Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft
File:                     US3AbkHAiZokofyIXrNG5FMH80c.mft (raw, json)
Hash identifier:          XwAZQPmsemTE/VWIqpeO+Yj7fCkUJc5FpxbnI7uLe5s=
Subject key identifier:   BB:77:98:26:00:40:EA:C8:7C:A2:19:2C:AD:36:1B:68:40:1A:F7:1B
Authority key identifier: 51:2D:C0:6E:41:C0:89:9A:24:A1:FC:88:5E:B3:46:E4:53:07:F3:47
Certificate issuer:       /CN=A91BA4F2/serialNumber=512DC06E41C0899A24A1FC885EB346E45307F347
Certificate serial:       091A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US3AbkHAiZokofyIXrNG5FMH80c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft
Manifest number:          0914
Signing time:             Thu 30 Jan 2025 20:24:23 +0000
Manifest this update:     Thu 30 Jan 2025 20:24:23 +0000
Manifest next update:     Thu 06 Feb 2025 20:24:23 +0000
Files and hashes:         1: US3AbkHAiZokofyIXrNG5FMH80c.crl (hash: FjfB93VbPjj2llX0jdWVQnVSdgRJXSDfIOUrnapHXoo=)
                          2: 9EEA3006979411EA8C6FC25AC4F9AE02.roa (hash: S4ZaaJwKZSnUQdUJjzEBewIqlA4hqhU0xKL1nfod00M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2330 (0x91a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA4F2/serialNumber=512DC06E41C0899A24A1FC885EB346E45307F347
        Validity
            Not Before: Jan 30 20:24:23 2025 GMT
            Not After : Feb  6 20:24:23 2025 GMT
        Subject: CN=679bdff7-8947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ca:a3:73:f5:a3:b7:30:5a:a9:73:81:ab:22:
                    08:d8:91:e7:72:f7:ea:20:d5:6d:a2:5c:0f:f8:7b:
                    77:02:c4:e8:d8:e9:22:33:45:6b:e7:5a:32:57:85:
                    85:65:7f:7c:f8:6e:a1:7d:85:84:e9:bd:2e:5e:6d:
                    bb:ed:b8:3c:a3:eb:ff:3e:58:9c:74:cc:1e:c9:7b:
                    98:20:01:e7:c2:b6:9f:3d:4e:30:6a:c0:14:38:9f:
                    94:98:b5:68:82:14:54:37:71:57:cb:94:4d:8c:a0:
                    50:c5:8c:e5:2c:3e:67:d0:da:83:64:ff:6e:06:bc:
                    3f:ae:60:52:5d:70:1c:30:f0:5e:70:64:8f:6c:a0:
                    d0:52:00:23:a6:94:a0:18:1c:78:dd:6c:00:a0:82:
                    af:4e:9d:01:48:05:4e:b5:e3:02:0d:e5:10:1a:29:
                    5d:9b:6b:6b:36:e2:67:aa:62:cb:6f:56:12:c7:50:
                    4e:7f:c1:cf:6a:ea:64:50:a1:07:47:60:ca:06:06:
                    aa:86:18:2e:27:ad:5c:6a:cb:77:ec:ee:2c:d5:d3:
                    c4:89:3a:a8:48:86:5c:34:61:d4:7e:b4:f8:47:a5:
                    77:ab:d6:87:03:1b:fd:1c:3e:27:1f:4e:9f:06:ed:
                    79:9f:60:0b:07:74:63:41:98:7c:32:00:46:7e:eb:
                    7b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:77:98:26:00:40:EA:C8:7C:A2:19:2C:AD:36:1B:68:40:1A:F7:1B
            X509v3 Authority Key Identifier:
                keyid:51:2D:C0:6E:41:C0:89:9A:24:A1:FC:88:5E:B3:46:E4:53:07:F3:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US3AbkHAiZokofyIXrNG5FMH80c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:6a:c8:54:2d:12:7a:7a:09:cd:ad:a1:dc:6e:d3:82:7d:01:
         56:a3:c3:38:1b:b5:91:01:25:ae:f4:39:c5:39:09:de:3d:3d:
         85:80:32:fa:af:90:77:23:9c:a0:92:bb:33:16:03:3d:86:af:
         65:a4:f1:96:91:32:82:0b:82:bc:b0:6d:38:a9:96:eb:bb:6c:
         10:62:71:1d:cf:f4:cb:19:84:36:7a:92:53:31:6f:c0:65:cb:
         79:44:8f:66:85:22:d6:df:3c:4b:9a:39:f8:03:78:fa:e7:64:
         c8:d5:b6:af:21:9a:e5:ad:29:bf:e2:10:a7:23:7f:b3:99:66:
         65:35:1d:d4:6c:a9:00:4b:0c:e5:aa:c1:bb:6b:ac:73:b0:5d:
         37:c1:b0:f6:f3:a5:34:7e:8a:04:72:94:23:41:1c:c5:a9:09:
         20:6c:89:d4:bd:ab:0b:a7:30:ec:3d:dd:d9:5f:a1:9d:02:b5:
         71:4d:08:b8:ee:5d:e5:10:f5:64:5c:1e:fe:fd:ad:7c:37:58:
         0d:ba:42:00:40:59:ad:30:a2:85:7e:4e:21:80:1b:c6:1c:bd:
         49:7f:69:88:98:36:8b:92:b7:51:5f:94:b1:df:c2:a3:85:00:
         39:03:bb:ea:e7:ac:25:a3:0e:0e:10:5e:1a:21:65:d7:23:1a:
         53:2f:9b:ac
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCRowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkE0RjIxMTAvBgNVBAUTKDUxMkRDMDZFNDFDMDg5OUEyNEExRkM4ODVFQjM0NkU0
NTMwN0YzNDcwHhcNMjUwMTMwMjAyNDIzWhcNMjUwMjA2MjAyNDIzWjAYMRYwFAYD
VQQDEw02NzliZGZmNy04OTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqMqjc/WjtzBaqXOBqyII2JHncvfqINVtolwP+Ht3AsTo2OkiM0Vr51oyV4WF
ZX98+G6hfYWE6b0uXm277bg8o+v/PlicdMweyXuYIAHnwrafPU4wasAUOJ+UmLVo
ghRUN3FXy5RNjKBQxYzlLD5n0NqDZP9uBrw/rmBSXXAcMPBecGSPbKDQUgAjppSg
GBx43WwAoIKvTp0BSAVOteMCDeUQGildm2trNuJnqmLLb1YSx1BOf8HPaupkUKEH
R2DKBgaqhhguJ61cast37O4s1dPEiTqoSIZcNGHUfrT4R6V3q9aHAxv9HD4nH06f
Bu15n2ALB3RjQZh8MgBGfut7pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLt3mCYA
QOrIfKIZLK02G2hAGvcbMB8GA1UdIwQYMBaAFFEtwG5BwImaJKH8iF6zRuRTB/NH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTRGMi8yQUVERUY5QTk3
OTMxMUVBQjJBRDI5NTZDNEY5QUUwMi9VUzNBYmtIQWlab2tvZnlJWHJORzVGTUg4
MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VTM0Fia0hBaVpva29meUlYck5HNUZNSDgwYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QTRGMi8yQUVERUY5QTk3OTMxMUVBQjJBRDI5NTZDNEY5QUUwMi9VUzNBYmtIQWla
b2tvZnlJWHJORzVGTUg4MGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB2ashULRJ6egnNraHcbtOCfQFWo8M4G7WRASWu9DnFOQnePT2FgDL6
r5B3I5ygkrszFgM9hq9lpPGWkTKCC4K8sG04qZbru2wQYnEdz/TLGYQ2epJTMW/A
Zct5RI9mhSLW3zxLmjn4A3j652TI1bavIZrlrSm/4hCnI3+zmWZlNR3UbKkASwzl
qsG7a6xzsF03wbD286U0fooEcpQjQRzFqQkgbInUvasLpzDsPd3ZX6GdArVxTQi4
7l3lEPVkXB7+/a18N1gNukIAQFmtMKKFfk4hgBvGHL1Jf2mImDaLkrdRX5Sx38Kj
hQA5A7vq56wlow4OEF4aIWXXIxpTL5us
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:59:29 2025 by rpki-client