Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft
File:                     cYQNfZjFz5vWvrRIatRnQGXxR0E.mft (raw, json)
Hash identifier:          F8eDpuDO2K1x88Albm5JAD8nmFdJN0KXl2Utq9ZApVo=
Subject key identifier:   B8:46:30:13:8A:50:F0:FF:FC:97:47:2B:A5:4C:1B:43:66:CB:00:13
Authority key identifier: 71:84:0D:7D:98:C5:CF:9B:D6:BE:B4:48:6A:D4:67:40:65:F1:47:41
Certificate issuer:       /CN=A91B7B61/serialNumber=71840D7D98C5CF9BD6BEB4486AD4674065F14741
Certificate serial:       0571
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYQNfZjFz5vWvrRIatRnQGXxR0E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft
Manifest number:          056D
Signing time:             Thu 30 Jan 2025 23:21:28 +0000
Manifest this update:     Thu 30 Jan 2025 23:21:27 +0000
Manifest next update:     Thu 06 Feb 2025 23:21:27 +0000
Files and hashes:         1: cYQNfZjFz5vWvrRIatRnQGXxR0E.crl (hash: k9s38KLzCjw5KVMnUlmUxfx5IUK2eT55T1FvTudGuOA=)
                          2: C2EFC706CAAE11EBA95C5E64C4F9AE02.roa (hash: CjCSmslBUSukL+VQeriKJzpmD5FpwHuT7xL5fJExCAg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1393 (0x571)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7B61/serialNumber=71840D7D98C5CF9BD6BEB4486AD4674065F14741
        Validity
            Not Before: Jan 30 23:21:27 2025 GMT
            Not After : Feb  6 23:21:27 2025 GMT
        Subject: CN=679c0977-b0af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2d:94:d8:b6:c3:64:4e:47:44:25:6f:7e:8c:
                    1f:4a:24:57:42:cf:99:15:f2:5e:3f:66:8d:7c:6b:
                    f3:ef:f7:52:a2:3f:55:71:1d:73:3c:b5:e9:a2:73:
                    33:ee:0e:7f:a5:2a:8f:18:c2:37:f0:97:44:4c:8a:
                    16:d8:9e:7c:dd:7d:2a:37:66:f5:b7:1d:7d:02:9f:
                    6a:a0:af:46:44:03:87:79:ad:30:05:d4:db:35:c4:
                    78:f7:cc:46:4c:d4:a9:ef:61:14:11:84:0f:84:18:
                    f2:94:1a:96:cc:ab:ab:4b:4f:a1:dd:a6:84:aa:be:
                    73:ab:06:17:de:d5:b8:b6:f9:91:be:67:e0:dc:66:
                    82:a8:b6:9c:76:88:1a:fc:21:47:e0:19:5e:c4:cb:
                    7e:68:06:ad:d5:e8:24:e3:33:57:73:34:d5:17:bc:
                    cc:62:ca:f1:e2:6b:7a:c9:f2:80:d5:4c:7c:b6:ae:
                    9b:5d:7f:00:96:18:f1:af:19:b3:7c:64:4a:ac:c0:
                    1d:f5:fc:0f:ee:14:5c:75:cc:d7:c3:56:09:63:70:
                    b4:ef:55:71:fa:b7:62:20:19:b9:ce:47:34:99:ac:
                    b1:d4:a2:88:d8:93:e9:4c:a7:2b:7a:4c:76:31:14:
                    e5:de:74:4e:b2:12:f3:88:5f:b2:5f:8b:33:d4:a4:
                    0f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:46:30:13:8A:50:F0:FF:FC:97:47:2B:A5:4C:1B:43:66:CB:00:13
            X509v3 Authority Key Identifier:
                keyid:71:84:0D:7D:98:C5:CF:9B:D6:BE:B4:48:6A:D4:67:40:65:F1:47:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYQNfZjFz5vWvrRIatRnQGXxR0E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:cf:b2:23:ad:b8:3d:6a:38:d1:5b:41:63:c4:18:e4:9e:b1:
         09:e1:50:57:75:92:41:bf:06:80:81:23:5b:65:54:b0:6a:44:
         c2:47:ab:2f:8c:9a:c2:6b:d6:ae:14:bd:a6:de:e8:04:60:19:
         38:39:3f:ef:cf:0f:39:61:35:d9:9d:6f:c6:be:5a:f6:cd:e9:
         8b:83:bd:ca:a9:be:ab:97:a2:f9:58:94:08:8c:8e:b0:61:7d:
         c1:43:32:ee:e4:a0:82:61:56:d5:bf:3c:cf:d3:62:f7:84:5a:
         1a:c0:19:28:26:44:eb:41:72:dc:25:b2:2d:c4:d0:e4:49:f6:
         01:ee:00:6e:94:48:d6:db:45:a9:b5:cc:42:40:cf:be:ca:3a:
         01:91:08:4f:1c:ba:9a:7d:9e:2b:92:d4:8d:21:5e:4e:c9:fd:
         04:57:b0:e4:a9:02:b6:07:15:5c:08:cb:33:30:34:33:be:6d:
         8e:34:f2:26:a4:ea:f2:88:d9:58:71:fb:a9:a3:1f:e3:a1:12:
         34:b1:e6:2c:38:38:55:c7:64:45:d2:0b:a8:e4:b7:93:ce:af:
         41:50:0e:ee:94:6f:e2:ef:70:86:e1:d5:4b:11:89:bf:60:11:
         98:3b:65:fb:d8:68:01:3c:d5:f8:20:83:a7:a6:a8:3b:fe:78:
         79:0c:c0:69
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjdCNjExMTAvBgNVBAUTKDcxODQwRDdEOThDNUNGOUJENkJFQjQ0ODZBRDQ2NzQw
NjVGMTQ3NDEwHhcNMjUwMTMwMjMyMTI3WhcNMjUwMjA2MjMyMTI3WjAYMRYwFAYD
VQQDEw02NzljMDk3Ny1iMGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvy2U2LbDZE5HRCVvfowfSiRXQs+ZFfJeP2aNfGvz7/dSoj9VcR1zPLXponMz
7g5/pSqPGMI38JdETIoW2J583X0qN2b1tx19Ap9qoK9GRAOHea0wBdTbNcR498xG
TNSp72EUEYQPhBjylBqWzKurS0+h3aaEqr5zqwYX3tW4tvmRvmfg3GaCqLacdoga
/CFH4BlexMt+aAat1egk4zNXczTVF7zMYsrx4mt6yfKA1Ux8tq6bXX8Alhjxrxmz
fGRKrMAd9fwP7hRcdczXw1YJY3C071Vx+rdiIBm5zkc0mayx1KKI2JPpTKcrekx2
MRTl3nROshLziF+yX4sz1KQPaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLhGMBOK
UPD//JdHK6VMG0NmywATMB8GA1UdIwQYMBaAFHGEDX2Yxc+b1r60SGrUZ0Bl8UdB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0I2MS9CRTY4RDMwMkNB
QUExMUVCQjhDMDJCNUNDNEY5QUUwMi9jWVFOZlpqRno1dld2clJJYXRSblFHWHhS
MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NZUU5mWmpGejV2V3ZyUklhdFJuUUdYeFIwRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
N0I2MS9CRTY4RDMwMkNBQUExMUVCQjhDMDJCNUNDNEY5QUUwMi9jWVFOZlpqRno1
dld2clJJYXRSblFHWHhSMEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB1z7Ijrbg9ajjRW0FjxBjknrEJ4VBXdZJBvwaAgSNbZVSwakTCR6sv
jJrCa9auFL2m3ugEYBk4OT/vzw85YTXZnW/Gvlr2zemLg73Kqb6rl6L5WJQIjI6w
YX3BQzLu5KCCYVbVvzzP02L3hFoawBkoJkTrQXLcJbItxNDkSfYB7gBulEjW20Wp
tcxCQM++yjoBkQhPHLqafZ4rktSNIV5Oyf0EV7DkqQK2BxVcCMszMDQzvm2ONPIm
pOryiNlYcfupox/joRI0seYsODhVx2RF0guo5LeTzq9BUA7ulG/i73CG4dVLEYm/
YBGYO2X72GgBPNX4IIOnpqg7/nh5DMBp
-----END CERTIFICATE-----
Generated at Sat Apr 26 01:11:02 2025 by rpki-client