Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft
File:                     I9INognIlcMA7mtlm2sYKZJfvU8.mft (raw, json)
Hash identifier:          L6HAjCbEEo1ELrkpDVzP6f4gdwKXEu5nRRLG5wTxIBk=
Subject key identifier:   C8:44:29:63:72:FF:5C:F4:71:A6:D9:28:14:0C:3B:2B:25:F2:53:C4
Authority key identifier: 23:D2:0D:A2:09:C8:95:C3:00:EE:6B:65:9B:6B:18:29:92:5F:BD:4F
Certificate issuer:       /CN=A91829E3/serialNumber=23D20DA209C895C300EE6B659B6B1829925FBD4F
Certificate serial:       0BD6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft
Manifest number:          0BC6
Signing time:             Fri 31 Jan 2025 18:44:53 +0000
Manifest this update:     Fri 31 Jan 2025 18:44:52 +0000
Manifest next update:     Fri 07 Feb 2025 18:44:52 +0000
Files and hashes:         1: I9INognIlcMA7mtlm2sYKZJfvU8.crl (hash: 0+Ed4dQzJfPU//gnCLHwtFROs1WH9iqmKyVnADcMHso=)
                          2: FA7A1C3AAEE911EA8DB3E03CC4F9AE02.roa (hash: QE5ecgdG5fYcUSCX+MxTdkEzDIB0KG6YE5GZCloiYJg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3030 (0xbd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91829E3/serialNumber=23D20DA209C895C300EE6B659B6B1829925FBD4F
        Validity
            Not Before: Jan 31 18:44:52 2025 GMT
            Not After : Feb  7 18:44:52 2025 GMT
        Subject: CN=679d1a25-03f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0f:3c:aa:e2:1d:85:7a:29:ba:bf:c2:b9:70:
                    10:07:c9:f3:20:db:3f:10:97:ed:f5:8b:01:ec:82:
                    d4:2c:43:c4:50:f6:07:16:84:52:ef:ef:1d:5c:09:
                    be:d3:29:5b:a6:63:4e:2b:7d:18:f3:1c:da:df:9c:
                    cf:43:f3:bc:31:f2:4b:50:a9:6b:27:83:35:ac:19:
                    0d:8a:a9:57:e4:cf:9e:6a:35:18:4a:08:c0:4e:73:
                    26:10:46:97:82:57:d3:19:b8:85:4c:38:a0:cd:bd:
                    6f:6e:39:a8:f5:44:ef:10:e3:2f:41:9b:fd:a8:fb:
                    42:47:b0:ee:21:28:bc:e5:a4:93:2f:a0:29:6a:e5:
                    22:4f:c7:35:a7:1f:1c:06:c4:bd:11:b9:99:4e:85:
                    55:b0:8a:ff:4c:79:b4:08:83:e3:20:b8:3d:a3:07:
                    c1:5b:a2:cd:54:b8:f5:bd:57:c1:eb:17:73:c9:59:
                    5b:b0:8a:cc:89:c7:24:23:5a:b5:17:01:56:a4:28:
                    84:ec:e9:ab:a8:2b:11:2d:e4:64:e1:66:3e:b0:10:
                    34:ba:7f:93:0d:da:f1:db:45:f7:68:2d:0f:f0:b3:
                    c7:54:25:0e:2a:c3:c4:96:df:91:04:6b:a1:36:fe:
                    1a:80:d4:ec:59:8d:64:87:bf:a1:53:fb:65:29:38:
                    8b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:44:29:63:72:FF:5C:F4:71:A6:D9:28:14:0C:3B:2B:25:F2:53:C4
            X509v3 Authority Key Identifier:
                keyid:23:D2:0D:A2:09:C8:95:C3:00:EE:6B:65:9B:6B:18:29:92:5F:BD:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:62:49:b5:eb:82:b5:79:fa:fb:0e:9e:c8:1b:ee:21:d2:c6:
         d3:78:0c:36:0e:79:ab:8f:26:03:60:c3:39:5d:33:27:ed:a2:
         3e:56:aa:f2:a5:ab:d6:28:a6:ab:33:ba:5f:6b:2c:a2:43:e9:
         f3:af:9d:b8:62:91:c6:42:37:e0:16:0e:89:58:cd:56:99:20:
         48:2d:88:70:26:35:cd:f3:7a:e9:5b:74:ba:43:30:33:4b:0c:
         05:c4:1c:37:52:cf:db:e0:fd:f5:1c:fc:64:3b:f7:57:e2:aa:
         ec:6b:17:6b:bc:6a:cb:de:de:94:0f:1a:54:0d:d2:12:e6:08:
         46:17:34:37:66:59:ea:9f:56:01:41:e8:9e:03:5a:1d:36:57:
         93:ba:72:a8:b7:e0:3b:4e:c8:f1:8d:68:25:7c:00:d0:fe:5a:
         7e:22:22:d0:f1:b8:bc:7b:db:ea:0a:ff:a1:7f:38:3a:b7:d4:
         84:94:fd:a4:55:54:71:be:3c:61:4a:7e:ed:48:49:ea:e6:c0:
         b4:05:e5:91:a3:bc:82:60:ae:ac:5a:a2:74:77:0d:dc:3d:91:
         ce:47:0f:17:e2:ae:30:f7:20:8b:be:a5:90:ed:78:4c:60:14:
         25:a8:02:6d:21:45:30:4f:67:7d:b6:ad:7f:4b:09:4f:c4:d1:
         7c:83:95:8a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC9YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODI5RTMxMTAvBgNVBAUTKDIzRDIwREEyMDlDODk1QzMwMEVFNkI2NTlCNkIxODI5
OTI1RkJENEYwHhcNMjUwMTMxMTg0NDUyWhcNMjUwMjA3MTg0NDUyWjAYMRYwFAYD
VQQDEw02NzlkMWEyNS0wM2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArQ88quIdhXopur/CuXAQB8nzINs/EJft9YsB7ILULEPEUPYHFoRS7+8dXAm+
0ylbpmNOK30Y8xza35zPQ/O8MfJLUKlrJ4M1rBkNiqlX5M+eajUYSgjATnMmEEaX
glfTGbiFTDigzb1vbjmo9UTvEOMvQZv9qPtCR7DuISi85aSTL6ApauUiT8c1px8c
BsS9EbmZToVVsIr/THm0CIPjILg9owfBW6LNVLj1vVfB6xdzyVlbsIrMicckI1q1
FwFWpCiE7OmrqCsRLeRk4WY+sBA0un+TDdrx20X3aC0P8LPHVCUOKsPElt+RBGuh
Nv4agNTsWY1kh7+hU/tlKTiLjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMhEKWNy
/1z0cabZKBQMOysl8lPEMB8GA1UdIwQYMBaAFCPSDaIJyJXDAO5rZZtrGCmSX71P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjlFMy9DNDVGNjBEQTE0
MzcxMUVBQUNGOUZBMzNDNEY5QUUwMi9JOUlOb2duSWxjTUE3bXRsbTJzWUtaSmZ2
VTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0k5SU5vZ25JbGNNQTdtdGxtMnNZS1pKZnZVOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MjlFMy9DNDVGNjBEQTE0MzcxMUVBQUNGOUZBMzNDNEY5QUUwMi9JOUlOb2duSWxj
TUE3bXRsbTJzWUtaSmZ2VTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA+Ykm164K1efr7Dp7IG+4h0sbTeAw2DnmrjyYDYMM5XTMn7aI+Vqry
pavWKKarM7pfayyiQ+nzr524YpHGQjfgFg6JWM1WmSBILYhwJjXN83rpW3S6QzAz
SwwFxBw3Us/b4P31HPxkO/dX4qrsaxdrvGrL3t6UDxpUDdIS5ghGFzQ3Zlnqn1YB
QeieA1odNleTunKot+A7TsjxjWglfADQ/lp+IiLQ8bi8e9vqCv+hfzg6t9SElP2k
VVRxvjxhSn7tSEnq5sC0BeWRo7yCYK6sWqJ0dw3cPZHORw8X4q4w9yCLvqWQ7XhM
YBQlqAJtIUUwT2d9tq1/SwlPxNF8g5WK
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:38:34 2025 by rpki-client