Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft
File:                     xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft (raw, json)
Hash identifier:          sPlgesAqE7BlbQxXjCtxWgmyx00Lvs7UbqFi7OB0SP0=
Subject key identifier:   62:9E:70:72:45:14:59:6F:B7:F8:89:25:91:81:E4:4A:D7:03:68:26
Authority key identifier: C4:23:B0:80:32:62:33:DA:C0:8C:C3:0D:74:A6:5F:F4:A5:29:D0:9A
Certificate issuer:       /CN=A91411C0/serialNumber=C423B080326233DAC08CC30D74A65FF4A529D09A
Certificate serial:       0699
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft
Manifest number:          0694
Signing time:             Thu 30 Jan 2025 22:16:35 +0000
Manifest this update:     Thu 30 Jan 2025 22:16:34 +0000
Manifest next update:     Thu 06 Feb 2025 22:16:34 +0000
Files and hashes:         1: xCOwgDJiM9rAjMMNdKZf9KUp0Jo.crl (hash: EiQLJhdzeYOcZec42ft3xXmJ3x9aIchUqdfz7HHri7I=)
                          2: 0361CF86560211EB97A98D46C4F9AE02.roa (hash: +cH8RmJhdymM82G2tjdg2T5wIUQwcB/rD1A615a7HRQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1689 (0x699)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91411C0/serialNumber=C423B080326233DAC08CC30D74A65FF4A529D09A
        Validity
            Not Before: Jan 30 22:16:34 2025 GMT
            Not After : Feb  6 22:16:34 2025 GMT
        Subject: CN=679bfa42-b347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9e:df:74:20:93:dd:25:8a:34:a4:ba:11:80:
                    87:b3:fe:81:32:27:74:8f:ba:5a:96:8f:5d:2b:1d:
                    cd:1a:24:d5:d5:d9:22:d3:08:66:0c:5f:2d:e4:b5:
                    2f:06:50:bc:7c:47:3a:bb:4f:0c:53:fc:b5:5a:aa:
                    97:c0:78:c0:8c:78:29:00:e2:1c:b2:02:a9:5e:00:
                    cf:ac:39:25:6f:4f:1a:1c:07:0e:8c:19:b6:87:cf:
                    44:98:14:78:2e:b4:68:e3:78:0d:bd:ee:0d:88:69:
                    9e:1a:c3:3b:9f:78:32:c4:ae:14:51:a9:26:b5:1e:
                    72:1e:83:26:7b:83:40:cd:4a:83:15:92:6b:a6:b0:
                    50:a1:dc:3c:dc:ce:8c:1a:69:a8:a1:6e:81:78:e4:
                    77:63:8f:be:61:14:aa:2c:0c:a7:a9:19:eb:4d:86:
                    40:81:b2:c7:15:d2:45:ad:f5:2f:ef:bf:7f:07:a6:
                    78:b1:63:cd:53:53:29:f0:7d:fb:2c:6a:e4:ff:3b:
                    c6:b5:f5:2f:e9:08:36:41:c9:9e:78:21:5b:9e:07:
                    f2:39:3f:9a:62:7a:0a:e3:a4:6c:a8:2a:4d:b5:01:
                    dd:7e:81:27:78:67:bc:ba:9a:4e:a4:be:40:95:98:
                    f2:22:e6:3e:9d:cc:61:06:63:77:cb:19:cc:a8:48:
                    9d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:9E:70:72:45:14:59:6F:B7:F8:89:25:91:81:E4:4A:D7:03:68:26
            X509v3 Authority Key Identifier:
                keyid:C4:23:B0:80:32:62:33:DA:C0:8C:C3:0D:74:A6:5F:F4:A5:29:D0:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:c1:ce:92:82:ec:19:82:e4:e5:32:4e:17:23:1d:7f:e6:89:
         0d:ae:ac:27:ec:fc:2a:69:3f:86:92:5e:09:07:f1:0a:ae:45:
         63:45:35:7c:5d:2f:69:e5:ad:cf:9b:a7:f3:c8:a0:8f:cf:b8:
         cb:23:64:1b:23:0f:c2:c0:92:6b:2b:9f:9a:a2:76:21:d5:35:
         3e:ca:0f:8e:c7:7c:17:90:bc:fc:58:c6:1a:d3:3c:c2:e7:a7:
         f6:0b:ff:2e:7b:fa:64:64:67:94:1e:a7:6b:ac:47:bb:95:30:
         45:00:69:8e:50:48:d4:9e:e9:e2:d4:78:70:8f:68:d9:d3:14:
         20:80:79:75:20:c8:75:51:36:33:a7:92:e0:39:2e:44:60:4e:
         e4:d9:ae:77:93:02:62:42:bb:b6:58:25:01:97:e6:8e:18:d8:
         18:2e:10:ab:19:61:17:cb:ec:c9:d4:d9:51:53:04:a3:d0:c9:
         a0:d8:f0:79:e6:1c:dd:3a:34:4e:16:05:e8:5d:ca:a5:8e:8b:
         e3:54:1e:dc:9f:22:f1:12:e1:69:dd:5c:ce:dc:97:b0:4e:c7:
         69:b0:1c:f5:a1:f0:85:03:18:97:f6:09:6e:0b:a6:ba:f5:1a:
         dc:ed:d6:21:85:ce:2d:5c:a9:d6:4f:ee:d3:ee:14:3f:0c:5d:
         6f:b8:d5:10
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBpkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDExQzAxMTAvBgNVBAUTKEM0MjNCMDgwMzI2MjMzREFDMDhDQzMwRDc0QTY1RkY0
QTUyOUQwOUEwHhcNMjUwMTMwMjIxNjM0WhcNMjUwMjA2MjIxNjM0WjAYMRYwFAYD
VQQDEw02NzliZmE0Mi1iMzQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsJ7fdCCT3SWKNKS6EYCHs/6BMid0j7palo9dKx3NGiTV1dki0whmDF8t5LUv
BlC8fEc6u08MU/y1WqqXwHjAjHgpAOIcsgKpXgDPrDklb08aHAcOjBm2h89EmBR4
LrRo43gNve4NiGmeGsM7n3gyxK4UUakmtR5yHoMme4NAzUqDFZJrprBQodw83M6M
GmmooW6BeOR3Y4++YRSqLAynqRnrTYZAgbLHFdJFrfUv779/B6Z4sWPNU1Mp8H37
LGrk/zvGtfUv6Qg2QcmeeCFbngfyOT+aYnoK46RsqCpNtQHdfoEneGe8uppOpL5A
lZjyIuY+ncxhBmN3yxnMqEidjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGKecHJF
FFlvt/iJJZGB5ErXA2gmMB8GA1UdIwQYMBaAFMQjsIAyYjPawIzDDXSmX/SlKdCa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTFDMC9COTYwMzc1ODU1
RkYxMUVCQkMzNkM4NDNDNEY5QUUwMi94Q093Z0RKaU05ckFqTU1OZEtaZjlLVXAw
Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hDT3dnREppTTlyQWpNTU5kS1pmOUtVcDBKby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MTFDMC9COTYwMzc1ODU1RkYxMUVCQkMzNkM4NDNDNEY5QUUwMi94Q093Z0RKaU05
ckFqTU1OZEtaZjlLVXAwSm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAdwc6SguwZguTlMk4XIx1/5okNrqwn7PwqaT+Gkl4JB/EKrkVjRTV8
XS9p5a3Pm6fzyKCPz7jLI2QbIw/CwJJrK5+aonYh1TU+yg+Ox3wXkLz8WMYa0zzC
56f2C/8ue/pkZGeUHqdrrEe7lTBFAGmOUEjUnuni1Hhwj2jZ0xQggHl1IMh1UTYz
p5LgOS5EYE7k2a53kwJiQru2WCUBl+aOGNgYLhCrGWEXy+zJ1NlRUwSj0Mmg2PB5
5hzdOjROFgXoXcqljovjVB7cnyLxEuFp3VzO3JewTsdpsBz1ofCFAxiX9gluC6a6
9Rrc7dYhhc4tXKnWT+7T7hQ/DF1vuNUQ
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:48:24 2025 by rpki-client