Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.mft
File:                     a81u0JpBbl_k7lre97FQ8syr6To.mft (raw, json)
Hash identifier:          J87oFfRKu3yj7OB0cm1VxKuMHo/6oPOnv5cILFwyVfE=
Subject key identifier:   71:AF:2A:4C:68:34:26:E7:60:56:AA:75:E7:58:41:C4:A0:72:89:84
Authority key identifier: 6B:CD:6E:D0:9A:41:6E:5F:E4:EE:5A:DE:F7:B1:50:F2:CC:AB:E9:3A
Certificate issuer:       /CN=A91ADF12/serialNumber=6BCD6ED09A416E5FE4EE5ADEF7B150F2CCABE93A
Certificate serial:       0B62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a81u0JpBbl_k7lre97FQ8syr6To.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.mft
Manifest number:          0B54
Signing time:             Thu 30 Jan 2025 19:11:21 +0000
Manifest this update:     Thu 30 Jan 2025 19:11:21 +0000
Manifest next update:     Thu 06 Feb 2025 19:11:21 +0000
Files and hashes:         1: a81u0JpBbl_k7lre97FQ8syr6To.crl (hash: FKD/kysZ1FZ3lqZIbAfGr1uR8GMu8NWmvuiMgPAAoUg=)
                          2: 84B6E12A312911EEBE440C7FC4F9AE02.roa (hash: i5Nf027GIvkDTNfygplCNBH1Tfi56MOYYL7UyT8iFDw=)
                          3: 777A546212E511EFB071A31CC4F9AE02.roa (hash: yxZWVQX9GhcgWV+yYaDkt3bP+W4v1/S4wiH9fdwmAXw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2914 (0xb62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADF12/serialNumber=6BCD6ED09A416E5FE4EE5ADEF7B150F2CCABE93A
        Validity
            Not Before: Jan 30 19:11:21 2025 GMT
            Not After : Feb  6 19:11:21 2025 GMT
        Subject: CN=679bced9-ccfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:9f:d0:d7:da:17:35:d6:f8:f2:3f:e9:ea:a7:
                    a3:77:43:a5:f0:26:1d:a1:8c:22:b8:f2:e0:d9:7a:
                    8f:c9:44:9c:7a:df:90:e0:94:28:26:73:38:13:2e:
                    7d:64:b1:d4:3f:28:92:38:33:ce:f0:fe:b0:b1:ee:
                    c8:b0:84:db:64:14:94:9c:58:25:e4:da:00:4e:98:
                    06:5e:02:a1:3b:4a:ee:81:0c:58:bd:05:fb:9f:2f:
                    2c:b5:5b:d2:ae:f4:fd:b5:98:03:80:8a:0b:d0:b1:
                    a8:16:d6:c3:d3:bd:33:c8:6d:54:a8:1a:bf:06:21:
                    d0:82:7c:44:d9:18:de:e6:85:d9:37:76:bd:2a:36:
                    a8:7b:38:99:c8:fa:22:d1:6d:99:8c:5a:5a:ff:39:
                    f9:b9:89:ef:71:97:d4:bd:b3:fe:03:e1:bd:79:89:
                    e5:7a:6b:0b:7d:fe:1c:29:cc:e0:d6:04:56:a6:96:
                    65:f8:0b:54:ed:42:a6:ad:cc:d7:78:a1:d3:4a:74:
                    fd:de:8b:1e:a2:5f:e8:82:94:b8:6d:57:71:1e:01:
                    9a:9f:bc:09:01:c5:ab:58:f0:ca:d0:e5:7d:ff:8b:
                    19:6c:df:5c:00:31:cb:ca:08:2a:f5:5a:c0:79:fb:
                    0e:10:a1:5d:54:a5:3b:ff:33:78:3f:41:91:af:34:
                    e8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:AF:2A:4C:68:34:26:E7:60:56:AA:75:E7:58:41:C4:A0:72:89:84
            X509v3 Authority Key Identifier:
                keyid:6B:CD:6E:D0:9A:41:6E:5F:E4:EE:5A:DE:F7:B1:50:F2:CC:AB:E9:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a81u0JpBbl_k7lre97FQ8syr6To.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:1e:ed:5a:e5:c8:dd:d1:de:1e:39:52:da:cd:02:c8:3b:6e:
         18:b4:6e:4f:e3:06:0d:2a:05:0a:42:2e:70:4b:3c:45:e6:80:
         9a:69:40:92:cb:c2:21:1e:49:ac:49:38:6c:5c:8d:e4:1a:ce:
         de:29:a8:79:35:85:c9:76:31:a1:49:ad:16:70:37:97:34:16:
         28:d6:fc:f2:b9:e9:5a:0c:66:e1:37:eb:68:5c:99:70:48:bc:
         ca:56:8d:ac:7e:05:e3:32:85:ad:98:5e:54:fc:21:d9:c0:d2:
         90:23:d1:74:f8:87:ce:7e:3b:44:df:4e:cb:7d:a3:f5:92:c5:
         0a:d4:0f:1b:8a:e0:83:b7:30:71:be:29:49:4b:73:20:17:5f:
         43:a8:a1:b7:f6:8e:6c:9f:8c:11:33:6d:b1:2c:8f:b2:77:0b:
         36:99:f4:4e:6d:5d:a4:a7:c6:04:99:ce:14:0a:81:b3:51:c0:
         5f:2d:5b:05:89:47:63:2a:5f:75:7a:51:e2:10:3e:b1:d7:09:
         0e:6f:ea:d4:95:f5:cd:43:1e:32:5f:59:8d:f2:79:5e:55:28:
         5d:0e:26:83:e5:d9:43:1c:e9:f7:4a:35:68:7d:3d:39:0b:7d:
         4e:30:35:fa:29:8c:c9:cc:2a:f7:10:93:ef:d8:82:65:89:89:
         72:68:67:7b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC2IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QURGMTIxMTAvBgNVBAUTKDZCQ0Q2RUQwOUE0MTZFNUZFNEVFNUFERUY3QjE1MEYy
Q0NBQkU5M0EwHhcNMjUwMTMwMTkxMTIxWhcNMjUwMjA2MTkxMTIxWjAYMRYwFAYD
VQQDEw02NzliY2VkOS1jY2ZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5p/Q19oXNdb48j/p6qejd0Ol8CYdoYwiuPLg2XqPyUScet+Q4JQoJnM4Ey59
ZLHUPyiSODPO8P6wse7IsITbZBSUnFgl5NoATpgGXgKhO0rugQxYvQX7ny8stVvS
rvT9tZgDgIoL0LGoFtbD070zyG1UqBq/BiHQgnxE2Rje5oXZN3a9KjaoeziZyPoi
0W2ZjFpa/zn5uYnvcZfUvbP+A+G9eYnlemsLff4cKczg1gRWppZl+AtU7UKmrczX
eKHTSnT93oseol/ogpS4bVdxHgGan7wJAcWrWPDK0OV9/4sZbN9cADHLyggq9VrA
efsOEKFdVKU7/zN4P0GRrzTolwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHGvKkxo
NCbnYFaqdedYQcSgcomEMB8GA1UdIwQYMBaAFGvNbtCaQW5f5O5a3vexUPLMq+k6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREYxMi9DRkE1MjU5QTI4
QzAxMUVBQUFFMjRFNDhDNEY5QUUwMi9hODF1MEpwQmJsX2s3bHJlOTdGUThzeXI2
VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2E4MXUwSnBCYmxfazdscmU5N0ZROHN5cjZUby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
REYxMi9DRkE1MjU5QTI4QzAxMUVBQUFFMjRFNDhDNEY5QUUwMi9hODF1MEpwQmJs
X2s3bHJlOTdGUThzeXI2VG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCLHu1a5cjd0d4eOVLazQLIO24YtG5P4wYNKgUKQi5wSzxF5oCaaUCS
y8IhHkmsSThsXI3kGs7eKah5NYXJdjGhSa0WcDeXNBYo1vzyuelaDGbhN+toXJlw
SLzKVo2sfgXjMoWtmF5U/CHZwNKQI9F0+IfOfjtE307LfaP1ksUK1A8biuCDtzBx
vilJS3MgF19DqKG39o5sn4wRM22xLI+ydws2mfRObV2kp8YEmc4UCoGzUcBfLVsF
iUdjKl91elHiED6x1wkOb+rUlfXNQx4yX1mN8nleVShdDiaD5dlDHOn3SjVofT05
C31OMDX6KYzJzCr3EJPv2IJliYlyaGd7
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:38:37 2025 by rpki-client