Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.mft
File:                     ftznGSWL7fkKqGya6wjN0x7vV3o.mft (raw, json)
Hash identifier:          W9yrVwv009I17C546Z4eph3AVaImDUJ6OXmYti56nf8=
Subject key identifier:   30:16:EE:97:F2:EC:D3:A1:89:7A:72:6F:87:12:5A:E6:77:F7:DC:FE
Authority key identifier: 7E:DC:E7:19:25:8B:ED:F9:0A:A8:6C:9A:EB:08:CD:D3:1E:EF:57:7A
Certificate issuer:       /CN=A912E53C/serialNumber=7EDCE719258BEDF90AA86C9AEB08CDD31EEF577A
Certificate serial:       B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftznGSWL7fkKqGya6wjN0x7vV3o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.mft
Manifest number:          B1
Signing time:             Fri 31 Jan 2025 05:19:34 +0000
Manifest this update:     Fri 31 Jan 2025 05:19:34 +0000
Manifest next update:     Fri 07 Feb 2025 05:19:34 +0000
Files and hashes:         1: ftznGSWL7fkKqGya6wjN0x7vV3o.crl (hash: d3Q9dWm/uwZ/jktbjMC/ANt/DSDwbwmBBlZLavScYLE=)
                          2: 44CA7E22F0D811EEA8D08633C4F9AE02.roa (hash: nZ8knmFU4g4M4hAXkEi+bsMV/nWOaZQY4l6coiYGg+M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179 (0xb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E53C/serialNumber=7EDCE719258BEDF90AA86C9AEB08CDD31EEF577A
        Validity
            Not Before: Jan 31 05:19:34 2025 GMT
            Not After : Feb  7 05:19:34 2025 GMT
        Subject: CN=679c5d66-29aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:99:7c:ec:ad:55:c1:0c:77:86:30:e9:9c:0e:
                    1d:e8:d0:db:ae:c1:e6:52:b3:78:c4:0e:2b:56:ba:
                    e8:ef:d8:96:ea:d4:d3:c1:bb:de:c6:d5:11:3f:ee:
                    2f:68:5b:4c:5b:ab:b4:70:d3:9c:13:86:26:17:f3:
                    65:4f:7d:16:99:67:66:5e:37:41:e3:c5:a3:1a:f1:
                    58:92:d5:21:db:b9:48:ad:8c:87:3e:cb:99:08:f5:
                    04:92:f3:64:2a:2c:59:b2:40:88:4a:07:32:3b:d6:
                    e4:61:9c:3f:74:82:a6:a9:b5:cc:67:47:b2:64:a5:
                    82:b0:82:81:0c:cb:be:25:c6:7e:d7:cf:e0:a6:8d:
                    48:ad:da:80:4b:f4:0c:e2:d5:dd:9f:d3:11:7f:bf:
                    1e:76:8f:d9:50:7e:cb:ee:16:e3:52:f6:70:0e:5a:
                    9f:2c:18:da:47:e3:87:d0:df:02:9e:30:0b:a1:60:
                    a4:5f:86:65:05:d8:a3:39:48:ed:69:5e:4e:95:b8:
                    91:4e:ba:34:43:56:0c:ad:bc:9f:db:dd:2f:eb:a6:
                    e5:dc:17:ec:38:9a:13:37:91:4c:20:b4:88:83:28:
                    48:80:48:41:8b:60:4b:40:71:26:67:b3:38:42:68:
                    2a:c3:17:6c:7d:19:65:d4:60:91:17:d5:2d:2a:72:
                    3f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:16:EE:97:F2:EC:D3:A1:89:7A:72:6F:87:12:5A:E6:77:F7:DC:FE
            X509v3 Authority Key Identifier:
                keyid:7E:DC:E7:19:25:8B:ED:F9:0A:A8:6C:9A:EB:08:CD:D3:1E:EF:57:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftznGSWL7fkKqGya6wjN0x7vV3o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:52:ca:64:56:99:0f:60:12:e1:59:fd:78:b0:e9:23:71:24:
         85:03:bb:85:65:6b:df:57:71:12:f0:df:02:0c:d9:f2:a6:6b:
         80:fe:17:f4:49:33:6c:3c:af:d4:87:f5:72:94:af:f7:df:83:
         3b:c7:59:c2:57:83:c3:49:d5:51:eb:c2:d9:94:e3:d7:82:a7:
         b9:cc:11:6a:0e:d0:22:ee:d8:2a:12:ec:68:aa:38:c0:77:91:
         11:a0:3e:0d:31:57:35:e6:ae:bb:8a:d2:ba:6d:2e:ad:f0:d8:
         df:08:3e:6f:05:60:2f:81:e0:45:1b:d5:9d:df:9d:03:46:9d:
         bb:20:c7:34:43:95:d2:c1:45:fd:94:85:1f:01:f9:62:f2:05:
         6c:d6:1c:ab:cd:36:12:ae:97:e8:37:ca:ec:47:a1:9a:f0:eb:
         83:d6:65:31:51:2c:29:e2:72:29:17:d5:a0:7e:32:8b:79:82:
         6a:5d:4e:26:95:ec:2a:ac:e5:b5:eb:6e:5e:ad:2f:ab:48:5c:
         3e:79:50:9e:18:9a:46:d6:1c:3e:17:c2:8d:bd:4e:b4:87:ab:
         0a:3e:72:c1:97:ec:5d:e9:64:a4:fc:d9:3c:68:24:8b:9e:fe:
         96:e0:12:d0:65:37:14:ca:fb:6a:d6:a8:35:c3:29:5d:55:f5:
         1a:e4:2a:fd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICALMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkU1M0MxMTAvBgNVBAUTKDdFRENFNzE5MjU4QkVERjkwQUE4NkM5QUVCMDhDREQz
MUVFRjU3N0EwHhcNMjUwMTMxMDUxOTM0WhcNMjUwMjA3MDUxOTM0WjAYMRYwFAYD
VQQDEw02NzljNWQ2Ni0yOWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzZl87K1VwQx3hjDpnA4d6NDbrsHmUrN4xA4rVrro79iW6tTTwbvextURP+4v
aFtMW6u0cNOcE4YmF/NlT30WmWdmXjdB48WjGvFYktUh27lIrYyHPsuZCPUEkvNk
KixZskCISgcyO9bkYZw/dIKmqbXMZ0eyZKWCsIKBDMu+JcZ+18/gpo1IrdqAS/QM
4tXdn9MRf78edo/ZUH7L7hbjUvZwDlqfLBjaR+OH0N8CnjALoWCkX4ZlBdijOUjt
aV5OlbiRTro0Q1YMrbyf290v66bl3BfsOJoTN5FMILSIgyhIgEhBi2BLQHEmZ7M4
QmgqwxdsfRll1GCRF9UtKnI/cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDAW7pfy
7NOhiXpyb4cSWuZ399z+MB8GA1UdIwQYMBaAFH7c5xkli+35CqhsmusIzdMe71d6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTUzQy80QkQwRTVGOEQz
N0QxMUVFQkEwNUJEMTZDNEY5QUUwMi9mdHpuR1NXTDdma0txR3lhNndqTjB4N3ZW
M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Z0em5HU1dMN2ZrS3FHeWE2d2pOMHg3dlYzby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RTUzQy80QkQwRTVGOEQzN0QxMUVFQkEwNUJEMTZDNEY5QUUwMi9mdHpuR1NXTDdm
a0txR3lhNndqTjB4N3ZWM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCCUspkVpkPYBLhWf14sOkjcSSFA7uFZWvfV3ES8N8CDNnypmuA/hf0
STNsPK/Uh/VylK/334M7x1nCV4PDSdVR68LZlOPXgqe5zBFqDtAi7tgqEuxoqjjA
d5ERoD4NMVc15q67itK6bS6t8NjfCD5vBWAvgeBFG9Wd350DRp27IMc0Q5XSwUX9
lIUfAfli8gVs1hyrzTYSrpfoN8rsR6Ga8OuD1mUxUSwp4nIpF9WgfjKLeYJqXU4m
lewqrOW1625erS+rSFw+eVCeGJpG1hw+F8KNvU60h6sKPnLBl+xd6WSk/Nk8aCSL
nv6W4BLQZTcUyvtq1qg1wyldVfUa5Cr9
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:57:07 2025 by rpki-client