Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.mft
File:                     gFLXiRiFOIg0vD1ozrIclvdiXmc.mft (raw, json)
Hash identifier:          p/S6Kb84/qKJdr4fcRX82Ynabj7UxaH1w2FtupS4NyE=
Subject key identifier:   66:16:65:91:43:00:41:11:55:30:2C:B2:CB:32:F2:E5:2A:2E:EB:5D
Authority key identifier: 80:52:D7:89:18:85:38:88:34:BC:3D:68:CE:B2:1C:96:F7:62:5E:67
Certificate issuer:       /CN=A91CBE89/serialNumber=8052D7891885388834BC3D68CEB21C96F7625E67
Certificate serial:       1E38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFLXiRiFOIg0vD1ozrIclvdiXmc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.mft
Manifest number:          1E37
Signing time:             Fri 28 Mar 2025 16:10:48 +0000
Manifest this update:     Fri 28 Mar 2025 16:10:47 +0000
Manifest next update:     Fri 04 Apr 2025 16:10:47 +0000
Files and hashes:         1: gFLXiRiFOIg0vD1ozrIclvdiXmc.crl (hash: DwKVJWkDMMmNxzcoPZT9NojfElSSv65OxSO5ZYI8kpo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7736 (0x1e38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CBE89
        Validity
            Not Before: Mar 28 16:10:47 2025 GMT
            Not After : Apr  4 16:10:47 2025 GMT
        Subject: CN=67e6ca07-29a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:cd:1e:7b:a7:47:c3:b0:97:c8:9a:2e:8b:f8:
                    2f:51:21:38:1a:72:b9:58:35:4a:c8:2f:fb:82:93:
                    84:21:64:0f:8a:f0:51:48:89:00:22:31:94:cb:2d:
                    e1:c5:52:0a:05:7d:5e:14:70:76:af:f3:48:fb:3b:
                    98:0d:18:e4:ae:b5:82:86:77:ac:47:37:03:bc:4a:
                    d6:f1:36:8b:23:3f:dc:b8:f3:65:17:27:c2:e7:dc:
                    91:32:9b:f2:41:93:71:a9:bc:1d:5e:df:79:21:99:
                    e7:63:12:dd:b9:fd:22:d8:21:03:7c:52:97:6a:35:
                    65:c5:9f:9a:69:45:1c:c3:c6:b6:b0:81:85:0b:9a:
                    d2:04:b7:a1:31:29:e3:d7:37:3a:ed:9b:94:fb:6f:
                    94:3b:c0:ca:df:29:96:90:28:1f:3f:65:2d:5e:72:
                    06:ba:07:7c:22:83:87:2d:8d:29:a0:70:5b:0c:32:
                    ce:4e:a4:da:08:20:d2:ad:14:a6:a6:dd:10:db:18:
                    0d:92:39:ed:93:78:ee:f0:14:4b:15:5a:f5:17:d8:
                    81:f7:b5:66:e2:f5:d6:d2:5a:61:c4:fc:9a:20:e4:
                    ed:a3:ae:2e:25:98:79:aa:cc:50:7e:d2:01:a7:9c:
                    96:14:7e:0b:cc:d8:f7:a2:c1:c8:95:6b:d5:88:58:
                    5e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:16:65:91:43:00:41:11:55:30:2C:B2:CB:32:F2:E5:2A:2E:EB:5D
            X509v3 Authority Key Identifier:
                keyid:80:52:D7:89:18:85:38:88:34:BC:3D:68:CE:B2:1C:96:F7:62:5E:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFLXiRiFOIg0vD1ozrIclvdiXmc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:ea:41:c8:14:e6:97:bc:95:0f:70:bb:13:81:a9:22:8a:3d:
         93:fb:ad:ba:c1:d4:ca:73:4f:59:52:19:66:c5:23:e3:0d:ee:
         17:42:f2:e3:b7:08:d7:75:38:02:78:62:55:c3:1f:d1:ab:85:
         7e:89:ec:e4:b7:4a:1a:76:be:25:bb:92:7b:ed:8e:63:bb:67:
         72:47:79:18:dd:02:3c:b4:7c:fc:94:e1:7c:f7:f7:a6:cd:c9:
         69:7a:b2:cf:e7:78:df:24:9f:b1:c7:72:02:5d:a6:65:43:4b:
         75:4a:d8:6b:ab:22:3e:0c:b7:c8:a4:ad:77:dc:e3:34:a1:42:
         ec:4b:85:0e:90:b9:f9:36:a6:a7:24:03:df:04:2c:aa:99:94:
         08:6c:06:10:49:01:64:54:ed:48:bd:0c:57:2d:ba:b2:76:f3:
         5c:40:75:bc:fc:01:5d:7c:bc:fb:ce:18:c2:85:d5:c1:f0:78:
         87:25:f8:5b:bf:cb:3f:c7:76:dc:60:b5:75:01:f8:f3:4c:12:
         75:d0:89:29:4c:b4:4a:44:56:9a:de:a7:f4:2f:16:b7:a0:3f:
         6b:69:68:21:55:b2:10:db:1b:39:1b:85:d8:97:21:49:e0:f6:
         8d:83:6a:44:d6:ab:91:2d:a0:04:c0:02:39:5f:43:1c:05:58:
         fb:af:e4:9a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICHjgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0JFODkxMTAvBgNVBAUTKDgwNTJENzg5MTg4NTM4ODgzNEJDM0Q2OENFQjIxQzk2
Rjc2MjVFNjcwHhcNMjUwMzI4MTYxMDQ3WhcNMjUwNDA0MTYxMDQ3WjAYMRYwFAYD
VQQDEw02N2U2Y2EwNy0yOWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAk80ee6dHw7CXyJoui/gvUSE4GnK5WDVKyC/7gpOEIWQPivBRSIkAIjGUyy3h
xVIKBX1eFHB2r/NI+zuYDRjkrrWChnesRzcDvErW8TaLIz/cuPNlFyfC59yRMpvy
QZNxqbwdXt95IZnnYxLduf0i2CEDfFKXajVlxZ+aaUUcw8a2sIGFC5rSBLehMSnj
1zc67ZuU+2+UO8DK3ymWkCgfP2UtXnIGugd8IoOHLY0poHBbDDLOTqTaCCDSrRSm
pt0Q2xgNkjntk3ju8BRLFVr1F9iB97Vm4vXW0lphxPyaIOTto64uJZh5qsxQftIB
p5yWFH4LzNj3osHIlWvViFhe9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGYWZZFD
AEERVTAssssy8uUqLutdMB8GA1UdIwQYMBaAFIBS14kYhTiINLw9aM6yHJb3Yl5n
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkU4OS9GMjcyNkExODc2
M0MxMUU2QjAxRTA4NTlDNEY5QUUwMi9nRkxYaVJpRk9JZzB2RDFvenJJY2x2ZGlY
bWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dGTFhpUmlGT0lnMHZEMW96ckljbHZkaVhtYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QkU4OS9GMjcyNkExODc2M0MxMUU2QjAxRTA4NTlDNEY5QUUwMi9nRkxYaVJpRk9J
ZzB2RDFvenJJY2x2ZGlYbWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAa6kHIFOaXvJUPcLsTgakiij2T+626wdTKc09ZUhlmxSPjDe4XQvLj
twjXdTgCeGJVwx/Rq4V+iezkt0oadr4lu5J77Y5ju2dyR3kY3QI8tHz8lOF89/em
zclperLP53jfJJ+xx3ICXaZlQ0t1SthrqyI+DLfIpK133OM0oULsS4UOkLn5Nqan
JAPfBCyqmZQIbAYQSQFkVO1IvQxXLbqydvNcQHW8/AFdfLz7zhjChdXB8HiHJfhb
v8s/x3bcYLV1AfjzTBJ10IkpTLRKRFaa3qf0Lxa3oD9raWghVbIQ2xs5G4XYlyFJ
4PaNg2pE1quRLaAEwAI5X0McBVj7r+Sa
-----END CERTIFICATE-----
Generated at Fri Apr 11 06:46:31 2025 by rpki-client