Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft
File:                     w97H_d1FyVFyYIZPqe68_nuLz1c.mft (raw, json)
Hash identifier:          IO8vL600SETc25fBkiU4DYRYZdKqG4OS+0cVMHW3qAM=
Subject key identifier:   29:4F:A2:18:47:52:29:6C:EB:4D:57:CC:32:1F:54:58:26:1A:F0:3A
Authority key identifier: C3:DE:C7:FD:DD:45:C9:51:72:60:86:4F:A9:EE:BC:FE:7B:8B:CF:57
Certificate issuer:       /CN=A9159234/serialNumber=C3DEC7FDDD45C9517260864FA9EEBCFE7B8BCF57
Certificate serial:       052A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w97H_d1FyVFyYIZPqe68_nuLz1c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft
Manifest number:          051C
Signing time:             Thu 30 Jan 2025 23:37:32 +0000
Manifest this update:     Thu 30 Jan 2025 23:37:32 +0000
Manifest next update:     Thu 06 Feb 2025 23:37:32 +0000
Files and hashes:         1: w97H_d1FyVFyYIZPqe68_nuLz1c.crl (hash: P8oFItYtwRhxd6xEMUJwrJ7zBmZMBxfyX7h/limgEKQ=)
                          2: B58C9578378011ECA9E26B5AC4F9AE02.roa (hash: ZDchGQlVuJ+QjHKNA7YoG+7MDRY2/kTvBgBCNq57J7M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1322 (0x52a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9159234/serialNumber=C3DEC7FDDD45C9517260864FA9EEBCFE7B8BCF57
        Validity
            Not Before: Jan 30 23:37:32 2025 GMT
            Not After : Feb  6 23:37:32 2025 GMT
        Subject: CN=679c0d3c-b5ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8a:6d:02:6a:f0:9d:cc:07:33:6d:dc:a4:83:
                    a5:3f:d0:62:c6:33:37:ea:34:d8:6c:6b:f7:18:48:
                    af:ff:c9:8b:4b:83:8c:6b:33:e9:c0:0b:de:cd:c1:
                    a4:94:e4:b5:e1:dc:6e:ab:2e:f2:bf:19:de:7f:3f:
                    ad:39:52:87:80:5d:3c:c7:10:30:27:2f:40:b4:08:
                    69:1a:3b:e5:9e:08:b5:17:fb:25:b6:d3:be:01:9c:
                    3e:d6:24:c2:9e:7c:c8:8e:d6:15:b3:c8:36:ae:e1:
                    b9:69:75:e4:f8:f5:e5:05:fc:84:4a:c4:c1:ac:2b:
                    88:22:99:d5:1c:db:3b:05:ba:c7:fa:d2:f4:ed:13:
                    55:76:c0:7f:07:9f:df:b5:49:bc:9e:de:2f:3f:aa:
                    fa:bc:0c:b9:9f:b0:e8:91:b0:45:9c:68:ec:b7:3d:
                    66:22:4d:88:00:fa:27:ad:16:80:e5:92:ba:e9:90:
                    b9:9c:1c:ff:ff:0e:a6:a2:e3:c3:4c:57:0d:3e:e3:
                    6b:6e:3a:b5:f1:43:2e:65:ab:ce:7d:6a:c8:fb:23:
                    53:f8:fc:b6:5e:20:b5:c5:c1:cb:2b:fb:c4:f3:f3:
                    a3:ff:ce:a0:d4:ab:40:62:8b:64:04:00:79:07:33:
                    42:bf:06:5a:dc:1f:ed:f0:3d:d3:e8:89:de:51:b2:
                    f7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:4F:A2:18:47:52:29:6C:EB:4D:57:CC:32:1F:54:58:26:1A:F0:3A
            X509v3 Authority Key Identifier:
                keyid:C3:DE:C7:FD:DD:45:C9:51:72:60:86:4F:A9:EE:BC:FE:7B:8B:CF:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w97H_d1FyVFyYIZPqe68_nuLz1c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:18:7f:15:27:04:6a:0e:cd:93:d6:14:9a:ed:f1:be:61:04:
         69:0d:0f:84:eb:62:db:2e:99:49:98:49:5c:0a:de:67:34:ea:
         b8:21:c2:5b:e2:7f:83:2d:bd:f6:6f:4b:3c:34:ae:c9:3c:ff:
         6c:8f:45:26:92:9b:c3:be:76:80:11:8e:fb:76:ab:01:90:46:
         e0:77:20:f0:6b:9f:18:43:f1:33:19:7e:91:0b:51:11:f7:29:
         5b:e7:b1:16:57:08:f1:05:b4:12:a7:95:94:19:c2:4a:9f:19:
         0e:6e:a1:65:32:6c:c8:ec:8e:ea:00:1f:a0:a6:70:71:fb:fa:
         04:27:ea:87:93:2f:5a:d8:d3:fa:10:85:f5:d9:4d:79:1a:ae:
         b0:c7:cf:c2:72:f5:fe:a3:5b:57:a4:a2:0a:a7:62:21:e6:b3:
         ff:99:26:0c:54:26:6e:90:9b:61:9e:b5:3f:17:62:db:b9:02:
         98:96:7b:d0:48:19:d1:08:34:1b:08:5e:33:08:f3:3e:05:6f:
         ef:3c:71:ec:71:d7:9f:93:29:5b:f6:c4:b6:87:b5:2f:03:13:
         db:9f:e6:09:35:30:6c:33:fe:15:06:3d:64:7d:36:ea:5c:38:
         26:7b:95:4b:0b:6f:ae:90:7a:56:9c:3c:cc:69:a5:78:34:a4:
         aa:ba:d2:06
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBSowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTkyMzQxMTAvBgNVBAUTKEMzREVDN0ZEREQ0NUM5NTE3MjYwODY0RkE5RUVCQ0ZF
N0I4QkNGNTcwHhcNMjUwMTMwMjMzNzMyWhcNMjUwMjA2MjMzNzMyWjAYMRYwFAYD
VQQDEw02NzljMGQzYy1iNWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApoptAmrwncwHM23cpIOlP9BixjM36jTYbGv3GEiv/8mLS4OMazPpwAvezcGk
lOS14dxuqy7yvxnefz+tOVKHgF08xxAwJy9AtAhpGjvlngi1F/slttO+AZw+1iTC
nnzIjtYVs8g2ruG5aXXk+PXlBfyESsTBrCuIIpnVHNs7BbrH+tL07RNVdsB/B5/f
tUm8nt4vP6r6vAy5n7DokbBFnGjstz1mIk2IAPonrRaA5ZK66ZC5nBz//w6mouPD
TFcNPuNrbjq18UMuZavOfWrI+yNT+Py2XiC1xcHLK/vE8/Oj/86g1KtAYotkBAB5
BzNCvwZa3B/t8D3T6IneUbL35QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFClPohhH
Uils601XzDIfVFgmGvA6MB8GA1UdIwQYMBaAFMPex/3dRclRcmCGT6nuvP57i89X
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTIzNC82QThFMDBFQUVG
OEExMUVCQTI5MjE3NjRDNEY5QUUwMi93OTdIX2QxRnlWRnlZSVpQcWU2OF9udUx6
MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3c5N0hfZDFGeVZGeVlJWlBxZTY4X251THoxYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
OTIzNC82QThFMDBFQUVGOEExMUVCQTI5MjE3NjRDNEY5QUUwMi93OTdIX2QxRnlW
RnlZSVpQcWU2OF9udUx6MWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC2GH8VJwRqDs2T1hSa7fG+YQRpDQ+E62LbLplJmElcCt5nNOq4IcJb
4n+DLb32b0s8NK7JPP9sj0UmkpvDvnaAEY77dqsBkEbgdyDwa58YQ/EzGX6RC1ER
9ylb57EWVwjxBbQSp5WUGcJKnxkObqFlMmzI7I7qAB+gpnBx+/oEJ+qHky9a2NP6
EIX12U15Gq6wx8/CcvX+o1tXpKIKp2Ih5rP/mSYMVCZukJthnrU/F2LbuQKYlnvQ
SBnRCDQbCF4zCPM+BW/vPHHscdefkylb9sS2h7UvAxPbn+YJNTBsM/4VBj1kfTbq
XDgme5VLC2+ukHpWnDzMaaV4NKSqutIG
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:29:16 2025 by rpki-client