Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.mft
File:                     nMiKhtCzfs7o1XZX75l4lTJoDN8.mft (raw, json)
Hash identifier:          D38g19uP6e2msdbQreSN+zK3Qy0F5VJDUbJZh6WEx4U=
Subject key identifier:   D5:4B:14:04:74:D4:AA:66:10:D0:64:EE:06:88:58:05:C1:A1:D7:C0
Authority key identifier: 9C:C8:8A:86:D0:B3:7E:CE:E8:D5:76:57:EF:99:78:95:32:68:0C:DF
Certificate issuer:       /CN=A91A4B39/serialNumber=9CC88A86D0B37ECEE8D57657EF99789532680CDF
Certificate serial:       CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nMiKhtCzfs7o1XZX75l4lTJoDN8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.mft
Manifest number:          CC
Signing time:             Fri 31 Jan 2025 04:53:17 +0000
Manifest this update:     Fri 31 Jan 2025 04:53:17 +0000
Manifest next update:     Fri 07 Feb 2025 04:53:17 +0000
Files and hashes:         1: nMiKhtCzfs7o1XZX75l4lTJoDN8.crl (hash: l1A3cWyPIgUpTSJD3A8p8Zw/YAvj+2JF75lEcHt8rP0=)
                          2: AA778F4CAF8A11EEB167DB64C4F9AE02.roa (hash: cfrP8N8FCUzi/lWLmEQz3q6QHultJoyGerNEVZ15ORY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 206 (0xce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4B39/serialNumber=9CC88A86D0B37ECEE8D57657EF99789532680CDF
        Validity
            Not Before: Jan 31 04:53:17 2025 GMT
            Not After : Feb  7 04:53:17 2025 GMT
        Subject: CN=679c573d-6966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:01:8d:c6:23:55:b3:dd:bb:74:f5:f2:a9:28:
                    0c:66:98:9d:bb:1d:5d:63:ed:d4:aa:ad:77:c6:43:
                    cc:5a:e9:f0:a9:8d:ee:49:b5:d2:9b:93:8b:e8:38:
                    35:79:3c:84:32:10:c1:07:e3:3c:55:46:df:ba:ae:
                    cb:ff:2e:d3:bc:1e:0d:21:64:ab:c4:a2:e2:77:e3:
                    cb:b9:0a:f7:30:e1:0f:4a:73:18:db:5d:22:05:cd:
                    8d:50:e7:33:f8:b0:c1:76:46:0c:97:59:9f:bb:7c:
                    8c:1b:0e:18:4f:ca:59:6b:25:d1:f3:ad:55:80:2c:
                    96:48:34:95:0a:1b:70:f4:cf:99:87:57:da:44:27:
                    23:20:67:db:5e:ab:68:06:f2:bd:82:99:93:1a:c4:
                    fb:79:62:8e:af:e3:9e:97:6d:c1:ec:8d:21:6c:06:
                    bb:9e:23:4a:69:ba:7a:77:04:1e:4b:e9:a0:31:bc:
                    a6:3f:41:f8:5a:9b:6e:c4:f1:ed:ac:de:84:5f:6f:
                    0e:5f:3a:8f:40:e7:5d:31:99:a0:39:79:3d:f5:ea:
                    fe:a4:48:e5:bc:56:84:ff:dc:64:55:cb:59:5e:44:
                    d5:9a:0f:af:61:bc:a9:74:1c:46:15:25:13:e7:82:
                    90:ec:0e:e2:b7:69:9c:38:29:ce:83:10:76:9d:73:
                    6a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:4B:14:04:74:D4:AA:66:10:D0:64:EE:06:88:58:05:C1:A1:D7:C0
            X509v3 Authority Key Identifier:
                keyid:9C:C8:8A:86:D0:B3:7E:CE:E8:D5:76:57:EF:99:78:95:32:68:0C:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nMiKhtCzfs7o1XZX75l4lTJoDN8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:58:d7:72:5d:f0:e6:8b:db:87:7d:f5:6b:f2:5a:95:11:63:
         5c:58:a1:45:14:88:0b:b8:10:2b:36:6d:fd:51:fa:73:46:99:
         29:c5:83:16:a3:4b:86:99:50:08:35:6f:63:5a:e9:a4:1e:34:
         65:ab:3c:be:83:79:0d:56:d9:36:d9:e9:bb:7f:cb:29:bb:54:
         b9:85:bd:db:4c:9c:f0:1c:0c:d1:69:83:c5:b7:5d:ce:2e:10:
         a8:9a:8b:10:4e:5f:32:9b:42:07:1c:e9:1b:a6:bf:4a:e6:dd:
         4c:e8:4a:f7:d7:a5:a6:fd:05:4e:d1:c9:8b:4b:53:07:aa:7c:
         b6:db:a9:93:8b:e8:09:13:8a:25:e1:28:cc:fc:13:ff:c1:49:
         e9:d5:eb:d9:ad:71:0f:45:76:ab:e3:9c:32:d6:fb:d1:a1:14:
         1c:44:f7:b4:7f:40:47:8a:3d:77:af:c4:e4:c7:44:70:15:89:
         ba:ee:01:a1:05:8e:f1:fc:b8:f2:e7:6d:ec:79:76:01:34:99:
         a8:1f:aa:85:ce:2e:a8:75:a7:31:a0:a7:26:6d:d7:19:70:1e:
         60:63:26:b8:26:8a:30:e9:76:7f:b4:51:a7:e2:fd:67:9e:cc:
         b3:35:f8:57:83:67:1f:c2:2f:51:27:d2:08:57:b8:c0:46:f2:
         72:9e:17:13
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTRCMzkxMTAvBgNVBAUTKDlDQzg4QTg2RDBCMzdFQ0VFOEQ1NzY1N0VGOTk3ODk1
MzI2ODBDREYwHhcNMjUwMTMxMDQ1MzE3WhcNMjUwMjA3MDQ1MzE3WjAYMRYwFAYD
VQQDEw02NzljNTczZC02OTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqAGNxiNVs927dPXyqSgMZpidux1dY+3Uqq13xkPMWunwqY3uSbXSm5OL6Dg1
eTyEMhDBB+M8VUbfuq7L/y7TvB4NIWSrxKLid+PLuQr3MOEPSnMY210iBc2NUOcz
+LDBdkYMl1mfu3yMGw4YT8pZayXR861VgCyWSDSVChtw9M+Zh1faRCcjIGfbXqto
BvK9gpmTGsT7eWKOr+Oel23B7I0hbAa7niNKabp6dwQeS+mgMbymP0H4WptuxPHt
rN6EX28OXzqPQOddMZmgOXk99er+pEjlvFaE/9xkVctZXkTVmg+vYbypdBxGFSUT
54KQ7A7it2mcOCnOgxB2nXNq0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNVLFAR0
1KpmENBk7gaIWAXBodfAMB8GA1UdIwQYMBaAFJzIiobQs37O6NV2V++ZeJUyaAzf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEIzOS9GRUY1NDlFOEFG
MTYxMUVFOEM0OEE3NERDNEY5QUUwMi9uTWlLaHRDemZzN28xWFpYNzVsNGxUSm9E
TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25NaUtodEN6ZnM3bzFYWlg3NWw0bFRKb0ROOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NEIzOS9GRUY1NDlFOEFGMTYxMUVFOEM0OEE3NERDNEY5QUUwMi9uTWlLaHRDemZz
N28xWFpYNzVsNGxUSm9ETjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBgWNdyXfDmi9uHffVr8lqVEWNcWKFFFIgLuBArNm39UfpzRpkpxYMW
o0uGmVAINW9jWumkHjRlqzy+g3kNVtk22em7f8spu1S5hb3bTJzwHAzRaYPFt13O
LhComosQTl8ym0IHHOkbpr9K5t1M6Er316Wm/QVO0cmLS1MHqny226mTi+gJE4ol
4SjM/BP/wUnp1evZrXEPRXar45wy1vvRoRQcRPe0f0BHij13r8Tkx0RwFYm67gGh
BY7x/Ljy523seXYBNJmoH6qFzi6odacxoKcmbdcZcB5gYya4Joow6XZ/tFGn4v1n
nsyzNfhXg2cfwi9RJ9IIV7jARvJynhcT
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:25:05 2025 by rpki-client