Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft
File:                     v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft (raw, json)
Hash identifier:          aMMxr22nGW4x/+OzKoFWc3DkbIwStzB/6O6OEt68ksw=
Subject key identifier:   00:43:02:E9:D6:C5:3C:1B:1A:24:DA:C3:B7:B8:2A:33:CA:9B:25:A5
Authority key identifier: BF:AF:23:63:75:77:29:EE:05:AB:21:B7:1D:20:5A:B4:18:E1:B8:34
Certificate issuer:       /CN=A9167FF5/serialNumber=BFAF2363757729EE05AB21B71D205AB418E1B834
Certificate serial:       0166
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v68jY3V3Ke4FqyG3HSBatBjhuDQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft
Manifest number:          0163
Signing time:             Fri 31 Jan 2025 03:20:02 +0000
Manifest this update:     Fri 31 Jan 2025 03:20:01 +0000
Manifest next update:     Fri 07 Feb 2025 03:20:01 +0000
Files and hashes:         1: v68jY3V3Ke4FqyG3HSBatBjhuDQ.crl (hash: yfBHZWlC+YR9ydloq53vFMhCueIBsSAwq0V6NDJaoCc=)
                          2: DCEA0362C17C11ED92AD7D85C4F9AE02.roa (hash: iJgF3xLl/F7BTTiuttHhI1X4PDcUoYj6A2s1rvrmJk0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 358 (0x166)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167FF5/serialNumber=BFAF2363757729EE05AB21B71D205AB418E1B834
        Validity
            Not Before: Jan 31 03:20:01 2025 GMT
            Not After : Feb  7 03:20:01 2025 GMT
        Subject: CN=679c4162-ca62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:75:1a:5f:be:8a:a1:ee:c4:20:c7:97:eb:4b:
                    05:e1:d8:9e:7f:dc:8d:82:b4:2d:8d:fe:63:a7:36:
                    34:4d:98:83:3b:7b:dc:b4:b4:e2:9d:f0:64:fe:c6:
                    f0:71:6c:f8:26:bf:03:c9:3f:8b:21:43:58:65:ab:
                    b4:e0:6d:61:a2:62:d3:1c:d8:fd:0d:c9:2c:f6:22:
                    b5:29:58:3f:45:c2:02:88:4c:cb:14:ce:e0:90:d8:
                    e1:f3:5e:45:80:8f:35:f8:6c:97:38:d6:7b:98:7d:
                    60:d2:84:52:49:cc:ba:6a:b9:db:31:76:d2:1d:81:
                    c3:0f:11:fa:68:51:7b:9a:ca:bc:4d:8e:04:ff:dd:
                    7f:16:72:4b:84:01:2d:9f:39:e0:2a:1b:6a:79:78:
                    bf:4d:94:08:8e:ae:c7:1d:31:c2:63:6c:08:80:95:
                    b9:df:93:db:b8:8f:ca:83:d0:3e:be:8b:4a:3f:15:
                    00:a5:70:34:d9:ce:f1:a2:47:f3:e3:c6:35:50:f4:
                    bc:dd:2a:ea:97:1e:f8:d8:12:55:08:04:cd:b6:5d:
                    47:8a:c9:45:d4:b2:9a:50:9b:be:9c:7e:88:95:91:
                    f2:11:2f:c1:8d:34:2e:85:73:67:1f:22:0c:7a:1d:
                    9e:45:0b:08:96:fa:84:d3:ca:13:0e:d1:1b:b8:94:
                    1d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:43:02:E9:D6:C5:3C:1B:1A:24:DA:C3:B7:B8:2A:33:CA:9B:25:A5
            X509v3 Authority Key Identifier:
                keyid:BF:AF:23:63:75:77:29:EE:05:AB:21:B7:1D:20:5A:B4:18:E1:B8:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v68jY3V3Ke4FqyG3HSBatBjhuDQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:33:f8:92:7e:fc:80:47:54:43:4b:19:91:1b:e4:4e:5b:44:
         fd:72:ac:c0:c8:e1:79:3a:44:13:15:92:34:4d:6c:b3:a2:29:
         ce:2c:db:00:89:10:52:f2:f4:28:71:54:df:fb:ed:cb:c4:f4:
         e1:71:18:a9:b1:2c:43:da:2f:3e:b9:30:a6:14:7b:83:78:56:
         94:85:c0:d9:43:65:b6:c3:ac:9e:d7:ed:bd:8b:5d:82:73:a7:
         c5:98:5e:f4:d3:1c:ea:a6:a3:c8:e9:63:69:75:ef:f5:a4:0a:
         8f:b3:b3:1c:9e:a5:4a:a8:1a:ff:f1:3e:8f:29:21:17:98:23:
         06:5f:11:92:90:43:9c:77:aa:3e:e0:0d:88:91:09:20:b7:07:
         89:a4:f1:6c:9c:f9:b5:37:73:7f:53:63:c1:f4:7a:1a:0b:32:
         23:a7:a5:31:78:71:e4:70:11:9a:85:7e:da:e5:75:e2:a4:7d:
         08:3d:23:bb:39:50:10:79:7b:25:78:72:19:8b:b2:b7:ce:46:
         d0:d0:1b:8d:c5:dc:70:96:bd:bc:f5:73:8d:12:9e:4d:f0:70:
         87:a6:38:68:99:94:57:a0:f8:1a:0f:f3:d6:a9:4b:0c:f2:43:
         1d:9b:55:7c:a6:77:e6:12:9b:d2:1d:af:4e:d5:d7:dd:8a:f3:
         e5:c9:bb:b5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjdGRjUxMTAvBgNVBAUTKEJGQUYyMzYzNzU3NzI5RUUwNUFCMjFCNzFEMjA1QUI0
MThFMUI4MzQwHhcNMjUwMTMxMDMyMDAxWhcNMjUwMjA3MDMyMDAxWjAYMRYwFAYD
VQQDEw02NzljNDE2Mi1jYTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqnUaX76Koe7EIMeX60sF4dief9yNgrQtjf5jpzY0TZiDO3vctLTinfBk/sbw
cWz4Jr8DyT+LIUNYZau04G1homLTHNj9Dcks9iK1KVg/RcICiEzLFM7gkNjh815F
gI81+GyXONZ7mH1g0oRSScy6arnbMXbSHYHDDxH6aFF7msq8TY4E/91/FnJLhAEt
nzngKhtqeXi/TZQIjq7HHTHCY2wIgJW535PbuI/Kg9A+votKPxUApXA02c7xokfz
48Y1UPS83Srqlx742BJVCATNtl1HislF1LKaUJu+nH6IlZHyES/BjTQuhXNnHyIM
eh2eRQsIlvqE08oTDtEbuJQdyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFABDAunW
xTwbGiTaw7e4KjPKmyWlMB8GA1UdIwQYMBaAFL+vI2N1dynuBashtx0gWrQY4bg0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0ZGNS8yNzIwNDM5MkMx
NzgxMUVEQUY1NEE5NUZDNEY5QUUwMi92NjhqWTNWM0tlNEZxeUczSFNCYXRCamh1
RFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Y2OGpZM1YzS2U0RnF5RzNIU0JhdEJqaHVEUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
N0ZGNS8yNzIwNDM5MkMxNzgxMUVEQUY1NEE5NUZDNEY5QUUwMi92NjhqWTNWM0tl
NEZxeUczSFNCYXRCamh1RFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDEM/iSfvyAR1RDSxmRG+ROW0T9cqzAyOF5OkQTFZI0TWyzoinOLNsA
iRBS8vQocVTf++3LxPThcRipsSxD2i8+uTCmFHuDeFaUhcDZQ2W2w6ye1+29i12C
c6fFmF700xzqpqPI6WNpde/1pAqPs7McnqVKqBr/8T6PKSEXmCMGXxGSkEOcd6o+
4A2IkQkgtweJpPFsnPm1N3N/U2PB9HoaCzIjp6UxeHHkcBGahX7a5XXipH0IPSO7
OVAQeXsleHIZi7K3zkbQ0BuNxdxwlr289XONEp5N8HCHpjhomZRXoPgaD/PWqUsM
8kMdm1V8pnfmEpvSHa9O1dfdivPlybu1
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:58:52 2025 by rpki-client