Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft
File:                     XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft (raw, json)
Hash identifier:          RBjNNNMGoyIHYHDkM531C5acTcwNQH67IMU3OhT6Mhg=
Subject key identifier:   2F:63:22:EB:27:1D:98:8C:23:04:13:10:E4:95:17:A9:98:18:FA:79
Authority key identifier: 5D:B5:7E:D3:86:03:9E:A6:64:D1:EF:F7:57:07:36:D6:F9:F0:4C:44
Certificate issuer:       /CN=A9175F54/serialNumber=5DB57ED386039EA664D1EFF7570736D6F9F04C44
Certificate serial:       F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XbV-04YDnqZk0e_3Vwc21vnwTEQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft
Manifest number:          F3
Signing time:             Sat 29 Mar 2025 04:42:24 +0000
Manifest this update:     Sat 29 Mar 2025 04:42:24 +0000
Manifest next update:     Sat 05 Apr 2025 04:42:24 +0000
Files and hashes:         1: XbV-04YDnqZk0e_3Vwc21vnwTEQ.crl (hash: ipxXCkli+j1TGyENEQyEzU7BtlvKaFghPdZb0jbZxLw=)
                          2: 262FD0CEFE5C11EFA373D67EC4F9AE02.roa (hash: VFctWPQwbtoig1M0ZyXvaaJ8FzDcDhRRe13XKfb+93w=)
                          3: 55D387BCFE5C11EFAC82C181C4F9AE02.roa (hash: BXDB9E72EwnR8CUZxXbSk5J1hAgTnGg/I9qirr0mHEA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 248 (0xf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175F54
        Validity
            Not Before: Mar 29 04:42:24 2025 GMT
            Not After : Apr  5 04:42:24 2025 GMT
        Subject: CN=67e77a30-b213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0d:09:b9:52:61:3d:c0:5f:56:b9:2e:85:13:
                    aa:b6:96:fc:ce:f8:34:89:d0:1f:c2:bd:a5:1b:a2:
                    a9:99:eb:3b:f1:56:b8:e5:05:e8:ad:d9:1e:8d:e7:
                    41:dc:a3:1c:48:c0:ca:43:70:94:cf:a0:2f:46:81:
                    a7:91:15:c9:86:f9:5a:57:2d:22:e5:10:1a:52:dc:
                    66:8f:65:f8:6a:62:6b:b4:0d:58:a8:11:32:ed:2d:
                    bb:c3:a2:42:27:12:63:42:3a:94:c8:bc:28:d1:fe:
                    90:dd:47:22:19:dc:5f:3e:50:46:2f:cf:16:24:1a:
                    21:59:c6:89:24:ed:ed:cc:01:c7:46:4f:ab:35:7e:
                    3f:74:55:08:c6:5f:ae:eb:f8:8c:5e:3f:8c:32:e8:
                    b5:05:ab:bb:9c:4d:c0:00:4e:88:77:c2:5f:c8:f1:
                    90:ff:80:e4:09:ae:ad:cf:7e:c5:8b:33:ff:28:ef:
                    f3:84:b1:71:9b:f1:a2:9b:13:d7:0d:e8:cf:ef:53:
                    33:35:ae:de:8a:26:10:de:dd:fc:b7:df:52:f4:eb:
                    cc:a3:13:6e:1e:34:eb:af:2b:94:77:b2:b0:85:d3:
                    97:8a:e3:d8:db:4f:f1:e4:ef:93:b8:b2:fc:8e:7e:
                    96:4b:bb:de:23:1e:94:69:3c:90:65:61:c6:f8:76:
                    04:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:63:22:EB:27:1D:98:8C:23:04:13:10:E4:95:17:A9:98:18:FA:79
            X509v3 Authority Key Identifier:
                keyid:5D:B5:7E:D3:86:03:9E:A6:64:D1:EF:F7:57:07:36:D6:F9:F0:4C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XbV-04YDnqZk0e_3Vwc21vnwTEQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:c9:e1:66:01:04:ca:51:57:3e:92:0d:ba:f4:3e:cd:ff:b4:
         78:99:d3:ab:0c:d8:a1:a9:4b:1f:44:be:2b:c5:10:f8:a1:7c:
         c6:52:e9:b2:6f:15:a0:4c:a0:18:29:5c:88:0d:b8:09:9e:ac:
         c5:b0:42:52:c9:22:b1:80:fd:57:7f:31:05:05:fb:41:06:1e:
         8a:6b:f9:6f:5b:d9:ca:37:ed:5b:29:ab:8e:fd:ee:2d:bc:4e:
         39:96:ca:c1:1e:e2:39:f9:28:d0:23:46:97:49:46:6a:f2:53:
         5a:46:70:37:81:64:08:e8:62:82:4c:d2:2a:d3:6a:00:f7:5e:
         9f:77:54:70:ab:75:0b:46:86:4a:52:76:01:5a:fe:41:db:68:
         6f:17:30:62:b4:e5:a4:13:f8:bd:70:41:5d:5b:8d:ab:77:b6:
         c3:52:18:f9:fa:f8:9b:20:1f:42:fe:e5:8b:08:6d:cc:ae:ee:
         7e:aa:79:b8:6b:28:e8:cb:ab:e6:98:e9:0f:2c:89:d1:8a:01:
         50:a7:a6:6f:1a:94:55:69:b0:48:0f:12:e8:00:40:46:38:c7:
         43:f5:49:09:e2:3d:9f:1d:da:69:30:8c:d1:4d:88:b5:87:c1:
         5f:31:ce:ff:de:6c:c4:b1:3f:82:9f:74:75:2d:4e:51:20:a7:
         db:7a:43:24
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzVGNTQxMTAvBgNVBAUTKDVEQjU3RUQzODYwMzlFQTY2NEQxRUZGNzU3MDczNkQ2
RjlGMDRDNDQwHhcNMjUwMzI5MDQ0MjI0WhcNMjUwNDA1MDQ0MjI0WjAYMRYwFAYD
VQQDEw02N2U3N2EzMC1iMjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyQ0JuVJhPcBfVrkuhROqtpb8zvg0idAfwr2lG6Kpmes78Va45QXordkejedB
3KMcSMDKQ3CUz6AvRoGnkRXJhvlaVy0i5RAaUtxmj2X4amJrtA1YqBEy7S27w6JC
JxJjQjqUyLwo0f6Q3UciGdxfPlBGL88WJBohWcaJJO3tzAHHRk+rNX4/dFUIxl+u
6/iMXj+MMui1Bau7nE3AAE6Id8JfyPGQ/4DkCa6tz37FizP/KO/zhLFxm/GimxPX
DejP71MzNa7eiiYQ3t38t99S9OvMoxNuHjTrryuUd7KwhdOXiuPY20/x5O+TuLL8
jn6WS7veIx6UaTyQZWHG+HYEFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC9jIusn
HZiMIwQTEOSVF6mYGPp5MB8GA1UdIwQYMBaAFF21ftOGA56mZNHv91cHNtb58ExE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUY1NC81MUI2RUNFNDlG
MjgxMUVFQTk5NUQzMjhDNEY5QUUwMi9YYlYtMDRZRG5xWmswZV8zVndjMjF2bndU
RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hiVi0wNFlEbnFaazBlXzNWd2MyMXZud1RFUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NUY1NC81MUI2RUNFNDlGMjgxMUVFQTk5NUQzMjhDNEY5QUUwMi9YYlYtMDRZRG5x
WmswZV8zVndjMjF2bndURVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQANyeFmAQTKUVc+kg269D7N/7R4mdOrDNihqUsfRL4rxRD4oXzGUumy
bxWgTKAYKVyIDbgJnqzFsEJSySKxgP1XfzEFBftBBh6Ka/lvW9nKN+1bKauO/e4t
vE45lsrBHuI5+SjQI0aXSUZq8lNaRnA3gWQI6GKCTNIq02oA916fd1Rwq3ULRoZK
UnYBWv5B22hvFzBitOWkE/i9cEFdW42rd7bDUhj5+vibIB9C/uWLCG3Mru5+qnm4
ayjoy6vmmOkPLInRigFQp6ZvGpRVabBIDxLoAEBGOMdD9UkJ4j2fHdppMIzRTYi1
h8FfMc7/3mzEsT+Cn3R1LU5RIKfbekMk
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:27:07 2025 by rpki-client