Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft
File:                     Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft (raw, json)
Hash identifier:          XEkDjFPGYujGRJpDiEnpbbWNgJuMY5TWzOS2SjmB2j4=
Subject key identifier:   67:C6:40:DE:62:4A:84:F9:7A:DB:35:09:25:B0:15:E0:91:79:AD:C7
Authority key identifier: 02:AE:84:F6:11:B7:E8:2F:D7:D6:FF:8F:45:2D:87:25:EF:48:90:88
Certificate issuer:       /CN=A91642A0/serialNumber=02AE84F611B7E82FD7D6FF8F452D8725EF489088
Certificate serial:       0C8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft
Manifest number:          0C6C
Signing time:             Fri 31 Jan 2025 18:13:33 +0000
Manifest this update:     Fri 31 Jan 2025 18:13:32 +0000
Manifest next update:     Fri 07 Feb 2025 18:13:32 +0000
Files and hashes:         1: Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl (hash: IX6r6D+uVQT08wdVlgnIiY7ZRtx9Ljws4husriBQKJ4=)
                          2: B0B70006B19211EC9EAAD44EC4F9AE02.roa (hash: 83OH0Wsd/y1ubngAT82t1pBg049gm5VgpR6zC5KRyEQ=)
                          3: AFB0FFCCB19211EC9EAAD44EC4F9AE02.roa (hash: Qq3O50/II2fF8ZDKuNfLBJMdHudKQhPCei4uAD4b1ww=)
                          4: 0EF0E842839E11EEA1892A12C4F9AE02.roa (hash: qjRK1UsduZje7NigLFGo9IfaYJBsXsGYrorJ0nbh7Fg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3214 (0xc8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91642A0/serialNumber=02AE84F611B7E82FD7D6FF8F452D8725EF489088
        Validity
            Not Before: Jan 31 18:13:32 2025 GMT
            Not After : Feb  7 18:13:32 2025 GMT
        Subject: CN=679d12cd-b540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7d:86:4a:30:22:90:e9:f3:c5:6e:cb:d6:95:
                    68:f6:28:e4:6d:f0:c9:76:80:c1:a9:df:8a:84:b6:
                    72:15:99:b3:8c:03:b3:44:52:dd:8c:78:95:95:56:
                    7f:3f:b2:68:e4:b2:ae:19:18:72:7d:2b:83:82:cc:
                    06:5c:6f:dc:4b:84:5b:6f:b2:f4:a8:84:88:a3:45:
                    43:e1:09:4e:8b:68:01:43:94:01:04:fe:e6:06:ce:
                    72:ff:d5:4d:c0:06:ec:06:12:65:ff:ac:85:ad:b3:
                    a2:bf:70:65:c2:b5:de:99:5d:ce:8a:db:9e:ef:f9:
                    87:e0:f6:40:a0:11:ea:42:a9:7f:8b:1d:e3:de:e2:
                    35:3a:80:0c:16:f7:de:b5:8e:72:4e:51:88:13:e7:
                    8e:37:14:40:9a:aa:82:54:83:6d:aa:ed:81:4f:c3:
                    cd:e8:72:ee:93:f2:8b:5a:af:a6:c3:b3:8c:fa:cd:
                    3f:da:44:5a:2f:66:0d:f9:dd:cc:3c:0e:b9:1d:37:
                    f3:4d:55:69:07:ea:4f:2e:cf:50:60:08:45:b3:9a:
                    36:2a:82:a4:eb:03:f4:1b:f0:22:1d:3f:b7:f6:ef:
                    3b:d7:c5:9e:90:dd:b5:54:87:60:3c:1b:66:59:c1:
                    44:94:98:8c:e9:23:c5:24:29:76:0e:05:11:b0:89:
                    56:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C6:40:DE:62:4A:84:F9:7A:DB:35:09:25:B0:15:E0:91:79:AD:C7
            X509v3 Authority Key Identifier:
                keyid:02:AE:84:F6:11:B7:E8:2F:D7:D6:FF:8F:45:2D:87:25:EF:48:90:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:33:b3:01:46:06:f0:59:8a:0b:b6:3a:eb:44:5b:69:91:1d:
         0c:59:a2:fd:d8:8f:22:9b:9a:28:03:f0:6e:c4:56:3b:17:78:
         90:00:7f:5f:38:75:70:19:48:d2:3e:b6:24:a8:f8:1d:e4:90:
         a2:01:07:c1:33:43:9e:67:7a:07:21:23:f2:9e:85:15:a8:cb:
         c3:db:4d:4d:1c:97:72:4f:02:be:92:a3:e5:5b:79:ae:fc:9b:
         89:36:b9:69:18:81:b0:d9:29:6d:11:dc:8e:fe:24:8b:80:7f:
         ec:f1:2a:3a:86:7f:ee:5c:f0:44:9d:9c:cb:bd:9c:5b:82:a0:
         52:ff:b1:23:f2:df:92:d5:c7:25:2c:64:57:18:23:08:b2:10:
         04:c6:c9:ed:92:18:64:cc:d8:ed:85:c0:17:a2:61:21:84:4c:
         9a:e7:a3:45:f9:98:25:df:80:f0:b5:df:d6:1f:2e:bc:2e:c2:
         4d:17:49:ec:8f:e0:d6:38:c1:ca:9a:b6:b7:84:82:06:f2:68:
         a9:1e:46:86:9d:3e:00:73:30:d6:ae:e6:c4:dc:26:45:b4:f5:
         5c:96:e3:31:0e:fd:ed:4a:2a:fe:10:00:ea:13:b6:68:f1:b5:
         e0:1a:86:59:fd:f1:51:06:b8:09:f5:67:81:52:43:de:96:bf:
         b1:ce:c6:c0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjQyQTAxMTAvBgNVBAUTKDAyQUU4NEY2MTFCN0U4MkZEN0Q2RkY4RjQ1MkQ4NzI1
RUY0ODkwODgwHhcNMjUwMTMxMTgxMzMyWhcNMjUwMjA3MTgxMzMyWjAYMRYwFAYD
VQQDEw02NzlkMTJjZC1iNTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtn2GSjAikOnzxW7L1pVo9ijkbfDJdoDBqd+KhLZyFZmzjAOzRFLdjHiVlVZ/
P7Jo5LKuGRhyfSuDgswGXG/cS4Rbb7L0qISIo0VD4QlOi2gBQ5QBBP7mBs5y/9VN
wAbsBhJl/6yFrbOiv3BlwrXemV3Oitue7/mH4PZAoBHqQql/ix3j3uI1OoAMFvfe
tY5yTlGIE+eONxRAmqqCVINtqu2BT8PN6HLuk/KLWq+mw7OM+s0/2kRaL2YN+d3M
PA65HTfzTVVpB+pPLs9QYAhFs5o2KoKk6wP0G/AiHT+39u8718WekN21VIdgPBtm
WcFElJiM6SPFJCl2DgURsIlW4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGfGQN5i
SoT5ets1CSWwFeCRea3HMB8GA1UdIwQYMBaAFAKuhPYRt+gv19b/j0UthyXvSJCI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDJBMC9DQTdEMTE2MkY2
NzYxMUU5OTBCQUEyMjJDNEY5QUUwMi9BcTZFOWhHMzZDX1gxdi1QUlMySEplOUlr
SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FxNkU5aEczNkNfWDF2LVBSUzJISmU5SWtJZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NDJBMC9DQTdEMTE2MkY2NzYxMUU5OTBCQUEyMjJDNEY5QUUwMi9BcTZFOWhHMzZD
X1gxdi1QUlMySEplOUlrSWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB0M7MBRgbwWYoLtjrrRFtpkR0MWaL92I8im5ooA/BuxFY7F3iQAH9f
OHVwGUjSPrYkqPgd5JCiAQfBM0OeZ3oHISPynoUVqMvD201NHJdyTwK+kqPlW3mu
/JuJNrlpGIGw2SltEdyO/iSLgH/s8So6hn/uXPBEnZzLvZxbgqBS/7Ej8t+S1ccl
LGRXGCMIshAExsntkhhkzNjthcAXomEhhEya56NF+Zgl34Dwtd/WHy68LsJNF0ns
j+DWOMHKmra3hIIG8mipHkaGnT4AczDWrubE3CZFtPVcluMxDv3tSir+EADqE7Zo
8bXgGoZZ/fFRBrgJ9WeBUkPelr+xzsbA
-----END CERTIFICATE-----