Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft
File:                     1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft (raw, json)
Hash identifier:          ZmlsHftLEqNFqBLDxJMWZkuVFeodwNu21bSQk5Fxop0=
Subject key identifier:   90:FC:92:29:0F:A8:8A:94:78:3A:74:52:5C:4B:0B:B9:22:E4:41:44
Authority key identifier: D6:8D:41:1A:D0:3E:73:14:F1:49:2D:06:2D:B0:D9:19:4E:9F:50:95
Certificate issuer:       /CN=A91AA897/serialNumber=D68D411AD03E7314F1492D062DB0D9194E9F5095
Certificate serial:       0606
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft
Manifest number:          05F9
Signing time:             Thu 30 Jan 2025 22:53:38 +0000
Manifest this update:     Thu 30 Jan 2025 22:53:38 +0000
Manifest next update:     Thu 06 Feb 2025 22:53:38 +0000
Files and hashes:         1: 1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl (hash: 8+MkawYd0zN0ft0fGEz/FWeT03EpoVQ2aFIA+so71pc=)
                          2: D78A16ECCAC311EC910B8C20C4F9AE02.roa (hash: oJo0EldVtMJvTJnA4FpJe7JGIUD/xhTk+VY6Q3vUpoY=)
                          3: D6692528CAC311EC910B8C20C4F9AE02.roa (hash: ZgaT6NUPSJGrS2FDGhXNf1URQXdcMTQg5TCptCSVeas=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1542 (0x606)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AA897/serialNumber=D68D411AD03E7314F1492D062DB0D9194E9F5095
        Validity
            Not Before: Jan 30 22:53:38 2025 GMT
            Not After : Feb  6 22:53:38 2025 GMT
        Subject: CN=679c02f2-c654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:da:e2:9a:fd:34:d6:46:3f:9c:ea:10:a0:14:
                    cf:3d:62:14:bd:3e:f3:10:6a:9b:f8:8f:93:e9:5f:
                    d2:08:27:81:42:98:52:f9:6e:87:76:55:4a:b2:32:
                    85:5f:03:d5:f0:c7:66:8c:de:d7:d8:d4:19:52:9a:
                    7c:62:f6:1a:fb:7d:2f:f6:95:2a:e6:75:d4:1c:3b:
                    1f:2a:52:60:1a:1f:46:08:b3:d0:97:2f:ae:02:82:
                    84:43:b0:0a:12:74:ff:67:45:1f:1b:94:05:2e:bc:
                    40:7c:3d:40:65:72:6c:b2:a3:6e:11:0e:5d:8b:89:
                    79:97:cc:a3:6f:cb:c3:30:57:a7:ea:61:31:14:c5:
                    1c:37:42:a8:0a:50:1f:f8:a6:16:24:47:b1:47:ad:
                    db:fb:fc:43:79:9b:e3:ce:67:96:fe:69:ec:a7:fe:
                    37:f7:29:90:5e:86:d4:bd:40:52:d3:6a:76:6f:74:
                    39:9e:34:d8:1d:34:94:57:25:31:83:d5:a6:83:42:
                    8c:cf:4f:1c:8c:6d:45:bc:6c:a2:6d:18:27:73:a6:
                    bc:55:5a:f1:5d:54:b3:b2:c2:c7:bd:d9:b2:49:b2:
                    3e:bb:78:a7:98:1f:33:ae:e5:45:ac:7c:83:bc:93:
                    5b:56:8c:32:b9:98:d2:e9:a1:4c:4f:f1:5e:0e:fc:
                    34:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:FC:92:29:0F:A8:8A:94:78:3A:74:52:5C:4B:0B:B9:22:E4:41:44
            X509v3 Authority Key Identifier:
                keyid:D6:8D:41:1A:D0:3E:73:14:F1:49:2D:06:2D:B0:D9:19:4E:9F:50:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:30:e9:c0:86:5e:0c:a5:cc:5e:a3:44:39:96:e0:87:42:71:
         15:1c:3f:34:41:59:43:12:e3:a7:7f:56:0c:62:bd:34:17:97:
         d3:6d:ba:25:9d:91:7c:f7:59:74:f4:35:b2:ca:e9:e8:3c:ff:
         c9:b7:7a:ba:1d:b9:b0:1d:66:cb:7d:a9:8d:c4:a9:11:26:66:
         93:e6:1b:6c:79:4e:fd:f8:e3:3e:43:30:e2:11:f5:c6:84:e7:
         7a:24:73:0c:bb:03:0e:c2:cc:98:f1:64:5f:2c:bd:86:b7:a6:
         a5:01:12:51:d8:e3:4c:97:4a:7a:0d:b2:f3:4a:b0:34:17:7e:
         a5:a3:a9:15:e3:22:2f:3c:ee:a6:98:23:dd:17:6c:9f:c8:cf:
         da:00:44:94:b0:dd:bb:fe:98:c3:b4:54:a2:3b:fc:6e:5c:df:
         64:3c:63:5f:3f:0c:40:6b:ca:09:cb:b2:58:e4:cc:38:f0:1b:
         ca:a8:02:b4:35:c5:06:f7:d9:c6:88:b1:a1:ab:35:65:e4:59:
         f6:51:ae:55:6a:19:b7:ef:87:3b:9e:a9:87:93:48:a2:3d:9e:
         51:a1:7f:82:c9:de:f1:94:97:e0:58:ec:06:52:08:a4:5b:04:
         d7:75:92:c4:3b:52:34:78:cd:f0:29:87:a4:29:3e:99:55:42:
         24:50:cf:8b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUE4OTcxMTAvBgNVBAUTKEQ2OEQ0MTFBRDAzRTczMTRGMTQ5MkQwNjJEQjBEOTE5
NEU5RjUwOTUwHhcNMjUwMTMwMjI1MzM4WhcNMjUwMjA2MjI1MzM4WjAYMRYwFAYD
VQQDEw02NzljMDJmMi1jNjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt9rimv001kY/nOoQoBTPPWIUvT7zEGqb+I+T6V/SCCeBQphS+W6HdlVKsjKF
XwPV8MdmjN7X2NQZUpp8YvYa+30v9pUq5nXUHDsfKlJgGh9GCLPQly+uAoKEQ7AK
EnT/Z0UfG5QFLrxAfD1AZXJssqNuEQ5di4l5l8yjb8vDMFen6mExFMUcN0KoClAf
+KYWJEexR63b+/xDeZvjzmeW/mnsp/439ymQXobUvUBS02p2b3Q5njTYHTSUVyUx
g9Wmg0KMz08cjG1FvGyibRgnc6a8VVrxXVSzssLHvdmySbI+u3inmB8zruVFrHyD
vJNbVowyuZjS6aFMT/FeDvw09wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJD8kikP
qIqUeDp0UlxLC7ki5EFEMB8GA1UdIwQYMBaAFNaNQRrQPnMU8UktBi2w2RlOn1CV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTg5Ny9FMUQxMTc3MDk1
QkExMUVCQjI4MTIzNzFDNEY5QUUwMi8xbzFCR3RBLWN4VHhTUzBHTGJEWkdVNmZV
SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFvMUJHdEEtY3hUeFNTMEdMYkRaR1U2ZlVKVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QTg5Ny9FMUQxMTc3MDk1QkExMUVCQjI4MTIzNzFDNEY5QUUwMi8xbzFCR3RBLWN4
VHhTUzBHTGJEWkdVNmZVSlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQATMOnAhl4Mpcxeo0Q5luCHQnEVHD80QVlDEuOnf1YMYr00F5fTbbol
nZF891l09DWyyunoPP/Jt3q6HbmwHWbLfamNxKkRJmaT5htseU79+OM+QzDiEfXG
hOd6JHMMuwMOwsyY8WRfLL2Gt6alARJR2ONMl0p6DbLzSrA0F36lo6kV4yIvPO6m
mCPdF2yfyM/aAESUsN27/pjDtFSiO/xuXN9kPGNfPwxAa8oJy7JY5Mw48BvKqAK0
NcUG99nGiLGhqzVl5Fn2Ua5Vahm374c7nqmHk0iiPZ5RoX+Cyd7xlJfgWOwGUgik
WwTXdZLEO1I0eM3wKYekKT6ZVUIkUM+L
-----END CERTIFICATE-----
Generated at Sat Apr 26 07:51:11 2025 by rpki-client