Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft
File:                     H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft (raw, json)
Hash identifier:          IsvAKqPTiWFVL6DLB4sqRNAPrWf7JQok5oZFunC+ZWc=
Subject key identifier:   52:15:49:2B:E6:91:DD:07:50:F0:86:5A:A3:70:69:3E:F2:6E:56:F2
Authority key identifier: 1F:63:3F:72:D1:C6:78:16:C2:06:4A:56:E5:38:3C:D9:54:DD:C0:E5
Certificate issuer:       /CN=A91764E1/serialNumber=1F633F72D1C67816C2064A56E5383CD954DDC0E5
Certificate serial:       B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2M_ctHGeBbCBkpW5Tg82VTdwOU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft
Manifest number:          B6
Signing time:             Fri 31 Jan 2025 05:05:21 +0000
Manifest this update:     Fri 31 Jan 2025 05:05:20 +0000
Manifest next update:     Fri 07 Feb 2025 05:05:20 +0000
Files and hashes:         1: H2M_ctHGeBbCBkpW5Tg82VTdwOU.crl (hash: vqtdLYWHYiHupaO7WpnTz9pdMYhoVmUgtbEpaK5PRDM=)
                          2: 30A1B4D0C67E11EEB4008058C4F9AE02.roa (hash: Y33xkPd/NcEVAXjbSrIl1ngKcwYgoXKhM/ZonEg3diE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183 (0xb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91764E1/serialNumber=1F633F72D1C67816C2064A56E5383CD954DDC0E5
        Validity
            Not Before: Jan 31 05:05:20 2025 GMT
            Not After : Feb  7 05:05:20 2025 GMT
        Subject: CN=679c5a11-2b91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f0:d7:44:ed:ee:c1:c8:fa:f6:ec:1b:73:aa:
                    4d:54:02:de:d9:38:17:39:46:46:66:03:03:9d:74:
                    16:40:e4:1a:ff:69:ca:f7:35:e5:64:90:0b:0d:ed:
                    0c:9c:2e:5c:c6:8f:7b:0e:1b:72:f7:c0:8c:56:f4:
                    dd:b0:cd:0c:c8:ac:b5:0d:72:b6:af:97:0f:33:27:
                    5d:71:d5:e6:77:61:d3:74:66:0e:6b:32:26:38:81:
                    aa:c9:54:cf:22:47:da:86:c6:ae:3f:2c:10:bd:d9:
                    5c:26:4a:af:46:00:dd:62:56:3a:88:91:38:72:87:
                    40:d6:b8:33:ad:17:85:9d:6f:0e:90:f9:e1:3c:e3:
                    99:ca:7f:e3:3c:c7:24:d5:86:f6:6f:c4:db:a3:13:
                    c9:79:1b:af:8a:21:03:a3:00:a9:14:42:d5:fa:62:
                    5a:61:9f:82:8e:a9:f9:21:58:b5:a7:ba:ed:c8:79:
                    2c:a3:f2:4f:9e:3a:14:e9:3a:73:4e:fa:a6:27:79:
                    c6:be:8b:7c:ab:b7:44:4a:df:cf:5e:0f:2f:03:b3:
                    0c:65:c7:be:86:db:65:12:26:ae:4e:48:83:ab:d5:
                    47:10:0b:ef:43:35:04:17:c8:92:aa:7d:d2:0d:6f:
                    95:70:74:c6:f0:e3:9f:ad:1b:db:12:40:f2:34:bb:
                    3a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:15:49:2B:E6:91:DD:07:50:F0:86:5A:A3:70:69:3E:F2:6E:56:F2
            X509v3 Authority Key Identifier:
                keyid:1F:63:3F:72:D1:C6:78:16:C2:06:4A:56:E5:38:3C:D9:54:DD:C0:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2M_ctHGeBbCBkpW5Tg82VTdwOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:5c:81:12:32:ab:4f:29:36:9d:63:3c:b9:ac:39:c9:e5:03:
         92:53:ab:3e:91:3b:9b:5d:e7:6a:a5:9a:ac:c8:ce:4a:5a:96:
         8b:cc:d3:bf:27:af:fd:d5:69:aa:db:84:31:58:97:2d:75:2c:
         47:3b:a7:cd:37:8c:5d:d8:c1:c7:5b:47:df:8c:d7:86:6a:f0:
         bd:8c:a3:21:5f:de:d9:83:9a:69:9a:cb:f5:35:c8:f9:a8:ed:
         98:c8:c5:fd:ef:c8:d3:5c:86:cf:63:f1:10:5a:68:31:74:6a:
         b3:07:59:87:f3:3b:ea:70:68:b5:69:3d:0a:28:6c:b3:67:3f:
         e4:3a:1e:4f:57:d4:19:e9:b9:60:69:64:35:81:99:b2:2c:bf:
         fe:48:a1:13:c1:e0:c1:7b:92:ed:15:95:fc:0e:38:23:a3:97:
         bb:8c:23:3d:2d:e3:ba:d9:b7:38:0b:27:46:a7:e7:79:52:06:
         48:da:bb:44:d3:1a:c7:b1:9e:1b:59:6e:e1:6c:9a:bd:4d:fd:
         2d:4b:ec:00:8f:68:c1:78:40:b3:a8:da:8f:e0:4e:dd:07:54:
         9a:3c:cd:c8:61:89:2d:65:91:75:a9:01:b3:7b:96:42:c9:48:
         71:7a:db:b9:e1:00:44:d1:35:0c:af:d0:86:60:34:a0:fe:7a:
         27:c1:30:9a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICALcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzY0RTExMTAvBgNVBAUTKDFGNjMzRjcyRDFDNjc4MTZDMjA2NEE1NkU1MzgzQ0Q5
NTREREMwRTUwHhcNMjUwMTMxMDUwNTIwWhcNMjUwMjA3MDUwNTIwWjAYMRYwFAYD
VQQDEw02NzljNWExMS0yYjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAovDXRO3uwcj69uwbc6pNVALe2TgXOUZGZgMDnXQWQOQa/2nK9zXlZJALDe0M
nC5cxo97Dhty98CMVvTdsM0MyKy1DXK2r5cPMyddcdXmd2HTdGYOazImOIGqyVTP
IkfahsauPywQvdlcJkqvRgDdYlY6iJE4codA1rgzrReFnW8OkPnhPOOZyn/jPMck
1Yb2b8TboxPJeRuviiEDowCpFELV+mJaYZ+Cjqn5IVi1p7rtyHkso/JPnjoU6Tpz
TvqmJ3nGvot8q7dESt/PXg8vA7MMZce+httlEiauTkiDq9VHEAvvQzUEF8iSqn3S
DW+VcHTG8OOfrRvbEkDyNLs6bQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFIVSSvm
kd0HUPCGWqNwaT7yblbyMB8GA1UdIwQYMBaAFB9jP3LRxngWwgZKVuU4PNlU3cDl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjRFMS82QjU4NEQyNEM2
N0QxMUVFODcwMjdCM0FDNEY5QUUwMi9IMk1fY3RIR2VCYkNCa3BXNVRnODJWVGR3
T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0gyTV9jdEhHZUJiQ0JrcFc1VGc4MlZUZHdPVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NjRFMS82QjU4NEQyNEM2N0QxMUVFODcwMjdCM0FDNEY5QUUwMi9IMk1fY3RIR2VC
YkNCa3BXNVRnODJWVGR3T1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCJXIESMqtPKTadYzy5rDnJ5QOSU6s+kTubXedqpZqsyM5KWpaLzNO/
J6/91Wmq24QxWJctdSxHO6fNN4xd2MHHW0ffjNeGavC9jKMhX97Zg5ppmsv1Ncj5
qO2YyMX978jTXIbPY/EQWmgxdGqzB1mH8zvqcGi1aT0KKGyzZz/kOh5PV9QZ6blg
aWQ1gZmyLL/+SKETweDBe5LtFZX8Djgjo5e7jCM9LeO62bc4CydGp+d5UgZI2rtE
0xrHsZ4bWW7hbJq9Tf0tS+wAj2jBeECzqNqP4E7dB1SaPM3IYYktZZF1qQGze5ZC
yUhxetu54QBE0TUMr9CGYDSg/nonwTCa
-----END CERTIFICATE-----