Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft
File:                     uOVJaYlT9l5x-4S20zjAisF4Glo.mft (raw, json)
Hash identifier:          YX05glA+f9uUm2FSeNkBOZ+7seAG6aAL1K+zIhVWUxk=
Subject key identifier:   EA:A0:C7:24:A3:15:96:6C:84:BD:F2:AC:20:0D:3C:E5:C9:41:60:05
Authority key identifier: B8:E5:49:69:89:53:F6:5E:71:FB:84:B6:D3:38:C0:8A:C1:78:1A:5A
Certificate issuer:       /CN=A91B5C70/serialNumber=B8E549698953F65E71FB84B6D338C08AC1781A5A
Certificate serial:       0954
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft
Manifest number:          093E
Signing time:             Thu 30 Jan 2025 20:21:47 +0000
Manifest this update:     Thu 30 Jan 2025 20:21:46 +0000
Manifest next update:     Thu 06 Feb 2025 20:21:46 +0000
Files and hashes:         1: uOVJaYlT9l5x-4S20zjAisF4Glo.crl (hash: VQLP8wkmZWc9rzhlTxmSqoTiLv/q6VNFHc/hqSWPL9s=)
                          2: 4B31BDC4B76911ED8A503224C4F9AE02.roa (hash: sdPPzpmeuTxfNXX+Z4y10OZ5FdPq847kLyXykC/LAkQ=)
                          3: 3A489388B4F511EC83B0B46AC4F9AE02.roa (hash: G/uDm13Bf6tJyVNQOP+pm5ESZ5VRhWW8Z+gH8Z0T6aw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2388 (0x954)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5C70/serialNumber=B8E549698953F65E71FB84B6D338C08AC1781A5A
        Validity
            Not Before: Jan 30 20:21:46 2025 GMT
            Not After : Feb  6 20:21:46 2025 GMT
        Subject: CN=679bdf5b-c2f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:73:e4:f9:02:c0:58:40:15:c4:21:f3:47:c8:
                    59:39:23:35:f5:cd:2c:5e:0b:dd:8d:fb:cb:ac:2e:
                    d8:44:59:71:7c:62:b7:45:d5:42:c7:f8:c1:7b:6b:
                    aa:60:95:8c:ae:14:10:0a:5c:90:8e:46:5e:d1:9e:
                    bf:6a:ed:a8:1e:ef:3d:6d:1c:31:3a:81:20:bd:58:
                    13:fa:12:a7:37:da:c8:86:d2:dd:99:24:3b:25:59:
                    b2:6a:11:60:73:10:b4:a0:fd:6a:e5:1a:47:34:3f:
                    48:de:bd:af:06:38:ae:6e:d7:50:d4:14:20:1c:bc:
                    e5:ea:cf:06:37:ec:f2:ab:0e:b5:ec:0b:1f:9c:64:
                    5e:1b:13:9a:0c:5e:02:7c:05:7c:7c:6d:af:86:3d:
                    cd:e0:71:0e:19:7c:41:70:b2:7b:91:bb:dd:d9:d8:
                    62:f7:79:66:5e:40:9b:1e:d5:13:96:57:c9:13:40:
                    7e:9e:4c:cf:8c:9b:f8:d1:b8:c6:4d:dd:48:c2:9c:
                    f1:f8:cb:33:cc:44:05:02:e3:5f:28:c7:a6:7f:b1:
                    0c:1c:bb:ab:cd:f5:ed:f6:62:bc:10:2f:7c:c1:cd:
                    21:b2:35:26:94:9f:a2:4c:bb:72:89:83:6b:fc:0a:
                    a8:b7:d7:ab:fa:98:fe:7d:82:a4:b8:2a:f3:e7:6f:
                    b0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A0:C7:24:A3:15:96:6C:84:BD:F2:AC:20:0D:3C:E5:C9:41:60:05
            X509v3 Authority Key Identifier:
                keyid:B8:E5:49:69:89:53:F6:5E:71:FB:84:B6:D3:38:C0:8A:C1:78:1A:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:ce:20:3e:6d:72:de:9b:20:11:69:ef:ee:b8:36:b4:fb:2b:
         ab:8a:f6:5a:8f:34:8a:e3:ce:55:5b:83:ce:4b:e8:48:31:67:
         36:3a:c7:51:a0:91:26:9c:dd:df:fc:03:05:97:52:11:4b:72:
         10:38:df:5a:32:ed:f4:88:3f:97:ab:24:1e:df:c2:80:af:36:
         67:79:26:52:d8:72:83:43:56:79:d2:0e:4c:6f:46:a5:6e:60:
         92:a4:b8:d8:29:37:58:35:8e:ff:43:d0:0d:a1:ba:45:d9:03:
         ad:b6:79:cb:6b:8b:ab:5e:4f:02:59:89:40:c4:d0:25:7a:7f:
         c0:a5:53:b6:bf:f6:b6:30:83:d0:b7:df:c9:b3:c9:85:46:31:
         95:64:12:20:1c:e7:68:62:33:31:74:0d:8e:c4:78:13:5b:9a:
         1d:47:b0:ef:9e:c2:5c:9c:b6:2e:f3:db:66:ad:9f:1c:1b:a6:
         6e:00:e3:6f:f6:22:a0:29:72:ee:54:c7:c0:0e:b0:5c:63:03:
         e8:5b:c9:d1:cd:3b:f9:ba:7d:9d:ae:4a:4b:d9:4b:3d:d9:41:
         d8:93:a4:b9:cb:7c:2c:64:9c:0e:31:13:cf:67:4a:85:19:2f:
         4d:2e:39:56:bd:0b:f9:62:a8:7b:f5:03:21:9d:32:08:70:59:
         fe:3e:1a:9b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjVDNzAxMTAvBgNVBAUTKEI4RTU0OTY5ODk1M0Y2NUU3MUZCODRCNkQzMzhDMDhB
QzE3ODFBNUEwHhcNMjUwMTMwMjAyMTQ2WhcNMjUwMjA2MjAyMTQ2WjAYMRYwFAYD
VQQDEw02NzliZGY1Yi1jMmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0XPk+QLAWEAVxCHzR8hZOSM19c0sXgvdjfvLrC7YRFlxfGK3RdVCx/jBe2uq
YJWMrhQQClyQjkZe0Z6/au2oHu89bRwxOoEgvVgT+hKnN9rIhtLdmSQ7JVmyahFg
cxC0oP1q5RpHND9I3r2vBjiubtdQ1BQgHLzl6s8GN+zyqw617AsfnGReGxOaDF4C
fAV8fG2vhj3N4HEOGXxBcLJ7kbvd2dhi93lmXkCbHtUTllfJE0B+nkzPjJv40bjG
Td1Iwpzx+MszzEQFAuNfKMemf7EMHLurzfXt9mK8EC98wc0hsjUmlJ+iTLtyiYNr
/Aqot9er+pj+fYKkuCrz52+w+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOqgxySj
FZZshL3yrCANPOXJQWAFMB8GA1UdIwQYMBaAFLjlSWmJU/ZecfuEttM4wIrBeBpa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUM3MC8yM0EwQUMwNjkx
MDcxMUVBQTNFOTNBNUJDNEY5QUUwMi91T1ZKYVlsVDlsNXgtNFMyMHpqQWlzRjRH
bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VPVkphWWxUOWw1eC00UzIwempBaXNGNEdsby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NUM3MC8yM0EwQUMwNjkxMDcxMUVBQTNFOTNBNUJDNEY5QUUwMi91T1ZKYVlsVDls
NXgtNFMyMHpqQWlzRjRHbG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCGziA+bXLemyARae/uuDa0+yurivZajzSK485VW4POS+hIMWc2OsdR
oJEmnN3f/AMFl1IRS3IQON9aMu30iD+XqyQe38KArzZneSZS2HKDQ1Z50g5Mb0al
bmCSpLjYKTdYNY7/Q9ANobpF2QOttnnLa4urXk8CWYlAxNAlen/ApVO2v/a2MIPQ
t9/Js8mFRjGVZBIgHOdoYjMxdA2OxHgTW5odR7DvnsJcnLYu89tmrZ8cG6ZuAONv
9iKgKXLuVMfADrBcYwPoW8nRzTv5un2drkpL2Us92UHYk6S5y3wsZJwOMRPPZ0qF
GS9NLjlWvQv5Yqh79QMhnTIIcFn+Phqb
-----END CERTIFICATE-----
Generated at Sun Apr 27 01:56:12 2025 by rpki-client