Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft
File:                     7ErjVswCMimNPNn9IEE1Z9u3_CU.mft (raw, json)
Hash identifier:          e6L6ZJD/wKHqN/7U5pDg/iT8bwQMIVKjwLylV9nne20=
Subject key identifier:   4B:38:20:13:00:6C:EE:9C:A0:33:B6:2F:19:2F:47:9D:64:1D:07:1D
Authority key identifier: EC:4A:E3:56:CC:02:32:29:8D:3C:D9:FD:20:41:35:67:DB:B7:FC:25
Certificate issuer:       /CN=A91830A5/serialNumber=EC4AE356CC0232298D3CD9FD20413567DBB7FC25
Certificate serial:       0434
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ErjVswCMimNPNn9IEE1Z9u3_CU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft
Manifest number:          042A
Signing time:             Fri 31 Jan 2025 00:25:47 +0000
Manifest this update:     Fri 31 Jan 2025 00:25:46 +0000
Manifest next update:     Fri 07 Feb 2025 00:25:46 +0000
Files and hashes:         1: 7ErjVswCMimNPNn9IEE1Z9u3_CU.crl (hash: DDzITfug/61AA84ASl20wOpABYWQPimjOrtFU+jlieo=)
                          2: 10854F3E516B11EC86C3243EC4F9AE02.roa (hash: Wy6Q8riSJ2ZA9beGIPBq+oF4HNk5aw3NBdp9GfPj95A=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1076 (0x434)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91830A5/serialNumber=EC4AE356CC0232298D3CD9FD20413567DBB7FC25
        Validity
            Not Before: Jan 31 00:25:46 2025 GMT
            Not After : Feb  7 00:25:46 2025 GMT
        Subject: CN=679c188a-c81d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:43:a1:4d:d6:cf:8e:d7:11:69:0d:1c:3a:cd:
                    a7:bb:27:4f:97:e2:fa:41:5d:d7:89:ed:fe:84:94:
                    77:17:ad:54:8f:0c:0c:f4:53:26:62:ad:ab:1f:8a:
                    f6:e7:93:73:48:32:ac:67:ac:af:89:27:f2:5b:fa:
                    ca:d4:a4:4c:f3:5e:06:fd:ba:b7:39:e7:50:98:cd:
                    29:1d:d7:3e:1e:ef:da:ca:76:69:d1:11:69:4c:20:
                    88:75:cd:92:ea:e9:fe:d5:e3:05:6e:ef:90:2c:ca:
                    68:9c:1c:fb:58:01:63:55:5a:de:22:27:67:c1:8a:
                    75:d9:21:ab:3c:e6:12:09:05:cb:20:bc:9d:b8:96:
                    01:9f:3e:f6:67:3d:f7:3d:8b:21:16:3c:6f:7b:0a:
                    4f:d8:8d:ea:2b:22:e5:c2:be:99:8d:7d:ac:53:86:
                    70:3e:ce:e6:f7:0a:ae:04:15:23:41:dc:fc:29:39:
                    b2:56:9b:39:9e:eb:d2:4a:eb:dc:aa:b3:f5:71:41:
                    1d:2b:e4:cd:1a:e4:24:93:90:bd:0c:2a:e7:ba:9b:
                    22:ae:5b:88:cc:77:d5:27:6d:37:88:b7:04:7c:09:
                    cb:c4:cb:c2:ca:94:60:6e:f4:8d:fe:7f:68:4f:8a:
                    b7:6f:ae:19:72:2c:41:9a:7c:c6:0c:b8:10:57:45:
                    3e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:38:20:13:00:6C:EE:9C:A0:33:B6:2F:19:2F:47:9D:64:1D:07:1D
            X509v3 Authority Key Identifier:
                keyid:EC:4A:E3:56:CC:02:32:29:8D:3C:D9:FD:20:41:35:67:DB:B7:FC:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ErjVswCMimNPNn9IEE1Z9u3_CU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:f6:5d:4a:9e:41:9f:7f:ec:7e:08:94:d6:02:7d:60:09:e8:
         85:f2:bf:d4:63:11:ec:af:4f:c9:4a:05:59:34:e8:04:04:90:
         e8:f5:3b:90:db:28:02:06:d6:dc:48:f9:21:25:03:58:45:f3:
         d4:60:d0:96:07:6a:a6:00:13:1b:d1:74:c9:55:d1:b6:16:a0:
         f1:03:b8:b8:a2:da:35:0a:38:e1:56:90:08:71:a7:e0:98:1c:
         f7:ea:43:13:2e:dd:e3:e1:9b:d8:ee:05:fd:be:15:86:8e:fe:
         1c:14:da:73:a5:47:2e:df:28:89:11:92:ad:a2:38:cb:89:59:
         0c:d9:20:40:32:0f:f5:06:26:78:be:20:e3:73:27:41:65:03:
         3d:cf:7f:72:74:47:40:4e:db:f1:d8:81:fa:28:32:d0:b6:20:
         77:ec:ee:09:2f:13:58:89:30:c3:3f:48:d6:69:b6:d5:a0:c5:
         4b:32:f9:c9:5a:cf:5a:b8:cb:41:0e:f8:ec:43:85:96:98:7a:
         fb:d8:ba:8e:53:4c:e8:67:61:f9:6b:d1:b2:5b:77:80:1d:05:
         46:12:de:f4:fa:a7:d6:84:21:4d:b4:fe:61:4b:01:b0:4f:76:
         49:8e:39:bb:9d:3e:0a:cf:c7:50:39:8d:7e:e5:03:8b:67:0b:
         8a:ee:30:34
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBDQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODMwQTUxMTAvBgNVBAUTKEVDNEFFMzU2Q0MwMjMyMjk4RDNDRDlGRDIwNDEzNTY3
REJCN0ZDMjUwHhcNMjUwMTMxMDAyNTQ2WhcNMjUwMjA3MDAyNTQ2WjAYMRYwFAYD
VQQDEw02NzljMTg4YS1jODFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr0OhTdbPjtcRaQ0cOs2nuydPl+L6QV3Xie3+hJR3F61UjwwM9FMmYq2rH4r2
55NzSDKsZ6yviSfyW/rK1KRM814G/bq3OedQmM0pHdc+Hu/aynZp0RFpTCCIdc2S
6un+1eMFbu+QLMponBz7WAFjVVreIidnwYp12SGrPOYSCQXLILyduJYBnz72Zz33
PYshFjxvewpP2I3qKyLlwr6ZjX2sU4ZwPs7m9wquBBUjQdz8KTmyVps5nuvSSuvc
qrP1cUEdK+TNGuQkk5C9DCrnupsirluIzHfVJ203iLcEfAnLxMvCypRgbvSN/n9o
T4q3b64ZcixBmnzGDLgQV0U+ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEs4IBMA
bO6coDO2LxkvR51kHQcdMB8GA1UdIwQYMBaAFOxK41bMAjIpjTzZ/SBBNWfbt/wl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzBBNS9EODI0MThGRTUx
NjYxMUVDQUQ1NjU4NjdDNEY5QUUwMi83RXJqVnN3Q01pbU5QTm45SUVFMVo5dTNf
Q1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdFcmpWc3dDTWltTlBObjlJRUUxWjl1M19DVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MzBBNS9EODI0MThGRTUxNjYxMUVDQUQ1NjU4NjdDNEY5QUUwMi83RXJqVnN3Q01p
bU5QTm45SUVFMVo5dTNfQ1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBl9l1KnkGff+x+CJTWAn1gCeiF8r/UYxHsr0/JSgVZNOgEBJDo9TuQ
2ygCBtbcSPkhJQNYRfPUYNCWB2qmABMb0XTJVdG2FqDxA7i4oto1CjjhVpAIcafg
mBz36kMTLt3j4ZvY7gX9vhWGjv4cFNpzpUcu3yiJEZKtojjLiVkM2SBAMg/1BiZ4
viDjcydBZQM9z39ydEdATtvx2IH6KDLQtiB37O4JLxNYiTDDP0jWabbVoMVLMvnJ
Ws9auMtBDvjsQ4WWmHr72LqOU0zoZ2H5a9GyW3eAHQVGEt70+qfWhCFNtP5hSwGw
T3ZJjjm7nT4Kz8dQOY1+5QOLZwuK7jA0
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:11:05 2025 by rpki-client