Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.mft
File:                     e9TVxajvXN_HTFmgk2RZTl75-uc.mft (raw, json)
Hash identifier:          v6lKVw1KuUHNcCQn7kdGE6U2TkkuitOykHU7OT3w9X0=
Subject key identifier:   8E:A2:27:73:64:3E:11:82:C5:58:16:3C:DE:49:08:4A:AD:90:D9:6A
Authority key identifier: 7B:D4:D5:C5:A8:EF:5C:DF:C7:4C:59:A0:93:64:59:4E:5E:F9:FA:E7
Certificate issuer:       /CN=A919FE07/serialNumber=7BD4D5C5A8EF5CDFC74C59A09364594E5EF9FAE7
Certificate serial:       20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9TVxajvXN_HTFmgk2RZTl75-uc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.mft
Manifest number:          0B4C
Signing time:             Thu 30 Jan 2025 19:15:01 +0000
Manifest this update:     Thu 30 Jan 2025 19:15:00 +0000
Manifest next update:     Thu 06 Feb 2025 19:15:00 +0000
Files and hashes:         1: e9TVxajvXN_HTFmgk2RZTl75-uc.crl (hash: jj+qu+i/jqaENkXxfDcEmOi3d8KtEPo1pTEsp000zOI=)
                          2: CF834404B27511EFA614D07EC4F9AE02.roa (hash: 25yQyo1UNKg5eSyiIIMMirEfRLria39lDAViqcBQ5E4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FE07/serialNumber=7BD4D5C5A8EF5CDFC74C59A09364594E5EF9FAE7
        Validity
            Not Before: Jan 30 19:15:00 2025 GMT
            Not After : Feb  6 19:15:00 2025 GMT
        Subject: CN=679bcfb4-7495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:74:29:0c:ec:f9:e1:2b:e4:41:b1:4e:2b:94:
                    4f:eb:68:d0:c7:1f:ca:54:c9:c9:c9:ca:4e:b3:d0:
                    94:9e:c9:df:f7:b9:c8:3a:a0:b1:db:fe:e0:65:dc:
                    4d:f7:00:39:5d:f4:93:ef:27:d2:0e:38:bd:32:ef:
                    19:76:20:f0:6e:7c:f7:df:39:4e:a4:d5:48:53:6d:
                    b7:bf:56:f5:9d:30:54:82:13:dc:68:df:9f:df:b2:
                    ff:39:11:93:04:36:dd:27:cb:e6:da:c1:84:90:b4:
                    6c:52:e4:08:2e:67:a8:7e:fd:a3:c5:5f:eb:09:48:
                    8a:cb:57:74:e1:3a:54:63:b3:17:12:0d:c8:d3:08:
                    3e:c7:6a:c9:30:83:83:29:b7:0f:6a:8c:a6:8e:4b:
                    c5:eb:80:31:d0:3a:2f:db:cc:00:ca:6d:37:ce:4b:
                    f9:eb:89:49:c2:e4:c5:3e:ce:92:5d:22:50:f4:f2:
                    83:5d:8f:4e:5c:b6:3d:84:4b:0d:43:08:4f:53:48:
                    ab:e9:49:a4:2e:5e:94:ad:21:f4:c2:8f:4f:53:83:
                    0e:6d:fa:ff:c5:de:1a:ae:a5:87:03:ac:c2:a9:ba:
                    a3:8b:86:6e:03:6f:2c:ef:37:12:9f:22:ff:6e:f9:
                    36:ae:20:3d:4e:68:d0:eb:4e:5a:20:d5:85:c9:4e:
                    29:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:A2:27:73:64:3E:11:82:C5:58:16:3C:DE:49:08:4A:AD:90:D9:6A
            X509v3 Authority Key Identifier:
                keyid:7B:D4:D5:C5:A8:EF:5C:DF:C7:4C:59:A0:93:64:59:4E:5E:F9:FA:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9TVxajvXN_HTFmgk2RZTl75-uc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:b5:d9:38:e7:78:7f:1a:ea:51:b2:ed:db:99:0b:63:fa:06:
         b7:2f:ae:26:ab:3f:3a:d9:3a:21:a9:a3:fd:dd:83:90:a6:e1:
         7c:34:ac:e8:04:43:19:fc:65:5c:9a:f1:1f:76:a3:9b:b3:ac:
         7d:8f:12:14:16:56:6f:e1:cc:80:fc:bb:ca:35:32:5c:0b:52:
         e1:38:9f:58:f9:a8:27:f3:ac:e9:d2:a2:a2:4c:33:54:82:50:
         f1:70:dd:41:e1:76:33:4f:5c:ee:74:42:0e:19:ef:8d:ea:5a:
         14:e4:5e:c9:76:08:41:40:5d:2f:7a:ac:ba:26:e7:a0:67:8d:
         df:7f:c6:77:26:40:0d:82:3d:0b:5b:fe:6f:d4:da:74:ea:ee:
         3d:8b:94:fc:3e:0e:13:74:79:70:00:a0:86:82:30:44:bf:71:
         d3:82:fb:8d:56:8c:7f:be:52:10:58:84:3b:b8:37:0c:86:3f:
         31:f3:46:ec:06:23:cc:a2:6a:61:5b:01:f7:4f:d1:45:ec:04:
         f6:91:c2:c7:0a:7b:43:dd:95:1c:6a:2d:ba:6b:63:1c:b2:97:
         7d:7a:6c:50:94:a0:7d:58:c7:59:38:91:6d:ad:c6:04:94:1d:
         fc:25:87:9d:4c:ed:51:63:9e:2c:08:1d:9b:e6:d1:36:29:e8:
         0f:8a:3f:a9
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
RkUwNzExMC8GA1UEBRMoN0JENEQ1QzVBOEVGNUNERkM3NEM1OUEwOTM2NDU5NEU1
RUY5RkFFNzAeFw0yNTAxMzAxOTE1MDBaFw0yNTAyMDYxOTE1MDBaMBgxFjAUBgNV
BAMTDTY3OWJjZmI0LTc0OTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCldCkM7PnhK+RBsU4rlE/raNDHH8pUycnJyk6z0JSeyd/3ucg6oLHb/uBl3E33
ADld9JPvJ9IOOL0y7xl2IPBufPffOU6k1UhTbbe/VvWdMFSCE9xo35/fsv85EZME
Nt0ny+bawYSQtGxS5AguZ6h+/aPFX+sJSIrLV3ThOlRjsxcSDcjTCD7Haskwg4Mp
tw9qjKaOS8XrgDHQOi/bzADKbTfOS/nriUnC5MU+zpJdIlD08oNdj05ctj2ESw1D
CE9TSKvpSaQuXpStIfTCj09Tgw5t+v/F3hqupYcDrMKpuqOLhm4DbyzvNxKfIv9u
+TauID1OaNDrTlog1YXJTikhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjqInc2Q+
EYLFWBY83kkISq2Q2WowHwYDVR0jBBgwFoAUe9TVxajvXN/HTFmgk2RZTl75+ucw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlGRTA3L0ExNkE4OERBMzA2
QTExRUE5OThDOEYzMEM0RjlBRTAyL2U5VFZ4YWp2WE5fSFRGbWdrMlJaVGw3NS11
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZTlUVnhhanZYTl9IVEZtZ2syUlpUbDc1LXVjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlG
RTA3L0ExNkE4OERBMzA2QTExRUE5OThDOEYzMEM0RjlBRTAyL2U5VFZ4YWp2WE5f
SFRGbWdrMlJaVGw3NS11Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAAG12TjneH8a6lGy7duZC2P6BrcvriarPzrZOiGpo/3dg5Cm4Xw0rOgE
Qxn8ZVya8R92o5uzrH2PEhQWVm/hzID8u8o1MlwLUuE4n1j5qCfzrOnSoqJMM1SC
UPFw3UHhdjNPXO50Qg4Z743qWhTkXsl2CEFAXS96rLom56Bnjd9/xncmQA2CPQtb
/m/U2nTq7j2LlPw+DhN0eXAAoIaCMES/cdOC+41WjH++UhBYhDu4NwyGPzHzRuwG
I8yiamFbAfdP0UXsBPaRwscKe0PdlRxqLbprYxyyl316bFCUoH1Yx1k4kW2txgSU
Hfwlh51M7VFjniwIHZvm0TYp6A+KP6k=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:13:16 2025 by rpki-client