Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft
File:                     Ae4IndSGeyyydlgqqXsxj1Cepu4.mft (raw, json)
Hash identifier:          aoOKNwhCmg7pSjIz1rsQMIKFlnc/KsePUdiwlfFe61o=
Subject key identifier:   78:CA:D3:60:F9:4C:07:0E:4A:DC:23:77:D0:9E:03:19:7F:D5:75:75
Authority key identifier: 01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE
Certificate issuer:       /CN=A91B3D30/serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE
Certificate serial:       0AF6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft
Manifest number:          0AD8
Signing time:             Thu 30 Jan 2025 19:28:12 +0000
Manifest this update:     Thu 30 Jan 2025 19:28:11 +0000
Manifest next update:     Thu 06 Feb 2025 19:28:11 +0000
Files and hashes:         1: Ae4IndSGeyyydlgqqXsxj1Cepu4.crl (hash: dQBfsVynLE+7g5HW3NfGNSIIH0cAPdIrTtvvfhR75Rs=)
                          2: 871196D48AC111EA81A2626EC4F9AE02.roa (hash: j8QejNy6d2T3iItswUdDsobqJc7b/UtqrnyshfiQ4jI=)
                          3: CD87789870C411EF9CC65F6BC4F9AE02.roa (hash: Z8+h4C3SXJhbXUua72HJRAWsoLtqFLLA8RRdoFt4VPk=)
                          4: 12AE33B4419811EAA268D964C4F9AE02.roa (hash: WByJv+/0UWcFSBkuQVt24N8Bh5eeznOvZMkj35xeU8o=)
                          5: CE67353C70C411EF9CC65F6BC4F9AE02.roa (hash: EYu/tMocRs70Hb99NoIzVinC6cgIHyg0wu81VqC7jcU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2806 (0xaf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3D30/serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE
        Validity
            Not Before: Jan 30 19:28:11 2025 GMT
            Not After : Feb  6 19:28:11 2025 GMT
        Subject: CN=679bd2cc-f842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a8:ce:b7:c5:ab:31:26:cc:00:67:e1:c5:4b:
                    ff:0d:67:6c:65:5e:e9:8a:80:9d:78:60:b9:31:eb:
                    77:27:9b:e5:61:f5:73:61:09:fc:14:2c:73:f8:1f:
                    9d:a0:3d:a0:5e:7f:04:47:da:38:e5:94:3c:6c:8a:
                    90:7a:b3:dc:b5:1f:8b:7a:0e:97:7b:ca:a6:a8:a4:
                    c5:c4:a3:5d:1d:5a:12:01:40:68:cc:62:65:7f:a8:
                    92:92:b4:17:f9:79:e4:af:72:b0:ec:c7:06:24:27:
                    d5:3c:23:e7:1c:59:eb:6f:e0:4a:b9:32:51:a4:de:
                    31:f8:f5:bd:34:5f:ea:72:6b:bf:fd:e2:00:0b:5c:
                    17:3b:29:47:58:86:a6:7d:3d:28:ad:1c:95:c5:06:
                    91:9a:3b:ac:cf:21:2d:6c:97:e9:2e:01:c4:dc:de:
                    8b:a1:ba:03:14:57:ba:0f:71:16:2e:3f:38:34:78:
                    a9:6e:ef:85:06:15:20:a9:f7:d1:2d:e4:90:fc:0a:
                    d4:44:ba:95:03:01:7f:7d:f1:df:60:e1:7a:f4:07:
                    22:50:ff:88:27:6b:a5:3c:01:d9:0a:b7:2f:d1:80:
                    3b:80:91:c5:04:76:69:d2:ad:81:6d:e8:c6:ac:1a:
                    a4:ce:57:43:20:af:c4:e9:fa:9a:e5:3b:fe:5b:6c:
                    e9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:CA:D3:60:F9:4C:07:0E:4A:DC:23:77:D0:9E:03:19:7F:D5:75:75
            X509v3 Authority Key Identifier:
                keyid:01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:b5:73:11:83:59:1d:22:21:70:e3:7b:9b:62:12:31:b9:64:
         81:d1:35:ed:7e:4b:44:35:ea:f3:96:c1:23:a3:15:f8:e6:1a:
         d7:31:0c:d1:57:6b:f2:e7:76:c0:e3:3d:89:02:f9:c6:c9:d9:
         cd:cf:59:b4:e8:df:a6:aa:b5:16:1f:4a:32:61:92:3f:87:2e:
         bc:cc:d3:5c:ca:1c:d9:db:e2:0d:dd:5b:32:b6:7a:a1:d7:d9:
         dd:fb:97:70:8f:b8:3d:22:8b:19:1c:28:b8:0c:a7:99:1c:33:
         50:fc:5c:37:97:73:f5:fb:ad:44:c7:3f:a3:a6:75:f3:07:4c:
         c3:5f:21:ba:8f:28:7c:af:48:56:7d:0a:94:b2:a7:0a:89:18:
         fd:a9:82:45:7f:c8:b2:4d:1f:9c:6e:58:d8:63:90:bf:87:1b:
         c6:7f:c6:31:fb:22:ec:0c:7c:12:d4:30:0a:5c:f2:74:9a:9d:
         a7:4c:67:0b:90:4d:e9:a5:cd:10:c8:cb:0d:cd:5c:18:0b:68:
         d1:13:c4:78:53:cf:54:0e:3f:c3:0f:27:ab:67:f6:11:70:48:
         9d:c3:c0:5d:cc:e5:9e:06:ab:9a:5c:cb:15:9e:e0:91:20:e1:
         41:e7:db:5d:2e:26:7a:c1:24:65:93:c3:38:c3:c0:2a:2d:ff:
         2c:bc:38:d8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCvYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjNEMzAxMTAvBgNVBAUTKDAxRUUwODlERDQ4NjdCMkNCMjc2NTgyQUE5N0IzMThG
NTA5RUE2RUUwHhcNMjUwMTMwMTkyODExWhcNMjUwMjA2MTkyODExWjAYMRYwFAYD
VQQDEw02NzliZDJjYy1mODQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3qjOt8WrMSbMAGfhxUv/DWdsZV7pioCdeGC5Met3J5vlYfVzYQn8FCxz+B+d
oD2gXn8ER9o45ZQ8bIqQerPctR+Leg6Xe8qmqKTFxKNdHVoSAUBozGJlf6iSkrQX
+Xnkr3Kw7McGJCfVPCPnHFnrb+BKuTJRpN4x+PW9NF/qcmu//eIAC1wXOylHWIam
fT0orRyVxQaRmjuszyEtbJfpLgHE3N6LoboDFFe6D3EWLj84NHipbu+FBhUgqffR
LeSQ/ArURLqVAwF/ffHfYOF69AciUP+IJ2ulPAHZCrcv0YA7gJHFBHZp0q2BbejG
rBqkzldDIK/E6fqa5Tv+W2zpMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHjK02D5
TAcOStwjd9CeAxl/1XV1MB8GA1UdIwQYMBaAFAHuCJ3UhnsssnZYKql7MY9Qnqbu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0QzMC9FM0RGNDY5QzQx
NjgxMUVBQUU4QTc3NTBDNEY5QUUwMi9BZTRJbmRTR2V5eXlkbGdxcVhzeGoxQ2Vw
dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FlNEluZFNHZXl5eWRsZ3FxWHN4ajFDZXB1NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
M0QzMC9FM0RGNDY5QzQxNjgxMUVBQUU4QTc3NTBDNEY5QUUwMi9BZTRJbmRTR2V5
eXlkbGdxcVhzeGoxQ2VwdTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCTtXMRg1kdIiFw43ubYhIxuWSB0TXtfktENerzlsEjoxX45hrXMQzR
V2vy53bA4z2JAvnGydnNz1m06N+mqrUWH0oyYZI/hy68zNNcyhzZ2+IN3Vsytnqh
19nd+5dwj7g9IosZHCi4DKeZHDNQ/Fw3l3P1+61Exz+jpnXzB0zDXyG6jyh8r0hW
fQqUsqcKiRj9qYJFf8iyTR+cbljYY5C/hxvGf8Yx+yLsDHwS1DAKXPJ0mp2nTGcL
kE3ppc0QyMsNzVwYC2jRE8R4U89UDj/DDyerZ/YRcEidw8BdzOWeBquaXMsVnuCR
IOFB59tdLiZ6wSRlk8M4w8AqLf8svDjY
-----END CERTIFICATE-----