Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.mft
File:                     SfkoK_Tch_fBI-WHPLql59aZMkg.mft (raw, json)
Hash identifier:          VON7z/jKrDWkiC+XXuDDdMJr8/+R3sR03+JdI1hLXJw=
Subject key identifier:   0F:72:A8:07:9E:89:28:6D:35:17:FE:27:E5:21:50:4B:09:E1:1B:BA
Authority key identifier: 49:F9:28:2B:F4:DC:87:F7:C1:23:E5:87:3C:BA:A5:E7:D6:99:32:48
Certificate issuer:       /CN=A914D167/serialNumber=49F9282BF4DC87F7C123E5873CBAA5E7D6993248
Certificate serial:       01ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SfkoK_Tch_fBI-WHPLql59aZMkg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.mft
Manifest number:          01E9
Signing time:             Fri 31 Jan 2025 02:15:09 +0000
Manifest this update:     Fri 31 Jan 2025 02:15:08 +0000
Manifest next update:     Fri 07 Feb 2025 02:15:08 +0000
Files and hashes:         1: SfkoK_Tch_fBI-WHPLql59aZMkg.crl (hash: 6Bt3qAqJqCahNCBgmKzVNmZXBiJQCpS51btsSanHkL8=)
                          2: 7FA158782F1D11EDA3E29B09C4F9AE02.roa (hash: 98vVrHrPunOhqyUNT9wqul+NkLuBnWOfghiKhqlLWSA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 493 (0x1ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D167/serialNumber=49F9282BF4DC87F7C123E5873CBAA5E7D6993248
        Validity
            Not Before: Jan 31 02:15:08 2025 GMT
            Not After : Feb  7 02:15:08 2025 GMT
        Subject: CN=679c322c-53a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:68:97:f0:92:ed:58:47:f0:10:bd:57:14:bf:
                    47:a1:0a:6c:35:83:4a:4d:fd:cb:97:af:05:ce:f1:
                    c0:3e:3d:3f:aa:06:a3:41:f3:a4:6a:92:fa:46:0e:
                    53:bd:58:a3:02:19:a2:4e:ca:a0:91:e0:96:24:5d:
                    9a:ed:eb:77:87:40:a3:1d:bc:dd:84:f9:eb:3d:cc:
                    68:9f:bb:e2:1b:29:c3:2f:b5:16:d6:25:e2:72:88:
                    59:5b:32:60:61:f7:44:3b:57:a0:ec:3d:c9:de:24:
                    d4:40:9f:37:d0:ee:d9:a7:4c:55:1f:12:17:12:b2:
                    fb:62:a4:02:24:91:52:a7:35:88:35:d4:51:8b:7e:
                    1a:7a:49:b7:98:3f:20:7e:ac:39:e3:e2:ab:89:b7:
                    c0:81:80:3b:d4:f9:73:0e:c0:4c:7b:7f:7d:dc:26:
                    7a:eb:d1:8a:fa:5e:41:18:19:60:0e:1e:e6:4f:13:
                    bb:7e:76:cf:b9:5e:02:3b:6a:8b:97:c1:4d:0a:84:
                    d0:53:46:b7:42:0e:f7:cb:8f:42:2e:59:8d:4f:4d:
                    e2:46:80:67:d4:af:e1:db:5f:3a:63:91:53:c9:9d:
                    e9:72:d7:60:e9:b3:3f:36:cf:05:fc:66:58:7a:c1:
                    72:ef:1c:ce:b1:bb:41:90:93:62:bf:4c:be:55:9b:
                    0a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:72:A8:07:9E:89:28:6D:35:17:FE:27:E5:21:50:4B:09:E1:1B:BA
            X509v3 Authority Key Identifier:
                keyid:49:F9:28:2B:F4:DC:87:F7:C1:23:E5:87:3C:BA:A5:E7:D6:99:32:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SfkoK_Tch_fBI-WHPLql59aZMkg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:d8:3d:a8:f0:d9:05:09:75:64:0b:77:d7:7a:b1:11:f2:4c:
         5f:d9:e2:8e:1e:b6:38:ad:5a:a2:d0:41:1d:a9:da:43:a0:86:
         50:28:ba:16:26:f1:92:c9:64:b4:43:f4:96:02:6c:51:10:8e:
         48:01:8b:aa:88:70:3f:a7:0a:8f:76:19:8d:f8:85:f6:a1:0a:
         75:c0:12:37:ac:8d:da:c9:33:18:b3:46:02:8e:d9:dd:8e:ca:
         0e:42:25:a6:11:a4:ea:72:12:67:f9:52:8d:67:54:94:6b:53:
         6c:12:e3:7f:52:5d:4b:f9:97:82:1d:30:80:92:de:f0:6f:33:
         45:2d:77:41:61:2f:22:7b:8c:f6:31:8f:8a:7c:fc:ff:72:09:
         67:1d:44:e9:0a:ba:e6:43:85:9a:37:e2:6b:37:41:29:4c:b0:
         d7:be:ed:7e:46:8c:91:fa:67:7f:aa:c3:25:d4:4d:80:20:8e:
         41:06:c9:8e:7d:bd:c1:5a:85:7a:b2:09:6d:92:72:37:96:4d:
         59:8d:8c:b7:20:7b:03:28:0c:32:8a:a2:e4:9b:4b:88:f3:4d:
         41:4e:11:d9:f1:49:44:b7:76:67:15:83:af:7a:2f:fc:54:d5:
         d5:f0:6d:37:08:77:8f:13:7e:6c:a6:85:69:39:21:29:32:d2:
         74:82:8a:08
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEQxNjcxMTAvBgNVBAUTKDQ5RjkyODJCRjREQzg3RjdDMTIzRTU4NzNDQkFBNUU3
RDY5OTMyNDgwHhcNMjUwMTMxMDIxNTA4WhcNMjUwMjA3MDIxNTA4WjAYMRYwFAYD
VQQDEw02NzljMzIyYy01M2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtGiX8JLtWEfwEL1XFL9HoQpsNYNKTf3Ll68FzvHAPj0/qgajQfOkapL6Rg5T
vVijAhmiTsqgkeCWJF2a7et3h0CjHbzdhPnrPcxon7viGynDL7UW1iXicohZWzJg
YfdEO1eg7D3J3iTUQJ830O7Zp0xVHxIXErL7YqQCJJFSpzWINdRRi34aekm3mD8g
fqw54+KribfAgYA71PlzDsBMe3993CZ669GK+l5BGBlgDh7mTxO7fnbPuV4CO2qL
l8FNCoTQU0a3Qg73y49CLlmNT03iRoBn1K/h2186Y5FTyZ3pctdg6bM/Ns8F/GZY
esFy7xzOsbtBkJNiv0y+VZsK6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA9yqAee
iShtNRf+J+UhUEsJ4Ru6MB8GA1UdIwQYMBaAFEn5KCv03If3wSPlhzy6pefWmTJI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDE2Ny81RDVDNDJGMjJG
MUIxMUVEQkREQUE0MDlDNEY5QUUwMi9TZmtvS19UY2hfZkJJLVdIUExxbDU5YVpN
a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Nma29LX1RjaF9mQkktV0hQTHFsNTlhWk1rZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RDE2Ny81RDVDNDJGMjJGMUIxMUVEQkREQUE0MDlDNEY5QUUwMi9TZmtvS19UY2hf
ZkJJLVdIUExxbDU5YVpNa2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDU2D2o8NkFCXVkC3fXerER8kxf2eKOHrY4rVqi0EEdqdpDoIZQKLoW
JvGSyWS0Q/SWAmxREI5IAYuqiHA/pwqPdhmN+IX2oQp1wBI3rI3ayTMYs0YCjtnd
jsoOQiWmEaTqchJn+VKNZ1SUa1NsEuN/Ul1L+ZeCHTCAkt7wbzNFLXdBYS8ie4z2
MY+KfPz/cglnHUTpCrrmQ4WaN+JrN0EpTLDXvu1+RoyR+md/qsMl1E2AII5BBsmO
fb3BWoV6sgltknI3lk1ZjYy3IHsDKAwyiqLkm0uI801BThHZ8UlEt3ZnFYOvei/8
VNXV8G03CHePE35spoVpOSEpMtJ0gooI
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:25:11 2025 by rpki-client