Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.mft
File:                     5G6s3CFDhcFCA0Z05Gxo57vilSU.mft (raw, json)
Hash identifier:          qF07YtfcVSWgpac+XHBOC4SCmUlKUlTXWhw0cxZfGak=
Subject key identifier:   CC:51:8E:AA:F0:20:9A:09:1F:5F:A9:6B:99:50:45:8D:E4:70:A8:16
Authority key identifier: E4:6E:AC:DC:21:43:85:C1:42:03:46:74:E4:6C:68:E7:BB:E2:95:25
Certificate issuer:       /CN=A91372E6/serialNumber=E46EACDC214385C142034674E46C68E7BBE29525
Certificate serial:       93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G6s3CFDhcFCA0Z05Gxo57vilSU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.mft
Manifest number:          92
Signing time:             Fri 31 Jan 2025 05:30:45 +0000
Manifest this update:     Fri 31 Jan 2025 05:30:45 +0000
Manifest next update:     Fri 07 Feb 2025 05:30:44 +0000
Files and hashes:         1: 5G6s3CFDhcFCA0Z05Gxo57vilSU.crl (hash: bHiYBkFlJSCDBh27ld0N0MRHVaOlZADS32ETyKKH+Aw=)
                          2: 44B42A0EFDE511EEAD5A6432C4F9AE02.roa (hash: j8TVDnQNxdrKAo9n6JHtnB5eeit+C4Hgh115UzRpapo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147 (0x93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91372E6/serialNumber=E46EACDC214385C142034674E46C68E7BBE29525
        Validity
            Not Before: Jan 31 05:30:45 2025 GMT
            Not After : Feb  7 05:30:44 2025 GMT
        Subject: CN=679c6005-010f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a4:82:27:ce:a9:02:a8:f4:84:5e:89:b4:9b:
                    f3:fe:e5:ec:02:aa:dd:85:0a:b4:95:f5:21:54:3e:
                    c0:c7:91:03:7e:0f:56:90:05:67:f1:e2:86:ea:35:
                    ab:21:8b:90:4b:d6:92:80:a5:84:6f:60:03:9b:a7:
                    65:11:50:74:09:09:a0:a0:77:f9:36:4f:16:ef:06:
                    f7:60:57:c2:02:6b:57:9e:3d:a5:3b:06:31:f5:47:
                    00:72:66:85:86:06:e7:d3:31:ae:88:f9:7a:40:6d:
                    4e:17:0b:1f:3b:58:6f:f0:a7:ad:a7:24:d0:c0:4b:
                    e0:01:96:2b:1d:c7:c8:3c:6b:59:89:d3:ca:4a:6d:
                    0d:af:1c:10:30:f3:e4:93:53:51:23:26:08:45:5d:
                    ec:4b:c8:e2:7a:81:cf:23:d2:1a:a6:68:29:ec:fb:
                    ab:0a:8c:4c:a7:ee:32:c2:08:ce:cd:8c:e2:a5:9f:
                    03:5b:68:f3:0f:fb:48:c5:25:d9:11:61:c3:a8:1d:
                    45:cf:00:9e:c6:f9:15:8f:15:32:dc:88:04:ac:1b:
                    a5:89:3c:7c:85:25:86:13:75:fa:da:07:68:50:a1:
                    3f:26:08:1f:e7:43:3a:00:2b:7a:20:62:bc:6a:ee:
                    09:75:39:0b:33:75:8d:12:ff:8c:48:a2:79:18:d9:
                    85:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:51:8E:AA:F0:20:9A:09:1F:5F:A9:6B:99:50:45:8D:E4:70:A8:16
            X509v3 Authority Key Identifier:
                keyid:E4:6E:AC:DC:21:43:85:C1:42:03:46:74:E4:6C:68:E7:BB:E2:95:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G6s3CFDhcFCA0Z05Gxo57vilSU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:13:7f:2b:ec:77:85:8f:12:bc:89:b1:1f:26:d1:85:f5:09:
         95:d7:98:df:d3:78:17:2e:8e:3d:ee:95:c6:4b:8d:39:be:0c:
         66:04:3c:de:16:07:03:71:81:4d:c3:18:ce:63:ca:bc:4b:b9:
         4d:28:cc:42:52:31:06:b1:00:38:0a:3e:eb:26:c7:62:01:5a:
         6f:89:2f:b0:34:16:dd:93:5e:02:ce:2b:e0:86:a8:a5:3f:c9:
         ad:1c:ac:9f:0f:a8:4d:c2:16:3b:6d:8e:d9:cf:75:7d:41:74:
         13:e6:fe:76:6b:12:c5:34:bb:0f:8c:d7:98:10:77:d3:12:f3:
         86:7b:95:47:cf:f0:92:da:09:29:8a:66:4f:a9:15:92:63:ab:
         0a:ca:71:41:c8:47:fb:66:70:ae:26:9a:05:39:d3:a2:b2:a7:
         a1:16:00:01:be:84:53:e9:ac:06:a3:4e:87:26:c4:34:5c:1b:
         28:2d:2e:df:7a:e1:bb:1c:f0:7a:7b:ca:5d:37:b2:9e:68:48:
         b8:48:9e:20:ce:8f:7d:44:82:07:e7:64:46:f2:f3:b3:3b:97:
         ae:f2:af:a1:78:ee:79:49:b9:11:3e:99:13:89:9e:bd:96:7d:
         65:73:8b:ae:d7:d4:ff:47:b0:9b:b9:32:7b:3d:45:7d:ce:be:
         1f:04:51:d1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzcyRTYxMTAvBgNVBAUTKEU0NkVBQ0RDMjE0Mzg1QzE0MjAzNDY3NEU0NkM2OEU3
QkJFMjk1MjUwHhcNMjUwMTMxMDUzMDQ1WhcNMjUwMjA3MDUzMDQ0WjAYMRYwFAYD
VQQDEw02NzljNjAwNS0wMTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4aSCJ86pAqj0hF6JtJvz/uXsAqrdhQq0lfUhVD7Ax5EDfg9WkAVn8eKG6jWr
IYuQS9aSgKWEb2ADm6dlEVB0CQmgoHf5Nk8W7wb3YFfCAmtXnj2lOwYx9UcAcmaF
hgbn0zGuiPl6QG1OFwsfO1hv8KetpyTQwEvgAZYrHcfIPGtZidPKSm0NrxwQMPPk
k1NRIyYIRV3sS8jieoHPI9Iapmgp7PurCoxMp+4ywgjOzYzipZ8DW2jzD/tIxSXZ
EWHDqB1FzwCexvkVjxUy3IgErBuliTx8hSWGE3X62gdoUKE/Jggf50M6ACt6IGK8
au4JdTkLM3WNEv+MSKJ5GNmFAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMxRjqrw
IJoJH1+pa5lQRY3kcKgWMB8GA1UdIwQYMBaAFORurNwhQ4XBQgNGdORsaOe74pUl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzJFNi9GMzU5MDgyNEZE
RTMxMUVFQUE3NzdEMTFDNEY5QUUwMi81RzZzM0NGRGhjRkNBMFowNUd4bzU3dmls
U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVHNnMzQ0ZEaGNGQ0EwWjA1R3hvNTd2aWxTVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NzJFNi9GMzU5MDgyNEZERTMxMUVFQUE3NzdEMTFDNEY5QUUwMi81RzZzM0NGRGhj
RkNBMFowNUd4bzU3dmlsU1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAkE38r7HeFjxK8ibEfJtGF9QmV15jf03gXLo497pXGS405vgxmBDze
FgcDcYFNwxjOY8q8S7lNKMxCUjEGsQA4Cj7rJsdiAVpviS+wNBbdk14Czivghqil
P8mtHKyfD6hNwhY7bY7Zz3V9QXQT5v52axLFNLsPjNeYEHfTEvOGe5VHz/CS2gkp
imZPqRWSY6sKynFByEf7ZnCuJpoFOdOisqehFgABvoRT6awGo06HJsQ0XBsoLS7f
euG7HPB6e8pdN7KeaEi4SJ4gzo99RIIH52RG8vOzO5eu8q+heO55SbkRPpkTiZ69
ln1lc4uu19T/R7CbuTJ7PUV9zr4fBFHR
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:13:56 2025 by rpki-client