Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C355/22E76B442F5911EEB957EA72C4F9AE02/6AKchCosGw6rjSFi239_RN4ccCg.mft
File:                     6AKchCosGw6rjSFi239_RN4ccCg.mft (raw, json)
Hash identifier:          VDYBy/CmXts5TNYoMTsxXqBvzlnzWKSahCml/cdQ6Vc=
Subject key identifier:   39:80:E0:85:8A:6B:E3:EC:B8:62:96:50:8B:B1:00:4E:C9:9E:60:76
Authority key identifier: E8:02:9C:84:2A:2C:1B:0E:AB:8D:21:62:DB:7F:7F:44:DE:1C:70:28
Certificate issuer:       /CN=A919C355/serialNumber=E8029C842A2C1B0EAB8D2162DB7F7F44DE1C7028
Certificate serial:       011C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6AKchCosGw6rjSFi239_RN4ccCg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C355/22E76B442F5911EEB957EA72C4F9AE02/6AKchCosGw6rjSFi239_RN4ccCg.mft
Manifest number:          011A
Signing time:             Fri 31 Jan 2025 03:54:12 +0000
Manifest this update:     Fri 31 Jan 2025 03:54:12 +0000
Manifest next update:     Fri 07 Feb 2025 03:54:12 +0000
Files and hashes:         1: 6AKchCosGw6rjSFi239_RN4ccCg.crl (hash: PFzpSospdJNEjhdKIwry+WH4x6v0vJTqWTl2VZ8ZGFk=)
                          2: 63884D122F5911EE8D896A87C4F9AE02.roa (hash: 2/gS1Ur7dJJf5ZDU1v4+87+nOeiqSxg5Qxi76bv6NNM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 284 (0x11c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C355/serialNumber=E8029C842A2C1B0EAB8D2162DB7F7F44DE1C7028
        Validity
            Not Before: Jan 31 03:54:12 2025 GMT
            Not After : Feb  7 03:54:12 2025 GMT
        Subject: CN=679c4964-39f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:40:fa:90:c2:aa:3c:9e:73:03:27:b8:25:ee:
                    3f:12:57:06:38:8a:29:7c:13:f7:5e:42:6c:e2:00:
                    8f:2c:69:3e:f5:2f:af:0e:1a:96:9c:c0:e7:4a:e8:
                    59:67:cb:a3:07:70:7a:57:c0:98:68:77:42:e1:f1:
                    a6:e6:10:bf:85:fe:d8:18:42:cc:9d:c0:c6:a2:65:
                    81:f2:20:cf:04:39:b5:b4:58:c3:32:9c:e2:0e:12:
                    36:94:e4:ba:ef:2c:08:2a:96:b3:b5:77:e5:69:86:
                    51:6b:0d:15:41:e5:7c:28:5f:7d:00:4f:f3:d7:95:
                    83:1a:1e:e7:7d:41:e4:ba:60:5e:6f:b8:69:02:d0:
                    fa:15:76:66:be:d8:1f:31:bb:3e:a9:8f:3a:5b:28:
                    67:93:e3:5e:67:d0:0b:0e:de:11:ce:a1:a9:4d:b1:
                    04:24:93:3b:7a:c1:8b:79:8e:ab:d4:cf:76:51:40:
                    6e:8c:3c:e4:c4:fd:53:a1:77:48:3b:2a:c4:e0:f9:
                    b4:32:02:a9:c8:d3:2e:45:66:eb:75:d6:15:48:6b:
                    9d:36:fc:e2:f7:61:51:ad:d7:af:cb:92:60:be:aa:
                    12:60:e3:35:ab:9d:9b:a0:bd:d4:0f:64:c7:1a:7d:
                    8f:cc:e1:c4:1e:a7:95:f2:ff:63:1b:03:45:7a:fb:
                    75:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:80:E0:85:8A:6B:E3:EC:B8:62:96:50:8B:B1:00:4E:C9:9E:60:76
            X509v3 Authority Key Identifier:
                keyid:E8:02:9C:84:2A:2C:1B:0E:AB:8D:21:62:DB:7F:7F:44:DE:1C:70:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C355/22E76B442F5911EEB957EA72C4F9AE02/6AKchCosGw6rjSFi239_RN4ccCg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6AKchCosGw6rjSFi239_RN4ccCg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C355/22E76B442F5911EEB957EA72C4F9AE02/6AKchCosGw6rjSFi239_RN4ccCg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:54:11:f5:46:4d:ee:cf:a1:fd:e1:71:5f:5e:ce:5a:b3:8d:
         d1:38:56:47:50:20:09:fb:70:76:d2:ae:82:35:2c:39:ab:1e:
         00:b8:cb:a4:df:10:29:1f:5b:81:ea:ad:c0:81:51:87:68:00:
         23:62:e0:74:d2:fb:2a:93:ce:a8:06:a2:01:c7:2f:65:a1:31:
         75:b3:03:6c:cf:06:83:b9:2a:f6:08:97:e8:0c:ce:8b:93:c4:
         93:7a:ec:40:7d:bb:cb:23:2c:69:c1:c5:e5:bd:19:1d:c7:d7:
         be:44:be:2c:1d:7d:bb:33:ed:3b:f6:c2:56:50:a1:22:14:c4:
         42:c9:a3:47:80:cf:be:46:0d:30:41:75:e0:e8:6e:71:50:17:
         8e:08:53:96:ff:dd:e1:2f:c9:bc:e6:9f:46:a3:f0:c9:0d:27:
         aa:d7:1f:23:ed:6e:11:01:2b:71:51:26:0f:d2:71:fb:e9:5e:
         69:bb:50:0c:0a:8f:9f:6b:e0:3d:dd:e6:61:0a:65:b1:d5:40:
         03:92:8c:49:94:cc:03:68:50:db:89:8d:97:ba:aa:d9:62:f8:
         49:14:20:49:0f:df:66:8f:e2:5e:f3:ce:31:53:64:fb:80:6e:
         87:7e:42:da:9f:3c:cd:07:c8:1d:a4:63:12:4c:07:1c:49:6f:
         25:61:1f:d5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICARwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUMzNTUxMTAvBgNVBAUTKEU4MDI5Qzg0MkEyQzFCMEVBQjhEMjE2MkRCN0Y3RjQ0
REUxQzcwMjgwHhcNMjUwMTMxMDM1NDEyWhcNMjUwMjA3MDM1NDEyWjAYMRYwFAYD
VQQDEw02NzljNDk2NC0zOWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzED6kMKqPJ5zAye4Je4/ElcGOIopfBP3XkJs4gCPLGk+9S+vDhqWnMDnSuhZ
Z8ujB3B6V8CYaHdC4fGm5hC/hf7YGELMncDGomWB8iDPBDm1tFjDMpziDhI2lOS6
7ywIKpaztXflaYZRaw0VQeV8KF99AE/z15WDGh7nfUHkumBeb7hpAtD6FXZmvtgf
Mbs+qY86Wyhnk+NeZ9ALDt4RzqGpTbEEJJM7esGLeY6r1M92UUBujDzkxP1ToXdI
OyrE4Pm0MgKpyNMuRWbrddYVSGudNvzi92FRrdevy5JgvqoSYOM1q52boL3UD2TH
Gn2PzOHEHqeV8v9jGwNFevt1EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDmA4IWK
a+PsuGKWUIuxAE7JnmB2MB8GA1UdIwQYMBaAFOgCnIQqLBsOq40hYtt/f0TeHHAo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzM1NS8yMkU3NkI0NDJG
NTkxMUVFQjk1N0VBNzJDNEY5QUUwMi82QUtjaENvc0d3NnJqU0ZpMjM5X1JONGNj
Q2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZBS2NoQ29zR3c2cmpTRmkyMzlfUk40Y2NDZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QzM1NS8yMkU3NkI0NDJGNTkxMUVFQjk1N0VBNzJDNEY5QUUwMi82QUtjaENvc0d3
NnJqU0ZpMjM5X1JONGNjQ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAkVBH1Rk3uz6H94XFfXs5as43ROFZHUCAJ+3B20q6CNSw5qx4AuMuk
3xApH1uB6q3AgVGHaAAjYuB00vsqk86oBqIBxy9loTF1swNszwaDuSr2CJfoDM6L
k8STeuxAfbvLIyxpwcXlvRkdx9e+RL4sHX27M+079sJWUKEiFMRCyaNHgM++Rg0w
QXXg6G5xUBeOCFOW/93hL8m85p9Go/DJDSeq1x8j7W4RAStxUSYP0nH76V5pu1AM
Co+fa+A93eZhCmWx1UADkoxJlMwDaFDbiY2XuqrZYvhJFCBJD99mj+Je884xU2T7
gG6HfkLanzzNB8gdpGMSTAccSW8lYR/V
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:57:44 2025 by rpki-client