Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C032/F00CD4C6011D11ED85B34173C4F9AE02/111EaCQGsLPni8UoSlQnmx4__5Q.mft
File:                     111EaCQGsLPni8UoSlQnmx4__5Q.mft (raw, json)
Hash identifier:          ZXhRCIAXgL58Xk8ZD80WmBlm5IgC6SAiEvL53uhyLc8=
Subject key identifier:   7D:0F:5D:A5:F5:0D:32:02:D8:CA:DA:D0:44:84:AC:B8:54:8F:BE:BA
Authority key identifier: D7:5D:44:68:24:06:B0:B3:E7:8B:C5:28:4A:54:27:9B:1E:3F:FF:94
Certificate issuer:       /CN=A916C032/serialNumber=D75D44682406B0B3E78BC5284A54279B1E3FFF94
Certificate serial:       022D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/111EaCQGsLPni8UoSlQnmx4__5Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C032/F00CD4C6011D11ED85B34173C4F9AE02/111EaCQGsLPni8UoSlQnmx4__5Q.mft
Manifest number:          0224
Signing time:             Mon 23 Sep 2024 01:34:42 +0000
Manifest this update:     Mon 23 Sep 2024 01:34:42 +0000
Manifest next update:     Mon 30 Sep 2024 01:34:42 +0000
Files and hashes:         1: 111EaCQGsLPni8UoSlQnmx4__5Q.crl (hash: U4IEGXO7KwyDvYqLQ2DAh7t56+OyVLsmAeW0dmLvDCA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 557 (0x22d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C032/serialNumber=D75D44682406B0B3E78BC5284A54279B1E3FFF94
        Validity
            Not Before: Sep 23 01:34:42 2024 GMT
            Not After : Sep 30 01:34:42 2024 GMT
        Subject: CN=66f0c5b2-f8c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:89:70:77:0b:15:8b:05:f1:e1:f9:15:ef:15:
                    34:67:d6:c1:36:8d:71:dd:88:02:a1:57:ee:16:1a:
                    3f:18:79:52:0e:80:03:9b:3f:17:98:77:0c:da:c3:
                    fb:96:0f:36:24:77:ab:cd:e5:48:6b:9a:76:d2:a7:
                    c1:2f:74:22:2b:a8:da:70:28:60:a6:b3:21:16:f0:
                    c8:4a:74:f6:f6:6e:58:45:f2:f5:93:d4:cd:a5:2a:
                    8c:0f:e9:24:a0:28:b1:ba:88:f8:0f:12:3b:b7:d5:
                    76:18:77:e2:cf:e2:de:ae:44:2e:e2:e7:79:c7:51:
                    8b:de:31:bd:50:a2:3c:0d:6c:af:17:8b:61:94:e1:
                    d1:0f:63:47:65:6f:e9:f3:c8:a9:b6:11:7a:48:e9:
                    fb:43:da:0f:a5:b5:01:21:03:eb:14:47:a5:e8:91:
                    4a:bf:75:e4:71:da:37:58:9c:b7:8f:02:33:05:65:
                    8a:db:6d:bb:e7:9d:fd:32:2f:67:bd:16:d4:0d:56:
                    b3:97:4e:10:88:be:38:b6:18:4b:b6:bb:5d:65:51:
                    62:7a:ae:dc:4d:45:f2:6e:0b:80:42:17:da:f8:8b:
                    15:ac:49:6e:6b:c1:fe:17:3e:25:de:52:77:40:50:
                    ff:c1:e5:d5:78:57:33:8f:fa:87:49:6c:72:b8:d0:
                    1d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:0F:5D:A5:F5:0D:32:02:D8:CA:DA:D0:44:84:AC:B8:54:8F:BE:BA
            X509v3 Authority Key Identifier:
                keyid:D7:5D:44:68:24:06:B0:B3:E7:8B:C5:28:4A:54:27:9B:1E:3F:FF:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C032/F00CD4C6011D11ED85B34173C4F9AE02/111EaCQGsLPni8UoSlQnmx4__5Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/111EaCQGsLPni8UoSlQnmx4__5Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C032/F00CD4C6011D11ED85B34173C4F9AE02/111EaCQGsLPni8UoSlQnmx4__5Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:8c:4b:57:6d:2a:1f:34:e3:0c:a9:48:46:e8:fd:1f:04:87:
         9a:b1:b7:50:9f:d0:41:3c:f6:bb:5a:53:8d:ee:e8:f6:d7:ac:
         89:1c:f2:21:d7:6b:1f:ea:74:f1:ed:6d:0d:a7:8f:cd:a9:37:
         4e:ba:eb:de:79:c9:d3:3e:1b:d7:25:ef:bf:8a:1a:e7:35:06:
         57:e8:85:f5:e5:90:96:aa:3c:de:07:49:6b:59:af:b1:f1:96:
         b9:37:b9:3a:f2:aa:be:f5:02:6e:9e:a4:51:98:e4:d3:76:02:
         82:db:e6:d3:d2:24:83:4a:13:9d:5e:98:20:d1:3d:00:15:d1:
         4f:3b:dd:ec:76:33:4b:a1:54:54:9c:d9:14:b4:c2:eb:21:b8:
         85:a3:99:62:17:e8:8f:50:86:ec:58:29:18:bd:de:40:a2:82:
         80:d9:44:bd:1f:d7:69:16:82:ed:b2:08:c7:46:b4:04:88:9c:
         a6:64:e8:c9:75:2a:a7:33:50:53:42:4c:bc:91:66:8f:a8:c1:
         b4:aa:da:ca:19:02:57:97:c2:f4:3b:73:2b:23:40:89:a5:26:
         d9:be:cd:cc:d4:da:56:b8:af:cc:37:d6:d8:96:28:68:cd:41:
         53:c1:85:ed:e2:06:dd:5f:ac:5b:77:c8:82:11:ef:6a:ea:c7:
         05:e0:bc:f8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkMwMzIxMTAvBgNVBAUTKEQ3NUQ0NDY4MjQwNkIwQjNFNzhCQzUyODRBNTQyNzlC
MUUzRkZGOTQwHhcNMjQwOTIzMDEzNDQyWhcNMjQwOTMwMDEzNDQyWjAYMRYwFAYD
VQQDEw02NmYwYzViMi1mOGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmIlwdwsViwXx4fkV7xU0Z9bBNo1x3YgCoVfuFho/GHlSDoADmz8XmHcM2sP7
lg82JHerzeVIa5p20qfBL3QiK6jacChgprMhFvDISnT29m5YRfL1k9TNpSqMD+kk
oCixuoj4DxI7t9V2GHfiz+LerkQu4ud5x1GL3jG9UKI8DWyvF4thlOHRD2NHZW/p
88ipthF6SOn7Q9oPpbUBIQPrFEel6JFKv3Xkcdo3WJy3jwIzBWWK22275539Mi9n
vRbUDVazl04QiL44thhLtrtdZVFieq7cTUXybguAQhfa+IsVrElua8H+Fz4l3lJ3
QFD/weXVeFczj/qHSWxyuNAd4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH0PXaX1
DTIC2Mra0ESErLhUj766MB8GA1UdIwQYMBaAFNddRGgkBrCz54vFKEpUJ5seP/+U
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzAzMi9GMDBDRDRDNjAx
MUQxMUVEODVCMzQxNzNDNEY5QUUwMi8xMTFFYUNRR3NMUG5pOFVvU2xRbm14NF9f
NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzExMUVhQ1FHc0xQbmk4VW9TbFFubXg0X181US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QzAzMi9GMDBDRDRDNjAxMUQxMUVEODVCMzQxNzNDNEY5QUUwMi8xMTFFYUNRR3NM
UG5pOFVvU2xRbm14NF9fNVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBpjEtXbSofNOMMqUhG6P0fBIeasbdQn9BBPPa7WlON7uj216yJHPIh
12sf6nTx7W0Np4/NqTdOuuveecnTPhvXJe+/ihrnNQZX6IX15ZCWqjzeB0lrWa+x
8Za5N7k68qq+9QJunqRRmOTTdgKC2+bT0iSDShOdXpgg0T0AFdFPO93sdjNLoVRU
nNkUtMLrIbiFo5liF+iPUIbsWCkYvd5AooKA2US9H9dpFoLtsgjHRrQEiJymZOjJ
dSqnM1BTQky8kWaPqMG0qtrKGQJXl8L0O3MrI0CJpSbZvs3M1NpWuK/MN9bYliho
zUFTwYXt4gbdX6xbd8iCEe9q6scF4Lz4
-----END CERTIFICATE-----