Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft
File:                     Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft (raw, json)
Hash identifier:          1geg4MAp2glCiiWzpkgS0KyQ8HrUJFVwGXhi5s4cd7k=
Subject key identifier:   88:0F:56:B5:20:57:4B:73:45:36:5F:77:B3:5C:0F:C1:2E:9B:92:7A
Authority key identifier: 0A:1D:E1:8D:FC:98:E4:AC:B3:FA:23:33:68:10:5A:73:D1:D4:19:F3
Certificate issuer:       /CN=A914E9C1/serialNumber=0A1DE18DFC98E4ACB3FA233368105A73D1D419F3
Certificate serial:       03CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft
Manifest number:          03B6
Signing time:             Fri 31 Jan 2025 00:44:52 +0000
Manifest this update:     Fri 31 Jan 2025 00:44:51 +0000
Manifest next update:     Fri 07 Feb 2025 00:44:51 +0000
Files and hashes:         1: Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl (hash: FjHgdfB47caak+RsrPNF6Pykx4mkgHyBo8bjbCh9SeU=)
                          2: 4B167396E74111EC80E35542C4F9AE02.roa (hash: bHN8Wd0Zu68QTsipkyferF9uwGKu6L4i92pMNTEMusM=)
                          3: 8AEE4940EAB511ECBBDE3C50C4F9AE02.roa (hash: mO2TDz8iVH1QjiN6s50lIdAYCPwhB4UYqdlU/m/h8sE=)
                          4: 8A4C662AEAB511ECBBDE3C50C4F9AE02.roa (hash: J8gquWVTmRgJWJ3mBG8a1mA8su1ptSNi3imZDckI5g0=)
                          5: 91A286509F0811ECAE659F82C4F9AE02.roa (hash: RqwnZfnau7RkdBU68iXpJ/pJr2ocars1rJf1vcp1FOQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 970 (0x3ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E9C1/serialNumber=0A1DE18DFC98E4ACB3FA233368105A73D1D419F3
        Validity
            Not Before: Jan 31 00:44:51 2025 GMT
            Not After : Feb  7 00:44:51 2025 GMT
        Subject: CN=679c1d03-cdec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8f:d4:78:7f:32:41:74:cf:05:d3:a1:b8:f2:
                    d5:1c:77:7d:43:bb:bb:ff:65:d5:62:52:34:b2:f9:
                    d7:ed:d9:08:40:09:12:4f:4f:80:da:30:7c:16:5a:
                    e6:c6:eb:a9:41:07:54:7d:15:79:62:22:a7:e2:8d:
                    71:bb:1d:93:15:75:3c:df:06:01:d5:48:9e:43:d4:
                    4c:1d:8d:20:cb:b3:3c:a1:98:8c:97:c9:3d:85:ff:
                    a7:b7:69:2c:3b:3f:28:0b:9a:00:10:cb:46:5c:f0:
                    6d:37:85:53:4a:7f:18:b6:ac:20:c1:8c:65:05:5b:
                    f1:aa:d8:7d:16:72:21:3d:74:cd:68:06:12:17:a1:
                    7f:25:39:14:e6:13:34:31:31:9c:58:80:ce:dd:27:
                    f1:bf:3d:c7:25:ba:df:f3:60:02:42:e4:2a:17:5f:
                    ae:1d:83:d2:15:96:e4:15:72:51:8c:50:02:bf:f5:
                    c2:0d:08:26:e6:6b:32:54:21:3f:33:e8:b6:3d:77:
                    d4:c7:5b:18:10:7f:f8:a4:a4:7e:4e:f1:19:af:8e:
                    9b:28:be:91:4a:66:e9:92:b6:25:10:bb:6f:c7:29:
                    e5:bf:e2:48:7e:bf:37:df:a7:06:25:69:b2:17:67:
                    ce:b5:b9:38:66:b0:67:03:5a:a3:c0:d1:85:3e:e6:
                    a1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:0F:56:B5:20:57:4B:73:45:36:5F:77:B3:5C:0F:C1:2E:9B:92:7A
            X509v3 Authority Key Identifier:
                keyid:0A:1D:E1:8D:FC:98:E4:AC:B3:FA:23:33:68:10:5A:73:D1:D4:19:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:90:f0:a6:80:e0:19:d3:28:5f:ae:9c:e0:34:10:49:84:3b:
         2b:ef:fc:f3:be:0a:79:2d:32:d2:9b:ed:77:f0:e1:20:0c:f9:
         0e:be:4c:49:ac:95:51:28:f5:d0:d9:35:dc:a0:d4:00:03:bf:
         7b:87:fe:d1:a1:77:dd:a4:91:57:6a:c3:f0:ad:eb:57:dd:6e:
         d2:16:1b:3c:99:10:1e:67:b1:05:3e:ad:44:96:71:97:78:8c:
         bc:12:b2:d8:68:9c:2a:77:cf:29:83:bc:51:1c:cd:d7:d9:42:
         d4:f2:46:73:dc:17:df:2e:94:e7:d4:21:55:8f:f7:e5:9d:c2:
         6a:9e:0a:82:fc:63:5b:57:77:d8:44:9a:71:0f:9d:28:3c:39:
         77:17:7f:1c:96:2a:d6:ff:bd:74:07:8e:f7:fc:0d:1b:10:ff:
         89:c9:9f:f3:99:f2:8b:80:ae:23:a7:f5:7a:47:ab:de:0e:fe:
         96:bf:03:85:71:1b:1b:c9:6f:8e:cf:cb:fd:80:fc:d7:98:9f:
         a7:52:a7:86:bc:d9:4d:8f:56:4c:9b:bb:c5:fc:ad:9a:4e:33:
         68:c1:68:33:4e:e2:e0:f4:e0:87:32:1c:87:c2:a0:ba:9b:9c:
         d5:99:b1:70:cd:2d:7a:12:d8:9d:9d:56:98:2a:89:38:02:5f:
         17:e2:f9:cf
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA8owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEU5QzExMTAvBgNVBAUTKDBBMURFMThERkM5OEU0QUNCM0ZBMjMzMzY4MTA1QTcz
RDFENDE5RjMwHhcNMjUwMTMxMDA0NDUxWhcNMjUwMjA3MDA0NDUxWjAYMRYwFAYD
VQQDEw02NzljMWQwMy1jZGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArI/UeH8yQXTPBdOhuPLVHHd9Q7u7/2XVYlI0svnX7dkIQAkST0+A2jB8Flrm
xuupQQdUfRV5YiKn4o1xux2TFXU83wYB1UieQ9RMHY0gy7M8oZiMl8k9hf+nt2ks
Oz8oC5oAEMtGXPBtN4VTSn8YtqwgwYxlBVvxqth9FnIhPXTNaAYSF6F/JTkU5hM0
MTGcWIDO3Sfxvz3HJbrf82ACQuQqF1+uHYPSFZbkFXJRjFACv/XCDQgm5msyVCE/
M+i2PXfUx1sYEH/4pKR+TvEZr46bKL6RSmbpkrYlELtvxynlv+JIfr8336cGJWmy
F2fOtbk4ZrBnA1qjwNGFPuahNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIgPVrUg
V0tzRTZfd7NcD8Eum5J6MB8GA1UdIwQYMBaAFAod4Y38mOSss/ojM2gQWnPR1Bnz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTlDMS9FRTcwMkY0NDdB
QzkxMUVDOURBNTVCNDZDNEY5QUUwMi9DaDNoamZ5WTVLeXotaU16YUJCYWM5SFVH
Zk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NoM2hqZnlZNUt5ei1pTXphQkJhYzlIVUdmTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RTlDMS9FRTcwMkY0NDdBQzkxMUVDOURBNTVCNDZDNEY5QUUwMi9DaDNoamZ5WTVL
eXotaU16YUJCYWM5SFVHZk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBUkPCmgOAZ0yhfrpzgNBBJhDsr7/zzvgp5LTLSm+138OEgDPkOvkxJ
rJVRKPXQ2TXcoNQAA797h/7RoXfdpJFXasPwretX3W7SFhs8mRAeZ7EFPq1ElnGX
eIy8ErLYaJwqd88pg7xRHM3X2ULU8kZz3BffLpTn1CFVj/flncJqngqC/GNbV3fY
RJpxD50oPDl3F38clirW/710B473/A0bEP+JyZ/zmfKLgK4jp/V6R6veDv6WvwOF
cRsbyW+Oz8v9gPzXmJ+nUqeGvNlNj1ZMm7vF/K2aTjNowWgzTuLg9OCHMhyHwqC6
m5zVmbFwzS16EtidnVaYKok4Al8X4vnP
-----END CERTIFICATE-----