Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEBC2/24712C9ED7E911EB8943247EC4F9AE02/V6UulqV__YXyDDjsMV2kB_6mhqg.mft
File:                     V6UulqV__YXyDDjsMV2kB_6mhqg.mft (raw, json)
Hash identifier:          Bh9sq1u0pKw5d7zRMnvx5jGe/F9eI58sNChb9h1c01c=
Subject key identifier:   36:46:AA:7D:59:21:DD:4C:D2:EA:F7:51:ED:0F:93:59:DC:FE:3F:09
Authority key identifier: 57:A5:2E:96:A5:7F:FD:85:F2:0C:38:EC:31:5D:A4:07:FE:A6:86:A8
Certificate issuer:       /CN=A91AEBC2/serialNumber=57A52E96A57FFD85F20C38EC315DA407FEA686A8
Certificate serial:       0546
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V6UulqV__YXyDDjsMV2kB_6mhqg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AEBC2/24712C9ED7E911EB8943247EC4F9AE02/V6UulqV__YXyDDjsMV2kB_6mhqg.mft
Manifest number:          0546
Signing time:             Thu 30 Jan 2025 23:27:01 +0000
Manifest this update:     Thu 30 Jan 2025 23:27:00 +0000
Manifest next update:     Thu 06 Feb 2025 23:27:00 +0000
Files and hashes:         1: V6UulqV__YXyDDjsMV2kB_6mhqg.crl (hash: hNzo23LK3Vxpq6r83vWa/LbX3ORxrSf/+RUFZVnIT1E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1350 (0x546)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AEBC2/serialNumber=57A52E96A57FFD85F20C38EC315DA407FEA686A8
        Validity
            Not Before: Jan 30 23:27:00 2025 GMT
            Not After : Feb  6 23:27:00 2025 GMT
        Subject: CN=679c0ac4-288c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3e:92:71:69:37:1d:a0:aa:a3:38:83:1e:d7:
                    93:cb:89:86:06:83:ab:36:2a:30:87:4a:0f:27:03:
                    f8:97:f0:ab:09:3b:2e:fc:ee:db:71:79:81:db:5e:
                    fc:15:28:bb:97:da:2c:c8:a9:6b:9d:1d:cf:5b:ed:
                    72:3c:80:85:e4:ea:11:12:65:33:12:fd:c9:2f:be:
                    ca:1b:97:75:b0:c6:1a:1a:e7:48:4c:3a:a3:56:c3:
                    da:2d:8a:29:69:4d:36:4f:61:50:9c:ac:03:d4:1b:
                    11:1c:ea:91:e7:eb:97:cf:e1:29:79:56:06:6c:b2:
                    f3:e0:95:25:37:99:51:60:a5:4b:cc:c8:a9:1c:15:
                    ad:4b:08:ec:30:45:c5:d2:d0:d7:c5:b8:40:d4:41:
                    2d:1e:6b:da:d1:dd:1e:89:ab:48:bc:11:4a:e1:36:
                    40:78:9b:ec:3a:b4:48:e0:a3:4f:7c:7a:ae:84:25:
                    b5:bf:70:27:9b:89:76:54:96:96:4e:e7:61:87:4c:
                    17:f7:83:04:7c:d0:91:a6:10:db:4e:01:27:02:b9:
                    8f:aa:13:8f:7f:04:af:da:56:64:31:2c:d1:e0:67:
                    54:4c:ab:66:a0:c8:2d:19:4c:8b:bd:34:c5:78:b8:
                    23:1c:ad:92:02:e8:d7:94:93:17:9f:a9:35:75:15:
                    3d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:46:AA:7D:59:21:DD:4C:D2:EA:F7:51:ED:0F:93:59:DC:FE:3F:09
            X509v3 Authority Key Identifier:
                keyid:57:A5:2E:96:A5:7F:FD:85:F2:0C:38:EC:31:5D:A4:07:FE:A6:86:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AEBC2/24712C9ED7E911EB8943247EC4F9AE02/V6UulqV__YXyDDjsMV2kB_6mhqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V6UulqV__YXyDDjsMV2kB_6mhqg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEBC2/24712C9ED7E911EB8943247EC4F9AE02/V6UulqV__YXyDDjsMV2kB_6mhqg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:95:bf:3c:ad:b2:f0:f0:a2:c1:a6:0b:75:8a:28:fa:16:70:
         16:9e:0a:13:ae:63:39:f2:f8:40:5f:5c:e3:f5:d3:12:14:32:
         a2:6e:9f:83:45:46:fd:a0:82:57:f0:70:d2:78:1d:26:66:74:
         60:6b:09:29:ab:ec:9c:1c:ce:ea:53:a4:d6:80:40:47:79:93:
         67:19:91:90:40:3a:6b:72:dc:d7:fe:63:39:a2:19:e7:df:53:
         c2:38:47:53:51:c8:b4:56:15:12:ff:0d:68:76:19:e2:7a:fc:
         73:45:55:0e:58:bb:eb:f6:b4:07:93:2f:69:49:47:4f:0b:ee:
         c8:4a:3e:ca:32:13:cd:57:9b:1a:aa:43:0d:e3:20:d7:e5:24:
         11:eb:31:0f:71:1e:fb:a4:d3:01:f6:d7:c8:d6:7b:c6:34:b9:
         c3:81:a4:d3:3d:ea:46:f2:06:8b:9f:7c:c5:57:0e:e1:2a:59:
         88:d4:aa:a3:44:dd:72:54:34:77:50:37:51:04:3c:81:c4:19:
         db:f1:a5:2b:55:c1:4d:3d:1a:9d:0a:07:47:eb:43:6f:e9:3c:
         0f:db:00:07:2d:7c:af:c7:c0:e0:7a:ef:3a:5c:e4:f7:3c:aa:
         8b:cb:26:d7:0a:c9:96:67:bc:63:23:1b:04:e5:7e:a2:65:a4:
         3a:10:33:4b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUVCQzIxMTAvBgNVBAUTKDU3QTUyRTk2QTU3RkZEODVGMjBDMzhFQzMxNURBNDA3
RkVBNjg2QTgwHhcNMjUwMTMwMjMyNzAwWhcNMjUwMjA2MjMyNzAwWjAYMRYwFAYD
VQQDEw02NzljMGFjNC0yODhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0D6ScWk3HaCqoziDHteTy4mGBoOrNiowh0oPJwP4l/CrCTsu/O7bcXmB2178
FSi7l9osyKlrnR3PW+1yPICF5OoREmUzEv3JL77KG5d1sMYaGudITDqjVsPaLYop
aU02T2FQnKwD1BsRHOqR5+uXz+EpeVYGbLLz4JUlN5lRYKVLzMipHBWtSwjsMEXF
0tDXxbhA1EEtHmva0d0eiatIvBFK4TZAeJvsOrRI4KNPfHquhCW1v3Anm4l2VJaW
Tudhh0wX94MEfNCRphDbTgEnArmPqhOPfwSv2lZkMSzR4GdUTKtmoMgtGUyLvTTF
eLgjHK2SAujXlJMXn6k1dRU9IwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDZGqn1Z
Id1M0ur3Ue0Pk1nc/j8JMB8GA1UdIwQYMBaAFFelLpalf/2F8gw47DFdpAf+poao
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUJDMi8yNDcxMkM5RUQ3
RTkxMUVCODk0MzI0N0VDNEY5QUUwMi9WNlV1bHFWX19ZWHlERGpzTVYya0JfNm1o
cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Y2VXVscVZfX1lYeUREanNNVjJrQl82bWhxZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RUJDMi8yNDcxMkM5RUQ3RTkxMUVCODk0MzI0N0VDNEY5QUUwMi9WNlV1bHFWX19Z
WHlERGpzTVYya0JfNm1ocWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDMlb88rbLw8KLBpgt1iij6FnAWngoTrmM58vhAX1zj9dMSFDKibp+D
RUb9oIJX8HDSeB0mZnRgawkpq+ycHM7qU6TWgEBHeZNnGZGQQDprctzX/mM5ohnn
31PCOEdTUci0VhUS/w1odhnievxzRVUOWLvr9rQHky9pSUdPC+7ISj7KMhPNV5sa
qkMN4yDX5SQR6zEPcR77pNMB9tfI1nvGNLnDgaTTPepG8gaLn3zFVw7hKlmI1Kqj
RN1yVDR3UDdRBDyBxBnb8aUrVcFNPRqdCgdH60Nv6TwP2wAHLXyvx8Dgeu86XOT3
PKqLyybXCsmWZ7xjIxsE5X6iZaQ6EDNL
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:10:53 2025 by rpki-client