
                    38:2c:c8:f5:03:fd:fd:69:59:fc:c8:06:90:65:f1:
                    1b:c0:8f:da:44:4c:b2:ba:57:54:1f:c4:e9:71:26:
                    02:23:80:d6:6f:87:4c:8e:e7:e8:53:87:ae:8c:88:
                    db:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:DC:2A:2E:24:0C:2F:A8:AB:64:BC:A1:00:BF:2D:82:ED:37:AA:09
            X509v3 Authority Key Identifier:
                keyid:66:04:6D:25:85:7E:02:D0:27:34:03:CE:74:92:2B:8D:95:59:F2:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136C44/E80B03F4C08D11EC81B96171C4F9AE02/ZgRtJYV-AtAnNAPOdJIrjZVZ8mI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgRtJYV-AtAnNAPOdJIrjZVZ8mI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136C44/E80B03F4C08D11EC81B96171C4F9AE02/ZgRtJYV-AtAnNAPOdJIrjZVZ8mI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:8f:3c:c3:99:98:ea:48:cc:92:17:b9:0d:ca:78:31:f7:a4:
         7a:5d:28:aa:69:f5:03:2d:84:02:5b:3e:dc:d6:75:ef:17:6f:
         67:dd:cc:e0:0f:26:9f:02:ee:fb:bd:9f:97:6a:78:f4:12:07:
         3f:d7:60:21:6c:22:d0:d0:76:fd:c6:2e:f2:49:43:10:2e:1f:
         d6:20:cc:49:ab:9a:f1:ec:f9:4b:77:56:42:37:56:60:b4:1e:
         8a:b6:e5:44:58:ae:6f:b6:ec:a6:be:a4:1c:c6:d9:df:19:8a:
         79:a4:f0:89:7a:a7:49:38:18:44:75:9e:16:aa:10:14:91:e7:
         0f:2f:3f:20:6d:76:9c:af:9e:d0:8c:22:0d:7f:59:20:80:fe:
         8b:6a:bf:f5:96:89:33:41:47:45:c1:b0:cb:5c:59:24:7a:87:
         02:c1:cd:88:f2:2f:9c:b5:e7:25:80:e8:a5:85:d1:47:6d:1d:
         e7:54:aa:7c:15:7f:b2:9c:38:76:bc:49:41:a9:12:71:1b:1d:
         23:13:13:50:74:46:bd:62:6a:98:b8:26:1c:1f:a6:7e:04:23:
         2f:47:a6:8b:fe:b1:07:b5:48:d9:28:2e:4a:35:b5:98:e0:75:
         d5:ed:cc:28:92:01:b0:c1:44:b4:24:8f:0c:b8:5f:94:5e:31:
         b3:3f:11:15
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzZDNDQxMTAvBgNVBAUTKDY2MDQ2RDI1ODU3RTAyRDAyNzM0MDNDRTc0OTIyQjhE
OTU1OUYyNjIwHhcNMjMxMjExMDMxNzI4WhcNMjMxMjE4MDMxNzI4WjAYMRYwFAYD
VQQDEw02NTc2N2Y0OC00NmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5Vwb0wZ/XhzFeQSuSZWkBIzHKeYybJSbi/M7IJrw01/U1MV1ADzCzj0+bq5O
W+ib6b0PsYL5JNhQHZNjQ3/Z/Kpv4Y0CDvfRgYI+i9r1YGU+0objZ+gixre6P4Zd
axo+GiT3jFscjG75i/9XpjFleUtnY+tVhboCnY5arsXrVusrrKLwiOW+pAJx+rlC
MTn9rJxUTBtpCh67r2xqo7UrkRytkftzv4iOB+e3SsSbW1W5BrPNP4Wkt/sC4orW
RjcCUVdQmj0Mv8N86bu6SkU6slw4LMj1A/39aVn8yAaQZfEbwI/aREyyuldUH8Tp
cSYCI4DWb4dMjufoU4eujIjbQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMDcKi4k
DC+oq2S8oQC/LYLtN6oJMB8GA1UdIwQYMBaAFGYEbSWFfgLQJzQDznSSK42VWfJi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkM0NC9FODBCMDNGNEMw
OEQxMUVDODFCOTYxNzFDNEY5QUUwMi9aZ1J0SllWLUF0QW5OQVBPZEpJcmpaVlo4
bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pnUnRKWVYtQXRBbk5BUE9kSklyalpWWjhtSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NkM0NC9FODBCMDNGNEMwOEQxMUVDODFCOTYxNzFDNEY5QUUwMi9aZ1J0SllWLUF0
QW5OQVBPZEpJcmpaVlo4bUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBrjzzDmZjqSMySF7kNyngx96R6XSiqafUDLYQCWz7c1nXvF29n3czg
DyafAu77vZ+Xanj0Egc/12AhbCLQ0Hb9xi7ySUMQLh/WIMxJq5rx7PlLd1ZCN1Zg
tB6KtuVEWK5vtuymvqQcxtnfGYp5pPCJeqdJOBhEdZ4WqhAUkecPLz8gbXacr57Q
jCINf1kggP6Lar/1lokzQUdFwbDLXFkkeocCwc2I8i+cteclgOilhdFHbR3nVKp8
FX+ynDh2vElBqRJxGx0jExNQdEa9YmqYuCYcH6Z+BCMvR6aL/rEHtUjZKC5KNbWY
4HXV7cwokgGwwUS0JI8MuF+UXjGzPxEV
-----END CERTIFICATE-----