Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft
File:                     vY9TgeGI5FgPskcsJxoFQp4tXCI.mft (raw, json)
Hash identifier:          wQeHtsuwdOBseHtJNbJivyJUeibT/sUpJ1NdC/MU/qk=
Subject key identifier:   B1:19:8B:70:8D:2B:D5:12:34:D7:88:6A:8D:B2:FC:C2:A3:68:5B:81
Authority key identifier: BD:8F:53:81:E1:88:E4:58:0F:B2:47:2C:27:1A:05:42:9E:2D:5C:22
Certificate issuer:       /CN=A915D66D/serialNumber=BD8F5381E188E4580FB2472C271A05429E2D5C22
Certificate serial:       1ABF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vY9TgeGI5FgPskcsJxoFQp4tXCI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft
Manifest number:          1AB5
Signing time:             Fri 31 Jan 2025 16:20:13 +0000
Manifest this update:     Fri 31 Jan 2025 16:20:12 +0000
Manifest next update:     Fri 07 Feb 2025 16:20:12 +0000
Files and hashes:         1: vY9TgeGI5FgPskcsJxoFQp4tXCI.crl (hash: Y53pelW+IDKx5+K+ifeLpfkM8x7QVYPRrAwlc0LpWTU=)
                          2: 59029A32233A11E78D48837AC4F9AE02.roa (hash: fZ4rzQw+k1I7EBhPTcblakdeeuKhaVvBsWtldnvXI0s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6847 (0x1abf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D66D/serialNumber=BD8F5381E188E4580FB2472C271A05429E2D5C22
        Validity
            Not Before: Jan 31 16:20:12 2025 GMT
            Not After : Feb  7 16:20:12 2025 GMT
        Subject: CN=679cf83c-9910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a3:eb:19:02:3b:8e:8d:68:af:4b:d0:24:a4:
                    d6:08:a6:84:00:53:c8:c2:0e:99:21:3a:0f:7b:28:
                    b4:eb:27:21:eb:03:34:d1:e3:73:b0:12:c9:42:da:
                    dc:46:c4:1d:5f:98:1f:8f:32:0c:c4:1d:30:d4:f4:
                    04:2f:f4:27:c9:63:a6:63:9c:fc:3f:a1:2a:9c:91:
                    c4:63:e5:cf:37:c2:e2:ef:45:18:65:40:77:04:4b:
                    99:61:9b:86:10:d4:17:c4:3e:8b:15:c5:3e:45:93:
                    d8:2c:02:47:d7:a7:53:f3:4d:c6:c2:e3:a1:c7:13:
                    40:c5:2f:cf:b6:8f:91:1b:1c:22:b4:3c:3c:35:0e:
                    cc:57:46:18:51:e0:7b:ba:55:20:d4:6e:6f:9b:0f:
                    f6:f8:f1:bc:36:d7:99:35:71:1a:50:c8:cc:80:d8:
                    05:c4:d5:ce:8a:b3:64:d0:df:d6:88:ce:23:a2:ba:
                    1f:e9:8d:1d:24:3a:03:ac:bc:e0:45:6c:55:3e:1d:
                    fd:00:7a:86:cc:70:7d:23:eb:ee:e7:3c:c2:3e:a0:
                    fa:63:95:b6:4b:cc:7a:67:3d:b7:c9:be:bf:82:44:
                    8e:18:5a:44:1b:74:24:12:8f:32:ff:bd:73:8b:73:
                    3e:51:b7:a8:1f:f3:72:48:44:db:34:67:fe:e8:fa:
                    05:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:19:8B:70:8D:2B:D5:12:34:D7:88:6A:8D:B2:FC:C2:A3:68:5B:81
            X509v3 Authority Key Identifier:
                keyid:BD:8F:53:81:E1:88:E4:58:0F:B2:47:2C:27:1A:05:42:9E:2D:5C:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vY9TgeGI5FgPskcsJxoFQp4tXCI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:5e:05:a3:58:7a:af:4c:51:15:f6:8a:11:70:3b:96:46:64:
         eb:74:27:73:b7:f8:a1:29:f3:9c:f7:26:11:39:b2:c4:ee:e6:
         c8:fa:c5:cc:4b:ef:22:aa:84:23:f0:29:de:61:e4:e2:c9:b7:
         d2:0a:27:d2:65:11:08:c7:4f:49:c6:5b:93:25:d6:62:f0:90:
         9e:77:de:8f:d7:07:8a:e1:a3:1a:eb:d2:47:a2:80:eb:38:2e:
         f5:4c:f5:29:84:2a:4b:07:bb:a2:f1:54:d5:65:c7:d8:4f:70:
         9a:3d:9a:67:de:29:36:95:67:e3:4b:98:d0:ef:39:ef:a9:42:
         4d:f7:b7:05:7c:6c:a1:f4:3a:d3:79:7a:43:57:7b:45:0b:eb:
         c4:4e:e3:66:62:9a:cf:b9:48:e3:fd:d0:57:0c:45:e1:14:cd:
         b1:87:c3:01:6e:73:96:e4:2b:0a:0c:d7:c3:e7:74:26:17:bd:
         34:ec:78:34:1e:fb:36:d9:31:1b:54:53:51:c0:96:0e:15:32:
         3d:5e:46:11:dc:c6:c9:7c:88:e6:a1:fa:8d:1e:1f:6b:21:2a:
         99:f7:d9:5b:24:b8:ea:34:68:7b:87:ed:53:04:06:68:5d:4b:
         8a:79:16:7b:75:2c:83:64:0a:e1:de:53:66:9a:da:02:71:0a:
         9d:67:30:d8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICGr8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUQ2NkQxMTAvBgNVBAUTKEJEOEY1MzgxRTE4OEU0NTgwRkIyNDcyQzI3MUEwNTQy
OUUyRDVDMjIwHhcNMjUwMTMxMTYyMDEyWhcNMjUwMjA3MTYyMDEyWjAYMRYwFAYD
VQQDEw02NzljZjgzYy05OTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsaPrGQI7jo1or0vQJKTWCKaEAFPIwg6ZIToPeyi06ych6wM00eNzsBLJQtrc
RsQdX5gfjzIMxB0w1PQEL/QnyWOmY5z8P6EqnJHEY+XPN8Li70UYZUB3BEuZYZuG
ENQXxD6LFcU+RZPYLAJH16dT803GwuOhxxNAxS/Pto+RGxwitDw8NQ7MV0YYUeB7
ulUg1G5vmw/2+PG8NteZNXEaUMjMgNgFxNXOirNk0N/WiM4jorof6Y0dJDoDrLzg
RWxVPh39AHqGzHB9I+vu5zzCPqD6Y5W2S8x6Zz23yb6/gkSOGFpEG3QkEo8y/71z
i3M+UbeoH/NySETbNGf+6PoF6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLEZi3CN
K9USNNeIao2y/MKjaFuBMB8GA1UdIwQYMBaAFL2PU4HhiORYD7JHLCcaBUKeLVwi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDY2RC8xRUIwOTI1NDIz
MzkxMUU3QTA2QjI1NzlDNEY5QUUwMi92WTlUZ2VHSTVGZ1Bza2NzSnhvRlFwNHRY
Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZZOVRnZUdJNUZnUHNrY3NKeG9GUXA0dFhDSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RDY2RC8xRUIwOTI1NDIzMzkxMUU3QTA2QjI1NzlDNEY5QUUwMi92WTlUZ2VHSTVG
Z1Bza2NzSnhvRlFwNHRYQ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAyXgWjWHqvTFEV9ooRcDuWRmTrdCdzt/ihKfOc9yYRObLE7ubI+sXM
S+8iqoQj8CneYeTiybfSCifSZREIx09JxluTJdZi8JCed96P1weK4aMa69JHooDr
OC71TPUphCpLB7ui8VTVZcfYT3CaPZpn3ik2lWfjS5jQ7znvqUJN97cFfGyh9DrT
eXpDV3tFC+vETuNmYprPuUjj/dBXDEXhFM2xh8MBbnOW5CsKDNfD53QmF7007Hg0
Hvs22TEbVFNRwJYOFTI9XkYR3MbJfIjmofqNHh9rISqZ99lbJLjqNGh7h+1TBAZo
XUuKeRZ7dSyDZArh3lNmmtoCcQqdZzDY
-----END CERTIFICATE-----
Generated at Sat Apr 26 02:06:09 2025 by rpki-client