Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168250/04E7193E422011EABCF54214C4F9AE02/pFoDXWVftHWjT0N_nAqlMhHrs3Y.mft
File:                     pFoDXWVftHWjT0N_nAqlMhHrs3Y.mft (raw, json)
Hash identifier:          TVO5YBC+VZ6ufQebSLfF98hYqTgoC7Zw3jtiWjDJvyI=
Subject key identifier:   FA:22:BE:7D:BA:91:55:12:E2:F0:FD:81:2B:EA:C7:78:85:75:E7:CD
Authority key identifier: A4:5A:03:5D:65:5F:B4:75:A3:4F:43:7F:9C:0A:A5:32:11:EB:B3:76
Certificate issuer:       /CN=A9168250/serialNumber=A45A035D655FB475A34F437F9C0AA53211EBB376
Certificate serial:       0A18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pFoDXWVftHWjT0N_nAqlMhHrs3Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168250/04E7193E422011EABCF54214C4F9AE02/pFoDXWVftHWjT0N_nAqlMhHrs3Y.mft
Manifest number:          0A16
Signing time:             Thu 08 Feb 2024 20:12:27 +0000
Manifest this update:     Thu 08 Feb 2024 20:12:27 +0000
Manifest next update:     Thu 15 Feb 2024 20:12:27 +0000
Files and hashes:         1: pFoDXWVftHWjT0N_nAqlMhHrs3Y.crl (hash: IptANqirzJwoZtkuZxoqkpfPwI9FQgjG5cY3nR+jGnk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2584 (0xa18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168250/serialNumber=A45A035D655FB475A34F437F9C0AA53211EBB376
        Validity
            Not Before: Feb  8 20:12:27 2024 GMT
            Not After : Feb 15 20:12:27 2024 GMT
        Subject: CN=65c535ab-54ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:60:62:e7:a9:f4:3d:28:3b:5f:18:e6:72:3d:
                    43:d9:eb:7b:2b:e4:26:58:5e:a6:79:7f:17:83:66:
                    79:38:3d:ef:01:8d:cb:4e:90:bb:ea:1a:05:ff:b7:
                    be:70:8c:ef:cf:d1:13:16:4e:b5:5c:86:53:2c:1e:
                    3d:61:f0:8f:e1:b8:52:c8:5f:f0:a0:7a:0c:8d:fc:
                    e2:01:5b:ad:d0:4a:69:e3:00:2d:44:e6:85:1b:3d:
                    d5:96:ad:34:df:59:d7:ce:a2:f3:45:0a:f7:2d:79:
                    d7:78:aa:b4:e1:66:03:9c:10:59:59:02:e0:3e:de:
                    5e:17:d8:7c:94:1b:e9:4e:83:06:16:9e:b2:28:90:
                    0d:25:01:d8:a0:52:60:7b:2b:0d:ff:5e:4b:7f:0a:
                    f2:69:0f:83:da:06:53:92:f1:d1:af:10:c9:41:0d:
                    2f:61:10:e6:ab:25:8b:bf:b0:32:51:a7:2a:b3:7b:
                    82:ff:d7:15:f9:b6:21:73:6e:a7:3e:fb:48:de:9e:
                    12:2e:5c:c7:43:97:8c:a9:e0:2f:ba:29:87:98:eb:
                    dc:29:17:71:b5:1e:46:c3:88:af:63:54:12:a8:fc:
                    f3:00:11:2f:0d:9e:ed:66:af:f3:65:65:e3:c9:0e:
                    e1:10:07:a5:ed:8c:de:50:37:f7:f8:22:43:83:51:
                    bc:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:22:BE:7D:BA:91:55:12:E2:F0:FD:81:2B:EA:C7:78:85:75:E7:CD
            X509v3 Authority Key Identifier:
                keyid:A4:5A:03:5D:65:5F:B4:75:A3:4F:43:7F:9C:0A:A5:32:11:EB:B3:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168250/04E7193E422011EABCF54214C4F9AE02/pFoDXWVftHWjT0N_nAqlMhHrs3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pFoDXWVftHWjT0N_nAqlMhHrs3Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168250/04E7193E422011EABCF54214C4F9AE02/pFoDXWVftHWjT0N_nAqlMhHrs3Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:0f:9d:81:5b:e8:8f:15:78:88:16:25:19:bf:e3:ad:09:34:
         fc:3b:57:94:92:3e:df:9b:71:16:0c:58:b2:f7:02:c9:2e:c2:
         43:e7:96:34:01:f1:7a:ca:62:89:c3:ab:15:36:ef:dd:72:c0:
         b0:d3:5e:ff:29:a4:0e:b2:fa:d1:46:dd:d7:06:d3:de:ca:91:
         2a:ac:5a:30:59:31:92:f3:8c:7b:c1:24:2c:c6:1a:a1:be:a4:
         a6:a9:ff:85:f6:bf:ac:67:d3:57:1f:51:30:4d:12:b6:1c:2c:
         59:c3:39:1c:9f:31:4a:64:ef:88:4a:51:c9:cd:49:af:2a:ab:
         0e:8a:c3:60:af:42:9e:f5:54:03:97:c6:1c:1c:b3:c9:31:36:
         90:0b:6d:2b:54:39:a3:fb:b6:55:17:ce:a2:09:17:bf:8b:39:
         c5:c6:a5:2e:f9:ce:73:1b:1a:6f:64:c7:f4:9c:89:40:bb:29:
         66:41:fe:fc:fc:6b:6d:63:cd:a4:9e:8c:f3:66:b9:e4:95:06:
         ed:03:a1:e9:22:ab:c6:c9:23:58:53:cc:07:b2:b1:f8:af:dd:
         96:fc:9a:45:7a:5d:b1:2c:f0:0c:8f:ae:05:6f:75:6f:cf:a6:
         ec:a0:50:40:39:f2:ac:cc:e3:9d:84:0b:07:e7:b4:23:09:66:
         a9:2d:ab:20
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICChgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjgyNTAxMTAvBgNVBAUTKEE0NUEwMzVENjU1RkI0NzVBMzRGNDM3RjlDMEFBNTMy
MTFFQkIzNzYwHhcNMjQwMjA4MjAxMjI3WhcNMjQwMjE1MjAxMjI3WjAYMRYwFAYD
VQQDEw02NWM1MzVhYi01NGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxmBi56n0PSg7Xxjmcj1D2et7K+QmWF6meX8Xg2Z5OD3vAY3LTpC76hoF/7e+
cIzvz9ETFk61XIZTLB49YfCP4bhSyF/woHoMjfziAVut0Epp4wAtROaFGz3Vlq00
31nXzqLzRQr3LXnXeKq04WYDnBBZWQLgPt5eF9h8lBvpToMGFp6yKJANJQHYoFJg
eysN/15LfwryaQ+D2gZTkvHRrxDJQQ0vYRDmqyWLv7AyUacqs3uC/9cV+bYhc26n
PvtI3p4SLlzHQ5eMqeAvuimHmOvcKRdxtR5Gw4ivY1QSqPzzABEvDZ7tZq/zZWXj
yQ7hEAel7YzeUDf3+CJDg1G8eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPoivn26
kVUS4vD9gSvqx3iFdefNMB8GA1UdIwQYMBaAFKRaA11lX7R1o09Df5wKpTIR67N2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODI1MC8wNEU3MTkzRTQy
MjAxMUVBQkNGNTQyMTRDNEY5QUUwMi9wRm9EWFdWZnRIV2pUME5fbkFxbE1oSHJz
M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BGb0RYV1ZmdEhXalQwTl9uQXFsTWhIcnMzWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
ODI1MC8wNEU3MTkzRTQyMjAxMUVBQkNGNTQyMTRDNEY5QUUwMi9wRm9EWFdWZnRI
V2pUME5fbkFxbE1oSHJzM1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAHD52BW+iPFXiIFiUZv+OtCTT8O1eUkj7fm3EWDFiy9wLJLsJD55Y0
AfF6ymKJw6sVNu/dcsCw017/KaQOsvrRRt3XBtPeypEqrFowWTGS84x7wSQsxhqh
vqSmqf+F9r+sZ9NXH1EwTRK2HCxZwzkcnzFKZO+ISlHJzUmvKqsOisNgr0Ke9VQD
l8YcHLPJMTaQC20rVDmj+7ZVF86iCRe/iznFxqUu+c5zGxpvZMf0nIlAuylmQf78
/GttY82knozzZrnklQbtA6HpIqvGySNYU8wHsrH4r92W/JpFel2xLPAMj64Fb3Vv
z6bsoFBAOfKszOOdhAsH57QjCWapLasg
-----END CERTIFICATE-----
Generated at Fri Feb 9 18:37:57 2024 by rpki-client on console-fra.rpki-client.org