Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft
File:                     DttKNycL9JQYSkbmAjFI_tbjOh4.mft (raw, json)
Hash identifier:          R7GDo62nFE6SJWGV1kz65+OIfT4KTOm740hE20EeQ7I=
Subject key identifier:   F8:8B:4C:B3:2D:A3:95:85:07:B9:6A:B4:D5:07:0B:25:28:44:5E:56
Authority key identifier: 0E:DB:4A:37:27:0B:F4:94:18:4A:46:E6:02:31:48:FE:D6:E3:3A:1E
Certificate issuer:       /CN=A91878E2/serialNumber=0EDB4A37270BF494184A46E6023148FED6E33A1E
Certificate serial:       97
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft
Manifest number:          95
Signing time:             Fri 31 Jan 2025 05:29:49 +0000
Manifest this update:     Fri 31 Jan 2025 05:29:48 +0000
Manifest next update:     Fri 07 Feb 2025 05:29:48 +0000
Files and hashes:         1: DttKNycL9JQYSkbmAjFI_tbjOh4.crl (hash: 2PiTBNc8pZNgIF1Q99/6RRXJVIguTaQtH29a95un5T0=)
                          2: 1C174EBCFC7011EE96142B1BC4F9AE02.roa (hash: KGzLhO+/ocV7ZlwOEymZzMf0KbOdaZwWpGWGZFRolBk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151 (0x97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91878E2/serialNumber=0EDB4A37270BF494184A46E6023148FED6E33A1E
        Validity
            Not Before: Jan 31 05:29:48 2025 GMT
            Not After : Feb  7 05:29:48 2025 GMT
        Subject: CN=679c5fcd-8b7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b4:ff:1d:3f:cc:63:fb:c6:de:8d:ea:85:70:
                    99:d1:6d:72:e1:20:f9:75:c5:34:40:4e:5c:b1:32:
                    57:83:b6:60:92:5b:76:1a:8f:21:e6:86:ba:c3:5e:
                    8e:5f:7d:ad:c5:51:64:1d:70:d2:20:d7:94:a4:74:
                    2f:af:9f:cb:ee:a2:92:fe:e7:01:89:09:38:3f:69:
                    7f:f8:4f:42:d3:55:a0:ff:e9:a0:58:a1:2a:fe:63:
                    38:81:03:2b:74:52:57:17:1f:a7:b7:a2:ae:0b:5b:
                    2b:97:c7:ea:34:b0:16:69:4e:68:2d:4b:c5:19:8a:
                    89:17:69:d1:1b:c7:3e:9b:69:8c:1c:e1:fd:6d:9a:
                    d8:7a:41:a8:3b:68:68:be:df:35:d9:2d:23:d5:da:
                    4b:1e:68:83:82:f4:ca:b6:1e:45:b4:75:5f:a4:e9:
                    3f:51:37:b5:b7:4c:67:b1:fe:32:d3:39:27:11:78:
                    60:b5:cb:95:78:51:65:cc:a0:03:38:a3:85:4b:c9:
                    d2:9c:8d:e9:aa:0d:ab:99:1b:2f:8b:d9:0d:02:88:
                    0b:12:4d:ac:49:0b:c7:a3:75:91:0d:2b:62:6f:36:
                    c1:27:de:e6:6a:7f:69:5f:6c:61:b6:2c:73:bc:d2:
                    e1:da:16:7d:67:8b:28:b5:e8:f8:9c:ae:8b:ee:f0:
                    df:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:8B:4C:B3:2D:A3:95:85:07:B9:6A:B4:D5:07:0B:25:28:44:5E:56
            X509v3 Authority Key Identifier:
                keyid:0E:DB:4A:37:27:0B:F4:94:18:4A:46:E6:02:31:48:FE:D6:E3:3A:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:de:eb:be:53:5a:97:01:a8:c0:36:b7:24:4a:ef:58:32:c6:
         b6:5e:71:6d:55:58:2b:b5:72:64:20:f1:69:84:01:9a:4e:69:
         eb:f4:e4:07:3c:83:27:49:fb:dd:0b:f9:f9:4e:30:4a:55:e7:
         ee:df:1a:22:6b:22:3b:a7:fb:99:94:a2:6f:8f:7e:4d:a4:37:
         ae:c7:f4:ec:ce:98:cf:8b:e2:95:ed:07:22:cb:9d:95:ec:b4:
         bb:0f:72:77:98:02:3a:62:97:52:aa:1e:78:8d:4d:08:21:94:
         8a:0c:7e:96:42:f5:fd:03:2a:85:86:5d:0b:3b:97:aa:1d:10:
         7b:4e:a2:90:69:32:e9:bc:3e:11:e8:0b:00:71:78:c1:f4:4a:
         d7:01:11:34:9a:4e:57:08:05:ac:93:e9:99:6d:0d:77:ea:e9:
         30:5f:54:84:96:8e:81:14:b9:a7:d3:34:55:5d:5a:ef:ad:10:
         24:f2:b2:e9:78:30:2d:96:ba:19:09:3f:60:89:d1:ec:ca:b6:
         af:5c:46:eb:81:0e:dd:e9:e0:aa:1a:f3:ab:80:06:5f:02:20:
         a3:11:e1:98:67:6f:4d:06:22:1c:60:16:d4:c0:1c:2e:29:34:
         9c:1a:4c:bd:c3:6c:fa:d4:f3:65:15:76:9a:87:6d:2e:d5:c3:
         8c:8d:a7:54
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODc4RTIxMTAvBgNVBAUTKDBFREI0QTM3MjcwQkY0OTQxODRBNDZFNjAyMzE0OEZF
RDZFMzNBMUUwHhcNMjUwMTMxMDUyOTQ4WhcNMjUwMjA3MDUyOTQ4WjAYMRYwFAYD
VQQDEw02NzljNWZjZC04YjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtrT/HT/MY/vG3o3qhXCZ0W1y4SD5dcU0QE5csTJXg7Zgklt2Go8h5oa6w16O
X32txVFkHXDSINeUpHQvr5/L7qKS/ucBiQk4P2l/+E9C01Wg/+mgWKEq/mM4gQMr
dFJXFx+nt6KuC1srl8fqNLAWaU5oLUvFGYqJF2nRG8c+m2mMHOH9bZrYekGoO2ho
vt812S0j1dpLHmiDgvTKth5FtHVfpOk/UTe1t0xnsf4y0zknEXhgtcuVeFFlzKAD
OKOFS8nSnI3pqg2rmRsvi9kNAogLEk2sSQvHo3WRDStibzbBJ97man9pX2xhtixz
vNLh2hZ9Z4sotej4nK6L7vDflQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPiLTLMt
o5WFB7lqtNUHCyUoRF5WMB8GA1UdIwQYMBaAFA7bSjcnC/SUGEpG5gIxSP7W4zoe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzhFMi9BRjMyMDgzRUZD
NjgxMUVFOTk2MURENURDNEY5QUUwMi9EdHRLTnljTDlKUVlTa2JtQWpGSV90YmpP
aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0R0dEtOeWNMOUpRWVNrYm1BakZJX3Riak9oNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NzhFMi9BRjMyMDgzRUZDNjgxMUVFOTk2MURENURDNEY5QUUwMi9EdHRLTnljTDlK
UVlTa2JtQWpGSV90YmpPaDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAM3uu+U1qXAajANrckSu9YMsa2XnFtVVgrtXJkIPFphAGaTmnr9OQH
PIMnSfvdC/n5TjBKVefu3xoiayI7p/uZlKJvj35NpDeux/TszpjPi+KV7Qciy52V
7LS7D3J3mAI6YpdSqh54jU0IIZSKDH6WQvX9AyqFhl0LO5eqHRB7TqKQaTLpvD4R
6AsAcXjB9ErXARE0mk5XCAWsk+mZbQ136ukwX1SElo6BFLmn0zRVXVrvrRAk8rLp
eDAtlroZCT9gidHsyravXEbrgQ7d6eCqGvOrgAZfAiCjEeGYZ29NBiIcYBbUwBwu
KTScGky9w2z61PNlFXaah20u1cOMjadU
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:43:26 2025 by rpki-client