Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.mft
File:                     8R9XbWsM2yqpLc-dTncyc2DVV2c.mft (raw, json)
Hash identifier:          9SRazK1R5fslVeXjmgmlY0GQg0nQTGI0ViOk81JeRr8=
Subject key identifier:   8A:F9:63:74:AA:4C:94:A2:CD:9A:8B:AA:D7:0F:C1:EC:9F:51:09:E5
Authority key identifier: F1:1F:57:6D:6B:0C:DB:2A:A9:2D:CF:9D:4E:77:32:73:60:D5:57:67
Certificate issuer:       /CN=A911EF4D/serialNumber=F11F576D6B0CDB2AA92DCF9D4E77327360D55767
Certificate serial:       6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R9XbWsM2yqpLc-dTncyc2DVV2c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.mft
Manifest number:          6C
Signing time:             Fri 31 Jan 2025 05:58:27 +0000
Manifest this update:     Fri 31 Jan 2025 05:58:27 +0000
Manifest next update:     Fri 07 Feb 2025 05:58:26 +0000
Files and hashes:         1: 8R9XbWsM2yqpLc-dTncyc2DVV2c.crl (hash: eV0Gv/t2uKvnRE9aO/ruaNgROVtxWmiuKeZzjQTTEGw=)
                          2: 52D8EF7A426911EF97319666C4F9AE02.roa (hash: K7xoMbrahTaRmzWPIHZWon2Vo6zWB816U+odiAFW2nc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110 (0x6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911EF4D/serialNumber=F11F576D6B0CDB2AA92DCF9D4E77327360D55767
        Validity
            Not Before: Jan 31 05:58:27 2025 GMT
            Not After : Feb  7 05:58:26 2025 GMT
        Subject: CN=679c6683-8605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f7:23:db:6b:7c:26:94:75:e6:88:64:f4:54:
                    9d:2a:b0:25:0b:34:34:d0:e7:bc:7d:b9:24:ae:72:
                    55:6a:75:f3:a6:f7:df:31:af:9a:1d:40:ea:d3:13:
                    51:01:92:49:44:c0:31:4f:d1:49:95:ff:0b:ff:4d:
                    df:a1:a1:39:6d:a9:ac:88:7c:b3:81:12:77:6e:82:
                    dc:2d:f9:75:4b:7e:b7:49:c5:2c:4b:3c:76:17:f5:
                    18:a7:17:d0:53:c7:14:ab:fb:f6:e3:7f:c2:42:00:
                    68:28:85:ee:f8:5a:4a:7c:2c:7d:4e:86:6d:1d:fc:
                    c3:5e:eb:e1:5e:99:83:84:19:b7:0b:d9:25:ff:2e:
                    6f:77:7e:a0:4f:99:8f:47:29:28:62:88:19:65:e6:
                    4a:62:1d:07:1f:ed:40:34:ab:e5:77:31:4b:cf:29:
                    0e:b9:f8:d5:b1:01:7b:d5:66:20:4f:56:f0:e0:37:
                    69:ba:99:5b:4c:68:01:74:9e:32:a2:a4:48:4c:8e:
                    dc:bd:3f:b3:27:9d:20:98:98:9b:f3:84:32:34:8f:
                    e3:5d:9a:19:5a:7d:93:b9:a8:20:60:a2:89:67:80:
                    ae:ce:4c:07:18:7b:d6:9e:1d:3b:23:65:fc:aa:e7:
                    dc:6e:3e:ab:a5:57:49:23:0d:7c:99:61:8d:ec:9b:
                    98:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:F9:63:74:AA:4C:94:A2:CD:9A:8B:AA:D7:0F:C1:EC:9F:51:09:E5
            X509v3 Authority Key Identifier:
                keyid:F1:1F:57:6D:6B:0C:DB:2A:A9:2D:CF:9D:4E:77:32:73:60:D5:57:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R9XbWsM2yqpLc-dTncyc2DVV2c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:58:36:94:44:b9:9a:1c:21:02:17:9f:a6:df:bc:93:f5:c9:
         8b:a0:d5:35:79:d3:98:aa:1d:d5:99:4d:2d:ba:2e:d8:7c:50:
         c8:98:2a:72:7e:b8:e9:da:28:8f:17:15:8f:40:42:87:b2:ae:
         e3:10:7b:de:e4:7f:3d:61:52:dc:4f:a5:23:85:30:32:72:49:
         da:c0:5c:b8:22:a0:8d:82:ce:29:58:4b:da:8f:97:98:16:47:
         8e:47:8b:37:e8:d8:69:14:a0:01:ed:0a:0d:90:80:a6:27:e6:
         6a:9b:1f:3a:59:24:9e:d6:a8:ee:d7:55:11:c2:cd:af:cc:eb:
         da:d9:41:70:fb:f5:d2:65:fe:8c:0f:24:d5:9c:be:ec:f2:3f:
         2a:ee:16:27:c8:02:48:56:e1:d4:fd:f0:00:eb:23:be:d2:f1:
         98:61:93:be:b3:be:8b:44:64:24:17:01:0f:7a:8e:aa:b6:4e:
         1a:65:d3:f7:4c:66:3f:c7:cf:f1:9f:e4:90:9c:06:77:aa:9b:
         4f:e9:5f:74:c0:29:79:43:8a:d7:58:f5:a5:38:b3:dc:00:68:
         e2:3d:49:ab:5b:b8:08:5a:3e:42:ba:60:83:f8:8b:a2:f6:cc:
         27:71:c3:af:df:a5:8a:34:d2:4c:27:c9:d2:30:37:5e:a2:5c:
         c9:7b:c2:9c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBbjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
RUY0RDExMC8GA1UEBRMoRjExRjU3NkQ2QjBDREIyQUE5MkRDRjlENEU3NzMyNzM2
MEQ1NTc2NzAeFw0yNTAxMzEwNTU4MjdaFw0yNTAyMDcwNTU4MjZaMBgxFjAUBgNV
BAMTDTY3OWM2NjgzLTg2MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCt9yPba3wmlHXmiGT0VJ0qsCULNDTQ57x9uSSuclVqdfOm998xr5odQOrTE1EB
kklEwDFP0UmV/wv/Td+hoTltqayIfLOBEndugtwt+XVLfrdJxSxLPHYX9RinF9BT
xxSr+/bjf8JCAGgohe74Wkp8LH1Ohm0d/MNe6+FemYOEGbcL2SX/Lm93fqBPmY9H
KShiiBll5kpiHQcf7UA0q+V3MUvPKQ65+NWxAXvVZiBPVvDgN2m6mVtMaAF0njKi
pEhMjty9P7MnnSCYmJvzhDI0j+NdmhlafZO5qCBgoolngK7OTAcYe9aeHTsjZfyq
59xuPqulV0kjDXyZYY3sm5gHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUivljdKpM
lKLNmouq1w/B7J9RCeUwHwYDVR0jBBgwFoAU8R9XbWsM2yqpLc+dTncyc2DVV2cw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFFRjREL0ZGNjc4QzcyM0ZE
NzExRUY4RkJCNjk1NUM0RjlBRTAyLzhSOVhiV3NNMnlxcExjLWRUbmN5YzJEVlYy
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvOFI5WGJXc00yeXFwTGMtZFRuY3ljMkRWVjJjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFF
RjREL0ZGNjc4QzcyM0ZENzExRUY4RkJCNjk1NUM0RjlBRTAyLzhSOVhiV3NNMnlx
cExjLWRUbmN5YzJEVlYyYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAIFYNpREuZocIQIXn6bfvJP1yYug1TV505iqHdWZTS26Lth8UMiYKnJ+
uOnaKI8XFY9AQoeyruMQe97kfz1hUtxPpSOFMDJySdrAXLgioI2CzilYS9qPl5gW
R45Hizfo2GkUoAHtCg2QgKYn5mqbHzpZJJ7WqO7XVRHCza/M69rZQXD79dJl/owP
JNWcvuzyPyruFifIAkhW4dT98ADrI77S8Zhhk76zvotEZCQXAQ96jqq2Thpl0/dM
Zj/Hz/Gf5JCcBneqm0/pX3TAKXlDitdY9aU4s9wAaOI9SatbuAhaPkK6YIP4i6L2
zCdxw6/fpYo00kwnydIwN16iXMl7wpw=
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:26:34 2025 by rpki-client