Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.mft
File:                     Ska_UrGTBkf9JbeWkm28YUBL4-0.mft (raw, json)
Hash identifier:          Ref7SY/AFi/Esiwb9eOCX5WrzO9dLHkpc9KDunhQgbE=
Subject key identifier:   D6:EF:BC:DC:44:F5:9F:DC:13:6B:4D:89:1B:03:02:4D:68:86:64:23
Authority key identifier: 4A:46:BF:52:B1:93:06:47:FD:25:B7:96:92:6D:BC:61:40:4B:E3:ED
Certificate issuer:       /CN=A91A8859/serialNumber=4A46BF52B1930647FD25B796926DBC61404BE3ED
Certificate serial:       0C0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ska_UrGTBkf9JbeWkm28YUBL4-0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.mft
Manifest number:          0C07
Signing time:             Fri 31 Jan 2025 18:26:46 +0000
Manifest this update:     Fri 31 Jan 2025 18:26:46 +0000
Manifest next update:     Fri 07 Feb 2025 18:26:45 +0000
Files and hashes:         1: Ska_UrGTBkf9JbeWkm28YUBL4-0.crl (hash: qKYwespRJZpJ1gF8wq70CJXnova5sWtpMmg7fmNsp58=)
                          2: 692ABA5A09DF11EAA6052433C4F9AE02.roa (hash: Ry01yZ5BQjClLdraAGF0vxY6zRTp62DNKwkQE7m6ywY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3087 (0xc0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8859/serialNumber=4A46BF52B1930647FD25B796926DBC61404BE3ED
        Validity
            Not Before: Jan 31 18:26:46 2025 GMT
            Not After : Feb  7 18:26:45 2025 GMT
        Subject: CN=679d15e6-7cbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:eb:8f:66:6d:0e:db:4b:87:ec:74:dd:59:c2:
                    7f:b3:dc:8e:ef:00:d5:03:dc:a0:f4:f2:ef:b9:68:
                    08:e6:8e:b3:ab:aa:02:18:5b:20:76:13:99:e5:6f:
                    99:a1:30:a0:07:a8:aa:e0:08:16:a8:60:ca:72:92:
                    6a:e0:30:a1:94:e3:6c:25:9d:7e:3c:a4:22:2b:92:
                    71:b4:38:be:95:a4:a9:e5:22:78:27:2b:49:0a:0f:
                    d3:6a:84:db:53:22:90:a9:03:f0:82:f7:48:34:08:
                    fe:20:fa:26:65:9d:88:6a:57:0d:ef:f3:b0:e4:9c:
                    df:b6:bb:aa:10:1c:82:94:30:c7:c0:17:0e:f1:16:
                    8f:50:c0:0c:f4:ee:b2:fb:34:71:41:b7:b7:d6:01:
                    62:24:36:67:6b:16:ee:6e:cc:31:78:1d:f0:d6:60:
                    23:3b:34:6c:bf:59:bc:33:d9:25:a2:f1:f4:72:75:
                    54:44:80:a5:75:70:ea:32:aa:30:88:14:8b:0a:73:
                    b1:95:6e:d9:ed:12:a9:89:8b:cc:7d:80:89:7e:4d:
                    a7:ce:32:e4:b2:27:bd:1f:f1:5a:ab:a5:65:d2:f9:
                    89:cf:5f:dd:e9:20:0a:26:1f:50:1d:fb:61:ec:e5:
                    5d:c0:96:b8:2b:e7:0c:32:93:81:11:44:b1:9d:81:
                    9c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:EF:BC:DC:44:F5:9F:DC:13:6B:4D:89:1B:03:02:4D:68:86:64:23
            X509v3 Authority Key Identifier:
                keyid:4A:46:BF:52:B1:93:06:47:FD:25:B7:96:92:6D:BC:61:40:4B:E3:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ska_UrGTBkf9JbeWkm28YUBL4-0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:c9:8f:41:4a:08:05:5c:01:de:53:a5:b1:36:14:22:a1:5b:
         b5:af:e5:e1:8d:61:d5:6a:a5:ba:0f:13:0d:1b:59:46:5c:31:
         d4:60:e0:0d:a1:55:d4:18:86:58:2c:d8:97:31:a7:6d:f9:8b:
         8b:96:02:76:47:85:ee:cd:87:61:31:cb:6b:7a:d4:77:12:cc:
         91:28:e8:b7:58:d1:1a:c6:65:61:22:f4:cd:70:78:37:63:f8:
         0f:44:be:1e:83:32:79:aa:d4:53:48:ef:a1:7e:c6:02:5a:84:
         15:7f:33:9e:e8:b1:fd:a5:c3:e3:66:d5:bc:c2:9b:c4:1c:de:
         b4:2e:f2:bd:8d:87:33:6b:ac:31:33:e3:ee:71:91:1d:da:d1:
         73:2a:b6:e9:93:ad:d7:6c:72:83:e7:1c:27:60:2c:57:8f:f4:
         f1:8a:77:07:92:8e:a0:8b:a0:4c:cb:bb:2a:2b:4c:7c:5f:db:
         21:14:5d:48:f8:a8:de:96:b8:fd:0a:9a:e6:07:a9:76:8c:12:
         80:5f:72:36:c4:05:98:d1:97:6a:03:98:78:b9:e7:a5:4f:1e:
         9c:52:14:be:1b:aa:69:90:78:3e:58:53:15:3f:66:1d:6a:c1:
         35:11:b7:7c:f1:7a:32:95:a0:ae:2e:1c:bc:11:81:e8:a1:4e:
         06:5f:8b:27
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDA8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTg4NTkxMTAvBgNVBAUTKDRBNDZCRjUyQjE5MzA2NDdGRDI1Qjc5NjkyNkRCQzYx
NDA0QkUzRUQwHhcNMjUwMTMxMTgyNjQ2WhcNMjUwMjA3MTgyNjQ1WjAYMRYwFAYD
VQQDEw02NzlkMTVlNi03Y2JkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvuuPZm0O20uH7HTdWcJ/s9yO7wDVA9yg9PLvuWgI5o6zq6oCGFsgdhOZ5W+Z
oTCgB6iq4AgWqGDKcpJq4DChlONsJZ1+PKQiK5JxtDi+laSp5SJ4JytJCg/TaoTb
UyKQqQPwgvdINAj+IPomZZ2IalcN7/Ow5JzftruqEByClDDHwBcO8RaPUMAM9O6y
+zRxQbe31gFiJDZnaxbubswxeB3w1mAjOzRsv1m8M9klovH0cnVURICldXDqMqow
iBSLCnOxlW7Z7RKpiYvMfYCJfk2nzjLksie9H/Faq6Vl0vmJz1/d6SAKJh9QHfth
7OVdwJa4K+cMMpOBEUSxnYGcsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNbvvNxE
9Z/cE2tNiRsDAk1ohmQjMB8GA1UdIwQYMBaAFEpGv1KxkwZH/SW3lpJtvGFAS+Pt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODg1OS84REJEN0RCQTA1
MjcxMUVBOEYxN0M3MzFDNEY5QUUwMi9Ta2FfVXJHVEJrZjlKYmVXa20yOFlVQkw0
LTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NrYV9VckdUQmtmOUpiZVdrbTI4WVVCTDQtMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
ODg1OS84REJEN0RCQTA1MjcxMUVBOEYxN0M3MzFDNEY5QUUwMi9Ta2FfVXJHVEJr
ZjlKYmVXa20yOFlVQkw0LTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBwyY9BSggFXAHeU6WxNhQioVu1r+XhjWHVaqW6DxMNG1lGXDHUYOAN
oVXUGIZYLNiXMadt+YuLlgJ2R4XuzYdhMctretR3EsyRKOi3WNEaxmVhIvTNcHg3
Y/gPRL4egzJ5qtRTSO+hfsYCWoQVfzOe6LH9pcPjZtW8wpvEHN60LvK9jYcza6wx
M+PucZEd2tFzKrbpk63XbHKD5xwnYCxXj/TxincHko6gi6BMy7sqK0x8X9shFF1I
+Kjelrj9CprmB6l2jBKAX3I2xAWY0ZdqA5h4ueelTx6cUhS+G6ppkHg+WFMVP2Yd
asE1Ebd88XoylaCuLhy8EYHooU4GX4sn
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:28:35 2025 by rpki-client