Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft
File:                     6XH_tEATQSECHGJem3DrGuWij2A.mft (raw, json)
Hash identifier:          1KT5Ve9UjDgBFSy7sqNDf3/cEXEMpHhEMZkA97CWzA4=
Subject key identifier:   64:59:F4:86:AE:ED:67:F2:9C:95:29:7D:F5:EC:DF:A5:00:3A:C8:6A
Authority key identifier: E9:71:FF:B4:40:13:41:21:02:1C:62:5E:9B:70:EB:1A:E5:A2:8F:60
Certificate issuer:       /CN=A911EDE5/serialNumber=E971FFB440134121021C625E9B70EB1AE5A28F60
Certificate serial:       0D07
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XH_tEATQSECHGJem3DrGuWij2A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft
Manifest number:          0CFE
Signing time:             Fri 31 Jan 2025 18:02:26 +0000
Manifest this update:     Fri 31 Jan 2025 18:02:26 +0000
Manifest next update:     Fri 07 Feb 2025 18:02:26 +0000
Files and hashes:         1: 6XH_tEATQSECHGJem3DrGuWij2A.crl (hash: TjKcT2PvZJFC2NtyiEkzZswJzpgOho1evIdwPyuJb5c=)
                          2: 89D124B6D51311E98A41293BC4F9AE02.roa (hash: mbBxOC4AR4Py/kqSr6p/HUSw4E4voxLVh0FwxIMWx+Y=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3335 (0xd07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911EDE5/serialNumber=E971FFB440134121021C625E9B70EB1AE5A28F60
        Validity
            Not Before: Jan 31 18:02:26 2025 GMT
            Not After : Feb  7 18:02:26 2025 GMT
        Subject: CN=679d1032-1f82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e5:93:d4:a2:db:13:1b:17:e8:7a:4c:d5:da:
                    f2:7e:25:94:3f:d6:61:a0:a1:18:ef:b9:d2:f3:e8:
                    22:7e:c3:a8:23:3f:d9:e4:01:af:1d:d3:2b:d2:62:
                    55:ff:39:90:fc:97:ce:59:7a:7f:9c:be:74:4b:51:
                    d0:bd:1d:df:3d:a8:e6:e3:c1:86:46:4c:27:a8:4e:
                    94:d0:3a:65:6e:11:5d:99:a8:68:9e:66:23:30:5f:
                    b4:2b:1b:f5:53:39:37:6e:88:c7:02:8e:e7:0b:c9:
                    e4:04:96:59:0a:0c:6d:65:9c:27:40:98:38:9b:72:
                    9e:4e:39:7a:23:de:58:9d:7e:ef:d5:cd:fb:49:07:
                    64:9c:54:30:47:22:8b:5b:9f:69:0a:4d:77:fa:33:
                    01:91:ab:9f:88:ad:4b:7b:29:f0:a4:e4:16:42:29:
                    ae:0c:99:e1:cb:65:5f:0c:2c:66:24:c8:de:0d:fb:
                    24:b2:df:d2:1f:34:86:2a:96:e2:20:67:24:96:33:
                    d0:75:ea:a1:8d:41:93:df:59:a0:8f:8d:35:21:10:
                    ef:f7:ce:ea:c5:c9:f8:b9:e1:08:23:91:14:04:1f:
                    b6:1e:e0:43:ef:6b:5e:6b:ca:80:b8:0d:0b:03:dc:
                    9e:f7:00:60:26:11:36:9d:05:95:97:22:b3:d4:54:
                    1f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:59:F4:86:AE:ED:67:F2:9C:95:29:7D:F5:EC:DF:A5:00:3A:C8:6A
            X509v3 Authority Key Identifier:
                keyid:E9:71:FF:B4:40:13:41:21:02:1C:62:5E:9B:70:EB:1A:E5:A2:8F:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XH_tEATQSECHGJem3DrGuWij2A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:c3:07:7d:11:27:fd:b9:dd:da:be:57:99:7c:40:4f:08:64:
         a2:0f:d2:b4:a2:42:28:9f:6a:55:39:06:d9:4b:40:2e:d1:5c:
         45:ef:f6:5e:b5:62:77:c3:0e:ac:a3:df:e6:44:cb:4e:4f:74:
         1e:7c:f8:0b:d5:58:c7:eb:9d:f1:aa:00:6d:5d:e7:ba:21:75:
         11:9a:7a:a8:ff:6d:19:3f:6c:e2:98:7e:45:3e:e1:4f:8f:bc:
         67:a2:53:a4:4a:4d:25:4f:67:a4:a1:60:24:dc:39:74:47:d9:
         50:ea:59:3c:b1:9e:f3:96:22:c3:fd:1f:21:1f:69:12:6b:63:
         93:ff:a4:d2:c3:b8:ae:ea:a8:8e:6d:86:4d:3e:9c:b8:a5:a5:
         3e:19:13:76:c0:22:50:e3:aa:d1:a9:0b:80:ba:14:6c:f0:55:
         b2:df:fd:f8:c2:d3:5b:90:4f:7a:61:66:d0:f4:56:0b:26:f3:
         b8:07:a9:3b:21:e3:ac:34:ac:2c:14:55:2a:be:42:f1:6a:2c:
         87:e7:62:63:52:4b:97:a0:2b:de:45:2a:44:c8:61:ac:ad:38:
         eb:1e:c8:cd:a6:7e:e4:26:d2:cb:34:cd:a4:76:7f:cd:56:8c:
         44:ce:34:9c:90:a1:df:37:27:65:97:2f:31:d4:f6:ba:7b:8b:
         aa:59:8d:13
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUVERTUxMTAvBgNVBAUTKEU5NzFGRkI0NDAxMzQxMjEwMjFDNjI1RTlCNzBFQjFB
RTVBMjhGNjAwHhcNMjUwMTMxMTgwMjI2WhcNMjUwMjA3MTgwMjI2WjAYMRYwFAYD
VQQDEw02NzlkMTAzMi0xZjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArOWT1KLbExsX6HpM1dryfiWUP9ZhoKEY77nS8+gifsOoIz/Z5AGvHdMr0mJV
/zmQ/JfOWXp/nL50S1HQvR3fPajm48GGRkwnqE6U0DplbhFdmahonmYjMF+0Kxv1
Uzk3bojHAo7nC8nkBJZZCgxtZZwnQJg4m3KeTjl6I95YnX7v1c37SQdknFQwRyKL
W59pCk13+jMBkaufiK1LeynwpOQWQimuDJnhy2VfDCxmJMjeDfskst/SHzSGKpbi
IGckljPQdeqhjUGT31mgj401IRDv987qxcn4ueEII5EUBB+2HuBD72tea8qAuA0L
A9ye9wBgJhE2nQWVlyKz1FQfhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGRZ9Iau
7WfynJUpffXs36UAOshqMB8GA1UdIwQYMBaAFOlx/7RAE0EhAhxiXptw6xrloo9g
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRURFNS9CM0JGNzU4QUQ1
MTIxMUU5QjY0M0VEMzlDNEY5QUUwMi82WEhfdEVBVFFTRUNIR0plbTNEckd1V2lq
MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZYSF90RUFUUVNFQ0hHSmVtM0RyR3VXaWoyQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RURFNS9CM0JGNzU4QUQ1MTIxMUU5QjY0M0VEMzlDNEY5QUUwMi82WEhfdEVBVFFT
RUNIR0plbTNEckd1V2lqMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCWwwd9ESf9ud3avleZfEBPCGSiD9K0okIon2pVOQbZS0Au0VxF7/Ze
tWJ3ww6so9/mRMtOT3QefPgL1VjH653xqgBtXee6IXURmnqo/20ZP2zimH5FPuFP
j7xnolOkSk0lT2ekoWAk3Dl0R9lQ6lk8sZ7zliLD/R8hH2kSa2OT/6TSw7iu6qiO
bYZNPpy4paU+GRN2wCJQ46rRqQuAuhRs8FWy3/34wtNbkE96YWbQ9FYLJvO4B6k7
IeOsNKwsFFUqvkLxaiyH52JjUkuXoCveRSpEyGGsrTjrHsjNpn7kJtLLNM2kdn/N
VoxEzjSckKHfNydlly8x1Pa6e4uqWY0T
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:17:59 2025 by rpki-client