Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft
File:                     LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft (raw, json)
Hash identifier:          YchqBqT+2nUsEfUej5KP97IJrPWqQMh0vn7RXJW5R8U=
Subject key identifier:   C7:CA:EF:F7:5F:A3:5D:9B:E2:AD:12:DE:4A:AF:7A:5A:44:A7:6E:C3
Authority key identifier: 2E:16:4D:B4:5B:84:6B:BA:E6:8C:27:7D:43:F8:82:F6:40:92:28:1E
Certificate issuer:       /CN=A91A9467/serialNumber=2E164DB45B846BBAE68C277D43F882F64092281E
Certificate serial:       18A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft
Manifest number:          1892
Signing time:             Fri 31 Jan 2025 16:29:39 +0000
Manifest this update:     Fri 31 Jan 2025 16:29:38 +0000
Manifest next update:     Fri 07 Feb 2025 16:29:38 +0000
Files and hashes:         1: LhZNtFuEa7rmjCd9Q_iC9kCSKB4.crl (hash: A8CXOEuDeBiVsqIDCTrCb4lwYHhLdN9Fm77T1c6PioQ=)
                          2: 0EDA10A4A9A011EE96DCBB4FC4F9AE02.roa (hash: 9b8cbYORw44VvEpRgAtGCxHhf/hrQyvWwycoRACw4Zc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6309 (0x18a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9467/serialNumber=2E164DB45B846BBAE68C277D43F882F64092281E
        Validity
            Not Before: Jan 31 16:29:38 2025 GMT
            Not After : Feb  7 16:29:38 2025 GMT
        Subject: CN=679cfa72-2ee3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:13:62:d4:cd:39:6a:8b:98:36:98:60:2a:c0:
                    a3:d9:af:76:0b:26:81:70:99:15:8c:38:ae:98:1e:
                    88:98:47:1c:9b:da:3b:1e:30:d7:a5:57:0a:72:d1:
                    69:28:31:06:b3:62:a7:e1:ac:0f:ae:40:95:a9:fa:
                    da:d5:b3:45:49:7e:75:9e:0a:05:1b:10:7d:1e:dc:
                    d1:5d:5c:64:e4:35:40:06:0d:5e:e5:14:a5:32:a1:
                    af:61:79:e2:b6:fe:ed:35:3b:23:9b:42:b6:f3:62:
                    ce:1c:da:6e:97:2f:5b:07:e7:3a:a5:2a:38:94:02:
                    57:e0:09:7d:2b:96:4a:de:5c:f5:8f:17:27:d9:1b:
                    8d:77:9e:e2:9c:5a:b2:82:67:12:1e:95:90:34:f3:
                    16:20:42:13:4b:9b:04:b9:38:27:f6:28:ef:c1:73:
                    bc:99:96:4e:25:7f:99:50:67:34:b6:04:ab:da:eb:
                    d9:2a:33:fe:a1:3b:74:cd:c7:b2:8a:21:90:f4:7c:
                    d2:84:43:cc:78:97:96:91:d2:7f:88:2f:01:f1:6f:
                    fb:78:0b:7d:d4:85:db:40:1f:ff:fd:09:b1:0d:ee:
                    94:e8:58:fa:5c:66:dc:ef:1b:6b:7d:e5:24:8f:1f:
                    e9:0c:72:48:7d:57:06:03:2e:2d:e9:fb:57:84:6d:
                    f3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:CA:EF:F7:5F:A3:5D:9B:E2:AD:12:DE:4A:AF:7A:5A:44:A7:6E:C3
            X509v3 Authority Key Identifier:
                keyid:2E:16:4D:B4:5B:84:6B:BA:E6:8C:27:7D:43:F8:82:F6:40:92:28:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:0e:38:13:85:2c:c1:7f:87:ab:30:94:05:24:6c:80:65:c6:
         b7:76:de:23:21:9d:cd:37:11:f6:1d:b1:d2:3f:38:ee:cf:76:
         af:1d:2a:8c:97:a5:8c:07:20:f2:16:18:81:1e:1d:a9:42:47:
         53:4d:76:bc:0c:1a:de:12:8f:d5:c7:f7:ac:42:d8:fa:bb:ae:
         af:0b:3f:58:ff:59:85:2a:48:ef:ad:16:0d:15:5a:98:f4:e0:
         88:f1:72:c0:b5:78:eb:2d:ca:47:df:4d:4a:c0:f3:f3:e9:d1:
         42:46:67:43:8f:cc:ba:ce:25:56:c7:d5:5b:a0:be:70:2d:47:
         c4:78:34:fb:0c:20:a5:02:92:b0:bc:9c:6b:3b:cd:7f:73:82:
         55:e5:7d:79:be:ec:f3:52:cf:73:97:cc:5e:5d:00:2a:e6:80:
         53:22:7f:a3:4c:1f:aa:6e:af:31:5f:19:09:d5:f1:b5:ab:d8:
         2f:78:66:87:ca:ed:37:67:c7:8a:fd:a5:d9:58:b9:23:85:08:
         31:48:a4:46:74:b7:b3:d1:03:2c:30:3f:3f:d4:c6:1c:d7:55:
         3f:e2:89:4f:bd:c8:1f:16:01:69:40:15:2e:d8:23:ed:92:7e:
         6f:af:5e:88:10:8b:57:f5:b9:76:9d:ee:63:af:78:7d:7b:3a:
         03:a3:a5:b0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICGKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTk0NjcxMTAvBgNVBAUTKDJFMTY0REI0NUI4NDZCQkFFNjhDMjc3RDQzRjg4MkY2
NDA5MjI4MUUwHhcNMjUwMTMxMTYyOTM4WhcNMjUwMjA3MTYyOTM4WjAYMRYwFAYD
VQQDEw02NzljZmE3Mi0yZWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+RNi1M05aouYNphgKsCj2a92CyaBcJkVjDiumB6ImEccm9o7HjDXpVcKctFp
KDEGs2Kn4awPrkCVqfra1bNFSX51ngoFGxB9HtzRXVxk5DVABg1e5RSlMqGvYXni
tv7tNTsjm0K282LOHNpuly9bB+c6pSo4lAJX4Al9K5ZK3lz1jxcn2RuNd57inFqy
gmcSHpWQNPMWIEITS5sEuTgn9ijvwXO8mZZOJX+ZUGc0tgSr2uvZKjP+oTt0zcey
iiGQ9HzShEPMeJeWkdJ/iC8B8W/7eAt91IXbQB///QmxDe6U6Fj6XGbc7xtrfeUk
jx/pDHJIfVcGAy4t6ftXhG3z1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMfK7/df
o12b4q0S3kqvelpEp27DMB8GA1UdIwQYMBaAFC4WTbRbhGu65ownfUP4gvZAkige
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTQ2Ny85MTVDMDdFNjkx
RUExMUU3OUQwRDBBMkJDNEY5QUUwMi9MaFpOdEZ1RWE3cm1qQ2Q5UV9pQzlrQ1NL
QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xoWk50RnVFYTdybWpDZDlRX2lDOWtDU0tCNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OTQ2Ny85MTVDMDdFNjkxRUExMUU3OUQwRDBBMkJDNEY5QUUwMi9MaFpOdEZ1RWE3
cm1qQ2Q5UV9pQzlrQ1NLQjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBuDjgThSzBf4erMJQFJGyAZca3dt4jIZ3NNxH2HbHSPzjuz3avHSqM
l6WMByDyFhiBHh2pQkdTTXa8DBreEo/Vx/esQtj6u66vCz9Y/1mFKkjvrRYNFVqY
9OCI8XLAtXjrLcpH301KwPPz6dFCRmdDj8y6ziVWx9VboL5wLUfEeDT7DCClApKw
vJxrO81/c4JV5X15vuzzUs9zl8xeXQAq5oBTIn+jTB+qbq8xXxkJ1fG1q9gveGaH
yu03Z8eK/aXZWLkjhQgxSKRGdLez0QMsMD8/1MYc11U/4olPvcgfFgFpQBUu2CPt
kn5vr16IEItX9bl2ne5jr3h9ezoDo6Ww
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:48:24 2025 by rpki-client