Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft
File:                     ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft (raw, json)
Hash identifier:          c3hTYSatnsXjJV3R6UMRl1S3stz83XK8CTHAjiLgZaQ=
Subject key identifier:   D7:6F:54:F5:66:85:BC:1C:8A:7E:0F:5C:37:01:41:CA:13:8A:6D:9F
Authority key identifier: 21:26:1B:89:74:98:93:C3:B3:18:41:B9:6F:E3:FB:63:23:03:2F:18
Certificate issuer:       /CN=A913F2E2/serialNumber=21261B89749893C3B31841B96FE3FB6323032F18
Certificate serial:       6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ISYbiXSYk8OzGEG5b-P7YyMDLxg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft
Manifest number:          6B
Signing time:             Fri 31 Jan 2025 06:00:21 +0000
Manifest this update:     Fri 31 Jan 2025 06:00:20 +0000
Manifest next update:     Fri 07 Feb 2025 06:00:20 +0000
Files and hashes:         1: ISYbiXSYk8OzGEG5b-P7YyMDLxg.crl (hash: 2L3vbMfAchXhASsMuHTIys7pF3zc/CJG1+Mm8LW/VPE=)
                          2: A8051CC4508011EF81053074C4F9AE02.roa (hash: cDS5FdTBOYoVAs3WZmJDzExZ2RFGAHrfOHhqQyrBupo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109 (0x6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F2E2/serialNumber=21261B89749893C3B31841B96FE3FB6323032F18
        Validity
            Not Before: Jan 31 06:00:20 2025 GMT
            Not After : Feb  7 06:00:20 2025 GMT
        Subject: CN=679c66f5-14ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a9:96:16:70:e6:62:02:66:65:7e:0c:6c:df:
                    10:d5:a4:e6:be:82:fe:17:86:1e:52:ea:25:ca:ec:
                    97:b6:2d:a4:e6:27:96:f4:4f:86:c4:54:7b:91:25:
                    2c:20:ca:da:de:cc:d2:a9:8a:77:6f:66:27:58:90:
                    5c:e4:1b:62:96:d0:8a:9c:05:00:db:26:c8:ca:45:
                    f9:32:f5:3e:aa:6b:52:4b:e5:c6:ff:d2:5b:9f:a9:
                    63:ad:84:fb:43:bb:40:1a:a1:d8:98:6a:7c:10:17:
                    e6:93:4a:ef:3e:86:e7:aa:2b:97:4f:b4:bc:6f:2b:
                    b0:39:c2:bb:cb:68:8c:7b:d0:1c:b5:b0:36:05:3e:
                    5d:67:6e:f1:87:49:ac:a2:82:13:7b:53:95:b7:83:
                    df:4e:9f:e6:67:3d:f4:dc:6f:10:70:a6:cc:57:ab:
                    f3:b0:07:a6:7e:92:89:06:e3:23:e1:8e:9e:45:81:
                    f7:fa:6d:67:c7:cb:27:d1:db:0f:c8:8d:ec:f5:f3:
                    8a:04:25:25:a5:66:65:72:1e:b3:95:7e:3c:1a:f3:
                    c1:2e:b5:ad:eb:72:6e:6c:6a:c4:48:cf:b4:8a:41:
                    0a:24:80:35:b2:51:07:9f:af:b0:3e:35:4a:fc:e7:
                    5a:31:69:05:d1:ea:45:2e:67:2f:6e:75:21:2b:ab:
                    7f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:6F:54:F5:66:85:BC:1C:8A:7E:0F:5C:37:01:41:CA:13:8A:6D:9F
            X509v3 Authority Key Identifier:
                keyid:21:26:1B:89:74:98:93:C3:B3:18:41:B9:6F:E3:FB:63:23:03:2F:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ISYbiXSYk8OzGEG5b-P7YyMDLxg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:43:d9:42:0e:9d:f8:f2:6a:3d:e9:e1:47:07:f4:71:33:cd:
         dc:70:ce:ed:9c:49:24:af:11:1f:34:fd:05:16:92:42:7f:5d:
         c4:13:49:b6:cb:b4:5b:b5:a7:6e:56:2e:08:1e:02:a1:69:a7:
         46:cb:cb:cd:cc:8b:88:c7:00:c1:df:3e:17:20:25:ac:35:eb:
         ef:b2:1d:38:3b:34:61:bb:96:48:c6:b9:6b:16:df:86:5a:3c:
         c1:11:a8:3a:79:00:bb:57:96:3e:93:cf:46:d8:60:ed:50:d0:
         a3:d8:df:0a:73:2a:6c:3b:6c:4d:12:8e:ab:22:f4:59:53:6e:
         a4:61:9d:5b:c8:af:a8:31:f4:00:b2:e9:5c:1f:c4:ad:e9:c0:
         31:3b:3f:9f:58:54:4b:a8:63:0c:59:59:62:d5:1c:34:9f:a2:
         77:bd:e8:13:8d:b8:d4:37:63:71:b0:cf:8f:01:2d:25:bf:43:
         e7:4f:b9:ac:f4:f6:4f:75:b0:6b:57:ec:64:8a:04:e5:c5:05:
         5b:71:13:d0:dc:e8:cf:73:5b:38:0c:ec:47:f2:ff:78:76:2a:
         bc:a4:ee:b9:40:3c:ee:e7:42:67:b4:2b:dd:5f:02:a2:53:84:
         9e:21:bf:89:d4:f2:36:33:33:31:48:1c:34:d2:9e:86:8e:22:
         46:d2:4d:14
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
RjJFMjExMC8GA1UEBRMoMjEyNjFCODk3NDk4OTNDM0IzMTg0MUI5NkZFM0ZCNjMy
MzAzMkYxODAeFw0yNTAxMzEwNjAwMjBaFw0yNTAyMDcwNjAwMjBaMBgxFjAUBgNV
BAMTDTY3OWM2NmY1LTE0Y2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDpqZYWcOZiAmZlfgxs3xDVpOa+gv4Xhh5S6iXK7Je2LaTmJ5b0T4bEVHuRJSwg
ytrezNKpindvZidYkFzkG2KW0IqcBQDbJsjKRfky9T6qa1JL5cb/0lufqWOthPtD
u0AaodiYanwQF+aTSu8+hueqK5dPtLxvK7A5wrvLaIx70By1sDYFPl1nbvGHSayi
ghN7U5W3g99On+ZnPfTcbxBwpsxXq/OwB6Z+kokG4yPhjp5Fgff6bWfHyyfR2w/I
jez184oEJSWlZmVyHrOVfjwa88Euta3rcm5sasRIz7SKQQokgDWyUQefr7A+NUr8
51oxaQXR6kUuZy9udSErq3+JAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU129U9WaF
vByKfg9cNwFByhOKbZ8wHwYDVR0jBBgwFoAUISYbiXSYk8OzGEG5b+P7YyMDLxgw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNGMkUyL0M1QjZCOTM2NDQw
NDExRUZCOUE2MkMwREM0RjlBRTAyL0lTWWJpWFNZazhPekdFRzViLVA3WXlNREx4
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvSVNZYmlYU1lrOE96R0VHNWItUDdZeU1ETHhnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNG
MkUyL0M1QjZCOTM2NDQwNDExRUZCOUE2MkMwREM0RjlBRTAyL0lTWWJpWFNZazhP
ekdFRzViLVA3WXlNREx4Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAKtD2UIOnfjyaj3p4UcH9HEzzdxwzu2cSSSvER80/QUWkkJ/XcQTSbbL
tFu1p25WLggeAqFpp0bLy83Mi4jHAMHfPhcgJaw16++yHTg7NGG7lkjGuWsW34Za
PMERqDp5ALtXlj6Tz0bYYO1Q0KPY3wpzKmw7bE0Sjqsi9FlTbqRhnVvIr6gx9ACy
6VwfxK3pwDE7P59YVEuoYwxZWWLVHDSfone96BONuNQ3Y3Gwz48BLSW/Q+dPuaz0
9k91sGtX7GSKBOXFBVtxE9Dc6M9zWzgM7Efy/3h2Kryk7rlAPO7nQme0K91fAqJT
hJ4hv4nU8jYzMzFIHDTSnoaOIkbSTRQ=
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:24:53 2025 by rpki-client