Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.mft
File:                     lS9xLfEYQSCKO0qHRiDFn-7XcLA.mft (raw, json)
Hash identifier:          ttwzgKj9RzNkiqp8lS+5K0wodMtTN6D4qXuWTWq+BDo=
Subject key identifier:   15:F4:96:73:BD:07:08:CE:AB:48:8E:14:C2:12:06:8F:68:D1:5F:C6
Authority key identifier: 95:2F:71:2D:F1:18:41:20:8A:3B:4A:87:46:20:C5:9F:EE:D7:70:B0
Certificate issuer:       /CN=A9110F1F/serialNumber=952F712DF11841208A3B4A874620C59FEED770B0
Certificate serial:       0211
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lS9xLfEYQSCKO0qHRiDFn-7XcLA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.mft
Manifest number:          020E
Signing time:             Fri 31 Jan 2025 02:09:28 +0000
Manifest this update:     Fri 31 Jan 2025 02:09:28 +0000
Manifest next update:     Fri 07 Feb 2025 02:09:28 +0000
Files and hashes:         1: lS9xLfEYQSCKO0qHRiDFn-7XcLA.crl (hash: hLESZfy0chTeo1Er+J6oZVofBLKSVHSA/cbiPWo4FwI=)
                          2: AF6A12881EBB11EDB35A2561C4F9AE02.roa (hash: cKa9eR42THXESBXh5GR6j0R3nTxgHwhQOzuCbJGCePs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 529 (0x211)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110F1F/serialNumber=952F712DF11841208A3B4A874620C59FEED770B0
        Validity
            Not Before: Jan 31 02:09:28 2025 GMT
            Not After : Feb  7 02:09:28 2025 GMT
        Subject: CN=679c30d8-72ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c5:cc:35:eb:14:6e:25:2a:87:e9:c5:a7:43:
                    f0:53:2b:3f:df:86:03:ef:4e:fb:ea:39:9f:89:b4:
                    6d:71:53:df:ec:45:38:4f:d2:a0:0c:63:cb:28:a6:
                    62:a0:bb:68:66:85:bd:76:c9:ff:37:a2:55:a5:2b:
                    e0:11:84:1a:73:9f:12:fd:24:76:82:57:21:1e:fd:
                    75:9f:40:47:7d:0f:47:69:10:d1:4c:0c:83:44:3a:
                    28:8e:29:ae:ef:af:c7:68:70:e5:4c:ab:c4:cd:34:
                    74:d6:98:f4:e9:45:8c:75:37:1c:d9:be:ef:5f:7f:
                    11:ed:8d:b9:39:ad:1a:71:ed:ff:f5:9a:07:26:3e:
                    9d:09:9d:b6:5d:ce:3d:47:ce:2c:42:dd:30:09:2c:
                    74:57:b9:8f:9a:10:1f:90:38:ee:f1:73:d8:73:13:
                    08:29:53:2a:c4:b2:53:f7:79:fc:72:62:ee:36:df:
                    c2:8f:77:3d:05:47:70:5c:27:2c:93:84:0e:c3:f1:
                    27:b0:d9:1e:84:81:2e:c3:32:35:f4:e0:33:13:69:
                    87:16:aa:a6:76:b8:0f:a9:5b:08:99:92:63:e9:80:
                    43:f1:2a:70:77:6c:89:1e:67:16:c3:ee:d3:41:e4:
                    75:e4:99:a8:8b:c2:18:42:ac:4c:bf:10:a1:07:0c:
                    bd:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:F4:96:73:BD:07:08:CE:AB:48:8E:14:C2:12:06:8F:68:D1:5F:C6
            X509v3 Authority Key Identifier:
                keyid:95:2F:71:2D:F1:18:41:20:8A:3B:4A:87:46:20:C5:9F:EE:D7:70:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lS9xLfEYQSCKO0qHRiDFn-7XcLA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:d9:7e:98:30:65:4d:8c:f6:e2:f7:f2:2e:ae:4b:97:f8:7f:
         47:69:91:15:7d:5e:e5:cf:a0:09:78:30:c4:07:48:58:98:4b:
         7a:27:6e:14:2c:8e:cc:68:0b:a7:f1:52:31:10:fd:52:59:05:
         0d:46:35:06:33:49:65:58:56:3f:43:43:43:b5:68:98:e8:56:
         29:70:e9:00:cc:43:ac:96:f4:dc:9a:22:a3:da:2d:d6:91:d7:
         df:7c:db:2c:7c:f9:2e:93:09:42:e7:ad:44:43:b4:3f:90:d2:
         ff:72:d4:4a:38:61:55:a7:59:b6:c8:75:dc:ea:7e:3b:59:5e:
         a1:c5:dc:ad:93:cd:e9:41:b6:00:0f:2d:a3:a2:64:10:30:62:
         af:85:8c:82:2c:40:d2:29:25:b1:4a:25:43:80:bf:b3:b9:77:
         a7:87:00:03:8d:b0:d3:49:f5:c9:31:50:39:56:d9:b7:7c:f6:
         e3:4a:da:81:02:3b:a1:60:8e:90:29:21:83:76:11:27:00:6e:
         33:c7:a8:ff:a7:1a:60:c3:c5:d4:9f:53:5c:c0:da:b8:4f:0e:
         80:ad:1a:48:33:17:dd:42:83:b6:13:ed:31:ff:8e:61:0a:85:
         81:5b:9f:2d:b9:00:18:27:4f:34:88:db:5a:86:64:a4:59:b3:
         fe:62:68:21
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTBGMUYxMTAvBgNVBAUTKDk1MkY3MTJERjExODQxMjA4QTNCNEE4NzQ2MjBDNTlG
RUVENzcwQjAwHhcNMjUwMTMxMDIwOTI4WhcNMjUwMjA3MDIwOTI4WjAYMRYwFAYD
VQQDEw02NzljMzBkOC03MmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy8XMNesUbiUqh+nFp0PwUys/34YD70776jmfibRtcVPf7EU4T9KgDGPLKKZi
oLtoZoW9dsn/N6JVpSvgEYQac58S/SR2glchHv11n0BHfQ9HaRDRTAyDRDoojimu
76/HaHDlTKvEzTR01pj06UWMdTcc2b7vX38R7Y25Oa0ace3/9ZoHJj6dCZ22Xc49
R84sQt0wCSx0V7mPmhAfkDju8XPYcxMIKVMqxLJT93n8cmLuNt/Cj3c9BUdwXCcs
k4QOw/EnsNkehIEuwzI19OAzE2mHFqqmdrgPqVsImZJj6YBD8Spwd2yJHmcWw+7T
QeR15Jmoi8IYQqxMvxChBwy9WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBX0lnO9
BwjOq0iOFMISBo9o0V/GMB8GA1UdIwQYMBaAFJUvcS3xGEEgijtKh0YgxZ/u13Cw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEYxRi82QzBGRUY1QTFF
QjkxMUVEOUZDNjg3NjBDNEY5QUUwMi9sUzl4TGZFWVFTQ0tPMHFIUmlERm4tN1hj
TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xTOXhMZkVZUVNDS08wcUhSaURGbi03WGNMQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MEYxRi82QzBGRUY1QTFFQjkxMUVEOUZDNjg3NjBDNEY5QUUwMi9sUzl4TGZFWVFT
Q0tPMHFIUmlERm4tN1hjTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCm2X6YMGVNjPbi9/IurkuX+H9HaZEVfV7lz6AJeDDEB0hYmEt6J24U
LI7MaAun8VIxEP1SWQUNRjUGM0llWFY/Q0NDtWiY6FYpcOkAzEOslvTcmiKj2i3W
kdfffNssfPkukwlC561EQ7Q/kNL/ctRKOGFVp1m2yHXc6n47WV6hxdytk83pQbYA
Dy2jomQQMGKvhYyCLEDSKSWxSiVDgL+zuXenhwADjbDTSfXJMVA5Vtm3fPbjStqB
AjuhYI6QKSGDdhEnAG4zx6j/pxpgw8XUn1NcwNq4Tw6ArRpIMxfdQoO2E+0x/45h
CoWBW58tuQAYJ080iNtahmSkWbP+Ymgh
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:09:21 2025 by rpki-client