Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.mft
File:                     VIw8AL4pDBZz22aZmFINcjeERcs.mft (raw, json)
Hash identifier:          /Rrh8PEoeXFEV2kqBSizj8aO2oszr1ZE5TQGoqcQ+Iw=
Subject key identifier:   18:1B:7A:9B:13:22:06:35:11:65:26:24:05:13:AC:3D:06:43:26:87
Authority key identifier: 54:8C:3C:00:BE:29:0C:16:73:DB:66:99:98:52:0D:72:37:84:45:CB
Certificate issuer:       /CN=A914B089/serialNumber=548C3C00BE290C1673DB669998520D72378445CB
Certificate serial:       CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIw8AL4pDBZz22aZmFINcjeERcs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.mft
Manifest number:          CA
Signing time:             Fri 31 Jan 2025 04:51:33 +0000
Manifest this update:     Fri 31 Jan 2025 04:51:32 +0000
Manifest next update:     Fri 07 Feb 2025 04:51:32 +0000
Files and hashes:         1: VIw8AL4pDBZz22aZmFINcjeERcs.crl (hash: aOsA96XgEZYFiNOVxfmC7eUmr1SuXJn3ViOZEOaK5AQ=)
                          2: 55F7C16CABDE11EEA9B44639C4F9AE02.roa (hash: LRgZIPAfyXWSZXYxQKmagPCwrYM4gPhtoJaJVDq8z0c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 204 (0xcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B089/serialNumber=548C3C00BE290C1673DB669998520D72378445CB
        Validity
            Not Before: Jan 31 04:51:32 2025 GMT
            Not After : Feb  7 04:51:32 2025 GMT
        Subject: CN=679c56d5-857c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:10:50:1f:19:e7:9b:3b:96:f1:67:fb:99:9a:
                    d4:97:7b:7c:99:c9:18:d6:e0:25:6d:7a:d2:c0:f4:
                    e3:04:c7:7f:f9:fa:78:61:06:e6:5a:f3:d3:85:f8:
                    db:3c:96:8c:a1:73:df:4b:d0:f6:4f:7f:0a:e3:99:
                    30:b0:e2:76:73:b9:49:06:ba:a1:e6:65:05:cf:08:
                    85:12:f0:a1:2f:f0:85:14:f7:08:3f:a4:48:9b:18:
                    27:12:a4:a3:50:e7:2a:b6:08:1a:62:db:f5:4a:67:
                    d0:3b:47:8a:97:87:6b:b0:96:12:09:75:32:16:01:
                    ae:12:b3:03:7c:d4:4d:c3:b1:b8:f7:9a:11:41:87:
                    a6:79:de:d5:69:80:8d:e6:d8:ab:74:4b:fc:ab:b0:
                    3b:fe:24:08:a6:c6:5a:ad:a8:1d:69:6d:7d:7a:f7:
                    d3:90:9b:72:ac:ad:c6:05:97:12:8f:f9:6e:89:92:
                    c7:4b:b4:1e:09:d9:d7:86:f8:ff:6c:70:1f:d9:04:
                    36:fd:f4:1a:40:04:1c:45:02:c1:f9:62:10:46:85:
                    6b:a4:03:d9:62:fb:9e:84:e9:b5:01:95:f9:4d:c4:
                    31:91:c9:04:57:7b:68:e3:51:68:43:48:cd:10:28:
                    c6:b5:c1:10:b1:f8:6e:80:3e:44:77:7e:aa:d1:4f:
                    5d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:1B:7A:9B:13:22:06:35:11:65:26:24:05:13:AC:3D:06:43:26:87
            X509v3 Authority Key Identifier:
                keyid:54:8C:3C:00:BE:29:0C:16:73:DB:66:99:98:52:0D:72:37:84:45:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIw8AL4pDBZz22aZmFINcjeERcs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:0b:44:ce:49:11:d1:28:6e:6f:16:e9:da:c3:51:fd:f6:9a:
         d5:56:40:a8:cf:21:9c:97:39:40:46:26:73:af:1c:f2:0f:86:
         d0:ad:90:1b:d8:4f:cd:81:84:43:49:64:ca:c4:da:aa:8f:67:
         f1:ea:09:80:4d:e4:12:ba:27:5d:c9:1d:e2:4e:d0:9c:2f:8a:
         07:8d:eb:01:2e:d8:06:d0:c7:21:34:8b:eb:e2:2c:df:8a:ae:
         75:6c:a8:c1:22:10:9b:c8:b8:4d:6d:1a:d7:67:36:5b:9d:ce:
         83:88:36:90:68:8d:a9:7d:9d:18:75:58:8b:bb:dc:02:3c:5e:
         02:fc:4f:32:db:5a:83:23:51:7c:53:c6:d2:45:74:04:30:d3:
         01:3e:96:55:0f:b6:72:f3:38:6c:c1:a1:81:23:a0:29:4a:10:
         91:a2:ef:df:0b:db:c3:25:66:73:6a:a8:42:57:69:b6:34:45:
         44:47:a9:6a:04:17:20:b7:22:5e:87:77:43:0d:cd:9c:d3:d9:
         fb:7b:30:37:16:6d:9e:d6:88:90:bc:d1:7a:a1:d2:98:f3:12:
         2e:be:33:61:cb:18:37:9f:00:c4:a8:c0:98:d0:99:f1:f4:e1:
         3a:0d:06:0a:b0:45:78:a7:5a:e3:2b:95:c9:2b:27:96:54:79:
         3d:f5:3b:fa
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEIwODkxMTAvBgNVBAUTKDU0OEMzQzAwQkUyOTBDMTY3M0RCNjY5OTk4NTIwRDcy
Mzc4NDQ1Q0IwHhcNMjUwMTMxMDQ1MTMyWhcNMjUwMjA3MDQ1MTMyWjAYMRYwFAYD
VQQDEw02NzljNTZkNS04NTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxxBQHxnnmzuW8Wf7mZrUl3t8mckY1uAlbXrSwPTjBMd/+fp4YQbmWvPThfjb
PJaMoXPfS9D2T38K45kwsOJ2c7lJBrqh5mUFzwiFEvChL/CFFPcIP6RImxgnEqSj
UOcqtggaYtv1SmfQO0eKl4drsJYSCXUyFgGuErMDfNRNw7G495oRQYemed7VaYCN
5tirdEv8q7A7/iQIpsZaragdaW19evfTkJtyrK3GBZcSj/luiZLHS7QeCdnXhvj/
bHAf2QQ2/fQaQAQcRQLB+WIQRoVrpAPZYvuehOm1AZX5TcQxkckEV3to41FoQ0jN
ECjGtcEQsfhugD5Ed36q0U9dMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBgbepsT
IgY1EWUmJAUTrD0GQyaHMB8GA1UdIwQYMBaAFFSMPAC+KQwWc9tmmZhSDXI3hEXL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjA4OS8wRjg5NkFGQUFC
REUxMUVFOUVGMERGMzhDNEY5QUUwMi9WSXc4QUw0cERCWnoyMmFabUZJTmNqZUVS
Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZJdzhBTDRwREJaejIyYVptRklOY2plRVJjcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QjA4OS8wRjg5NkFGQUFCREUxMUVFOUVGMERGMzhDNEY5QUUwMi9WSXc4QUw0cERC
WnoyMmFabUZJTmNqZUVSY3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB3C0TOSRHRKG5vFunaw1H99prVVkCozyGclzlARiZzrxzyD4bQrZAb
2E/NgYRDSWTKxNqqj2fx6gmATeQSuiddyR3iTtCcL4oHjesBLtgG0MchNIvr4izf
iq51bKjBIhCbyLhNbRrXZzZbnc6DiDaQaI2pfZ0YdViLu9wCPF4C/E8y21qDI1F8
U8bSRXQEMNMBPpZVD7Zy8zhswaGBI6ApShCRou/fC9vDJWZzaqhCV2m2NEVER6lq
BBcgtyJeh3dDDc2c09n7ezA3Fm2e1oiQvNF6odKY8xIuvjNhyxg3nwDEqMCY0Jnx
9OE6DQYKsEV4p1rjK5XJKyeWVHk99Tv6
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:11:26 2025 by rpki-client