Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft
File:                     B_MbR0cTs6FSxqX49I3tIJfcJB8.mft (raw, json)
Hash identifier:          w6bFswaCpJv8U9WQFK0CaMBBFNIMSCX+AksaORvoSV4=
Subject key identifier:   6C:6E:27:56:8B:B0:D6:60:B7:9F:78:C2:2F:63:98:4C:A4:7C:D4:37
Authority key identifier: 07:F3:1B:47:47:13:B3:A1:52:C6:A5:F8:F4:8D:ED:20:97:DC:24:1F
Certificate issuer:       /CN=A9170D3E/serialNumber=07F31B474713B3A152C6A5F8F48DED2097DC241F
Certificate serial:       49
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft
Manifest number:          48
Signing time:             Sat 29 Mar 2025 06:40:05 +0000
Manifest this update:     Sat 29 Mar 2025 06:40:04 +0000
Manifest next update:     Sat 05 Apr 2025 06:40:04 +0000
Files and hashes:         1: B_MbR0cTs6FSxqX49I3tIJfcJB8.crl (hash: NwthCiGrrdenxkae8VdHgDrv4ueaXHukYWUjN/3OgZs=)
                          2: 232F490A9FD811EFA92BE338C4F9AE02.roa (hash: oshENdblJra/vyPm3h+L7O2yi470pUSFRiQdE49uRfI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170D3E
        Validity
            Not Before: Mar 29 06:40:04 2025 GMT
            Not After : Apr  5 06:40:04 2025 GMT
        Subject: CN=67e795c5-4130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:35:f5:ac:3c:55:ed:22:02:79:4a:c3:c7:f1:
                    50:69:da:b4:7e:2c:2c:9f:06:68:31:66:73:c0:7b:
                    8e:c0:80:c0:e3:c0:fb:10:a6:ea:c4:e5:fa:a3:7e:
                    84:47:ea:75:f9:d1:d4:10:bb:4f:db:26:91:ee:30:
                    32:0d:68:37:71:44:e6:95:88:1d:b6:32:b7:9c:56:
                    b7:4a:4b:69:ef:b9:ca:18:49:f6:75:15:92:19:05:
                    69:9c:7a:c2:5a:57:8b:b4:89:89:ec:e1:94:82:4f:
                    24:ed:f6:64:7d:e4:02:ab:97:b2:62:f4:ac:9a:a7:
                    3e:6e:81:1f:a9:75:a4:c4:bb:a2:bc:75:da:c3:29:
                    3b:73:9d:31:97:c5:f3:7d:26:59:9a:22:96:b9:ae:
                    28:c5:6e:51:2d:05:f2:44:a6:7f:9e:09:b5:84:92:
                    bc:74:f1:94:a1:95:0f:49:dd:7f:1c:92:bf:da:c3:
                    26:e7:4e:96:a1:ee:2d:cf:d1:e7:f6:e8:8b:92:cb:
                    4d:3d:4c:d1:81:ca:31:59:07:ab:be:8a:16:86:37:
                    08:b9:a1:4b:a1:17:0e:26:10:6b:7a:81:9f:59:4b:
                    e5:1d:91:41:ac:33:65:81:af:4d:0f:ca:14:e9:fd:
                    bc:86:93:1c:95:6f:ad:61:ad:a6:20:ec:24:16:60:
                    8b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:6E:27:56:8B:B0:D6:60:B7:9F:78:C2:2F:63:98:4C:A4:7C:D4:37
            X509v3 Authority Key Identifier:
                keyid:07:F3:1B:47:47:13:B3:A1:52:C6:A5:F8:F4:8D:ED:20:97:DC:24:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:bb:c8:66:dd:e8:4c:36:7c:b0:b8:b6:d6:0e:17:51:15:b5:
         69:f3:94:51:cc:e6:4b:24:ec:98:e4:64:d3:a5:d3:ed:ff:cd:
         82:c1:7e:e8:9d:0c:11:06:4b:1d:f2:5d:27:2a:28:6c:60:8c:
         fb:e3:ab:e8:17:cf:2f:5b:38:c8:9b:ec:a7:55:87:db:32:e6:
         9c:c9:0a:78:62:0f:02:b3:c8:34:a7:28:21:a3:5c:b6:83:32:
         00:47:05:18:f5:9e:8c:2f:01:62:17:45:b6:0c:c1:d3:83:d1:
         68:97:d1:34:2f:70:cf:79:87:b8:41:57:2a:52:f7:57:95:fa:
         9d:bc:85:a3:3d:38:2a:79:81:70:f6:76:9b:96:31:9d:0d:f2:
         3f:92:7e:0c:91:0c:f4:c7:1e:37:c1:bf:90:58:ef:5b:c1:5e:
         63:22:e2:b6:27:ca:0a:0d:2b:80:0e:9c:e4:de:23:e7:98:85:
         cc:07:9e:9c:c8:d8:d7:79:63:b9:10:84:71:7a:4d:37:65:ae:
         75:3c:37:31:74:cb:47:d8:c7:02:00:62:7b:17:aa:6f:05:bf:
         be:26:ad:f5:c3:97:3b:76:0a:65:60:85:c9:0f:16:30:a1:b9:
         68:b0:90:e0:30:65:af:b7:c1:38:98:3e:ee:98:54:86:3d:db:
         3e:71:31:5c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
MEQzRTExMC8GA1UEBRMoMDdGMzFCNDc0NzEzQjNBMTUyQzZBNUY4RjQ4REVEMjA5
N0RDMjQxRjAeFw0yNTAzMjkwNjQwMDRaFw0yNTA0MDUwNjQwMDRaMBgxFjAUBgNV
BAMTDTY3ZTc5NWM1LTQxMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDKNfWsPFXtIgJ5SsPH8VBp2rR+LCyfBmgxZnPAe47AgMDjwPsQpurE5fqjfoRH
6nX50dQQu0/bJpHuMDINaDdxROaViB22MrecVrdKS2nvucoYSfZ1FZIZBWmcesJa
V4u0iYns4ZSCTyTt9mR95AKrl7Ji9Kyapz5ugR+pdaTEu6K8ddrDKTtznTGXxfN9
JlmaIpa5rijFblEtBfJEpn+eCbWEkrx08ZShlQ9J3X8ckr/awybnTpah7i3P0ef2
6IuSy009TNGByjFZB6u+ihaGNwi5oUuhFw4mEGt6gZ9ZS+UdkUGsM2WBr00PyhTp
/byGkxyVb61hraYg7CQWYIuxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbG4nVouw
1mC3n3jCL2OYTKR81DcwHwYDVR0jBBgwFoAUB/MbR0cTs6FSxqX49I3tIJfcJB8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwRDNFL0JERUU5RTI0OUZE
NzExRUY5RTM4QTgzN0M0RjlBRTAyL0JfTWJSMGNUczZGU3hxWDQ5STN0SUpmY0pC
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvQl9NYlIwY1RzNkZTeHFYNDlJM3RJSmZjSkI4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw
RDNFL0JERUU5RTI0OUZENzExRUY5RTM4QTgzN0M0RjlBRTAyL0JfTWJSMGNUczZG
U3hxWDQ5STN0SUpmY0pCOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAGi7yGbd6Ew2fLC4ttYOF1EVtWnzlFHM5ksk7JjkZNOl0+3/zYLBfuid
DBEGSx3yXScqKGxgjPvjq+gXzy9bOMib7KdVh9sy5pzJCnhiDwKzyDSnKCGjXLaD
MgBHBRj1nowvAWIXRbYMwdOD0WiX0TQvcM95h7hBVypS91eV+p28haM9OCp5gXD2
dpuWMZ0N8j+SfgyRDPTHHjfBv5BY71vBXmMi4rYnygoNK4AOnOTeI+eYhcwHnpzI
2Nd5Y7kQhHF6TTdlrnU8NzF0y0fYxwIAYnsXqm8Fv74mrfXDlzt2CmVghckPFjCh
uWiwkOAwZa+3wTiYPu6YVIY92z5xMVw=
-----END CERTIFICATE-----