Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.mft
File:                     N-A1JLWEfb6tAP43jEar0MpwRfg.mft (raw, json)
Hash identifier:          8zlyzA6s/4er3j/xQDp6DoXeMr9aDSwCLFIHO+DkSGM=
Subject key identifier:   5D:6E:98:BF:FE:18:75:85:44:8B:8C:47:C4:A5:40:21:2E:28:A2:EB
Authority key identifier: 37:E0:35:24:B5:84:7D:BE:AD:00:FE:37:8C:46:AB:D0:CA:70:45:F8
Certificate issuer:       /CN=A91799A0/serialNumber=37E03524B5847DBEAD00FE378C46ABD0CA7045F8
Certificate serial:       038E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-A1JLWEfb6tAP43jEar0MpwRfg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.mft
Manifest number:          0382
Signing time:             Sat 29 Mar 2025 01:07:00 +0000
Manifest this update:     Sat 29 Mar 2025 01:06:59 +0000
Manifest next update:     Sat 05 Apr 2025 01:06:59 +0000
Files and hashes:         1: N-A1JLWEfb6tAP43jEar0MpwRfg.crl (hash: jlCmiipd6IIDPdi3RNTWEH3PyPwWfNVNYXBeh2PaCbA=)
                          2: 99C173847DA711EFBC48DB25C4F9AE02.roa (hash: BrxJSBI7Q6Tw0excD7qGChxBI2yuS7vr/0+QLL4MRIg=)
                          3: B0A47CAE7DA711EFB7190E26C4F9AE02.roa (hash: MnBCnb88Lb1soYhMr2JBZDZOHnyxIxINjkfdJ2fBlW0=)
                          4: 46A569387DA911EFAC4E642AC4F9AE02.roa (hash: f8XNdnN9MpGjh5uhvA20BgKfLLbWC1Eb3g7qFqX+uVY=)
                          5: F39CE41C7C3811EFBF44AF4FC4F9AE02.roa (hash: qYKHA79o/QNNLBRngvTLprJN4A1dHBhKA8ix5QbqNOU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 910 (0x38e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91799A0
        Validity
            Not Before: Mar 29 01:06:59 2025 GMT
            Not After : Apr  5 01:06:59 2025 GMT
        Subject: CN=67e747b4-3fc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3a:a4:15:72:12:f9:4a:84:62:ea:7e:a0:d8:
                    fc:a3:f6:74:88:02:da:22:d8:7c:56:78:3c:c8:96:
                    03:5b:dc:8e:c9:8c:37:4c:22:21:24:59:a6:16:18:
                    df:d1:ea:55:de:ab:12:58:05:37:7b:55:1c:9d:80:
                    92:b2:4b:5b:e3:18:5b:53:2a:48:dc:0b:10:3e:dd:
                    dd:09:81:e1:32:c7:76:a3:aa:87:3a:f4:da:ec:94:
                    f0:02:78:0f:db:47:f3:b5:d1:11:1d:c2:32:6c:1d:
                    82:df:61:fb:d8:9d:dd:15:3d:cd:b0:d6:59:be:38:
                    cb:7d:32:2b:86:cb:bc:e7:3c:02:f4:85:d8:72:99:
                    70:9a:ea:4a:61:14:78:f0:a5:be:5e:fe:0b:d5:33:
                    3b:e6:1b:2e:83:8d:4f:1b:73:d9:f3:4f:d5:23:8a:
                    94:fb:cd:3b:7b:67:04:11:82:f6:d1:0a:68:e0:85:
                    79:7f:01:73:20:f4:6d:fb:0a:a7:c6:d9:89:6d:f2:
                    f0:6e:f7:96:18:2e:bc:e7:40:eb:a4:44:9b:19:73:
                    5d:77:51:53:1e:65:e4:ea:db:d5:10:82:4a:6d:18:
                    4f:4a:44:ad:cc:9a:8f:cc:ab:75:ef:bc:45:57:25:
                    e8:95:1c:00:ac:54:6a:a0:a5:26:30:0a:95:6a:ab:
                    0d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:6E:98:BF:FE:18:75:85:44:8B:8C:47:C4:A5:40:21:2E:28:A2:EB
            X509v3 Authority Key Identifier:
                keyid:37:E0:35:24:B5:84:7D:BE:AD:00:FE:37:8C:46:AB:D0:CA:70:45:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-A1JLWEfb6tAP43jEar0MpwRfg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:6d:30:c4:e3:e2:76:23:cf:a0:6c:21:83:cd:c4:20:07:dc:
         94:14:72:e3:f1:0c:3f:1e:67:b7:0f:a2:63:2a:c5:2f:99:b0:
         ce:64:62:cd:5e:1b:29:12:44:34:fb:f7:24:48:31:a5:5e:0d:
         8e:b5:38:9f:4a:54:74:ac:17:ba:80:7f:b9:48:b1:53:08:30:
         ad:bc:40:ae:3f:1f:a8:41:a0:20:b1:86:1c:57:98:15:e0:a3:
         ab:1b:ff:12:82:9f:d3:e2:ac:0c:a2:38:24:a1:96:88:a5:56:
         6c:65:c8:2b:44:f6:00:d2:2d:9b:dc:8c:7c:7d:31:49:97:37:
         9f:35:93:31:8c:ae:92:28:15:d0:56:fd:12:a0:e8:a8:75:cd:
         44:c7:bd:7c:0f:50:a9:23:63:58:30:35:b5:1f:4f:7f:8d:4d:
         2e:77:13:19:ae:af:9f:0b:e8:97:6c:0e:f4:30:16:34:f5:02:
         29:a7:b6:ef:7e:e1:89:f5:34:a6:f9:14:05:2b:46:5b:35:23:
         26:b7:aa:42:47:0a:6f:f7:c9:e6:da:c5:2a:1b:77:fc:99:cc:
         76:5a:e5:49:45:1f:e9:af:50:74:cf:c7:e5:4f:91:62:98:a1:
         b7:a5:20:77:46:d9:3a:a9:a3:39:af:eb:63:5e:ac:c0:2a:3c:
         70:99:fa:71
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA44wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Nzk5QTAxMTAvBgNVBAUTKDM3RTAzNTI0QjU4NDdEQkVBRDAwRkUzNzhDNDZBQkQw
Q0E3MDQ1RjgwHhcNMjUwMzI5MDEwNjU5WhcNMjUwNDA1MDEwNjU5WjAYMRYwFAYD
VQQDEw02N2U3NDdiNC0zZmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzDqkFXIS+UqEYup+oNj8o/Z0iALaIth8Vng8yJYDW9yOyYw3TCIhJFmmFhjf
0epV3qsSWAU3e1UcnYCSsktb4xhbUypI3AsQPt3dCYHhMsd2o6qHOvTa7JTwAngP
20fztdERHcIybB2C32H72J3dFT3NsNZZvjjLfTIrhsu85zwC9IXYcplwmupKYRR4
8KW+Xv4L1TM75hsug41PG3PZ80/VI4qU+807e2cEEYL20Qpo4IV5fwFzIPRt+wqn
xtmJbfLwbveWGC6850DrpESbGXNdd1FTHmXk6tvVEIJKbRhPSkStzJqPzKt177xF
VyXolRwArFRqoKUmMAqVaqsNNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF1umL/+
GHWFRIuMR8SlQCEuKKLrMB8GA1UdIwQYMBaAFDfgNSS1hH2+rQD+N4xGq9DKcEX4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTlBMC80MEVEQTExRTlB
RTgxMUVDOTc0QjQ5MUNDNEY5QUUwMi9OLUExSkxXRWZiNnRBUDQzakVhcjBNcHdS
ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL04tQTFKTFdFZmI2dEFQNDNqRWFyME1wd1JmZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
OTlBMC80MEVEQTExRTlBRTgxMUVDOTc0QjQ5MUNDNEY5QUUwMi9OLUExSkxXRWZi
NnRBUDQzakVhcjBNcHdSZmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBxbTDE4+J2I8+gbCGDzcQgB9yUFHLj8Qw/Hme3D6JjKsUvmbDOZGLN
XhspEkQ0+/ckSDGlXg2OtTifSlR0rBe6gH+5SLFTCDCtvECuPx+oQaAgsYYcV5gV
4KOrG/8Sgp/T4qwMojgkoZaIpVZsZcgrRPYA0i2b3Ix8fTFJlzefNZMxjK6SKBXQ
Vv0SoOiodc1Ex718D1CpI2NYMDW1H09/jU0udxMZrq+fC+iXbA70MBY09QIpp7bv
fuGJ9TSm+RQFK0ZbNSMmt6pCRwpv98nm2sUqG3f8mcx2WuVJRR/pr1B0z8flT5Fi
mKG3pSB3Rtk6qaM5r+tjXqzAKjxwmfpx
-----END CERTIFICATE-----
Generated at Thu Apr 10 08:51:27 2025 by rpki-client