Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.mft
File:                     peMSM_m0rMgiKz_WfG288kF5CbE.mft (raw, json)
Hash identifier:          8nusXgPqW+PJyKthwhJEoGlI8JWG5VvvVYZPv96HNU8=
Subject key identifier:   47:BE:40:34:C0:F0:7D:93:0D:E9:4F:B2:4B:C3:2E:02:A3:69:FB:25
Authority key identifier: A5:E3:12:33:F9:B4:AC:C8:22:2B:3F:D6:7C:6D:BC:F2:41:79:09:B1
Certificate issuer:       /CN=A912E411/serialNumber=A5E31233F9B4ACC8222B3FD67C6DBCF2417909B1
Certificate serial:       0B9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peMSM_m0rMgiKz_WfG288kF5CbE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.mft
Manifest number:          13DF
Signing time:             Thu 30 Jan 2025 18:57:26 +0000
Manifest this update:     Thu 30 Jan 2025 18:57:25 +0000
Manifest next update:     Thu 06 Feb 2025 18:57:25 +0000
Files and hashes:         1: peMSM_m0rMgiKz_WfG288kF5CbE.crl (hash: tanj3bgxnNDHRJSd4boo1Nhx0r2oedAwIaOX+7TgMXo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2970 (0xb9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E411/serialNumber=A5E31233F9B4ACC8222B3FD67C6DBCF2417909B1
        Validity
            Not Before: Jan 30 18:57:25 2025 GMT
            Not After : Feb  6 18:57:25 2025 GMT
        Subject: CN=679bcb96-f6e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2a:9d:1d:35:7c:fa:89:11:e5:a3:57:44:c6:
                    3e:9e:33:35:a4:2d:bc:5b:91:8c:dd:83:2b:ec:55:
                    c4:6f:7b:a1:c6:2d:92:38:55:14:b4:ad:3f:56:43:
                    dd:64:04:58:9d:dc:c6:70:2b:2f:f9:b7:59:a4:89:
                    37:96:ad:2a:b8:6b:5b:7c:07:83:5a:cf:74:a6:69:
                    25:0b:ad:14:a2:d3:c4:02:09:05:02:c7:9c:83:6c:
                    de:65:0e:c1:24:6c:ac:ac:53:0e:6c:2c:ee:69:0e:
                    ca:b3:87:c6:7e:0e:65:83:46:6d:02:1f:2a:ec:21:
                    76:dd:0d:74:51:e0:35:11:f3:62:7a:10:cd:a0:ab:
                    d0:7b:37:bc:85:0e:3f:5c:18:27:cf:78:f3:e5:06:
                    e7:49:8f:23:44:c7:4d:45:2b:44:80:c4:2d:62:b4:
                    55:e9:a3:77:a6:01:51:59:20:3f:65:6a:05:4c:77:
                    ab:89:c1:52:15:57:71:0e:ae:f5:61:e4:4e:94:bc:
                    9f:51:51:f3:04:cb:11:da:3e:b6:82:08:c2:e4:6d:
                    da:62:0b:44:02:2b:50:27:50:74:12:d0:8d:74:fe:
                    e9:42:f3:a8:97:79:00:1b:20:9a:d2:e0:67:e0:84:
                    30:b0:0b:15:22:05:af:ae:bc:01:5f:ec:e9:c0:7f:
                    2e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:BE:40:34:C0:F0:7D:93:0D:E9:4F:B2:4B:C3:2E:02:A3:69:FB:25
            X509v3 Authority Key Identifier:
                keyid:A5:E3:12:33:F9:B4:AC:C8:22:2B:3F:D6:7C:6D:BC:F2:41:79:09:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peMSM_m0rMgiKz_WfG288kF5CbE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:a8:f7:d0:bd:0e:55:39:17:10:06:97:1f:77:ce:a9:57:a6:
         d7:ce:39:90:f7:51:31:4a:af:75:42:c3:f4:7c:d2:b2:d8:7f:
         e9:94:c0:e3:68:7f:ce:78:c6:40:96:23:97:56:79:e6:bf:a1:
         47:f8:bd:48:3c:2f:58:37:6c:57:57:76:e6:8f:bb:70:f9:a1:
         cb:09:ee:17:4b:a3:02:f1:40:75:86:d9:38:7d:81:2e:5d:a2:
         c4:e7:e8:af:13:75:45:59:df:5f:66:2b:fa:96:98:04:7e:16:
         62:5e:dd:ea:2e:41:a5:c1:1f:e6:e1:86:8f:ed:d8:66:68:df:
         67:c0:a6:1d:02:77:07:fa:db:0b:5e:ea:85:2e:f5:d7:45:a5:
         7c:39:cc:22:6b:62:80:7d:64:79:69:b3:8f:a4:44:61:d0:8b:
         08:34:66:13:88:ba:6f:c4:ce:be:2d:c2:05:2d:76:5f:86:0e:
         47:84:3e:66:fb:22:d1:d0:4d:df:93:03:a4:47:5a:eb:50:95:
         56:8e:23:94:80:b3:b5:03:6a:d5:3e:c4:39:f2:29:4e:d2:6e:
         b2:5b:09:45:97:bc:0b:2b:85:73:6e:09:82:17:13:c7:58:6c:
         a1:0f:80:5c:48:37:b4:43:41:cf:97:e6:1f:41:85:b9:53:0d:
         3e:15:13:01
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC5owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkU0MTExMTAvBgNVBAUTKEE1RTMxMjMzRjlCNEFDQzgyMjJCM0ZENjdDNkRCQ0Yy
NDE3OTA5QjEwHhcNMjUwMTMwMTg1NzI1WhcNMjUwMjA2MTg1NzI1WjAYMRYwFAYD
VQQDEw02NzliY2I5Ni1mNmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzSqdHTV8+okR5aNXRMY+njM1pC28W5GM3YMr7FXEb3uhxi2SOFUUtK0/VkPd
ZARYndzGcCsv+bdZpIk3lq0quGtbfAeDWs90pmklC60UotPEAgkFAsecg2zeZQ7B
JGysrFMObCzuaQ7Ks4fGfg5lg0ZtAh8q7CF23Q10UeA1EfNiehDNoKvQeze8hQ4/
XBgnz3jz5QbnSY8jRMdNRStEgMQtYrRV6aN3pgFRWSA/ZWoFTHericFSFVdxDq71
YeROlLyfUVHzBMsR2j62ggjC5G3aYgtEAitQJ1B0EtCNdP7pQvOol3kAGyCa0uBn
4IQwsAsVIgWvrrwBX+zpwH8u3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEe+QDTA
8H2TDelPskvDLgKjafslMB8GA1UdIwQYMBaAFKXjEjP5tKzIIis/1nxtvPJBeQmx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTQxMS9GMEIwMEVCNDE5
MTQxMUVBODZGMjQ4MUVDNEY5QUUwMi9wZU1TTV9tMHJNZ2lLel9XZkcyODhrRjVD
YkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BlTVNNX20wck1naUt6X1dmRzI4OGtGNUNiRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RTQxMS9GMEIwMEVCNDE5MTQxMUVBODZGMjQ4MUVDNEY5QUUwMi9wZU1TTV9tMHJN
Z2lLel9XZkcyODhrRjVDYkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCRqPfQvQ5VORcQBpcfd86pV6bXzjmQ91ExSq91QsP0fNKy2H/plMDj
aH/OeMZAliOXVnnmv6FH+L1IPC9YN2xXV3bmj7tw+aHLCe4XS6MC8UB1htk4fYEu
XaLE5+ivE3VFWd9fZiv6lpgEfhZiXt3qLkGlwR/m4YaP7dhmaN9nwKYdAncH+tsL
XuqFLvXXRaV8Ocwia2KAfWR5abOPpERh0IsINGYTiLpvxM6+LcIFLXZfhg5HhD5m
+yLR0E3fkwOkR1rrUJVWjiOUgLO1A2rVPsQ58ilO0m6yWwlFl7wLK4VzbgmCFxPH
WGyhD4BcSDe0Q0HPl+YfQYW5Uw0+FRMB
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:48:08 2025 by rpki-client