Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.mft
File:                     2m7mst6yYhOWAXC6ZYdieLLff84.mft (raw, json)
Hash identifier:          kenPTHDeKsmiEFIWkIWELIZRMYQqNOcxgDI4COtGlhM=
Subject key identifier:   73:D7:C1:1A:7A:2A:26:21:5F:20:69:FF:49:0B:C2:71:E5:24:50:D5
Authority key identifier: DA:6E:E6:B2:DE:B2:62:13:96:01:70:BA:65:87:62:78:B2:DF:7F:CE
Certificate issuer:       /CN=A915429C/serialNumber=DA6EE6B2DEB26213960170BA65876278B2DF7FCE
Certificate serial:       0363
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m7mst6yYhOWAXC6ZYdieLLff84.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.mft
Manifest number:          035F
Signing time:             Fri 31 Jan 2025 01:00:43 +0000
Manifest this update:     Fri 31 Jan 2025 01:00:42 +0000
Manifest next update:     Fri 07 Feb 2025 01:00:42 +0000
Files and hashes:         1: 2m7mst6yYhOWAXC6ZYdieLLff84.crl (hash: Ncv5yVlYx7xatdOjWOQSXZ1LyU8E1t76FGl2XznCekY=)
                          2: E15BCDE69AAD11ECB4212E2AC4F9AE02.roa (hash: qhynuoprkI0QYX3zOrBN2WK4xqaTH29Aq56lgYsl6oY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 867 (0x363)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915429C/serialNumber=DA6EE6B2DEB26213960170BA65876278B2DF7FCE
        Validity
            Not Before: Jan 31 01:00:42 2025 GMT
            Not After : Feb  7 01:00:42 2025 GMT
        Subject: CN=679c20ba-a68c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:cb:7d:94:c9:32:aa:7f:6b:90:ee:36:ac:c7:
                    b1:57:a8:e1:24:a7:d0:98:f8:d7:0c:12:ed:3b:89:
                    a2:4e:80:0e:96:f0:fb:de:9c:25:ef:8f:e8:ee:f8:
                    de:31:10:5c:9b:fe:f6:9a:3f:30:45:d1:6c:f5:07:
                    8a:51:e4:e6:b4:86:60:47:6a:27:e1:47:c7:0b:b3:
                    2c:cb:2b:b4:db:9b:96:86:de:ea:7c:1d:fe:d8:6b:
                    01:85:4e:11:1d:52:82:4a:df:25:ad:12:8f:aa:2c:
                    7b:f0:ba:db:1e:e5:80:5c:a5:67:99:2c:db:a9:fc:
                    cd:8f:cc:1f:2b:06:1c:5e:94:28:f8:5d:00:a1:ea:
                    6e:95:a7:75:28:13:07:db:14:e9:8e:dc:11:d4:8e:
                    b6:40:a5:3c:c2:21:bd:8d:53:32:d8:b5:e0:a5:1b:
                    98:b6:cb:da:6b:8c:c8:e2:34:68:93:85:ac:56:d0:
                    4f:32:7a:47:8c:1e:92:22:88:7d:f7:44:9f:d9:90:
                    91:ae:56:08:f5:1d:cc:26:a6:df:2e:4e:d1:20:a8:
                    68:16:e4:9f:6c:58:b4:9f:25:20:6f:dd:42:fe:2e:
                    db:23:cb:81:bc:d9:db:24:1f:3e:17:cb:f6:ee:56:
                    52:14:77:88:53:d5:eb:cc:a7:bf:e5:72:80:33:aa:
                    9d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:D7:C1:1A:7A:2A:26:21:5F:20:69:FF:49:0B:C2:71:E5:24:50:D5
            X509v3 Authority Key Identifier:
                keyid:DA:6E:E6:B2:DE:B2:62:13:96:01:70:BA:65:87:62:78:B2:DF:7F:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m7mst6yYhOWAXC6ZYdieLLff84.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:1a:76:f1:f9:d9:1f:d0:9e:46:5f:eb:52:44:d5:13:b5:5e:
         ac:41:9d:79:dd:b1:03:75:a0:b8:e6:c0:93:b5:4c:a9:05:44:
         e4:e6:0d:1a:ae:8c:a8:98:55:df:c5:a9:5f:b9:4d:28:0c:0f:
         bd:8a:8f:55:8d:18:dc:83:22:37:7a:c3:d5:06:9d:49:08:c5:
         d7:93:34:64:7f:5f:e1:11:af:e3:23:96:ae:ae:65:30:ff:d6:
         85:44:ad:28:e5:ca:79:17:a4:04:f0:14:a9:44:a5:e9:eb:9c:
         b5:15:3f:6d:f8:41:48:7b:ce:39:4f:84:e0:b6:2d:78:2c:6a:
         79:26:d3:02:d7:14:87:0f:5b:f7:74:05:4d:84:65:a1:39:94:
         03:2e:9d:b1:32:a1:bc:77:2f:23:50:14:9d:69:20:be:9a:13:
         d8:1a:4d:42:3f:ce:70:d4:03:fd:b5:12:f3:9b:3c:8b:67:50:
         44:be:f4:f2:f5:ab:55:ca:cf:8e:00:65:f8:b0:89:7d:14:81:
         81:09:8b:bc:d0:f0:cf:25:1f:99:ad:f8:68:4d:6c:ac:d0:e0:
         60:bb:71:5e:0d:e3:eb:94:cd:6d:eb:14:7a:21:e8:38:a6:7c:
         ae:bc:09:5c:d5:11:ac:76:95:86:c3:15:45:40:a2:ce:bf:03:
         48:b4:22:12
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA2MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTQyOUMxMTAvBgNVBAUTKERBNkVFNkIyREVCMjYyMTM5NjAxNzBCQTY1ODc2Mjc4
QjJERjdGQ0UwHhcNMjUwMTMxMDEwMDQyWhcNMjUwMjA3MDEwMDQyWjAYMRYwFAYD
VQQDEw02NzljMjBiYS1hNjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnst9lMkyqn9rkO42rMexV6jhJKfQmPjXDBLtO4miToAOlvD73pwl74/o7vje
MRBcm/72mj8wRdFs9QeKUeTmtIZgR2on4UfHC7Msyyu025uWht7qfB3+2GsBhU4R
HVKCSt8lrRKPqix78LrbHuWAXKVnmSzbqfzNj8wfKwYcXpQo+F0Aoepulad1KBMH
2xTpjtwR1I62QKU8wiG9jVMy2LXgpRuYtsvaa4zI4jRok4WsVtBPMnpHjB6SIoh9
90Sf2ZCRrlYI9R3MJqbfLk7RIKhoFuSfbFi0nyUgb91C/i7bI8uBvNnbJB8+F8v2
7lZSFHeIU9XrzKe/5XKAM6qdvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHPXwRp6
KiYhXyBp/0kLwnHlJFDVMB8GA1UdIwQYMBaAFNpu5rLesmITlgFwumWHYniy33/O
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDI5Qy9FNkIyNTRGODlB
QTkxMUVDOTI0QzZCMjNDNEY5QUUwMi8ybTdtc3Q2eVloT1dBWEM2WllkaWVMTGZm
ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJtN21zdDZ5WWhPV0FYQzZaWWRpZUxMZmY4NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NDI5Qy9FNkIyNTRGODlBQTkxMUVDOTI0QzZCMjNDNEY5QUUwMi8ybTdtc3Q2eVlo
T1dBWEM2WllkaWVMTGZmODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBOGnbx+dkf0J5GX+tSRNUTtV6sQZ153bEDdaC45sCTtUypBUTk5g0a
royomFXfxalfuU0oDA+9io9VjRjcgyI3esPVBp1JCMXXkzRkf1/hEa/jI5aurmUw
/9aFRK0o5cp5F6QE8BSpRKXp65y1FT9t+EFIe845T4Tgti14LGp5JtMC1xSHD1v3
dAVNhGWhOZQDLp2xMqG8dy8jUBSdaSC+mhPYGk1CP85w1AP9tRLzmzyLZ1BEvvTy
9atVys+OAGX4sIl9FIGBCYu80PDPJR+ZrfhoTWys0OBgu3FeDePrlM1t6xR6Ieg4
pnyuvAlc1RGsdpWGwxVFQKLOvwNItCIS
-----END CERTIFICATE-----
Generated at Sun May 4 10:54:33 2025 by rpki-client