Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.mft
File:                     Y0lzWQThvA1lvVlKB3YrtSmcA4o.mft (raw, json)
Hash identifier:          DqQOCPo+KlkRw7xe7ylZCKSJoSpQlaKX96WGoxZTV6E=
Subject key identifier:   D4:3B:8D:0F:E4:F8:DD:7F:A7:2D:D3:FE:90:AA:61:41:AC:16:55:F5
Authority key identifier: 63:49:73:59:04:E1:BC:0D:65:BD:59:4A:07:76:2B:B5:29:9C:03:8A
Certificate issuer:       /CN=A91AFB4C/serialNumber=6349735904E1BC0D65BD594A07762BB5299C038A
Certificate serial:       0175
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0lzWQThvA1lvVlKB3YrtSmcA4o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.mft
Manifest number:          0171
Signing time:             Fri 31 Jan 2025 03:07:15 +0000
Manifest this update:     Fri 31 Jan 2025 03:07:15 +0000
Manifest next update:     Fri 07 Feb 2025 03:07:15 +0000
Files and hashes:         1: Y0lzWQThvA1lvVlKB3YrtSmcA4o.crl (hash: I7Vu8D63ytdH/XkrLofMscFemP2XZqM4sXM+ppxINkM=)
                          2: AD286018B29C11EDB216812EC4F9AE02.roa (hash: VONiHwejXacpBeR7rVkbydMQIhwSgiZRwegZVDVvf5E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 373 (0x175)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AFB4C/serialNumber=6349735904E1BC0D65BD594A07762BB5299C038A
        Validity
            Not Before: Jan 31 03:07:15 2025 GMT
            Not After : Feb  7 03:07:15 2025 GMT
        Subject: CN=679c3e63-fdb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:42:a0:c7:67:cd:4e:2d:c2:25:ad:70:89:16:
                    79:2c:cb:df:c6:62:2e:4d:67:b9:ef:a0:a5:20:d2:
                    e3:e1:0b:f1:4c:0c:38:81:78:b8:2a:ea:45:a4:16:
                    ec:39:30:e1:8e:e0:a4:7f:6c:b6:14:17:c8:56:a4:
                    48:e4:a6:18:86:2b:9b:54:a3:b7:af:1d:d1:dd:b8:
                    d4:a6:8d:b2:e1:95:c3:c3:19:de:9f:4b:82:94:47:
                    d5:45:c1:45:4f:bc:21:4d:28:91:35:00:42:83:e9:
                    66:83:85:35:83:d4:89:68:2f:c8:e3:01:56:8c:33:
                    25:5f:4a:86:a0:2d:39:5e:9d:a9:7b:df:5a:64:e8:
                    b0:26:d6:f6:32:fb:c1:30:6e:8a:d0:6b:23:66:e9:
                    9e:83:b6:b9:29:3d:d2:49:41:e5:7b:c6:da:4a:3b:
                    de:69:81:a1:9b:7b:3c:99:cb:6e:3a:5b:70:79:40:
                    7b:5f:64:05:11:6f:6e:12:4b:33:1b:1b:f3:ab:5b:
                    5b:7e:29:bb:da:21:f2:85:f4:d2:d3:33:30:c7:8f:
                    52:66:4a:4d:9f:56:4e:09:b8:dc:aa:b8:8f:b3:5c:
                    ce:ff:a6:28:f5:d7:85:ab:07:45:0f:b5:d2:86:de:
                    32:7f:bc:a4:d9:2f:f4:fd:49:f9:1f:5e:cf:ae:87:
                    55:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:3B:8D:0F:E4:F8:DD:7F:A7:2D:D3:FE:90:AA:61:41:AC:16:55:F5
            X509v3 Authority Key Identifier:
                keyid:63:49:73:59:04:E1:BC:0D:65:BD:59:4A:07:76:2B:B5:29:9C:03:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0lzWQThvA1lvVlKB3YrtSmcA4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:fc:20:43:f5:e2:03:ff:cf:22:eb:22:cf:ed:f4:4a:0f:9d:
         38:d2:e7:34:84:b3:9e:87:1a:ce:81:be:ab:bf:f7:0b:00:d7:
         48:0c:29:d3:65:95:ef:30:ba:89:a4:9a:ad:3c:5a:96:ba:34:
         cc:65:b5:67:4e:c8:bf:70:79:6e:ea:b4:b5:cb:69:ca:4a:60:
         4a:5b:5d:72:e0:c2:4e:3a:19:87:28:8c:c3:8b:d3:66:3a:54:
         74:56:d4:d0:16:b3:ac:ed:3c:5f:55:1c:f1:f6:30:2e:92:2b:
         64:96:c2:0b:bf:1d:79:b3:c9:7d:4b:17:bc:43:d5:26:79:cc:
         84:e1:1b:fd:5e:fe:29:74:f8:3e:26:dc:47:03:9d:31:c9:42:
         5d:d9:fb:f9:57:24:0d:be:b2:0b:03:a2:60:f8:30:5a:7c:5a:
         a7:c9:0a:42:e7:3d:72:d1:43:86:43:24:28:d8:1d:02:46:e6:
         f6:75:c8:21:cd:c8:80:7f:99:37:75:d0:a7:18:e1:2a:ad:02:
         46:70:db:77:c1:ee:70:0c:5e:00:32:89:4d:13:9b:0e:a4:94:
         7d:74:ed:78:2c:27:d8:8a:1b:3c:9a:e5:96:d5:99:0b:c0:5b:
         a1:39:3d:27:b5:1c:5b:a7:4b:cd:9c:53:b6:9f:b1:f8:90:72:
         bf:25:bb:3f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUZCNEMxMTAvBgNVBAUTKDYzNDk3MzU5MDRFMUJDMEQ2NUJENTk0QTA3NzYyQkI1
Mjk5QzAzOEEwHhcNMjUwMTMxMDMwNzE1WhcNMjUwMjA3MDMwNzE1WjAYMRYwFAYD
VQQDEw02NzljM2U2My1mZGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyUKgx2fNTi3CJa1wiRZ5LMvfxmIuTWe576ClINLj4QvxTAw4gXi4KupFpBbs
OTDhjuCkf2y2FBfIVqRI5KYYhiubVKO3rx3R3bjUpo2y4ZXDwxnen0uClEfVRcFF
T7whTSiRNQBCg+lmg4U1g9SJaC/I4wFWjDMlX0qGoC05Xp2pe99aZOiwJtb2MvvB
MG6K0GsjZumeg7a5KT3SSUHle8baSjveaYGhm3s8mctuOltweUB7X2QFEW9uEksz
Gxvzq1tbfim72iHyhfTS0zMwx49SZkpNn1ZOCbjcqriPs1zO/6Yo9deFqwdFD7XS
ht4yf7yk2S/0/Un5H17ProdVQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNQ7jQ/k
+N1/py3T/pCqYUGsFlX1MB8GA1UdIwQYMBaAFGNJc1kE4bwNZb1ZSgd2K7UpnAOK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkI0Qy9DNDcwQjIyQUIy
OTcxMUVEOTRFRjA5MjZDNEY5QUUwMi9ZMGx6V1FUaHZBMWx2VmxLQjNZcnRTbWNB
NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1kwbHpXUVRodkExbHZWbEtCM1lydFNtY0E0by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RkI0Qy9DNDcwQjIyQUIyOTcxMUVEOTRFRjA5MjZDNEY5QUUwMi9ZMGx6V1FUaHZB
MWx2VmxLQjNZcnRTbWNBNG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDY/CBD9eID/88i6yLP7fRKD5040uc0hLOehxrOgb6rv/cLANdIDCnT
ZZXvMLqJpJqtPFqWujTMZbVnTsi/cHlu6rS1y2nKSmBKW11y4MJOOhmHKIzDi9Nm
OlR0VtTQFrOs7TxfVRzx9jAukitklsILvx15s8l9Sxe8Q9UmecyE4Rv9Xv4pdPg+
JtxHA50xyUJd2fv5VyQNvrILA6Jg+DBafFqnyQpC5z1y0UOGQyQo2B0CRub2dcgh
zciAf5k3ddCnGOEqrQJGcNt3we5wDF4AMolNE5sOpJR9dO14LCfYihs8muWW1ZkL
wFuhOT0ntRxbp0vNnFO2n7H4kHK/Jbs/
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:47:19 2025 by rpki-client