Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145418/771931803AE011EC93728D66C4F9AE02/X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.mft
File:                     X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.mft (raw, json)
Hash identifier:          TM8fWq4hmciJPcKRt1Nk7G8yuQ3GJCuJ0y3lIo54C/M=
Subject key identifier:   F4:74:87:A4:FB:AF:C4:35:64:73:8D:00:1F:10:D1:5E:1C:5B:9A:B0
Authority key identifier: 5F:E1:54:3C:85:B0:65:30:A1:64:CF:90:E1:A2:7D:A8:DB:72:45:0E
Certificate issuer:       /CN=A9145418/serialNumber=5FE1543C85B06530A164CF90E1A27DA8DB72450E
Certificate serial:       0459
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145418/771931803AE011EC93728D66C4F9AE02/X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.mft
Manifest number:          0454
Signing time:             Fri 31 Jan 2025 00:14:31 +0000
Manifest this update:     Fri 31 Jan 2025 00:14:31 +0000
Manifest next update:     Fri 07 Feb 2025 00:14:31 +0000
Files and hashes:         1: X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.crl (hash: K8fUJk4YZq/d8FFyJU6Z16dApx2529451xcwmeynSdU=)
                          2: FA5399BC3AE211ECA119BA68C4F9AE02.roa (hash: M598nPRIqsJS/K52Ut9/vCkEatFaGNrs9FvUNDB8rmQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1113 (0x459)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145418/serialNumber=5FE1543C85B06530A164CF90E1A27DA8DB72450E
        Validity
            Not Before: Jan 31 00:14:31 2025 GMT
            Not After : Feb  7 00:14:31 2025 GMT
        Subject: CN=679c15e7-9511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:46:4b:d1:fd:10:f7:dc:3f:7e:5e:4c:15:2a:
                    6e:3c:36:50:6f:19:9d:a5:19:9d:44:75:66:29:6f:
                    d6:51:ed:59:97:4f:ff:0e:62:07:be:5e:f8:11:a4:
                    b1:83:e5:71:fd:78:da:8f:c0:33:6f:36:ac:3e:cd:
                    70:18:89:bb:77:42:6f:62:be:c3:dd:b0:b3:03:a2:
                    9d:ce:e8:13:05:2d:e7:36:01:81:de:b5:35:70:57:
                    86:11:7d:c1:af:5a:55:d9:8e:cf:29:7e:ef:cc:a1:
                    52:79:c0:65:de:d2:e4:84:bc:4e:e6:f0:4c:79:78:
                    2d:da:d5:d4:19:73:63:5e:f3:53:01:17:d2:da:41:
                    e0:60:fa:a1:a0:f2:bf:9e:e1:d2:a2:9d:37:36:25:
                    e5:55:29:9b:14:04:80:57:26:ec:d5:24:ac:ba:16:
                    7f:db:4a:d5:e1:29:19:b4:ba:b7:88:50:68:82:38:
                    93:d9:64:53:e6:98:7c:8f:5f:ed:9e:7f:d7:20:9e:
                    9e:98:47:79:c9:0c:1d:22:56:85:6d:80:50:ab:a8:
                    f3:2f:4d:33:ae:29:86:92:44:9c:10:ce:bb:45:68:
                    da:61:b3:91:98:a4:3f:2b:76:2b:d2:cf:38:71:8b:
                    90:fe:09:e8:a2:ef:e3:49:c6:84:bf:44:69:53:38:
                    59:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:74:87:A4:FB:AF:C4:35:64:73:8D:00:1F:10:D1:5E:1C:5B:9A:B0
            X509v3 Authority Key Identifier:
                keyid:5F:E1:54:3C:85:B0:65:30:A1:64:CF:90:E1:A2:7D:A8:DB:72:45:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145418/771931803AE011EC93728D66C4F9AE02/X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145418/771931803AE011EC93728D66C4F9AE02/X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:30:36:66:83:86:9c:4f:3a:7b:0c:d3:50:6b:11:28:70:9f:
         c8:90:1c:51:2b:b5:05:52:62:38:49:fb:18:26:cd:19:c0:5f:
         83:87:f0:2b:ff:10:b0:2e:37:d3:67:47:88:06:53:d1:56:39:
         c5:bf:2f:b0:c1:2c:bc:eb:59:a8:d8:eb:68:3e:9e:e6:9d:b7:
         3d:e4:db:56:6b:0b:13:87:6a:fb:0c:4e:bd:40:a8:3e:04:0f:
         da:35:70:54:94:fe:9c:7f:b0:88:ff:32:05:2c:3e:b7:7e:d6:
         4a:1c:fe:1f:e1:61:a5:ba:e6:f9:f9:e9:e0:bb:09:2d:bd:88:
         8c:e2:ed:e8:89:e8:b5:7e:45:9b:e4:c5:f4:46:b2:63:c6:9f:
         59:ab:62:e7:08:23:81:ed:9d:cc:60:77:a0:e8:0c:1b:a1:12:
         a6:3c:69:6d:a6:d0:ad:56:13:da:d9:9b:0e:61:70:71:12:0d:
         ab:30:35:ac:31:ff:be:cc:3b:bc:95:55:bf:39:c1:69:b8:0f:
         64:0a:37:b0:98:94:44:ac:2a:aa:cb:c0:f7:59:de:7c:5e:b3:
         6a:a9:51:e8:ea:db:b2:cb:b4:8b:02:0e:08:00:c4:e0:c7:69:
         7c:c1:0b:18:ee:1c:d9:c9:4c:63:19:3f:35:41:15:8d:92:9f:
         04:ad:16:fb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBFkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDU0MTgxMTAvBgNVBAUTKDVGRTE1NDNDODVCMDY1MzBBMTY0Q0Y5MEUxQTI3REE4
REI3MjQ1MEUwHhcNMjUwMTMxMDAxNDMxWhcNMjUwMjA3MDAxNDMxWjAYMRYwFAYD
VQQDEw02NzljMTVlNy05NTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvUZL0f0Q99w/fl5MFSpuPDZQbxmdpRmdRHVmKW/WUe1Zl0//DmIHvl74EaSx
g+Vx/Xjaj8AzbzasPs1wGIm7d0JvYr7D3bCzA6KdzugTBS3nNgGB3rU1cFeGEX3B
r1pV2Y7PKX7vzKFSecBl3tLkhLxO5vBMeXgt2tXUGXNjXvNTARfS2kHgYPqhoPK/
nuHSop03NiXlVSmbFASAVybs1SSsuhZ/20rV4SkZtLq3iFBogjiT2WRT5ph8j1/t
nn/XIJ6emEd5yQwdIlaFbYBQq6jzL00zrimGkkScEM67RWjaYbORmKQ/K3Yr0s84
cYuQ/gnoou/jScaEv0RpUzhZcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPR0h6T7
r8Q1ZHONAB8Q0V4cW5qwMB8GA1UdIwQYMBaAFF/hVDyFsGUwoWTPkOGifajbckUO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTQxOC83NzE5MzE4MDNB
RTAxMUVDOTM3MjhENjZDNEY5QUUwMi9YLUZVUElXd1pUQ2haTS1RNGFKOXFOdHlS
UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1gtRlVQSVd3WlRDaFpNLVE0YUo5cU50eVJRNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NTQxOC83NzE5MzE4MDNBRTAxMUVDOTM3MjhENjZDNEY5QUUwMi9YLUZVUElXd1pU
Q2haTS1RNGFKOXFOdHlSUTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA6MDZmg4acTzp7DNNQaxEocJ/IkBxRK7UFUmI4SfsYJs0ZwF+Dh/Ar
/xCwLjfTZ0eIBlPRVjnFvy+wwSy861mo2OtoPp7mnbc95NtWawsTh2r7DE69QKg+
BA/aNXBUlP6cf7CI/zIFLD63ftZKHP4f4WGluub5+enguwktvYiM4u3oiei1fkWb
5MX0RrJjxp9Zq2LnCCOB7Z3MYHeg6AwboRKmPGltptCtVhPa2ZsOYXBxEg2rMDWs
Mf++zDu8lVW/OcFpuA9kCjewmJRErCqqy8D3Wd58XrNqqVHo6tuyy7SLAg4IAMTg
x2l8wQsY7hzZyUxjGT81QRWNkp8ErRb7
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:36:46 2025 by rpki-client