Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.mft
File:                     AZcEvn5KzguhIRSzKOsCBxHvTq8.mft (raw, json)
Hash identifier:          7nFixYUtMs/LLrhLkGfpB1lDbRh685unxvtqpBHNfB4=
Subject key identifier:   FB:1E:9C:79:F2:62:5B:91:8A:E9:1C:79:05:39:C7:E7:D5:8E:C7:DC
Authority key identifier: 01:97:04:BE:7E:4A:CE:0B:A1:21:14:B3:28:EB:02:07:11:EF:4E:AF
Certificate issuer:       /CN=A91728E2/serialNumber=019704BE7E4ACE0BA12114B328EB020711EF4EAF
Certificate serial:       01B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZcEvn5KzguhIRSzKOsCBxHvTq8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.mft
Manifest number:          01B0
Signing time:             Fri 31 Jan 2025 02:27:12 +0000
Manifest this update:     Fri 31 Jan 2025 02:27:12 +0000
Manifest next update:     Fri 07 Feb 2025 02:27:12 +0000
Files and hashes:         1: AZcEvn5KzguhIRSzKOsCBxHvTq8.crl (hash: 7BQTTRGooxHm0WCvTYP0nW6duYg36TBE+n7BqrfBxrA=)
                          2: 85AEBA76504C11ED829F7D24C4F9AE02.roa (hash: MijbaBFOBmjVn0NZXYmQ25vm+DrZhkqNokVzBodlkOI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 436 (0x1b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91728E2/serialNumber=019704BE7E4ACE0BA12114B328EB020711EF4EAF
        Validity
            Not Before: Jan 31 02:27:12 2025 GMT
            Not After : Feb  7 02:27:12 2025 GMT
        Subject: CN=679c3500-6b15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d5:8b:de:5b:89:c7:b4:43:30:84:37:e1:62:
                    21:ba:1a:ba:50:22:d5:9e:82:6d:84:63:0e:ca:60:
                    ae:cf:10:df:a1:23:5c:ca:3c:9c:fc:d2:0b:97:ec:
                    b4:9f:7d:90:3d:8f:11:22:f9:03:61:4e:bc:95:66:
                    ad:2a:91:99:d2:95:63:18:ca:b7:2d:c1:d5:aa:4b:
                    2f:d7:db:92:24:8d:c9:f6:6e:fc:a3:02:66:ba:24:
                    ff:66:d5:3d:fe:9d:6b:d6:f9:24:96:58:e7:ad:6a:
                    f1:25:55:8e:bb:f9:40:2c:0f:c7:b2:6c:27:e7:8d:
                    3f:7a:1f:30:8a:2e:2e:60:43:b6:db:4a:ba:b3:f4:
                    a8:e2:b9:20:6b:f3:02:45:5d:ec:e1:de:77:92:ff:
                    b0:01:bb:dd:eb:cb:20:56:62:c6:0f:8d:99:b0:86:
                    7e:d7:7b:42:ac:8f:b3:c6:c5:95:e2:23:76:02:93:
                    de:9a:c2:17:e5:84:33:5c:b8:94:9a:d2:f5:77:ea:
                    82:2c:be:46:0a:6c:43:18:46:a8:34:ad:9e:26:e3:
                    10:47:6f:dc:41:91:d7:11:44:cc:7f:08:0e:cc:d7:
                    36:f5:07:02:17:12:62:d2:79:6b:32:69:c2:89:4b:
                    06:28:f8:ff:d8:c4:9e:45:f0:4e:d9:5c:b7:7b:6a:
                    59:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:1E:9C:79:F2:62:5B:91:8A:E9:1C:79:05:39:C7:E7:D5:8E:C7:DC
            X509v3 Authority Key Identifier:
                keyid:01:97:04:BE:7E:4A:CE:0B:A1:21:14:B3:28:EB:02:07:11:EF:4E:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZcEvn5KzguhIRSzKOsCBxHvTq8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:04:c2:f7:c7:f3:41:c2:49:92:d6:b2:74:a2:05:a7:3d:9c:
         11:a3:ed:77:0f:9f:3e:9b:e8:18:df:fd:13:80:c3:e5:04:38:
         e6:58:fb:e0:0d:02:f4:2a:20:eb:48:84:ff:ce:8e:d3:a8:da:
         3a:5c:b0:e7:06:b3:2d:0e:fa:f7:d1:a3:e1:4d:72:f2:3f:5d:
         33:87:01:d3:23:06:b5:be:44:07:d7:c6:3b:36:3a:ae:3a:77:
         16:b6:36:e6:9e:78:53:be:a4:36:40:67:21:94:7c:b8:12:5a:
         39:2f:5f:a1:25:7c:2a:4c:5f:ca:be:7e:42:0e:06:c3:76:04:
         04:3f:64:44:dc:41:1f:90:89:bf:46:64:63:63:ef:ac:f6:47:
         12:37:93:44:ff:92:dc:02:ee:0e:df:3b:bb:84:58:39:f0:d8:
         74:df:ad:f2:09:5d:81:d7:5b:59:d1:15:2a:9d:22:2b:db:95:
         90:11:30:32:71:35:9d:c6:ee:61:d8:2f:8c:b1:5a:2c:a6:10:
         87:07:77:50:99:c4:73:72:f4:4e:7d:37:ff:4e:af:66:6a:b4:
         ca:df:00:cc:05:16:a9:ab:79:fa:02:7a:1c:b8:0e:e6:90:7e:
         8e:fe:a1:98:a8:ae:94:77:c5:ac:9b:68:3a:23:e1:01:7d:a6:
         11:29:d3:e6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzI4RTIxMTAvBgNVBAUTKDAxOTcwNEJFN0U0QUNFMEJBMTIxMTRCMzI4RUIwMjA3
MTFFRjRFQUYwHhcNMjUwMTMxMDIyNzEyWhcNMjUwMjA3MDIyNzEyWjAYMRYwFAYD
VQQDEw02NzljMzUwMC02YjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvdWL3luJx7RDMIQ34WIhuhq6UCLVnoJthGMOymCuzxDfoSNcyjyc/NILl+y0
n32QPY8RIvkDYU68lWatKpGZ0pVjGMq3LcHVqksv19uSJI3J9m78owJmuiT/ZtU9
/p1r1vkklljnrWrxJVWOu/lALA/Hsmwn540/eh8wii4uYEO220q6s/So4rkga/MC
RV3s4d53kv+wAbvd68sgVmLGD42ZsIZ+13tCrI+zxsWV4iN2ApPemsIX5YQzXLiU
mtL1d+qCLL5GCmxDGEaoNK2eJuMQR2/cQZHXEUTMfwgOzNc29QcCFxJi0nlrMmnC
iUsGKPj/2MSeRfBO2Vy3e2pZdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPsenHny
YluRiukceQU5x+fVjsfcMB8GA1UdIwQYMBaAFAGXBL5+Ss4LoSEUsyjrAgcR706v
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjhFMi85NzAxM0E0RTUw
NDAxMUVEOEFFQ0FBNkZDNEY5QUUwMi9BWmNFdm41S3pndWhJUlN6S09zQ0J4SHZU
cTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FaY0V2bjVLemd1aElSU3pLT3NDQnhIdlRxOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MjhFMi85NzAxM0E0RTUwNDAxMUVEOEFFQ0FBNkZDNEY5QUUwMi9BWmNFdm41S3pn
dWhJUlN6S09zQ0J4SHZUcTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB8BML3x/NBwkmS1rJ0ogWnPZwRo+13D58+m+gY3/0TgMPlBDjmWPvg
DQL0KiDrSIT/zo7TqNo6XLDnBrMtDvr30aPhTXLyP10zhwHTIwa1vkQH18Y7Njqu
OncWtjbmnnhTvqQ2QGchlHy4Elo5L1+hJXwqTF/Kvn5CDgbDdgQEP2RE3EEfkIm/
RmRjY++s9kcSN5NE/5LcAu4O3zu7hFg58Nh0363yCV2B11tZ0RUqnSIr25WQETAy
cTWdxu5h2C+MsVosphCHB3dQmcRzcvROfTf/Tq9marTK3wDMBRapq3n6AnocuA7m
kH6O/qGYqK6Ud8Wsm2g6I+EBfaYRKdPm
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:46:09 2025 by rpki-client