Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft
File:                     tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft (raw, json)
Hash identifier:          yP7jFpLSmEF0Svd3jBz2a2tU5ZyBcJ8OqxsIguYzNJ4=
Subject key identifier:   D7:5F:12:23:20:99:AB:8F:EC:5C:20:90:B0:64:7A:33:C1:43:91:8E
Authority key identifier: B6:CC:02:A7:DB:8A:4D:B5:30:F1:12:B6:22:4F:19:08:08:68:FB:D9
Certificate issuer:       /CN=A91A4849/serialNumber=B6CC02A7DB8A4DB530F112B6224F19080868FBD9
Certificate serial:       B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft
Manifest number:          AF
Signing time:             Fri 31 Jan 2025 05:20:32 +0000
Manifest this update:     Fri 31 Jan 2025 05:20:32 +0000
Manifest next update:     Fri 07 Feb 2025 05:20:32 +0000
Files and hashes:         1: tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl (hash: 5YRjYGhF9TPz36XFEl/UnjqMl3ikdWrD8GSPEOfdGGA=)
                          2: 530BDDACE69A11EEA6CE3D1FC4F9AE02.roa (hash: ZfM8fwEWg7Cl4U2TTJqmh5c5IOhoGVnknztqF/uNSss=)
                          3: 66560AECE6B111EE9072F868C4F9AE02.roa (hash: Jctjnz4ZAWmlvP4Z4MtmplLYI/qLXEuNRoWhVRUxKcA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183 (0xb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4849/serialNumber=B6CC02A7DB8A4DB530F112B6224F19080868FBD9
        Validity
            Not Before: Jan 31 05:20:32 2025 GMT
            Not After : Feb  7 05:20:32 2025 GMT
        Subject: CN=679c5da0-5d8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:99:93:45:69:cc:66:f5:58:0b:98:8b:bc:0e:
                    55:6e:28:80:ad:43:2f:b9:4b:ef:f3:75:53:94:e3:
                    95:19:3a:28:56:85:5f:71:12:35:8f:0a:26:d2:6a:
                    e4:16:39:b3:45:dc:5a:df:37:9a:c8:87:83:00:a9:
                    1f:db:d0:d9:ce:6d:d9:08:17:16:9f:32:4a:a5:85:
                    1e:6c:b3:23:47:c0:56:8e:7d:ad:b6:8f:3a:98:98:
                    b6:73:98:9e:46:86:bf:b1:3a:c4:2b:f1:f4:67:0b:
                    82:b2:31:85:54:5d:f1:52:bf:55:3f:f6:0e:f4:42:
                    d4:e2:50:d6:fa:91:a0:5f:7a:15:97:5d:c4:e8:11:
                    81:47:5d:b2:61:df:ae:d4:d4:2d:3a:7f:1c:47:58:
                    07:c6:e8:ff:03:73:01:41:26:83:13:75:ae:a6:5a:
                    20:b5:b8:3e:88:69:05:47:89:12:0b:e9:9b:90:bf:
                    80:5b:d4:38:3f:c3:1d:61:dc:65:9f:24:b9:bc:bd:
                    67:7c:c6:18:b5:b3:e6:4d:a4:8b:96:eb:ba:82:5c:
                    a4:f5:68:28:45:fc:9c:0c:eb:fd:8f:ab:29:99:fa:
                    ba:aa:ba:f6:f9:ca:52:95:e5:7c:06:07:78:8c:9b:
                    d8:46:37:7f:f5:3a:d7:93:a4:1f:90:0b:3b:80:12:
                    ba:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:5F:12:23:20:99:AB:8F:EC:5C:20:90:B0:64:7A:33:C1:43:91:8E
            X509v3 Authority Key Identifier:
                keyid:B6:CC:02:A7:DB:8A:4D:B5:30:F1:12:B6:22:4F:19:08:08:68:FB:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:b4:d9:97:9e:27:61:cd:c3:4d:b8:6f:69:ef:3d:04:7a:96:
         04:29:43:78:1b:f5:8c:db:44:7d:fa:6d:73:fb:45:9e:e3:b8:
         6c:d5:c8:e2:2e:69:50:cd:90:2d:b9:0a:c3:10:c6:8c:59:df:
         00:c4:83:5f:de:64:6d:24:69:95:37:98:eb:64:29:9c:7b:93:
         24:e8:0e:cc:97:d8:3e:ac:70:35:0d:e3:53:30:a6:4a:99:c2:
         61:22:56:bb:6d:f3:b3:2d:7d:24:ce:11:a4:af:a1:a1:55:e3:
         08:56:0c:c5:ad:bd:72:50:5c:0f:8b:32:7a:8f:02:c9:22:66:
         83:ad:81:96:ce:3a:8b:de:0c:73:3a:51:7d:19:d7:5f:7f:cc:
         42:2d:85:65:c8:06:23:5c:db:16:fc:e9:87:0c:d0:5d:61:36:
         c7:45:e5:68:1a:18:f2:98:58:fa:d7:c0:f8:07:f7:99:83:28:
         59:b3:73:75:ca:d5:40:77:6a:4b:0d:e2:1c:50:b8:51:3e:70:
         a4:45:f1:f4:f2:c5:0e:34:31:68:e1:d9:2a:6c:89:09:1e:4a:
         95:f5:21:3f:00:e2:98:19:ad:71:03:24:be:40:30:c5:9c:f0:
         62:e4:5f:ad:1d:c5:b1:07:4c:a9:40:5f:27:b6:d6:40:c7:89:
         7b:2a:36:ea
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICALcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTQ4NDkxMTAvBgNVBAUTKEI2Q0MwMkE3REI4QTREQjUzMEYxMTJCNjIyNEYxOTA4
MDg2OEZCRDkwHhcNMjUwMTMxMDUyMDMyWhcNMjUwMjA3MDUyMDMyWjAYMRYwFAYD
VQQDEw02NzljNWRhMC01ZDhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5pmTRWnMZvVYC5iLvA5VbiiArUMvuUvv83VTlOOVGTooVoVfcRI1jwom0mrk
FjmzRdxa3zeayIeDAKkf29DZzm3ZCBcWnzJKpYUebLMjR8BWjn2tto86mJi2c5ie
Roa/sTrEK/H0ZwuCsjGFVF3xUr9VP/YO9ELU4lDW+pGgX3oVl13E6BGBR12yYd+u
1NQtOn8cR1gHxuj/A3MBQSaDE3Wuplogtbg+iGkFR4kSC+mbkL+AW9Q4P8MdYdxl
nyS5vL1nfMYYtbPmTaSLluu6glyk9WgoRfycDOv9j6spmfq6qrr2+cpSleV8Bgd4
jJvYRjd/9TrXk6QfkAs7gBK6/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNdfEiMg
mauP7FwgkLBkejPBQ5GOMB8GA1UdIwQYMBaAFLbMAqfbik21MPEStiJPGQgIaPvZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDg0OS8wODdEM0VFOEU2
NkQxMUVFOEEzMUE5NjBDNEY5QUUwMi90c3dDcDl1S1RiVXc4UksySWs4WkNBaG8t
OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Rzd0NwOXVLVGJVdzhSSzJJazhaQ0Foby05ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NDg0OS8wODdEM0VFOEU2NkQxMUVFOEEzMUE5NjBDNEY5QUUwMi90c3dDcDl1S1Ri
VXc4UksySWs4WkNBaG8tOWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCctNmXnidhzcNNuG9p7z0EepYEKUN4G/WM20R9+m1z+0We47hs1cji
LmlQzZAtuQrDEMaMWd8AxINf3mRtJGmVN5jrZCmce5Mk6A7Ml9g+rHA1DeNTMKZK
mcJhIla7bfOzLX0kzhGkr6GhVeMIVgzFrb1yUFwPizJ6jwLJImaDrYGWzjqL3gxz
OlF9Gddff8xCLYVlyAYjXNsW/OmHDNBdYTbHReVoGhjymFj618D4B/eZgyhZs3N1
ytVAd2pLDeIcULhRPnCkRfH08sUONDFo4dkqbIkJHkqV9SE/AOKYGa1xAyS+QDDF
nPBi5F+tHcWxB0ypQF8nttZAx4l7Kjbq
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:16:34 2025 by rpki-client