Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft
File:                     LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft (raw, json)
Hash identifier:          wH63KZbyoBaBlbLC/nD/E24HHJa5BenV0nd4Ig1oJZA=
Subject key identifier:   26:1B:22:EC:10:7D:BA:59:C9:EC:72:CA:83:82:D1:BE:61:4D:27:36
Authority key identifier: 2D:A2:51:C1:1A:C6:88:14:F5:27:F2:2E:55:DE:9A:C8:C5:7F:D6:6C
Certificate issuer:       /CN=A9191436/serialNumber=2DA251C11AC68814F527F22E55DE9AC8C57FD66C
Certificate serial:       132B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft
Manifest number:          12D4
Signing time:             Fri 28 Mar 2025 17:13:24 +0000
Manifest this update:     Fri 28 Mar 2025 17:13:24 +0000
Manifest next update:     Fri 04 Apr 2025 17:13:24 +0000
Files and hashes:         1: LaJRwRrGiBT1J_IuVd6ayMV_1mw.crl (hash: hhTkygZjw7jC0oEf3za1MTkDNf0vX6j8r4cjdNZdVFQ=)
                          2: 7302617AC78E11E8BC20B719C4F9AE02.roa (hash: sjn+Ca3CIoVaW6VbJ0cVQY8YczhjL0b0Si8hIFo/7wg=)
                          3: ED7D926622C511EE8579CC72C4F9AE02.roa (hash: ijr6UDNyvj4aysISbjMaLFQ8kk4sQ7342WXhcB82+Yo=)
                          4: 4AC75BA8FFE311EBB4FA4965C4F9AE02.roa (hash: jOyHfCeGHLkQkWPLP0TxF4XakIxFwaSt07hLgc5fNhY=)
                          5: 0396C48E5E7011EDAD328E21C4F9AE02.roa (hash: vKpj3gtlk/oArus3QVt8qMIl2rVV8ZR8fTIi0bGHkes=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4907 (0x132b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191436
        Validity
            Not Before: Mar 28 17:13:24 2025 GMT
            Not After : Apr  4 17:13:24 2025 GMT
        Subject: CN=67e6d8b4-23bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6a:f5:00:aa:4e:5f:12:4c:c5:20:92:25:67:
                    5b:ae:44:b9:b6:b2:49:42:d3:1b:1f:7e:99:11:de:
                    35:f5:72:92:8a:fa:5a:0d:d0:f6:a1:8c:e3:5a:99:
                    dc:5b:30:b2:a9:79:0a:a7:4b:3c:76:ce:a1:aa:92:
                    49:19:2e:75:cf:9f:53:73:2c:ef:88:d6:39:1d:b7:
                    e4:ec:20:e2:d1:ba:a5:17:c8:b3:34:96:84:45:52:
                    96:33:2e:e8:29:f5:b9:ea:f4:4f:d0:37:8f:21:7c:
                    49:6b:49:24:7b:1f:1c:36:40:3d:b1:8c:cb:a6:a9:
                    73:04:c7:b5:19:bb:6a:a2:bf:eb:bb:e8:f8:75:e7:
                    20:d0:b9:a2:5a:d0:42:48:8a:e6:66:96:68:72:27:
                    17:0c:4d:02:c0:bb:7d:c9:69:d6:b5:9a:02:c1:26:
                    be:b8:69:8d:df:8c:71:27:e2:81:dc:aa:7d:3d:99:
                    09:33:6f:31:37:f4:2c:55:90:14:45:36:57:64:cb:
                    20:10:32:23:1c:31:1f:db:3e:b3:c4:b7:c4:6d:1a:
                    ce:7a:68:6d:da:8a:6f:52:e7:df:ba:55:15:14:da:
                    a1:04:f6:75:3d:cb:d4:bb:d0:2b:ab:5c:d5:03:b5:
                    e3:62:44:b6:65:4a:0e:ae:ad:c3:68:70:4a:c9:16:
                    b5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:1B:22:EC:10:7D:BA:59:C9:EC:72:CA:83:82:D1:BE:61:4D:27:36
            X509v3 Authority Key Identifier:
                keyid:2D:A2:51:C1:1A:C6:88:14:F5:27:F2:2E:55:DE:9A:C8:C5:7F:D6:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:7e:25:f4:77:55:29:d9:fa:9e:4e:23:9a:7f:d3:f9:e8:f4:
         63:a0:db:34:15:3a:5d:34:44:52:35:4e:4a:89:10:61:0b:b4:
         95:e7:cd:37:a4:d1:ca:43:8d:81:c0:5b:ff:e7:d6:8f:d9:01:
         00:7c:52:76:df:48:d5:fa:eb:aa:26:07:f5:65:bb:ad:58:86:
         3b:53:4c:68:3f:23:f4:37:b6:9a:d6:64:7d:57:ca:97:bb:c7:
         75:33:8f:a7:bc:17:48:8c:14:40:95:46:40:24:f9:c3:50:71:
         05:bd:53:70:88:e2:e5:d2:0d:ff:64:f5:90:4a:ce:7f:9c:92:
         2f:35:0d:e6:a1:f5:39:b4:ba:5b:59:19:6a:cd:1c:24:ac:85:
         fd:33:df:49:5d:95:ce:ec:c9:3c:1d:94:d8:e9:2d:f7:87:14:
         d8:79:37:75:ea:3b:29:1c:46:2f:e2:17:ef:9e:2f:f8:6c:f6:
         d2:01:e1:23:a5:fb:84:2c:37:9b:87:d7:9e:ad:7f:a7:87:4b:
         2b:1b:a6:11:bc:7b:33:99:0d:b7:6a:97:be:eb:22:0d:d0:46:
         8b:10:c9:77:e6:eb:a2:72:3f:91:d3:d9:f3:5d:e9:0d:6d:57:
         6b:8c:94:5b:2e:1a:6a:4c:f4:af:f5:48:05:82:c1:27:e0:06:
         fa:bb:d3:8d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEyswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTE0MzYxMTAvBgNVBAUTKDJEQTI1MUMxMUFDNjg4MTRGNTI3RjIyRTU1REU5QUM4
QzU3RkQ2NkMwHhcNMjUwMzI4MTcxMzI0WhcNMjUwNDA0MTcxMzI0WjAYMRYwFAYD
VQQDEw02N2U2ZDhiNC0yM2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArWr1AKpOXxJMxSCSJWdbrkS5trJJQtMbH36ZEd419XKSivpaDdD2oYzjWpnc
WzCyqXkKp0s8ds6hqpJJGS51z59TcyzviNY5Hbfk7CDi0bqlF8izNJaERVKWMy7o
KfW56vRP0DePIXxJa0kkex8cNkA9sYzLpqlzBMe1Gbtqor/ru+j4decg0LmiWtBC
SIrmZpZocicXDE0CwLt9yWnWtZoCwSa+uGmN34xxJ+KB3Kp9PZkJM28xN/QsVZAU
RTZXZMsgEDIjHDEf2z6zxLfEbRrOemht2opvUuffulUVFNqhBPZ1PcvUu9Arq1zV
A7XjYkS2ZUoOrq3DaHBKyRa1sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCYbIuwQ
fbpZyexyyoOC0b5hTSc2MB8GA1UdIwQYMBaAFC2iUcEaxogU9SfyLlXemsjFf9Zs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTQzNi9BQUI4MDJFOEM3
OEMxMUU4QTc2Q0Q5MTRDNEY5QUUwMi9MYUpSd1JyR2lCVDFKX0l1VmQ2YXlNVl8x
bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xhSlJ3UnJHaUJUMUpfSXVWZDZheU1WXzFtdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MTQzNi9BQUI4MDJFOEM3OEMxMUU4QTc2Q0Q5MTRDNEY5QUUwMi9MYUpSd1JyR2lC
VDFKX0l1VmQ2YXlNVl8xbXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBYfiX0d1Up2fqeTiOaf9P56PRjoNs0FTpdNERSNU5KiRBhC7SV5803
pNHKQ42BwFv/59aP2QEAfFJ230jV+uuqJgf1ZbutWIY7U0xoPyP0N7aa1mR9V8qX
u8d1M4+nvBdIjBRAlUZAJPnDUHEFvVNwiOLl0g3/ZPWQSs5/nJIvNQ3mofU5tLpb
WRlqzRwkrIX9M99JXZXO7Mk8HZTY6S33hxTYeTd16jspHEYv4hfvni/4bPbSAeEj
pfuELDebh9eerX+nh0srG6YRvHszmQ23ape+6yIN0EaLEMl35uuicj+R09nzXekN
bVdrjJRbLhpqTPSv9UgFgsEn4Ab6u9ON
-----END CERTIFICATE-----