Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.mft
File:                     6PktayopMPClvq9TBEyF2OreHro.mft (raw, json)
Hash identifier:          PufkbjUITBRQ4lZRry+z58I5rU/lBmoplTNji7ZkwZQ=
Subject key identifier:   22:99:BF:9C:3B:C6:EB:9B:C1:7E:BB:B3:F1:FC:3B:3D:B3:84:7E:EB
Authority key identifier: E8:F9:2D:6B:2A:29:30:F0:A5:BE:AF:53:04:4C:85:D8:EA:DE:1E:BA
Certificate issuer:       /CN=A9129C87/serialNumber=E8F92D6B2A2930F0A5BEAF53044C85D8EADE1EBA
Certificate serial:       03FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6PktayopMPClvq9TBEyF2OreHro.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.mft
Manifest number:          03F7
Signing time:             Fri 31 Jan 2025 00:34:45 +0000
Manifest this update:     Fri 31 Jan 2025 00:34:45 +0000
Manifest next update:     Fri 07 Feb 2025 00:34:45 +0000
Files and hashes:         1: 6PktayopMPClvq9TBEyF2OreHro.crl (hash: PltQ/egOBUy+JDF6i9N/8D8tR9dfSFTIP/eUEYP+l/4=)
                          2: 80A9DE56614C11EC9175DE54C4F9AE02.roa (hash: ygV29+CdpRjO1HlIMJ6Gkg3eEGxPeEnonRI3YwMUHgM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1019 (0x3fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129C87/serialNumber=E8F92D6B2A2930F0A5BEAF53044C85D8EADE1EBA
        Validity
            Not Before: Jan 31 00:34:45 2025 GMT
            Not After : Feb  7 00:34:45 2025 GMT
        Subject: CN=679c1aa5-3a01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:cf:c2:f1:a9:53:e0:82:a4:67:ea:ad:9d:a6:
                    55:3e:fe:7f:38:18:19:6f:87:b1:24:ca:76:c0:68:
                    9e:3c:82:83:09:12:16:47:18:a1:d3:01:bd:05:e8:
                    81:37:02:89:9c:34:e2:a3:64:7f:bc:09:72:0c:9f:
                    d4:44:9a:df:1f:29:c6:e7:18:2b:3d:aa:f7:9a:6a:
                    51:7c:66:38:29:fd:14:b2:c7:af:72:d7:dd:b3:bc:
                    da:a2:b9:e5:f6:c6:a9:ad:cf:48:4c:3b:50:fe:b4:
                    00:48:14:7c:e5:6c:cf:27:0a:ee:49:41:d1:b4:70:
                    a3:6a:05:28:36:1b:5b:27:6b:7d:8a:5e:d8:75:fa:
                    30:4f:0a:78:2b:40:59:d1:7e:59:72:f3:1c:6a:de:
                    f9:62:42:4a:10:60:5f:ec:94:47:06:d2:52:b1:10:
                    2a:45:31:39:44:95:87:ce:5c:74:d0:a0:cd:ad:b6:
                    e7:4c:c4:25:3f:bf:ed:51:12:56:8a:a4:c7:01:d2:
                    be:25:f6:9a:75:d6:e3:f0:ca:2f:b6:36:15:b8:be:
                    e3:de:8b:35:e1:09:f8:da:1a:ea:77:6a:38:43:61:
                    b1:b6:ed:5f:30:b2:3f:54:48:9a:40:65:ac:24:1f:
                    07:eb:69:d0:04:02:b1:94:c0:55:13:09:dd:62:f7:
                    27:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:99:BF:9C:3B:C6:EB:9B:C1:7E:BB:B3:F1:FC:3B:3D:B3:84:7E:EB
            X509v3 Authority Key Identifier:
                keyid:E8:F9:2D:6B:2A:29:30:F0:A5:BE:AF:53:04:4C:85:D8:EA:DE:1E:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6PktayopMPClvq9TBEyF2OreHro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:56:a1:b9:64:4e:be:03:61:a3:eb:c9:17:40:41:75:f7:85:
         4c:d1:fe:b9:39:df:b4:1a:d8:73:39:e3:a3:6f:53:d0:07:f3:
         ac:17:18:71:95:98:ea:3e:b9:dc:54:4d:ba:cd:19:6a:b2:b3:
         10:16:71:46:37:84:15:a6:95:4d:0c:cc:2b:bd:95:88:e2:f9:
         a3:9d:7e:23:e2:ad:49:df:75:f0:9f:eb:e8:5e:e2:f0:81:18:
         68:23:75:2a:79:48:aa:e6:8c:65:a3:9e:c1:5c:71:f8:02:a5:
         a6:8c:49:49:35:b1:54:5b:ee:a9:e7:33:33:4f:f2:df:40:88:
         cd:b8:5f:91:13:48:aa:f2:29:64:1c:84:42:27:2d:77:f4:0b:
         6e:0f:ca:67:45:55:ba:16:76:7d:bb:ad:e5:39:c9:e2:fa:de:
         91:99:5d:9c:79:97:78:4e:c1:d0:67:d6:01:4b:e1:45:e6:d9:
         c3:47:01:47:ce:d3:ae:12:09:9d:b2:a5:ca:11:f7:66:29:37:
         f1:f6:37:0d:15:61:10:7d:83:e0:4c:d1:b2:71:6b:17:ff:1e:
         e4:58:53:d2:58:f4:5d:99:05:9a:39:02:70:8b:e6:bc:4f:5d:
         81:cc:9b:5b:4e:fe:82:8d:34:47:72:ab:df:71:9c:49:93:09:
         b4:7c:73:e0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA/swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjlDODcxMTAvBgNVBAUTKEU4RjkyRDZCMkEyOTMwRjBBNUJFQUY1MzA0NEM4NUQ4
RUFERTFFQkEwHhcNMjUwMTMxMDAzNDQ1WhcNMjUwMjA3MDAzNDQ1WjAYMRYwFAYD
VQQDEw02NzljMWFhNS0zYTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1c/C8alT4IKkZ+qtnaZVPv5/OBgZb4exJMp2wGiePIKDCRIWRxih0wG9BeiB
NwKJnDTio2R/vAlyDJ/URJrfHynG5xgrPar3mmpRfGY4Kf0Ussevctfds7zaornl
9saprc9ITDtQ/rQASBR85WzPJwruSUHRtHCjagUoNhtbJ2t9il7YdfowTwp4K0BZ
0X5ZcvMcat75YkJKEGBf7JRHBtJSsRAqRTE5RJWHzlx00KDNrbbnTMQlP7/tURJW
iqTHAdK+Jfaaddbj8MovtjYVuL7j3os14Qn42hrqd2o4Q2Gxtu1fMLI/VEiaQGWs
JB8H62nQBAKxlMBVEwndYvcnOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCKZv5w7
xuubwX67s/H8Oz2zhH7rMB8GA1UdIwQYMBaAFOj5LWsqKTDwpb6vUwRMhdjq3h66
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUM4Ny9GRDA4M0Y1ODVF
RUQxMUVDOUE0OTZENTlDNEY5QUUwMi82UGt0YXlvcE1QQ2x2cTlUQkV5RjJPcmVI
cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZQa3RheW9wTVBDbHZxOVRCRXlGMk9yZUhyby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
OUM4Ny9GRDA4M0Y1ODVFRUQxMUVDOUE0OTZENTlDNEY5QUUwMi82UGt0YXlvcE1Q
Q2x2cTlUQkV5RjJPcmVIcm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAQVqG5ZE6+A2Gj68kXQEF194VM0f65Od+0GthzOeOjb1PQB/OsFxhx
lZjqPrncVE26zRlqsrMQFnFGN4QVppVNDMwrvZWI4vmjnX4j4q1J33Xwn+voXuLw
gRhoI3UqeUiq5oxlo57BXHH4AqWmjElJNbFUW+6p5zMzT/LfQIjNuF+RE0iq8ilk
HIRCJy139AtuD8pnRVW6FnZ9u63lOcni+t6RmV2ceZd4TsHQZ9YBS+FF5tnDRwFH
ztOuEgmdsqXKEfdmKTfx9jcNFWEQfYPgTNGycWsX/x7kWFPSWPRdmQWaOQJwi+a8
T12BzJtbTv6CjTRHcqvfcZxJkwm0fHPg
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:52:02 2025 by rpki-client