Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft
File:                     t0SkTltlPmx6kM9gNOANz9iUfWA.mft (raw, json)
Hash identifier:          oUoELFEBNqmvS3kmx260ZSjt1eYxZvpdeE/ct2t7S2w=
Subject key identifier:   B2:BA:45:6E:31:A9:EC:92:AE:48:52:81:DA:31:2D:C8:E8:C1:33:C7
Authority key identifier: B7:44:A4:4E:5B:65:3E:6C:7A:90:CF:60:34:E0:0D:CF:D8:94:7D:60
Certificate issuer:       /CN=A914EBE5/serialNumber=B744A44E5B653E6C7A90CF6034E00DCFD8947D60
Certificate serial:       181A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft
Manifest number:          180D
Signing time:             Fri 31 Jan 2025 16:31:51 +0000
Manifest this update:     Fri 31 Jan 2025 16:31:51 +0000
Manifest next update:     Fri 07 Feb 2025 16:31:51 +0000
Files and hashes:         1: t0SkTltlPmx6kM9gNOANz9iUfWA.crl (hash: t9UV3BB6Mcc3J50ciydhyClvy0mU784FpWyNemYZPQg=)
                          2: 65F89850A96711E79BECEA42C4F9AE02.roa (hash: 5TOjePk+7WXC9EztMM3azNwXTCLUCVRgqyyVuTVhz/M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6170 (0x181a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EBE5/serialNumber=B744A44E5B653E6C7A90CF6034E00DCFD8947D60
        Validity
            Not Before: Jan 31 16:31:51 2025 GMT
            Not After : Feb  7 16:31:51 2025 GMT
        Subject: CN=679cfaf7-8466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fd:b7:2b:38:db:fa:6d:20:a8:bf:9c:11:a3:
                    df:4e:e5:68:3e:a0:c8:ea:84:20:51:4b:60:82:2c:
                    62:af:a7:51:e0:ca:b0:c3:7a:fa:47:a0:b8:f6:ed:
                    06:16:90:c3:73:c2:a4:f5:56:58:c7:c8:ff:9d:54:
                    3f:00:4f:c6:19:f0:78:96:5b:36:a6:ad:e1:73:94:
                    da:ab:e7:b1:92:44:26:ca:d2:34:14:e3:f0:93:a8:
                    5d:1a:cc:22:7a:ac:73:ae:65:25:f9:4d:b9:fb:7c:
                    42:2c:c6:f4:5a:97:30:e3:96:a2:21:cf:bf:e7:00:
                    0a:5f:2d:74:06:6a:9b:93:3f:5e:3c:3c:ed:68:e2:
                    00:ad:dd:da:ec:1e:d8:80:e0:03:bc:d8:ad:5f:3c:
                    80:71:a2:40:66:95:16:c2:63:06:ef:05:18:f7:7b:
                    bf:51:f7:21:9e:7c:d8:1a:2c:02:ca:24:9b:ad:48:
                    e6:b5:a2:b3:de:5e:7c:e1:e7:d6:4d:75:06:da:5b:
                    58:6e:b0:f9:74:8e:33:5f:9d:61:cf:86:d9:85:d0:
                    44:46:74:28:f2:6b:bb:bd:98:ec:65:6e:f6:0c:15:
                    83:f6:49:3e:5c:09:9d:d9:ee:43:25:7d:83:eb:34:
                    0d:fd:dc:37:86:03:21:d5:57:f4:ee:93:97:f8:69:
                    1e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:BA:45:6E:31:A9:EC:92:AE:48:52:81:DA:31:2D:C8:E8:C1:33:C7
            X509v3 Authority Key Identifier:
                keyid:B7:44:A4:4E:5B:65:3E:6C:7A:90:CF:60:34:E0:0D:CF:D8:94:7D:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:9b:97:e8:3c:ec:c7:52:1c:30:fb:4d:11:a8:a2:5c:d7:a6:
         41:95:96:92:fd:39:b9:c5:ae:0d:60:13:0f:41:af:da:56:03:
         73:af:70:10:7e:b6:b2:58:86:3a:43:5a:0e:a3:1e:f2:f1:6e:
         fb:4b:51:9a:ef:46:e8:9e:57:96:94:e9:14:53:6c:b0:41:63:
         ea:ba:fb:bb:d4:ea:cd:1e:85:9d:cd:f2:4a:e2:f6:74:b7:31:
         ff:4b:cf:88:93:ba:04:93:02:de:05:bf:38:b4:f8:5c:0c:ce:
         bc:41:e4:fb:4a:64:43:45:4a:94:90:5d:bf:43:03:c3:db:ca:
         bc:a3:33:5d:c5:63:58:3c:bf:b6:bc:01:a3:91:59:05:70:c1:
         4f:59:9d:92:33:78:65:24:a7:d4:11:14:2f:7f:02:5b:37:6f:
         e8:b7:4c:77:2c:c2:d1:3e:57:22:8a:f5:ca:b5:ad:ae:04:be:
         09:85:7f:11:9f:b3:20:d0:f8:8f:f8:a5:fb:78:0c:88:28:0c:
         37:9d:ea:18:b3:fd:cd:80:c4:81:fe:1a:bb:ef:21:99:7e:77:
         8f:33:52:96:52:9e:b9:fd:6b:24:74:7f:d1:ac:bc:f5:f1:4b:
         7a:73:3a:84:d5:cc:1f:7d:f5:9a:e8:1e:db:f1:d9:c6:1e:0d:
         3c:d5:88:98
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICGBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEVCRTUxMTAvBgNVBAUTKEI3NDRBNDRFNUI2NTNFNkM3QTkwQ0Y2MDM0RTAwRENG
RDg5NDdENjAwHhcNMjUwMTMxMTYzMTUxWhcNMjUwMjA3MTYzMTUxWjAYMRYwFAYD
VQQDEw02NzljZmFmNy04NDY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyf23Kzjb+m0gqL+cEaPfTuVoPqDI6oQgUUtggixir6dR4Mqww3r6R6C49u0G
FpDDc8Kk9VZYx8j/nVQ/AE/GGfB4lls2pq3hc5Taq+exkkQmytI0FOPwk6hdGswi
eqxzrmUl+U25+3xCLMb0Wpcw45aiIc+/5wAKXy10Bmqbkz9ePDztaOIArd3a7B7Y
gOADvNitXzyAcaJAZpUWwmMG7wUY93u/UfchnnzYGiwCyiSbrUjmtaKz3l584efW
TXUG2ltYbrD5dI4zX51hz4bZhdBERnQo8mu7vZjsZW72DBWD9kk+XAmd2e5DJX2D
6zQN/dw3hgMh1Vf07pOX+GkeHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLK6RW4x
qeySrkhSgdoxLcjowTPHMB8GA1UdIwQYMBaAFLdEpE5bZT5sepDPYDTgDc/YlH1g
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUJFNS82NEM1MjcwOEE5
NUYxMUU3OUFENEU3MzRDNEY5QUUwMi90MFNrVGx0bFBteDZrTTlnTk9BTno5aVVm
V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3QwU2tUbHRsUG14NmtNOWdOT0FOejlpVWZXQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RUJFNS82NEM1MjcwOEE5NUYxMUU3OUFENEU3MzRDNEY5QUUwMi90MFNrVGx0bFBt
eDZrTTlnTk9BTno5aVVmV0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB7m5foPOzHUhww+00RqKJc16ZBlZaS/Tm5xa4NYBMPQa/aVgNzr3AQ
frayWIY6Q1oOox7y8W77S1Ga70bonleWlOkUU2ywQWPquvu71OrNHoWdzfJK4vZ0
tzH/S8+Ik7oEkwLeBb84tPhcDM68QeT7SmRDRUqUkF2/QwPD28q8ozNdxWNYPL+2
vAGjkVkFcMFPWZ2SM3hlJKfUERQvfwJbN2/ot0x3LMLRPlciivXKta2uBL4JhX8R
n7Mg0PiP+KX7eAyIKAw3neoYs/3NgMSB/hq77yGZfnePM1KWUp65/WskdH/RrLz1
8Ut6czqE1cwfffWa6B7b8dnGHg081YiY
-----END CERTIFICATE-----
Generated at Sun Apr 27 00:33:03 2025 by rpki-client