Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft
File:                     TSeJUeK9itKFuUCo6p5X43lxHms.mft (raw, json)
Hash identifier:          awqOr+Cg4CgS/4h5AAPVPeqFC7m0Rk4OTnUucIsovH8=
Subject key identifier:   09:C2:7D:78:30:9B:E8:97:76:76:92:81:6C:D3:41:0C:6D:CD:6C:58
Authority key identifier: 4D:27:89:51:E2:BD:8A:D2:85:B9:40:A8:EA:9E:57:E3:79:71:1E:6B
Certificate issuer:       /CN=A91342C5/serialNumber=4D278951E2BD8AD285B940A8EA9E57E379711E6B
Certificate serial:       034E
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TSeJUeK9itKFuUCo6p5X43lxHms.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft
Manifest number:          034A
Signing time:             Fri 31 Jan 2025 01:07:10 +0000
Manifest this update:     Fri 31 Jan 2025 01:07:09 +0000
Manifest next update:     Fri 07 Feb 2025 01:07:09 +0000
Files and hashes:         1: TSeJUeK9itKFuUCo6p5X43lxHms.crl (hash: 1moTEArA5fwFzAYiK6zEsCu0c4RGfXF/HPtVuwt212A=)
                          2: E8E194B8A5CC11EC85A86A1FC4F9AE02.roa (hash: 7sllHtcg2JAQH6y/I95UaiNcgMx5Ie6eNWsWAGqdrVU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 846 (0x34e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91342C5/serialNumber=4D278951E2BD8AD285B940A8EA9E57E379711E6B
        Validity
            Not Before: Jan 31 01:07:09 2025 GMT
            Not After : Feb  7 01:07:09 2025 GMT
        Subject: CN=679c223e-5f33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8c:83:88:56:f7:1c:7c:8c:e4:d8:f0:c1:5a:
                    8a:16:5e:9a:dd:27:ca:2f:31:73:85:cf:27:94:22:
                    27:f3:5c:01:22:39:9d:82:c1:49:67:6d:a0:73:c3:
                    50:d4:b3:aa:e8:0d:e6:f3:bc:ef:6b:63:4a:9f:f2:
                    51:8a:56:30:26:1d:ad:a9:e5:03:6d:77:44:c1:d1:
                    ab:44:0a:45:64:7d:37:19:ac:b1:d7:b1:78:84:07:
                    08:b0:80:ae:0c:00:f2:60:23:cb:e9:3a:30:1c:98:
                    1a:2b:3c:68:e3:e5:b8:9c:7f:ba:f8:a0:bf:72:8d:
                    93:61:c0:59:3f:6d:53:41:83:73:91:8e:20:c3:15:
                    ce:dd:1b:90:1b:6d:81:9e:ee:1d:ca:c5:41:a8:63:
                    46:39:c8:a0:6d:91:81:60:db:3e:b2:a1:35:50:48:
                    60:4a:df:f2:33:28:72:a0:e2:17:dd:0d:b8:28:22:
                    8b:b1:61:eb:99:92:f9:69:81:ba:b3:a4:e0:b8:bd:
                    d4:cc:64:ce:49:55:80:4c:19:81:13:25:e6:12:eb:
                    18:c7:9e:74:c4:00:d7:b0:e1:5b:b1:72:5f:56:72:
                    fd:5c:0b:9f:3e:32:ff:c2:b9:ab:82:7d:ee:51:88:
                    71:34:78:ad:59:89:61:4f:26:03:60:ce:ba:6c:33:
                    b3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C2:7D:78:30:9B:E8:97:76:76:92:81:6C:D3:41:0C:6D:CD:6C:58
            X509v3 Authority Key Identifier:
                keyid:4D:27:89:51:E2:BD:8A:D2:85:B9:40:A8:EA:9E:57:E3:79:71:1E:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TSeJUeK9itKFuUCo6p5X43lxHms.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:01:77:81:78:e4:31:7c:60:8a:4b:d4:1d:88:2b:bc:ea:6f:
         d3:c7:d0:ec:97:16:8a:5c:e8:79:63:94:b1:3d:74:0c:9e:61:
         26:1c:70:3c:87:1b:99:37:61:8b:c0:10:5a:a6:36:2a:28:08:
         54:d8:5a:8a:67:ed:a0:5b:50:34:7e:71:98:ac:1e:0e:4a:3b:
         63:c8:ab:2e:16:38:0f:5d:86:e3:32:1c:d5:33:e3:20:23:b6:
         1b:19:b1:e9:bd:6d:15:03:c9:a3:11:f6:c7:11:ce:72:18:1c:
         31:2c:9e:46:44:f8:44:ac:39:90:f6:db:3e:c6:93:04:f0:4b:
         b0:25:78:7a:c5:d5:51:45:e8:70:e2:42:6c:16:35:c3:87:fd:
         3b:10:44:da:b7:98:2b:50:f1:96:a6:da:8d:c7:bd:e7:53:ca:
         30:22:a9:40:14:93:cd:9d:b1:1e:9e:65:1a:04:41:bb:84:21:
         57:86:58:ca:be:2a:f1:03:a8:ee:e5:dd:ba:ff:3c:7c:03:0f:
         ea:3b:58:48:4c:1b:e1:f8:b7:13:89:7c:e4:a5:0c:a5:c8:4e:
         6d:7d:47:5c:10:19:46:da:f2:77:f9:c3:b4:fd:7b:38:1d:18:
         20:2d:28:80:54:83:36:da:c6:08:97:8c:ad:54:e0:9d:9d:17:
         c8:2c:e3:ea
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA04wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzQyQzUxMTAvBgNVBAUTKDREMjc4OTUxRTJCRDhBRDI4NUI5NDBBOEVBOUU1N0Uz
Nzk3MTFFNkIwHhcNMjUwMTMxMDEwNzA5WhcNMjUwMjA3MDEwNzA5WjAYMRYwFAYD
VQQDEw02NzljMjIzZS01ZjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqIyDiFb3HHyM5NjwwVqKFl6a3SfKLzFzhc8nlCIn81wBIjmdgsFJZ22gc8NQ
1LOq6A3m87zva2NKn/JRilYwJh2tqeUDbXdEwdGrRApFZH03Gayx17F4hAcIsICu
DADyYCPL6TowHJgaKzxo4+W4nH+6+KC/co2TYcBZP21TQYNzkY4gwxXO3RuQG22B
nu4dysVBqGNGOcigbZGBYNs+sqE1UEhgSt/yMyhyoOIX3Q24KCKLsWHrmZL5aYG6
s6TguL3UzGTOSVWATBmBEyXmEusYx550xADXsOFbsXJfVnL9XAufPjL/wrmrgn3u
UYhxNHitWYlhTyYDYM66bDOzwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAnCfXgw
m+iXdnaSgWzTQQxtzWxYMB8GA1UdIwQYMBaAFE0niVHivYrShblAqOqeV+N5cR5r
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDJDNS8xNjYzN0MyRUE0
RTkxMUVDQUYzRkIxNTJDNEY5QUUwMi9UU2VKVWVLOWl0S0Z1VUNvNnA1WDQzbHhI
bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL1RTZUpVZUs5aXRLRnVVQ282cDVYNDNseEhtcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NDJDNS8xNjYzN0MyRUE0RTkxMUVDQUYzRkIxNTJDNEY5QUUwMi9UU2VKVWVLOWl0
S0Z1VUNvNnA1WDQzbHhIbXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCsAXeBeOQxfGCKS9QdiCu86m/Tx9DslxaKXOh5Y5SxPXQMnmEmHHA8
hxuZN2GLwBBapjYqKAhU2FqKZ+2gW1A0fnGYrB4OSjtjyKsuFjgPXYbjMhzVM+Mg
I7YbGbHpvW0VA8mjEfbHEc5yGBwxLJ5GRPhErDmQ9ts+xpME8EuwJXh6xdVRRehw
4kJsFjXDh/07EETat5grUPGWptqNx73nU8owIqlAFJPNnbEenmUaBEG7hCFXhljK
virxA6ju5d26/zx8Aw/qO1hITBvh+LcTiXzkpQylyE5tfUdcEBlG2vJ3+cO0/Xs4
HRggLSiAVIM22sYIl4ytVOCdnRfILOPq
-----END CERTIFICATE-----
Generated at Sat Apr 26 21:35:21 2025 by rpki-client