Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft
File:                     neeKCQtuCCyfsAyqXiyRMlbDyHY.mft (raw, json)
Hash identifier:          ALub/6zs6QXMnJ0hoE1IpSweF63fqJR9gahuUQTPiV8=
Subject key identifier:   B2:D9:A0:65:E0:17:59:D8:C2:66:FF:55:F2:4E:DB:05:67:58:D3:60
Authority key identifier: 9D:E7:8A:09:0B:6E:08:2C:9F:B0:0C:AA:5E:2C:91:32:56:C3:C8:76
Certificate issuer:       /CN=A91B3AD7/serialNumber=9DE78A090B6E082C9FB00CAA5E2C913256C3C876
Certificate serial:       0C00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft
Manifest number:          0BF2
Signing time:             Fri 31 Jan 2025 18:37:30 +0000
Manifest this update:     Fri 31 Jan 2025 18:37:30 +0000
Manifest next update:     Fri 07 Feb 2025 18:37:30 +0000
Files and hashes:         1: neeKCQtuCCyfsAyqXiyRMlbDyHY.crl (hash: t6YZWbvcPhlUYwN1GWM2tk+3br3rDVmQ+vOmliGeQ1k=)
                          2: 6B096E780B8511EA97C80D52C4F9AE02.roa (hash: CGLLokfgShSr9P6fBc5/PYvScLDu5ED9TA/KTb1fwgY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3072 (0xc00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3AD7/serialNumber=9DE78A090B6E082C9FB00CAA5E2C913256C3C876
        Validity
            Not Before: Jan 31 18:37:30 2025 GMT
            Not After : Feb  7 18:37:30 2025 GMT
        Subject: CN=679d186a-239a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:50:ac:1a:67:95:8b:a8:7d:a8:26:45:df:6b:
                    fc:aa:06:1a:29:70:1f:30:67:90:43:48:2f:10:b2:
                    9f:2e:a5:f9:0c:c1:a5:c7:11:e4:bc:3e:6f:05:d2:
                    95:4d:01:5f:b8:d7:cf:80:b7:3d:a6:d5:71:19:55:
                    25:10:49:46:c5:3b:5a:22:f3:89:51:30:8a:27:0b:
                    93:85:ee:51:8e:b1:9e:9a:52:5a:ab:fd:fb:f7:59:
                    07:cc:e8:b1:d7:ef:67:5f:f0:2a:ac:20:3c:d2:09:
                    7a:1b:be:d4:7e:50:4c:57:81:56:01:10:8a:a2:4b:
                    7a:16:f3:45:ab:b2:8a:b3:05:54:26:b5:a9:39:ac:
                    b1:f1:a7:3d:fa:ee:64:8b:22:f4:c8:b1:41:ac:16:
                    67:7a:73:fd:f0:fd:6a:c2:4b:2c:d3:3a:25:9d:7b:
                    5d:cb:5c:67:10:4a:9d:19:b1:ab:dd:65:29:1c:3d:
                    55:d6:f5:92:bf:9a:94:6c:2a:9c:a7:43:d5:45:0a:
                    7f:5e:ce:63:86:48:9f:73:6c:38:35:53:db:dd:b7:
                    35:df:f5:73:e8:cb:da:cc:ec:b7:00:c7:f0:48:9b:
                    f8:61:49:4d:ff:4b:65:a5:27:09:72:a5:74:7c:9e:
                    c8:7f:d5:f7:64:aa:f8:31:e7:c7:4f:df:17:c7:bf:
                    17:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D9:A0:65:E0:17:59:D8:C2:66:FF:55:F2:4E:DB:05:67:58:D3:60
            X509v3 Authority Key Identifier:
                keyid:9D:E7:8A:09:0B:6E:08:2C:9F:B0:0C:AA:5E:2C:91:32:56:C3:C8:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:59:b6:b7:56:79:67:9c:af:2d:0c:db:29:13:a0:90:af:a5:
         5c:c9:0e:b3:d3:93:cc:2b:ff:3f:b3:64:6c:ab:01:9c:d7:08:
         b0:14:8a:06:39:b7:08:6b:26:f5:ff:6b:87:6c:89:04:28:6b:
         d8:df:e4:70:d1:a5:bf:60:b9:60:84:da:d1:73:03:b3:ff:98:
         b3:f3:18:cf:f6:64:7a:27:0f:c7:d6:ff:ad:b5:87:ec:16:da:
         1d:2a:13:f1:45:2b:f0:49:1a:29:4b:e7:cf:5a:cd:90:01:70:
         57:41:e2:1e:17:77:07:7d:b6:6c:37:0f:a4:e3:8a:7e:e4:55:
         99:58:02:dd:d6:23:da:76:c1:91:29:8d:ba:09:df:84:f2:f6:
         61:19:2b:7c:ef:ad:c7:0b:27:be:59:68:26:cf:d9:91:10:70:
         98:4f:91:b4:86:c1:20:c4:54:47:54:92:4c:52:07:f9:69:e1:
         49:09:b3:ea:87:2b:23:5d:4d:1c:37:b7:84:15:10:95:fb:be:
         d7:c2:52:9c:7c:49:0d:29:a9:77:f8:c1:4b:77:60:f5:02:ac:
         f6:f3:a1:2d:02:e4:5c:86:e7:db:25:31:3c:e6:4b:6e:ce:52:
         8a:0d:d1:b5:46:31:a1:b6:de:c7:c3:15:18:cc:e4:e4:c4:38:
         10:8e:91:89
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDAAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjNBRDcxMTAvBgNVBAUTKDlERTc4QTA5MEI2RTA4MkM5RkIwMENBQTVFMkM5MTMy
NTZDM0M4NzYwHhcNMjUwMTMxMTgzNzMwWhcNMjUwMjA3MTgzNzMwWjAYMRYwFAYD
VQQDEw02NzlkMTg2YS0yMzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmFCsGmeVi6h9qCZF32v8qgYaKXAfMGeQQ0gvELKfLqX5DMGlxxHkvD5vBdKV
TQFfuNfPgLc9ptVxGVUlEElGxTtaIvOJUTCKJwuThe5RjrGemlJaq/3791kHzOix
1+9nX/AqrCA80gl6G77UflBMV4FWARCKokt6FvNFq7KKswVUJrWpOayx8ac9+u5k
iyL0yLFBrBZnenP98P1qwkss0zolnXtdy1xnEEqdGbGr3WUpHD1V1vWSv5qUbCqc
p0PVRQp/Xs5jhkifc2w4NVPb3bc13/Vz6MvazOy3AMfwSJv4YUlN/0tlpScJcqV0
fJ7If9X3ZKr4MefHT98Xx78XswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLLZoGXg
F1nYwmb/VfJO2wVnWNNgMB8GA1UdIwQYMBaAFJ3nigkLbggsn7AMql4skTJWw8h2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0FENy8wN0NGOEQ3QTBC
ODQxMUVBQTIxNjc4NEZDNEY5QUUwMi9uZWVLQ1F0dUNDeWZzQXlxWGl5Uk1sYkR5
SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25lZUtDUXR1Q0N5ZnNBeXFYaXlSTWxiRHlIWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
M0FENy8wN0NGOEQ3QTBCODQxMUVBQTIxNjc4NEZDNEY5QUUwMi9uZWVLQ1F0dUND
eWZzQXlxWGl5Uk1sYkR5SFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCbWba3VnlnnK8tDNspE6CQr6VcyQ6z05PMK/8/s2RsqwGc1wiwFIoG
ObcIayb1/2uHbIkEKGvY3+Rw0aW/YLlghNrRcwOz/5iz8xjP9mR6Jw/H1v+ttYfs
FtodKhPxRSvwSRopS+fPWs2QAXBXQeIeF3cHfbZsNw+k44p+5FWZWALd1iPadsGR
KY26Cd+E8vZhGSt8763HCye+WWgmz9mREHCYT5G0hsEgxFRHVJJMUgf5aeFJCbPq
hysjXU0cN7eEFRCV+77XwlKcfEkNKal3+MFLd2D1Aqz286EtAuRchufbJTE85ktu
zlKKDdG1RjGhtt7HwxUYzOTkxDgQjpGJ
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:08:55 2025 by rpki-client