Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.mft
File:                     5muokllQFHlLtkUdFCgchAAgYgM.mft (raw, json)
Hash identifier:          aJ46cNUgLWR5vbnWUgltSoNO7/idxiD0sPNxM9sw3Wk=
Subject key identifier:   1F:DC:74:88:C9:0B:BA:E5:E9:F4:27:41:BA:E0:04:57:CA:8F:D9:91
Authority key identifier: E6:6B:A8:92:59:50:14:79:4B:B6:45:1D:14:28:1C:84:00:20:62:03
Certificate issuer:       /CN=A9140BA4/serialNumber=E66BA892595014794BB6451D14281C8400206203
Certificate serial:       1431
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5muokllQFHlLtkUdFCgchAAgYgM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.mft
Manifest number:          142F
Signing time:             Fri 31 Jan 2025 16:55:14 +0000
Manifest this update:     Fri 31 Jan 2025 16:55:14 +0000
Manifest next update:     Fri 07 Feb 2025 16:55:14 +0000
Files and hashes:         1: 5muokllQFHlLtkUdFCgchAAgYgM.crl (hash: HyMw+HH5cUi3aLhRVzy6NO3q6wiOVeGioUxWYX2DiwA=)
                          2: 3FF298D41AFF11EFB20C2648C4F9AE02.roa (hash: h/4RQkDOLBBPlrQUpebdiQb7wWMHpGVL3kG7tSUKXbM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5169 (0x1431)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140BA4/serialNumber=E66BA892595014794BB6451D14281C8400206203
        Validity
            Not Before: Jan 31 16:55:14 2025 GMT
            Not After : Feb  7 16:55:14 2025 GMT
        Subject: CN=679d0072-8b11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e0:98:ee:16:b8:8b:3c:b8:8e:87:c1:09:bb:
                    eb:a8:1e:f9:83:e9:8e:c1:07:27:7e:62:c6:72:d0:
                    52:79:c4:57:83:1f:ba:4f:fd:b2:e1:81:8a:ba:85:
                    36:f0:79:35:9d:a2:2b:47:61:a8:9d:55:1a:3b:99:
                    cb:0f:98:36:15:f5:3f:93:6a:c6:df:e3:62:ec:2d:
                    59:b1:00:4b:a7:37:5f:fd:6d:34:24:8c:9d:79:7b:
                    15:ff:bd:2f:ad:85:59:ed:0e:a3:75:6d:22:2b:9f:
                    bc:16:bf:4d:41:dd:c2:70:f5:f4:17:20:51:b0:4d:
                    dc:ef:ed:65:66:c4:3d:c4:07:ce:ac:c9:1f:3a:2d:
                    90:4c:42:a0:7d:5b:40:41:59:ce:9f:7a:5e:1f:cc:
                    b6:ba:88:c7:ef:32:40:bd:ca:2f:68:c3:c0:88:9a:
                    68:34:1a:1d:07:6d:cd:50:2b:c8:4e:ac:16:64:79:
                    a4:6a:17:2e:2e:d6:f1:ba:63:e5:dd:9f:4e:10:88:
                    2a:4f:b7:12:8f:f7:46:88:ac:b9:be:f1:2a:1c:ee:
                    50:d2:44:12:2b:c4:79:68:f7:44:2f:20:38:f3:08:
                    b8:3c:b7:d6:ab:45:e4:d3:04:c2:08:5f:6a:2e:f7:
                    b5:06:f6:5e:d1:0c:60:fd:93:ac:bd:8e:05:24:3f:
                    f4:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:DC:74:88:C9:0B:BA:E5:E9:F4:27:41:BA:E0:04:57:CA:8F:D9:91
            X509v3 Authority Key Identifier:
                keyid:E6:6B:A8:92:59:50:14:79:4B:B6:45:1D:14:28:1C:84:00:20:62:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5muokllQFHlLtkUdFCgchAAgYgM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:5e:fa:8f:3d:56:a0:2c:3a:6e:8d:30:8a:c1:3d:e8:e1:eb:
         71:d7:4e:83:42:ee:80:a0:4c:4c:b3:18:40:af:06:ce:dc:47:
         bb:9e:13:b7:e6:07:50:be:08:78:9a:44:83:03:23:c2:bf:05:
         9f:81:69:b4:02:b6:53:85:1c:ea:5e:f4:14:17:e7:bf:c7:d2:
         7f:e0:64:1b:fb:03:9d:76:bf:5f:1e:58:27:fb:e8:59:13:3d:
         23:12:59:1c:c4:76:47:07:45:85:34:74:4a:cc:31:d5:53:3a:
         94:8e:5d:d0:6d:6b:01:77:bf:bd:90:d6:39:cd:0b:31:a9:26:
         f2:71:2c:61:30:50:f0:6c:bd:cf:ad:a1:ce:76:d2:d1:90:1f:
         4c:02:08:e6:df:9b:27:6b:28:00:eb:b4:0e:42:c2:f8:99:36:
         e4:25:aa:c4:36:63:7b:70:26:67:05:dd:fe:93:57:22:e8:a7:
         a2:9d:4d:a6:e0:01:4e:81:d3:e1:86:54:d9:9b:c2:7e:19:81:
         9a:9e:be:67:16:68:02:c8:a1:8c:30:1a:83:18:c2:0a:9f:c0:
         40:39:29:cf:ab:4a:b1:25:44:39:d1:4e:1c:e9:5f:ee:5a:db:
         20:53:54:62:90:f7:d3:a2:17:be:a5:45:2d:5b:2c:9c:3d:ee:
         88:cd:19:00
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICFDEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDBCQTQxMTAvBgNVBAUTKEU2NkJBODkyNTk1MDE0Nzk0QkI2NDUxRDE0MjgxQzg0
MDAyMDYyMDMwHhcNMjUwMTMxMTY1NTE0WhcNMjUwMjA3MTY1NTE0WjAYMRYwFAYD
VQQDEw02NzlkMDA3Mi04YjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxOCY7ha4izy4jofBCbvrqB75g+mOwQcnfmLGctBSecRXgx+6T/2y4YGKuoU2
8Hk1naIrR2GonVUaO5nLD5g2FfU/k2rG3+Ni7C1ZsQBLpzdf/W00JIydeXsV/70v
rYVZ7Q6jdW0iK5+8Fr9NQd3CcPX0FyBRsE3c7+1lZsQ9xAfOrMkfOi2QTEKgfVtA
QVnOn3peH8y2uojH7zJAvcovaMPAiJpoNBodB23NUCvITqwWZHmkahcuLtbxumPl
3Z9OEIgqT7cSj/dGiKy5vvEqHO5Q0kQSK8R5aPdELyA48wi4PLfWq0Xk0wTCCF9q
Lve1BvZe0Qxg/ZOsvY4FJD/0MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB/cdIjJ
C7rl6fQnQbrgBFfKj9mRMB8GA1UdIwQYMBaAFOZrqJJZUBR5S7ZFHRQoHIQAIGID
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEJBNC80N0U5MjY4NjY4
RUQxMUU4OTBFMzk1NDlDNEY5QUUwMi81bXVva2xsUUZIbEx0a1VkRkNnY2hBQWdZ
Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVtdW9rbGxRRkhsTHRrVWRGQ2djaEFBZ1lnTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MEJBNC80N0U5MjY4NjY4RUQxMUU4OTBFMzk1NDlDNEY5QUUwMi81bXVva2xsUUZI
bEx0a1VkRkNnY2hBQWdZZ00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB+XvqPPVagLDpujTCKwT3o4etx106DQu6AoExMsxhArwbO3Ee7nhO3
5gdQvgh4mkSDAyPCvwWfgWm0ArZThRzqXvQUF+e/x9J/4GQb+wOddr9fHlgn++hZ
Ez0jElkcxHZHB0WFNHRKzDHVUzqUjl3QbWsBd7+9kNY5zQsxqSbycSxhMFDwbL3P
raHOdtLRkB9MAgjm35snaygA67QOQsL4mTbkJarENmN7cCZnBd3+k1ci6KeinU2m
4AFOgdPhhlTZm8J+GYGanr5nFmgCyKGMMBqDGMIKn8BAOSnPq0qxJUQ50U4c6V/u
WtsgU1RikPfTohe+pUUtWyycPe6IzRkA
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:15:31 2025 by rpki-client