Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91105F6/E820026AB3FB11EDBBDB3022C4F9AE02/acVuJtdk8a5PRoYo5XUx03NKwCc.mft
File:                     acVuJtdk8a5PRoYo5XUx03NKwCc.mft (raw, json)
Hash identifier:          DkEW7Ivx+BUM5TV2iiNiIOTaNHp69GkQiHynpM9xFto=
Subject key identifier:   91:B4:56:2E:9F:FF:32:BF:8B:50:0E:D0:11:4B:81:13:E3:E2:DE:0D
Authority key identifier: 69:C5:6E:26:D7:64:F1:AE:4F:46:86:28:E5:75:31:D3:73:4A:C0:27
Certificate issuer:       /CN=A91105F6/serialNumber=69C56E26D764F1AE4F468628E57531D3734AC027
Certificate serial:       0179
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acVuJtdk8a5PRoYo5XUx03NKwCc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91105F6/E820026AB3FB11EDBBDB3022C4F9AE02/acVuJtdk8a5PRoYo5XUx03NKwCc.mft
Manifest number:          0171
Signing time:             Fri 31 Jan 2025 03:07:51 +0000
Manifest this update:     Fri 31 Jan 2025 03:07:50 +0000
Manifest next update:     Fri 07 Feb 2025 03:07:50 +0000
Files and hashes:         1: acVuJtdk8a5PRoYo5XUx03NKwCc.crl (hash: 3+ithQ07ZdHjdtHRoKpnR0TfkGVyqqZd82r0fT0tg0Y=)
                          2: 3D93BEB65E6611EEA526DB11C4F9AE02.roa (hash: rj/BOYyadeyH55DESWaHfqSsiGriCli8KPof7zAigo4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 377 (0x179)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91105F6/serialNumber=69C56E26D764F1AE4F468628E57531D3734AC027
        Validity
            Not Before: Jan 31 03:07:50 2025 GMT
            Not After : Feb  7 03:07:50 2025 GMT
        Subject: CN=679c3e86-9359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:9c:4f:54:1c:26:57:d2:c5:7d:1e:a0:61:bd:
                    b8:9c:14:9e:94:db:3a:01:95:89:13:55:d2:63:d5:
                    db:4a:f9:ec:d9:8c:84:73:ed:cb:48:93:92:42:e2:
                    4c:32:be:32:5f:7f:78:f1:40:2b:31:da:00:f1:13:
                    51:3d:cf:84:41:15:3b:dc:5b:f6:1f:2e:68:5a:83:
                    25:d6:0b:93:6d:7c:2c:e0:f4:62:26:16:b4:bf:a6:
                    e5:19:c2:b8:26:76:35:8d:0f:73:d5:cc:e2:4b:42:
                    51:bc:be:cd:09:37:21:e1:95:90:e4:bf:fb:c7:14:
                    00:17:60:e4:41:3b:b5:42:26:67:22:ee:36:7b:eb:
                    71:5a:ac:e7:b9:ed:1e:cd:2e:29:69:40:ae:b0:5c:
                    33:89:c5:cc:7f:0d:05:f1:31:c8:00:03:d4:e6:60:
                    5e:22:51:0e:29:cc:5c:6f:c2:3e:89:65:8f:39:cf:
                    5d:36:1c:1f:94:8c:95:53:80:98:fe:c9:32:b5:6b:
                    b5:2a:ae:ad:04:5b:96:b6:1c:1a:3e:a4:0e:e6:b8:
                    3f:fe:1c:a6:a1:b9:55:8c:b9:af:01:a0:64:1c:29:
                    38:16:27:87:7e:8d:8e:ec:d7:36:fb:03:7a:51:d2:
                    85:06:60:eb:79:73:1e:87:93:66:44:7b:96:a8:df:
                    6b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B4:56:2E:9F:FF:32:BF:8B:50:0E:D0:11:4B:81:13:E3:E2:DE:0D
            X509v3 Authority Key Identifier:
                keyid:69:C5:6E:26:D7:64:F1:AE:4F:46:86:28:E5:75:31:D3:73:4A:C0:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91105F6/E820026AB3FB11EDBBDB3022C4F9AE02/acVuJtdk8a5PRoYo5XUx03NKwCc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acVuJtdk8a5PRoYo5XUx03NKwCc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91105F6/E820026AB3FB11EDBBDB3022C4F9AE02/acVuJtdk8a5PRoYo5XUx03NKwCc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:ee:bb:7d:27:19:64:c2:de:cb:16:ea:66:0a:13:4d:cb:51:
         84:42:f5:33:56:86:2f:a2:ed:8d:82:53:f1:2a:d1:61:ec:c5:
         80:56:98:15:89:dc:8a:e0:71:ff:44:b7:1e:b1:9a:5d:23:94:
         46:00:d5:b1:20:d1:22:6c:e0:98:c2:a4:d2:33:ef:f5:05:a5:
         aa:d7:c1:ca:d3:b1:af:c4:b3:06:d4:25:27:74:e5:3f:45:d7:
         ed:2f:a2:14:cf:d3:5a:09:23:66:63:a1:88:df:5c:93:e2:4d:
         3f:76:03:cd:65:0f:f9:0e:b6:ff:ef:90:e1:ab:5c:31:b1:ee:
         51:c5:d7:9b:10:06:16:59:ef:f9:c7:a9:57:b0:8c:a1:92:5c:
         69:94:64:28:f7:f1:d4:8a:72:78:b3:a8:80:f8:50:10:cb:ed:
         32:e7:d2:c8:22:b2:34:c4:46:79:c5:3d:ce:ac:69:96:a9:b7:
         60:93:7c:e7:61:5e:58:ea:5e:99:1a:28:c5:1a:1a:ad:aa:46:
         85:d9:e9:77:74:46:5e:b7:b6:4c:93:e3:08:af:4f:85:fd:e6:
         5f:ef:69:24:04:c4:35:59:16:0a:22:23:c9:66:51:8c:b4:6f:
         5a:af:6c:2b:9b:51:fa:0b:49:d2:41:04:25:78:6a:eb:3e:3d:
         f5:a8:cd:b0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTA1RjYxMTAvBgNVBAUTKDY5QzU2RTI2RDc2NEYxQUU0RjQ2ODYyOEU1NzUzMUQz
NzM0QUMwMjcwHhcNMjUwMTMxMDMwNzUwWhcNMjUwMjA3MDMwNzUwWjAYMRYwFAYD
VQQDEw02NzljM2U4Ni05MzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9JxPVBwmV9LFfR6gYb24nBSelNs6AZWJE1XSY9XbSvns2YyEc+3LSJOSQuJM
Mr4yX3948UArMdoA8RNRPc+EQRU73Fv2Hy5oWoMl1guTbXws4PRiJha0v6blGcK4
JnY1jQ9z1cziS0JRvL7NCTch4ZWQ5L/7xxQAF2DkQTu1QiZnIu42e+txWqznue0e
zS4paUCusFwzicXMfw0F8THIAAPU5mBeIlEOKcxcb8I+iWWPOc9dNhwflIyVU4CY
/skytWu1Kq6tBFuWthwaPqQO5rg//hymoblVjLmvAaBkHCk4FieHfo2O7Nc2+wN6
UdKFBmDreXMeh5NmRHuWqN9rOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJG0Vi6f
/zK/i1AO0BFLgRPj4t4NMB8GA1UdIwQYMBaAFGnFbibXZPGuT0aGKOV1MdNzSsAn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDVGNi9FODIwMDI2QUIz
RkIxMUVEQkJEQjMwMjJDNEY5QUUwMi9hY1Z1SnRkazhhNVBSb1lvNVhVeDAzTkt3
Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FjVnVKdGRrOGE1UFJvWW81WFV4MDNOS3dDYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MDVGNi9FODIwMDI2QUIzRkIxMUVEQkJEQjMwMjJDNEY5QUUwMi9hY1Z1SnRkazhh
NVBSb1lvNVhVeDAzTkt3Q2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC07rt9Jxlkwt7LFupmChNNy1GEQvUzVoYvou2NglPxKtFh7MWAVpgV
idyK4HH/RLcesZpdI5RGANWxINEibOCYwqTSM+/1BaWq18HK07GvxLMG1CUndOU/
RdftL6IUz9NaCSNmY6GI31yT4k0/dgPNZQ/5Drb/75Dhq1wxse5RxdebEAYWWe/5
x6lXsIyhklxplGQo9/HUinJ4s6iA+FAQy+0y59LIIrI0xEZ5xT3OrGmWqbdgk3zn
YV5Y6l6ZGijFGhqtqkaF2el3dEZet7ZMk+MIr0+F/eZf72kkBMQ1WRYKIiPJZlGM
tG9ar2wrm1H6C0nSQQQleGrrPj31qM2w
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:21:32 2025 by rpki-client