Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B8B3/A1131D6C666611E98753E47AC4F9AE02/8sBS4MVzqwWA6wbz-QAlZG5vMs8.mft
File:                     8sBS4MVzqwWA6wbz-QAlZG5vMs8.mft (raw, json)
Hash identifier:          OEAx3nCC7k2vyyICo1eyFywLu4mv0nP84Bo+UZymmzo=
Subject key identifier:   BD:DD:81:61:E1:76:63:5E:5A:FA:13:F3:4C:6A:4A:6A:E5:56:E9:32
Authority key identifier: F2:C0:52:E0:C5:73:AB:05:80:EB:06:F3:F9:00:25:64:6E:6F:32:CF
Certificate issuer:       /CN=A916B8B3/serialNumber=F2C052E0C573AB0580EB06F3F90025646E6F32CF
Certificate serial:       0F84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8sBS4MVzqwWA6wbz-QAlZG5vMs8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B8B3/A1131D6C666611E98753E47AC4F9AE02/8sBS4MVzqwWA6wbz-QAlZG5vMs8.mft
Manifest number:          0F56
Signing time:             Thu 16 Jan 2025 01:25:46 +0000
Manifest this update:     Thu 16 Jan 2025 01:25:45 +0000
Manifest next update:     Thu 23 Jan 2025 01:25:45 +0000
Files and hashes:         1: 8sBS4MVzqwWA6wbz-QAlZG5vMs8.crl (hash: N9Uu6NNiwaBTTmBSSLyWbVpomtNCDDHfsDVUcEMhEu0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3972 (0xf84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B8B3
        Validity
            Not Before: Jan 16 01:25:45 2025 GMT
            Not After : Jan 23 01:25:45 2025 GMT
        Subject: CN=6788601a-7347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9a:08:69:75:75:48:8d:dc:58:35:aa:8c:5c:
                    de:d5:af:92:c7:3b:1d:65:5b:6b:b5:ea:fb:be:3c:
                    65:35:76:f6:4c:97:91:93:eb:9b:05:5d:9e:1c:f0:
                    23:9a:f0:00:ca:ac:55:85:28:1d:fc:00:a0:be:0a:
                    f2:bc:1b:6e:ce:33:c2:f6:ea:d1:0e:6d:67:38:ca:
                    47:5e:05:49:0a:fe:15:05:97:77:e6:0e:f7:e6:9c:
                    a3:f7:63:81:a1:0e:d0:3b:11:ff:00:ce:8b:14:7b:
                    ec:ce:ae:78:69:db:ef:70:83:70:a0:54:06:4c:e8:
                    73:eb:dc:dc:ce:5b:f1:75:35:33:e1:b8:54:52:3c:
                    26:8f:17:22:c8:70:da:09:10:d3:7c:f2:da:8d:da:
                    04:d1:64:6f:f4:b0:42:c8:21:53:5e:9f:e6:1b:01:
                    ee:95:96:43:63:8a:aa:38:b0:da:63:bf:05:3e:63:
                    79:8a:3d:3c:10:27:54:78:a0:41:32:26:ec:09:3e:
                    35:e1:46:04:10:33:fb:3e:80:72:6c:6e:3f:8c:f0:
                    f1:0c:63:34:42:c3:0e:a0:6f:c2:03:ae:d6:c2:5b:
                    f2:96:9e:ca:71:79:6f:0d:95:91:dd:78:27:e7:45:
                    27:50:57:68:a6:f0:9e:57:3a:91:42:cd:a7:42:c6:
                    68:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:DD:81:61:E1:76:63:5E:5A:FA:13:F3:4C:6A:4A:6A:E5:56:E9:32
            X509v3 Authority Key Identifier:
                keyid:F2:C0:52:E0:C5:73:AB:05:80:EB:06:F3:F9:00:25:64:6E:6F:32:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B8B3/A1131D6C666611E98753E47AC4F9AE02/8sBS4MVzqwWA6wbz-QAlZG5vMs8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8sBS4MVzqwWA6wbz-QAlZG5vMs8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B8B3/A1131D6C666611E98753E47AC4F9AE02/8sBS4MVzqwWA6wbz-QAlZG5vMs8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:d6:1f:a1:47:9f:ff:f3:ad:8c:3d:ff:fc:9e:8b:0b:55:ee:
         06:0e:a6:bb:5d:3c:7e:26:1c:e3:7a:a4:1c:4c:fb:9b:bd:73:
         06:42:ce:84:68:95:46:2e:3d:63:d7:47:dc:1c:ba:c8:81:a5:
         0b:2d:b7:27:d9:46:04:ad:35:a6:89:7d:b5:14:60:03:2a:39:
         81:3f:bd:cd:33:46:8f:6f:dc:51:21:1f:30:2a:63:87:22:b5:
         7b:c8:6d:21:63:a5:56:84:dc:92:2b:50:6d:67:c0:15:e5:da:
         cd:4a:5f:f9:d5:eb:3c:c3:4a:bd:cf:f8:d2:4f:c3:2c:6e:46:
         26:27:7b:9b:56:02:aa:c8:e7:0a:ce:1b:fe:e8:de:5f:f9:30:
         4d:61:13:98:9a:a6:14:8b:91:f0:c6:d9:1f:48:1a:c9:ab:20:
         fa:15:07:3d:1c:f4:b7:54:dd:b8:0f:99:8e:ac:e8:ef:8f:02:
         45:c0:86:32:29:d4:a0:29:c4:5d:5a:49:50:d9:38:c3:bb:b9:
         ad:f5:07:68:3a:5d:23:74:b7:5a:2d:5d:e4:1a:82:34:15:60:
         b5:3b:2b:eb:8f:d9:5e:dd:b4:05:1d:c2:01:57:60:ca:bd:ee:
         76:66:17:29:a6:c5:e8:35:85:b9:36:bb:77:bc:99:6e:02:78:
         10:eb:06:d3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICD4QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkI4QjMxMTAvBgNVBAUTKEYyQzA1MkUwQzU3M0FCMDU4MEVCMDZGM0Y5MDAyNTY0
NkU2RjMyQ0YwHhcNMjUwMTE2MDEyNTQ1WhcNMjUwMTIzMDEyNTQ1WjAYMRYwFAYD
VQQDEw02Nzg4NjAxYS03MzQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs5oIaXV1SI3cWDWqjFze1a+SxzsdZVtrter7vjxlNXb2TJeRk+ubBV2eHPAj
mvAAyqxVhSgd/ACgvgryvBtuzjPC9urRDm1nOMpHXgVJCv4VBZd35g735pyj92OB
oQ7QOxH/AM6LFHvszq54advvcINwoFQGTOhz69zczlvxdTUz4bhUUjwmjxciyHDa
CRDTfPLajdoE0WRv9LBCyCFTXp/mGwHulZZDY4qqOLDaY78FPmN5ij08ECdUeKBB
MibsCT414UYEEDP7PoBybG4/jPDxDGM0QsMOoG/CA67Wwlvylp7KcXlvDZWR3Xgn
50UnUFdopvCeVzqRQs2nQsZo5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL3dgWHh
dmNeWvoT80xqSmrlVukyMB8GA1UdIwQYMBaAFPLAUuDFc6sFgOsG8/kAJWRubzLP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjhCMy9BMTEzMUQ2QzY2
NjYxMUU5ODc1M0U0N0FDNEY5QUUwMi84c0JTNE1WenF3V0E2d2J6LVFBbFpHNXZN
czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhzQlM0TVZ6cXdXQTZ3YnotUUFsWkc1dk1zOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QjhCMy9BMTEzMUQ2QzY2NjYxMUU5ODc1M0U0N0FDNEY5QUUwMi84c0JTNE1WenF3
V0E2d2J6LVFBbFpHNXZNczgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCY1h+hR5//862MPf/8nosLVe4GDqa7XTx+JhzjeqQcTPubvXMGQs6E
aJVGLj1j10fcHLrIgaULLbcn2UYErTWmiX21FGADKjmBP73NM0aPb9xRIR8wKmOH
IrV7yG0hY6VWhNySK1BtZ8AV5drNSl/51es8w0q9z/jST8MsbkYmJ3ubVgKqyOcK
zhv+6N5f+TBNYROYmqYUi5HwxtkfSBrJqyD6FQc9HPS3VN24D5mOrOjvjwJFwIYy
KdSgKcRdWklQ2TjDu7mt9QdoOl0jdLdaLV3kGoI0FWC1Oyvrj9le3bQFHcIBV2DK
ve52ZhcppsXoNYW5Nrt3vJluAngQ6wbT
-----END CERTIFICATE-----
Generated at Fri Apr 11 16:07:31 2025 by rpki-client