Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
File:                     mFjOS0vHLnbmaMR9RImMCQiWq-s.mft (raw, json)
Hash identifier:          xBSRRH78XnNIJc3vtmaW/gTighDybB7dG7ju52zf6kE=
Subject key identifier:   05:A0:7B:3F:D8:EB:B1:9C:2E:98:26:54:0B:14:40:78:36:75:C2:54
Authority key identifier: 98:58:CE:4B:4B:C7:2E:76:E6:68:C4:7D:44:89:8C:09:08:96:AB:EB
Certificate issuer:       /CN=A91A4B1A/serialNumber=9858CE4B4BC72E76E668C47D44898C090896ABEB
Certificate serial:       01A1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mFjOS0vHLnbmaMR9RImMCQiWq-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
Manifest number:          019B
Signing time:             Fri 31 Jan 2025 16:06:35 +0000
Manifest this update:     Fri 31 Jan 2025 16:06:34 +0000
Manifest next update:     Fri 07 Feb 2025 16:06:34 +0000
Files and hashes:         1: mFjOS0vHLnbmaMR9RImMCQiWq-s.crl (hash: E+WjI63g5/rRrPr1MSwXPhkjTU6At+7XKxD6Zxg5k3s=)
                          2: 4C3A869614DF11EEAB46A86DC4F9AE02.roa (hash: lu38CDRBmX2eL86FuDGblRO37V7hVT/nMCfbmUIJkQk=)
                          3: 4BC4F6A614DF11EEAB46A86DC4F9AE02.roa (hash: UFLmIYqMMQZsSlXO+J3Nx0+Pb9WqTG32RlxuAiHOUdE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 417 (0x1a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4B1A/serialNumber=9858CE4B4BC72E76E668C47D44898C090896ABEB
        Validity
            Not Before: Jan 31 16:06:34 2025 GMT
            Not After : Feb  7 16:06:34 2025 GMT
        Subject: CN=679cf50b-561d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:64:8f:98:98:4f:44:e0:4b:2b:5b:1c:10:6d:
                    84:51:40:8e:14:e5:50:55:b9:c8:6c:80:a5:de:85:
                    64:97:93:16:c8:12:69:91:62:17:f5:e1:18:8a:c1:
                    d6:b5:07:94:ba:ae:fd:c7:2f:5a:ec:05:db:e3:4d:
                    c0:78:69:14:7a:b3:52:a2:a1:84:b5:c9:ee:d2:cf:
                    b5:b5:33:9c:3b:e2:e6:9b:28:3d:18:a4:07:76:55:
                    76:be:45:37:8f:b5:17:6b:08:4b:a9:e5:76:ce:37:
                    58:d7:85:9b:f5:a8:27:4a:a5:d1:ba:34:4a:84:4a:
                    4c:4e:30:18:15:7f:4b:7d:a0:7e:20:9e:83:20:ba:
                    27:c9:f3:65:d0:ba:94:09:f7:24:8c:a5:01:6c:36:
                    6e:a0:1d:db:33:7f:e8:3e:4e:25:59:a9:56:3e:d9:
                    df:27:ac:5b:41:83:04:7d:bb:fa:7e:22:9e:6f:21:
                    55:63:c0:ef:1c:12:33:76:1a:17:d4:a9:b1:f6:18:
                    4b:62:2d:cb:91:4d:42:d1:0f:ae:6c:29:c1:24:e9:
                    7f:18:2d:4f:54:8b:43:62:f2:23:f1:6a:cb:c8:38:
                    01:ee:4a:15:c9:9e:a4:65:9a:ad:90:a1:52:16:f0:
                    6d:98:77:c2:d5:89:30:ab:d9:63:fb:eb:55:a2:e6:
                    a1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:A0:7B:3F:D8:EB:B1:9C:2E:98:26:54:0B:14:40:78:36:75:C2:54
            X509v3 Authority Key Identifier:
                keyid:98:58:CE:4B:4B:C7:2E:76:E6:68:C4:7D:44:89:8C:09:08:96:AB:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mFjOS0vHLnbmaMR9RImMCQiWq-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:3d:11:66:e1:6a:9b:2d:c3:04:74:27:c8:72:20:49:c3:fb:
         2f:2c:7c:0b:00:f0:2c:d7:71:1d:2b:e5:6c:74:52:b2:16:9a:
         02:2e:f2:43:51:61:51:af:34:2b:b3:aa:ee:f2:8f:ce:08:78:
         49:84:39:73:b7:76:21:b7:71:b0:8a:c1:50:3e:80:48:a0:92:
         34:ab:df:55:9d:e8:9d:cd:de:70:f2:5c:a0:89:95:a3:78:9b:
         5d:91:c3:8b:8b:1d:5d:e4:0e:83:24:87:fb:24:0a:d9:3e:be:
         76:d7:a6:75:63:54:09:46:65:09:87:02:ce:aa:04:9e:d8:24:
         d1:dd:a4:45:e6:d5:9c:4d:65:99:09:98:d2:ad:0c:a1:f7:1f:
         5a:2c:8d:fd:62:1a:7b:1a:55:e4:5a:13:84:56:12:6c:75:68:
         68:38:84:0b:82:b8:88:26:6b:2f:1f:7f:fe:b5:07:a6:d1:60:
         d9:e0:ed:6e:34:4f:8c:72:92:5f:b5:71:62:e1:52:f1:b7:83:
         41:35:b3:12:e0:f5:34:35:9c:d9:b4:f7:a1:79:34:c3:83:da:
         c0:45:a5:29:29:91:dd:06:b6:ad:fd:94:a8:59:df:ff:08:bf:
         03:f3:0a:94:ce:e2:f5:1b:89:8d:fe:59:21:c1:34:d6:b3:90:
         33:06:7a:df
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTRCMUExMTAvBgNVBAUTKDk4NThDRTRCNEJDNzJFNzZFNjY4QzQ3RDQ0ODk4QzA5
MDg5NkFCRUIwHhcNMjUwMTMxMTYwNjM0WhcNMjUwMjA3MTYwNjM0WjAYMRYwFAYD
VQQDEw02NzljZjUwYi01NjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvWSPmJhPROBLK1scEG2EUUCOFOVQVbnIbICl3oVkl5MWyBJpkWIX9eEYisHW
tQeUuq79xy9a7AXb403AeGkUerNSoqGEtcnu0s+1tTOcO+Lmmyg9GKQHdlV2vkU3
j7UXawhLqeV2zjdY14Wb9agnSqXRujRKhEpMTjAYFX9LfaB+IJ6DILonyfNl0LqU
CfckjKUBbDZuoB3bM3/oPk4lWalWPtnfJ6xbQYMEfbv6fiKebyFVY8DvHBIzdhoX
1Kmx9hhLYi3LkU1C0Q+ubCnBJOl/GC1PVItDYvIj8WrLyDgB7koVyZ6kZZqtkKFS
FvBtmHfC1Ykwq9lj++tVouahFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAWgez/Y
67GcLpgmVAsUQHg2dcJUMB8GA1UdIwQYMBaAFJhYzktLxy525mjEfUSJjAkIlqvr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEIxQS9CNDVGM0ZDNDgx
OUExMUVEOEQ2MUJBMkJDNEY5QUUwMi9tRmpPUzB2SExuYm1hTVI5UkltTUNRaVdx
LXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL21Gak9TMHZITG5ibWFNUjlSSW1NQ1FpV3Etcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NEIxQS9CNDVGM0ZDNDgxOUExMUVEOEQ2MUJBMkJDNEY5QUUwMi9tRmpPUzB2SExu
Ym1hTVI5UkltTUNRaVdxLXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCcPRFm4WqbLcMEdCfIciBJw/svLHwLAPAs13EdK+VsdFKyFpoCLvJD
UWFRrzQrs6ru8o/OCHhJhDlzt3Yht3GwisFQPoBIoJI0q99Vneidzd5w8lygiZWj
eJtdkcOLix1d5A6DJIf7JArZPr5216Z1Y1QJRmUJhwLOqgSe2CTR3aRF5tWcTWWZ
CZjSrQyh9x9aLI39Yhp7GlXkWhOEVhJsdWhoOIQLgriIJmsvH3/+tQem0WDZ4O1u
NE+McpJftXFi4VLxt4NBNbMS4PU0NZzZtPeheTTDg9rARaUpKZHdBrat/ZSoWd//
CL8D8wqUzuL1G4mN/lkhwTTWs5AzBnrf
-----END CERTIFICATE-----
Generated at Mon Apr 28 21:40:50 2025 by rpki-client