Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft
File:                     gmSrKAremT89Ii-8hk3uIoa6kGU.mft (raw, json)
Hash identifier:          ucTCjkndsSXieqA3BieiuMpwnHW/8zKh+In3U0DGyp0=
Subject key identifier:   B7:3D:25:56:E8:7C:9D:BE:06:2B:48:AB:19:E8:23:69:84:97:34:1A
Authority key identifier: 82:64:AB:28:0A:DE:99:3F:3D:22:2F:BC:86:4D:EE:22:86:BA:90:65
Certificate issuer:       /CN=A911DED4/serialNumber=8264AB280ADE993F3D222FBC864DEE2286BA9065
Certificate serial:       01B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft
Manifest number:          01AF
Signing time:             Fri 31 Jan 2025 02:24:41 +0000
Manifest this update:     Fri 31 Jan 2025 02:24:41 +0000
Manifest next update:     Fri 07 Feb 2025 02:24:40 +0000
Files and hashes:         1: gmSrKAremT89Ii-8hk3uIoa6kGU.crl (hash: VUBKk3LiWBEYCpVeJOGTC+V+NQSnmgPAaEkLIb/+Rt0=)
                          2: 7416299C4B0C11EDB8430084C4F9AE02.roa (hash: fdccxhLktG5LcnRtoY1B1E3L3EfYU96oxOUA369yqRg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 434 (0x1b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DED4/serialNumber=8264AB280ADE993F3D222FBC864DEE2286BA9065
        Validity
            Not Before: Jan 31 02:24:41 2025 GMT
            Not After : Feb  7 02:24:40 2025 GMT
        Subject: CN=679c3469-ddc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d9:9f:80:6d:12:d6:49:56:78:5c:5f:38:ac:
                    cc:25:88:a6:4c:60:13:df:04:bf:fd:f3:4e:32:45:
                    b3:c3:3d:b3:78:3e:ea:d2:fe:68:4d:22:04:43:ad:
                    1b:80:54:e1:d7:33:09:70:60:ff:d3:28:d1:79:dd:
                    03:7d:c3:48:73:ae:25:b3:5e:23:aa:74:52:13:ab:
                    f4:22:68:f6:45:50:94:f9:d6:a7:6a:2f:46:ec:83:
                    81:a1:cd:e8:95:cf:ec:00:45:35:a6:7e:b3:8f:6a:
                    db:23:33:33:f8:e7:06:63:3a:63:a3:49:6d:21:ec:
                    4e:6b:e6:e5:28:d6:d3:9e:2c:25:05:68:ec:ec:2f:
                    97:be:89:23:07:df:c0:33:98:6d:73:fb:79:8a:fb:
                    58:a1:04:e4:b7:94:5b:30:5e:5d:65:2f:6a:f6:b5:
                    5a:c2:87:8f:3f:7e:80:6d:54:64:d0:50:28:fa:8b:
                    45:41:77:e1:fd:80:0b:e4:78:3c:0d:fa:c3:f0:f6:
                    0e:31:b3:aa:90:9f:e3:37:ff:e6:6e:8d:54:b4:2c:
                    99:ed:e6:8c:ee:b0:b5:31:93:83:f5:3e:ca:90:ec:
                    81:5c:56:54:35:9d:e2:98:cf:22:ee:71:f5:19:a8:
                    9a:73:ff:e3:3a:bd:bf:ee:92:18:6f:cd:9f:f6:ec:
                    c4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:3D:25:56:E8:7C:9D:BE:06:2B:48:AB:19:E8:23:69:84:97:34:1A
            X509v3 Authority Key Identifier:
                keyid:82:64:AB:28:0A:DE:99:3F:3D:22:2F:BC:86:4D:EE:22:86:BA:90:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:13:37:fe:16:4c:fa:d8:27:03:06:53:1b:f1:bb:d5:67:dc:
         d9:e2:21:49:17:1a:a9:ec:9b:0d:35:8b:d3:be:f3:37:57:5a:
         b0:bc:49:65:83:e4:c1:29:df:ee:9b:7f:b7:19:a1:a1:23:22:
         c9:52:44:6c:af:75:1d:7c:dd:01:52:73:db:2c:fa:1f:e4:a6:
         d7:98:ef:72:d3:89:39:9e:63:ba:e7:c6:b3:b4:6d:cf:17:28:
         7a:9b:fc:49:98:01:72:80:31:1b:64:c0:39:ca:eb:a2:5c:7e:
         15:62:6a:4b:21:71:31:d5:d3:e7:14:d2:e2:bb:c8:39:46:3e:
         6a:99:62:15:e5:2a:e5:04:ab:0d:0f:4f:4d:a8:d6:81:92:c1:
         57:a2:51:d7:69:5d:05:36:0f:55:ea:d0:e6:ca:53:6f:75:fa:
         8d:29:2d:3b:36:56:bf:1c:e5:60:12:b4:52:84:43:20:16:15:
         f7:fd:38:aa:05:1c:0c:cc:da:25:de:08:c1:5b:a7:14:77:dd:
         c5:17:02:a4:f1:6c:12:50:4f:f5:fb:a3:9a:dc:87:ae:2d:ce:
         32:95:ff:01:01:39:86:54:27:66:1e:86:eb:a1:01:ff:b6:6d:
         ec:1f:cb:96:8f:b5:b5:56:52:e2:f6:d8:46:6c:2f:cd:9f:b9:
         aa:39:5c:8f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MURFRDQxMTAvBgNVBAUTKDgyNjRBQjI4MEFERTk5M0YzRDIyMkZCQzg2NERFRTIy
ODZCQTkwNjUwHhcNMjUwMTMxMDIyNDQxWhcNMjUwMjA3MDIyNDQwWjAYMRYwFAYD
VQQDEw02NzljMzQ2OS1kZGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3dmfgG0S1klWeFxfOKzMJYimTGAT3wS//fNOMkWzwz2zeD7q0v5oTSIEQ60b
gFTh1zMJcGD/0yjRed0DfcNIc64ls14jqnRSE6v0Imj2RVCU+danai9G7IOBoc3o
lc/sAEU1pn6zj2rbIzMz+OcGYzpjo0ltIexOa+blKNbTniwlBWjs7C+XvokjB9/A
M5htc/t5ivtYoQTkt5RbMF5dZS9q9rVawoePP36AbVRk0FAo+otFQXfh/YAL5Hg8
DfrD8PYOMbOqkJ/jN//mbo1UtCyZ7eaM7rC1MZOD9T7KkOyBXFZUNZ3imM8i7nH1
Gaiac//jOr2/7pIYb82f9uzE8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLc9JVbo
fJ2+BitIqxnoI2mElzQaMB8GA1UdIwQYMBaAFIJkqygK3pk/PSIvvIZN7iKGupBl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREVENC9FNEZCMkJFNDRC
MDcxMUVEOEVDMzM5NDdDNEY5QUUwMi9nbVNyS0FyZW1UODlJaS04aGszdUlvYTZr
R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dtU3JLQXJlbVQ4OUlpLThoazN1SW9hNmtHVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
REVENC9FNEZCMkJFNDRCMDcxMUVEOEVDMzM5NDdDNEY5QUUwMi9nbVNyS0FyZW1U
ODlJaS04aGszdUlvYTZrR1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCYEzf+Fkz62CcDBlMb8bvVZ9zZ4iFJFxqp7JsNNYvTvvM3V1qwvEll
g+TBKd/um3+3GaGhIyLJUkRsr3UdfN0BUnPbLPof5KbXmO9y04k5nmO658aztG3P
Fyh6m/xJmAFygDEbZMA5yuuiXH4VYmpLIXEx1dPnFNLiu8g5Rj5qmWIV5SrlBKsN
D09NqNaBksFXolHXaV0FNg9V6tDmylNvdfqNKS07Nla/HOVgErRShEMgFhX3/Tiq
BRwMzNol3gjBW6cUd93FFwKk8WwSUE/1+6Oa3IeuLc4ylf8BATmGVCdmHobroQH/
tm3sH8uWj7W1VlLi9thGbC/Nn7mqOVyP
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:17:18 2025 by rpki-client