Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B15DC/5823AF86CEED11EFBD655511C4F9AE02/HUXnKUVKJCRGewPPyZfX6xhK52Y.mft
File:                     HUXnKUVKJCRGewPPyZfX6xhK52Y.mft (raw, json)
Hash identifier:          mRtMs9FdPaox9einuDGEiEsFEzrRfbP6jwW0E8xV4XU=
Subject key identifier:   BC:CE:CF:93:F4:F7:70:A7:78:64:2B:00:72:C8:FB:18:02:42:59:5A
Authority key identifier: 1D:45:E7:29:45:4A:24:24:46:7B:03:CF:C9:97:D7:EB:18:4A:E7:66
Certificate issuer:       /CN=A91B15DC/serialNumber=1D45E729454A2424467B03CFC997D7EB184AE766
Certificate serial:       0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUXnKUVKJCRGewPPyZfX6xhK52Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B15DC/5823AF86CEED11EFBD655511C4F9AE02/HUXnKUVKJCRGewPPyZfX6xhK52Y.mft
Manifest number:          0D
Signing time:             Fri 31 Jan 2025 07:09:30 +0000
Manifest this update:     Fri 31 Jan 2025 07:09:30 +0000
Manifest next update:     Fri 07 Feb 2025 07:09:30 +0000
Files and hashes:         1: HUXnKUVKJCRGewPPyZfX6xhK52Y.crl (hash: 8gl3D4Mzeik2NB4UiAcSkhLMNlj4dc5QYpCbLMRocCs=)
                          2: 14F7BC00CEEF11EFAF6F762FC4F9AE02.roa (hash: ky3VVMd3//RxqftA8fTaKeSx7YmcJGB1DWo9MLV8eHo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B15DC/serialNumber=1D45E729454A2424467B03CFC997D7EB184AE766
        Validity
            Not Before: Jan 31 07:09:30 2025 GMT
            Not After : Feb  7 07:09:30 2025 GMT
        Subject: CN=679c772a-2188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:10:d4:54:77:9e:9a:2a:d3:a7:75:90:07:d8:
                    31:1d:81:76:37:26:b2:33:0b:46:72:61:29:93:1d:
                    7c:f9:b7:7b:4e:31:ad:10:99:47:6e:67:73:2e:8a:
                    9c:83:83:36:a1:c8:d2:8e:04:90:f8:70:c2:44:7f:
                    73:26:cc:6b:aa:c1:71:1b:e7:4c:de:01:21:4f:d4:
                    e9:a9:a9:48:e0:49:80:9b:60:6a:03:b4:f0:fc:42:
                    52:27:8e:7e:98:9e:04:c6:3c:f7:41:06:2c:44:10:
                    42:5e:e4:19:3e:e5:92:33:ba:23:f6:ab:65:20:70:
                    8d:fb:81:9c:1b:84:bc:5b:b5:a9:51:29:54:7d:7a:
                    c1:21:4f:53:ef:41:51:03:7d:77:28:17:7d:3e:24:
                    13:d8:18:20:4c:71:94:4c:9f:82:d4:20:20:e8:f7:
                    9f:c6:10:03:3e:36:e1:74:8e:07:d6:c0:db:84:46:
                    25:f0:0d:93:38:45:86:33:41:09:ca:d0:d0:8e:f8:
                    bc:43:b0:84:12:60:c5:e4:71:3c:95:78:e7:d6:bc:
                    92:f3:bb:ee:c3:6b:8c:ec:99:3c:64:26:4b:2a:63:
                    62:0e:88:20:97:de:e2:d3:11:41:9e:f5:db:21:42:
                    1b:fa:43:68:7f:c2:d3:58:cf:73:df:15:7e:05:f6:
                    d8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:CE:CF:93:F4:F7:70:A7:78:64:2B:00:72:C8:FB:18:02:42:59:5A
            X509v3 Authority Key Identifier:
                keyid:1D:45:E7:29:45:4A:24:24:46:7B:03:CF:C9:97:D7:EB:18:4A:E7:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B15DC/5823AF86CEED11EFBD655511C4F9AE02/HUXnKUVKJCRGewPPyZfX6xhK52Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUXnKUVKJCRGewPPyZfX6xhK52Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B15DC/5823AF86CEED11EFBD655511C4F9AE02/HUXnKUVKJCRGewPPyZfX6xhK52Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:2d:4d:12:2d:b5:e6:12:a6:0d:c5:1b:4f:23:8b:6b:82:38:
         26:8e:77:fa:2d:44:8e:ed:18:a4:5d:12:a6:87:94:ba:21:4e:
         2c:5a:d5:32:87:b1:6f:d5:c7:07:15:3a:1d:67:ed:2b:6c:3b:
         38:31:d2:a7:39:df:41:cd:07:87:8b:6f:2e:0a:b5:6d:d4:65:
         e8:1b:f8:50:18:a2:78:b3:13:9f:83:06:d5:ef:e6:13:22:51:
         eb:f5:fa:94:79:bb:f2:3c:7d:b4:64:10:4a:64:9f:92:a2:96:
         8b:59:d4:85:90:c3:e4:dc:f0:9f:36:4c:2f:a9:e1:9b:8d:e6:
         a8:d4:f4:86:24:ca:cf:9a:75:2d:98:cf:35:05:cb:f8:19:b7:
         2e:09:0a:c5:5d:55:5e:96:20:4c:b2:ab:9f:4e:b9:35:a2:19:
         ae:72:4e:c4:82:fe:b9:31:9d:f8:ec:d7:e4:62:1a:78:56:f2:
         99:77:22:f6:39:ac:30:9f:9a:8f:fa:22:cb:f0:79:f5:80:d0:
         45:75:4d:0f:ff:5a:ca:ec:2c:8c:d8:81:68:4f:69:3c:bd:c9:
         ce:1a:99:b7:2e:1a:a0:63:94:93:96:cd:67:04:ce:23:02:31:
         87:dc:5b:91:6a:e8:f8:24:e2:49:a0:0f:58:b5:e4:7c:07:78:
         6d:b9:f1:0a
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
MTVEQzExMC8GA1UEBRMoMUQ0NUU3Mjk0NTRBMjQyNDQ2N0IwM0NGQzk5N0Q3RUIx
ODRBRTc2NjAeFw0yNTAxMzEwNzA5MzBaFw0yNTAyMDcwNzA5MzBaMBgxFjAUBgNV
BAMTDTY3OWM3NzJhLTIxODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDmENRUd56aKtOndZAH2DEdgXY3JrIzC0ZyYSmTHXz5t3tOMa0QmUduZ3MuipyD
gzahyNKOBJD4cMJEf3MmzGuqwXEb50zeASFP1OmpqUjgSYCbYGoDtPD8QlInjn6Y
ngTGPPdBBixEEEJe5Bk+5ZIzuiP2q2UgcI37gZwbhLxbtalRKVR9esEhT1PvQVED
fXcoF30+JBPYGCBMcZRMn4LUICDo95/GEAM+NuF0jgfWwNuERiXwDZM4RYYzQQnK
0NCO+LxDsIQSYMXkcTyVeOfWvJLzu+7Da4zsmTxkJksqY2IOiCCX3uLTEUGe9dsh
Qhv6Q2h/wtNYz3PfFX4F9tjTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvM7Pk/T3
cKd4ZCsAcsj7GAJCWVowHwYDVR0jBBgwFoAUHUXnKUVKJCRGewPPyZfX6xhK52Yw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxNURDLzU4MjNBRjg2Q0VF
RDExRUZCRDY1NTUxMUM0RjlBRTAyL0hVWG5LVVZLSkNSR2V3UFB5WmZYNnhoSzUy
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvSFVYbktVVktKQ1JHZXdQUHlaZlg2eGhLNTJZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIx
NURDLzU4MjNBRjg2Q0VFRDExRUZCRDY1NTUxMUM0RjlBRTAyL0hVWG5LVVZLSkNS
R2V3UFB5WmZYNnhoSzUyWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAAYtTRItteYSpg3FG08ji2uCOCaOd/otRI7tGKRdEqaHlLohTixa1TKH
sW/VxwcVOh1n7StsOzgx0qc530HNB4eLby4KtW3UZegb+FAYonizE5+DBtXv5hMi
Uev1+pR5u/I8fbRkEEpkn5KilotZ1IWQw+Tc8J82TC+p4ZuN5qjU9IYkys+adS2Y
zzUFy/gZty4JCsVdVV6WIEyyq59OuTWiGa5yTsSC/rkxnfjs1+RiGnhW8pl3IvY5
rDCfmo/6IsvwefWA0EV1TQ//WsrsLIzYgWhPaTy9yc4ambcuGqBjlJOWzWcEziMC
MYfcW5Fq6Pgk4kmgD1i15HwHeG258Qo=
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:58:26 2025 by rpki-client