Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft
File:                     MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft (raw, json)
Hash identifier:          z5z2zqCgk/3nwfrG5e1CHQFJAojpTL9Z4ifiDNxr93g=
Subject key identifier:   9E:F4:E9:0E:96:54:0B:2D:A6:BA:63:2E:A2:A6:94:B4:36:48:FF:2C
Authority key identifier: 31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90
Certificate issuer:       /CN=A91A7B94/serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890
Certificate serial:       012D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft
Manifest number:          011D
Signing time:             Fri 31 Jan 2025 03:58:58 +0000
Manifest this update:     Fri 31 Jan 2025 03:58:57 +0000
Manifest next update:     Fri 07 Feb 2025 03:58:57 +0000
Files and hashes:         1: MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl (hash: g0W+GR+I9+xXGlxzxcRmQxIEMATEglif1J/AmoqxIGw=)
                          2: 268DF20A940C11EE9B034255C4F9AE02.roa (hash: kgaZFM6PEa7OxBpQNYQJyC2BXzh6kZmUunDtbxoanho=)
                          3: 2732E7CE940C11EE9B034255C4F9AE02.roa (hash: vxzRpo3gFHIybngZJMla9i3xRZ+JSBWrRy4xi4ckalM=)
                          4: D29109C4EC6E11EEAEF9610BC4F9AE02.roa (hash: D8dAG/9CmCMBEAtiY945ZqCN3MyX7EsagCsHQSrxDDU=)
                          5: 7474F998377111EE8AFEB74DC4F9AE02.roa (hash: uxmO0Zu81b9ijLgJWFAnqvmhDLc0ZfCAbuCH6EbXLi0=)
                          6: B0562E7AEC6E11EEB7FC060BC4F9AE02.roa (hash: SpJD8GcSBoUz5MPi6PJr9VjMBRC58LFgHcmGttoe0yo=)
                          7: D2093EF4EC6E11EEAEF9610BC4F9AE02.roa (hash: G4Dla87V8rtQVoFrowa7K0BJ1dHwJVBSq0/2lBCHVpo=)
                          8: E9874B2A16D011EF90793868C4F9AE02.roa (hash: ViBEiXsjPtwDWgjWAoRfyKQaAhEvEFxJcWrERgHGyz4=)
                          9: AFDF1A1AEC6E11EEB7FC060BC4F9AE02.roa (hash: sVe/dlsdpYGwjAAFXOmmuTaA1ya2H4hHFG6dxtS3qXc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 301 (0x12d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7B94/serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890
        Validity
            Not Before: Jan 31 03:58:57 2025 GMT
            Not After : Feb  7 03:58:57 2025 GMT
        Subject: CN=679c4a82-52e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1e:52:f2:ab:57:f7:5c:19:63:72:36:0d:28:
                    14:14:2f:99:85:0a:88:e5:3b:c2:cc:d3:62:d5:16:
                    e1:ce:83:b8:93:ee:c4:bb:64:ad:2f:34:1d:ef:c5:
                    ba:25:4a:70:b4:b9:f9:9e:7c:6f:4d:0e:28:b9:5a:
                    58:75:58:21:5b:e1:d6:63:42:46:e6:32:6d:17:b5:
                    58:9d:0c:f2:d3:f3:d6:90:95:d6:e2:e5:20:97:08:
                    d9:c0:9e:1c:3b:b7:7c:4d:af:ae:eb:a6:4a:93:b3:
                    74:5c:d0:f9:03:79:44:d6:25:3e:2d:cd:18:15:43:
                    a7:df:a6:1a:78:86:a9:9f:99:77:db:5a:33:5d:fc:
                    95:af:c1:14:6b:e6:02:7a:da:a6:30:2e:13:23:ab:
                    9d:60:26:00:8b:3d:e9:6d:01:c4:83:5a:b6:6b:89:
                    d1:ae:34:fc:63:65:62:20:13:25:6f:b4:a1:c7:e7:
                    87:14:fd:64:9b:3e:f8:ca:a2:81:7c:7f:d1:c2:2a:
                    e5:e3:4a:56:1e:56:61:08:5d:dd:85:ff:a2:c7:d6:
                    49:14:06:12:f5:31:b4:fb:0c:47:dd:79:2f:cc:87:
                    8d:0c:ee:c5:dc:39:f4:b3:5e:3b:c4:ad:16:50:66:
                    08:03:b6:8f:b2:6b:cd:e3:cd:19:82:b5:c4:f0:cc:
                    01:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:F4:E9:0E:96:54:0B:2D:A6:BA:63:2E:A2:A6:94:B4:36:48:FF:2C
            X509v3 Authority Key Identifier:
                keyid:31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:99:d8:c9:90:e1:91:00:01:9c:90:22:6d:b5:b0:f7:2e:3e:
         1e:46:c7:d3:6a:c4:22:fa:9d:4e:11:49:71:cb:7d:b1:cb:72:
         be:bf:52:0d:bd:80:ce:f4:f8:01:83:47:b0:30:f5:c1:ee:18:
         10:26:c1:50:83:ed:dc:fe:25:88:19:8e:16:c6:88:7b:cd:64:
         01:62:b7:fa:8b:11:2b:45:6d:ff:ed:1f:95:2e:95:96:0d:60:
         26:90:e4:83:07:bc:44:c2:6c:81:1c:43:c1:a2:16:1e:74:90:
         4a:f6:bb:24:b4:f6:76:7b:b2:df:6c:19:08:cc:54:c6:c9:ff:
         ce:af:c0:f5:fa:5d:f0:24:6b:e5:89:a7:13:11:4e:c1:d8:6b:
         5d:15:d9:9d:2f:e7:ef:9a:be:a1:87:1d:4c:b4:47:d2:4f:8b:
         1a:76:05:19:54:3b:6a:28:1c:81:b1:7b:9f:db:03:35:5b:95:
         34:12:e2:14:3b:b9:ee:d1:2f:c0:20:0a:a2:49:38:9c:97:b5:
         a6:d7:6b:ff:22:1d:f6:12:9c:d5:64:35:25:1f:16:34:3b:7e:
         44:de:59:e9:ad:95:b1:53:24:af:ae:36:3e:4a:84:19:45:83:
         f8:4c:48:75:5e:88:be:71:df:9c:90:3d:03:9e:7b:d7:d7:97:
         5a:48:43:9d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTdCOTQxMTAvBgNVBAUTKDMxMjZGNEVGMDVFM0FFNzVBMDkxNDRCNjY3RDM5MzQ3
RDREQUE4OTAwHhcNMjUwMTMxMDM1ODU3WhcNMjUwMjA3MDM1ODU3WjAYMRYwFAYD
VQQDEw02NzljNGE4Mi01MmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3R5S8qtX91wZY3I2DSgUFC+ZhQqI5TvCzNNi1RbhzoO4k+7Eu2StLzQd78W6
JUpwtLn5nnxvTQ4ouVpYdVghW+HWY0JG5jJtF7VYnQzy0/PWkJXW4uUglwjZwJ4c
O7d8Ta+u66ZKk7N0XND5A3lE1iU+Lc0YFUOn36YaeIapn5l321ozXfyVr8EUa+YC
etqmMC4TI6udYCYAiz3pbQHEg1q2a4nRrjT8Y2ViIBMlb7Shx+eHFP1kmz74yqKB
fH/Rwirl40pWHlZhCF3dhf+ix9ZJFAYS9TG0+wxH3XkvzIeNDO7F3Dn0s147xK0W
UGYIA7aPsmvN480ZgrXE8MwBMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ706Q6W
VAstprpjLqKmlLQ2SP8sMB8GA1UdIwQYMBaAFDEm9O8F4651oJFEtmfTk0fU2qiQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0I5NC9DQzc0MUJCNjM3
NzAxMUVFOERDOEJCMzRDNEY5QUUwMi9NU2IwN3dYanJuV2drVVMyWjlPVFI5VGFx
SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01TYjA3d1hqcm5XZ2tVUzJaOU9UUjlUYXFKQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
N0I5NC9DQzc0MUJCNjM3NzAxMUVFOERDOEJCMzRDNEY5QUUwMi9NU2IwN3dYanJu
V2drVVMyWjlPVFI5VGFxSkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA3mdjJkOGRAAGckCJttbD3Lj4eRsfTasQi+p1OEUlxy32xy3K+v1IN
vYDO9PgBg0ewMPXB7hgQJsFQg+3c/iWIGY4Wxoh7zWQBYrf6ixErRW3/7R+VLpWW
DWAmkOSDB7xEwmyBHEPBohYedJBK9rsktPZ2e7LfbBkIzFTGyf/Or8D1+l3wJGvl
iacTEU7B2GtdFdmdL+fvmr6hhx1MtEfST4sadgUZVDtqKByBsXuf2wM1W5U0EuIU
O7nu0S/AIAqiSTicl7Wm12v/Ih32EpzVZDUlHxY0O35E3lnprZWxUySvrjY+SoQZ
RYP4TEh1Xoi+cd+ckD0DnnvX15daSEOd
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:11:21 2025 by rpki-client