Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft
File:                     quV1mn6YqnRYWY3jwZqheX8A9fU.mft (raw, json)
Hash identifier:          Ku+Ja9ZNmMYw222cckMeTCZpyGk3qEklNF107UZ9eg4=
Subject key identifier:   CA:2D:9D:A9:40:B0:61:7D:FA:D2:D3:FA:B4:91:D4:A1:A9:64:61:37
Authority key identifier: AA:E5:75:9A:7E:98:AA:74:58:59:8D:E3:C1:9A:A1:79:7F:00:F5:F5
Certificate issuer:       /CN=A9142489/serialNumber=AAE5759A7E98AA7458598DE3C19AA1797F00F5F5
Certificate serial:       32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quV1mn6YqnRYWY3jwZqheX8A9fU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft
Manifest number:          30
Signing time:             Fri 31 Jan 2025 06:44:16 +0000
Manifest this update:     Fri 31 Jan 2025 06:44:16 +0000
Manifest next update:     Fri 07 Feb 2025 06:44:16 +0000
Files and hashes:         1: quV1mn6YqnRYWY3jwZqheX8A9fU.crl (hash: 5LrkWMYSnwwqxSaMhPYhETLvNbhB+C0jWqLNk3OHaow=)
                          2: 4D7DE09E9BFB11EF8E975D70C4F9AE02.roa (hash: XzXF/8xfpuOMbcKhBzvfBK+CZWCno4sqp+r1zL1L1bM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142489/serialNumber=AAE5759A7E98AA7458598DE3C19AA1797F00F5F5
        Validity
            Not Before: Jan 31 06:44:16 2025 GMT
            Not After : Feb  7 06:44:16 2025 GMT
        Subject: CN=679c7140-7cb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3b:fb:5f:a4:77:12:9a:0a:32:1f:a4:24:19:
                    01:a3:4e:50:66:5c:d8:0a:4d:cc:ca:4d:e4:44:f8:
                    2d:f9:e2:bb:2c:11:4c:ed:4e:8b:d5:ea:cb:e8:44:
                    d6:f9:0d:74:95:28:6a:55:8c:b4:60:ec:85:42:2c:
                    89:65:42:be:70:f3:b5:de:89:67:18:47:b2:2b:36:
                    0e:c0:85:b5:3b:a0:35:c9:9d:cd:57:41:88:f4:c0:
                    d3:38:ff:84:49:c9:15:5e:1e:f7:25:f1:73:e6:b5:
                    f2:79:7a:c4:19:4a:a3:3d:8d:42:b9:e0:c9:b5:8c:
                    53:56:23:c6:3b:38:63:8b:c8:cc:98:24:dd:a4:c6:
                    1c:db:0c:d5:77:67:d0:bc:1b:32:83:d0:ae:76:b1:
                    48:14:55:37:ab:25:33:e3:ca:4f:95:bb:fc:fc:13:
                    55:25:21:61:61:0a:9e:ee:ba:74:0d:fb:7a:c2:84:
                    15:b4:f9:dd:ee:19:49:fb:ec:35:fb:d8:c0:73:50:
                    c0:d2:81:5b:66:7e:d8:1a:25:44:e1:fc:16:01:ac:
                    c7:93:20:f3:f4:18:5e:b8:0d:0d:a7:8b:c4:44:23:
                    db:d2:f9:e2:2d:18:b7:e0:e6:83:d2:48:9d:22:3a:
                    0f:34:53:fa:7a:d5:9d:43:ee:6b:a7:3d:33:43:dc:
                    d7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:2D:9D:A9:40:B0:61:7D:FA:D2:D3:FA:B4:91:D4:A1:A9:64:61:37
            X509v3 Authority Key Identifier:
                keyid:AA:E5:75:9A:7E:98:AA:74:58:59:8D:E3:C1:9A:A1:79:7F:00:F5:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quV1mn6YqnRYWY3jwZqheX8A9fU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:cf:be:6b:40:26:02:e1:1a:4a:1f:4e:4a:1b:36:d3:bc:c9:
         58:c6:a2:72:62:e4:45:8d:0a:99:c8:15:61:9c:d5:aa:16:68:
         74:9d:f9:cb:bc:e0:bb:cc:02:a0:36:4e:34:80:35:97:af:86:
         fd:cb:cb:9d:ea:7f:a6:38:f1:21:07:fd:2e:54:62:89:7b:b8:
         32:e2:5c:03:23:b2:c8:7e:f3:bb:8c:3d:96:c5:ce:a4:35:9d:
         76:e8:7e:f5:fc:a5:31:44:b4:f8:2c:41:ba:61:05:59:40:8e:
         9d:06:5b:3f:67:09:20:cc:9f:f7:98:2c:c9:9f:65:b3:fd:49:
         a7:48:b6:77:3a:f5:79:86:7d:c5:be:57:63:b9:d7:7c:dd:dc:
         9e:ad:5d:33:45:2a:16:c1:30:c3:c5:d3:0c:8f:c8:cb:09:e5:
         10:24:fb:7e:2d:9f:5c:f6:a7:10:06:ce:17:9e:74:17:39:d0:
         39:7c:c3:0f:b7:90:02:f2:c9:86:3e:92:08:e7:ef:fa:c4:76:
         10:5d:ed:b0:78:21:88:17:8b:a2:ce:7a:14:4e:67:0b:4e:5a:
         f2:39:db:96:9b:6e:ed:f9:54:3d:b9:3e:bc:a8:58:fb:c3:41:
         16:e5:88:c4:6a:f2:4a:13:84:a2:e8:96:9e:de:ee:89:18:2b:
         4b:89:77:bc
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
MjQ4OTExMC8GA1UEBRMoQUFFNTc1OUE3RTk4QUE3NDU4NTk4REUzQzE5QUExNzk3
RjAwRjVGNTAeFw0yNTAxMzEwNjQ0MTZaFw0yNTAyMDcwNjQ0MTZaMBgxFjAUBgNV
BAMTDTY3OWM3MTQwLTdjYjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCdO/tfpHcSmgoyH6QkGQGjTlBmXNgKTczKTeRE+C354rssEUztTovV6svoRNb5
DXSVKGpVjLRg7IVCLIllQr5w87XeiWcYR7IrNg7AhbU7oDXJnc1XQYj0wNM4/4RJ
yRVeHvcl8XPmtfJ5esQZSqM9jUK54Mm1jFNWI8Y7OGOLyMyYJN2kxhzbDNV3Z9C8
GzKD0K52sUgUVTerJTPjyk+Vu/z8E1UlIWFhCp7uunQN+3rChBW0+d3uGUn77DX7
2MBzUMDSgVtmftgaJUTh/BYBrMeTIPP0GF64DQ2ni8REI9vS+eItGLfg5oPSSJ0i
Og80U/p61Z1D7munPTND3NehAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyi2dqUCw
YX360tP6tJHUoalkYTcwHwYDVR0jBBgwFoAUquV1mn6YqnRYWY3jwZqheX8A9fUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyNDg5LzNBM0YyODM2OUJG
QTExRUZCRUI5ODQ2RUM0RjlBRTAyL3F1VjFtbjZZcW5SWVdZM2p3WnFoZVg4QTlm
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvcXVWMW1uNllxblJZV1kzandacWhlWDhBOWZVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy
NDg5LzNBM0YyODM2OUJGQTExRUZCRUI5ODQ2RUM0RjlBRTAyL3F1VjFtbjZZcW5S
WVdZM2p3WnFoZVg4QTlmVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAHrPvmtAJgLhGkofTkobNtO8yVjGonJi5EWNCpnIFWGc1aoWaHSd+cu8
4LvMAqA2TjSANZevhv3Ly53qf6Y48SEH/S5UYol7uDLiXAMjssh+87uMPZbFzqQ1
nXbofvX8pTFEtPgsQbphBVlAjp0GWz9nCSDMn/eYLMmfZbP9SadItnc69XmGfcW+
V2O513zd3J6tXTNFKhbBMMPF0wyPyMsJ5RAk+34tn1z2pxAGzheedBc50Dl8ww+3
kALyyYY+kgjn7/rEdhBd7bB4IYgXi6LOehROZwtOWvI525abbu35VD25PryoWPvD
QRbliMRq8koThKLolp7e7okYK0uJd7w=
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:45:55 2025 by rpki-client