Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft
File:                     Im9yidTjf-ziJgxk07y6esAxWnU.mft (raw, json)
Hash identifier:          93iDj9FP/WoOeIHXteODKR9bchjW3PGGM+mtMN8pBRI=
Subject key identifier:   02:E2:51:C1:7E:51:16:19:7C:15:FE:14:4F:77:B8:BA:B8:78:1F:79
Authority key identifier: 22:6F:72:89:D4:E3:7F:EC:E2:26:0C:64:D3:BC:BA:7A:C0:31:5A:75
Certificate issuer:       /CN=A91BC269/serialNumber=226F7289D4E37FECE2260C64D3BCBA7AC0315A75
Certificate serial:       02EB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Im9yidTjf-ziJgxk07y6esAxWnU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft
Manifest number:          02E4
Signing time:             Fri 31 Jan 2025 01:27:14 +0000
Manifest this update:     Fri 31 Jan 2025 01:27:14 +0000
Manifest next update:     Fri 07 Feb 2025 01:27:14 +0000
Files and hashes:         1: Im9yidTjf-ziJgxk07y6esAxWnU.crl (hash: 6DdVkLjlZH5p/c9HKbN2aHBImzbAxFTSNdFLklTHr6k=)
                          2: 16DDC0F4CFE811ECA193B36BC4F9AE02.roa (hash: d8hKEngO/LeUHQoe5AIEcocjfTWcuilabUG2KLlGFLg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 747 (0x2eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC269/serialNumber=226F7289D4E37FECE2260C64D3BCBA7AC0315A75
        Validity
            Not Before: Jan 31 01:27:14 2025 GMT
            Not After : Feb  7 01:27:14 2025 GMT
        Subject: CN=679c26f2-1aaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:40:62:ef:89:5f:4f:e5:70:10:4b:28:e8:f0:
                    02:4b:76:9f:b5:bc:4b:03:02:c0:99:5f:e6:0f:73:
                    47:6c:d4:d5:ae:68:05:a5:31:df:c1:d7:83:88:d5:
                    1e:b6:80:b3:b1:2f:89:dd:ab:39:13:34:ed:53:79:
                    74:b1:ca:a8:c5:bc:6c:ef:9a:a1:ae:cf:8b:8b:11:
                    cb:70:26:84:0b:75:d7:cb:92:52:d1:69:46:f4:89:
                    df:cb:86:21:01:c6:ef:ad:06:aa:19:47:22:e6:00:
                    07:b7:d7:af:ea:f6:2a:5d:47:58:20:88:b7:90:0f:
                    32:d5:dc:f8:15:ec:94:b8:31:5c:c4:a4:01:bd:b3:
                    8d:d1:5d:7d:57:23:1f:14:94:fc:2b:9d:72:ea:ca:
                    a5:2a:9e:01:46:a1:27:ec:db:a2:f8:ca:2d:cd:a6:
                    9c:37:ea:ec:62:65:75:60:65:56:53:61:9a:a1:7d:
                    d1:ec:c6:1c:08:14:de:3a:68:3d:5f:49:5d:4a:8e:
                    54:1d:d3:49:e8:fa:1b:53:d0:49:b1:3e:06:29:ad:
                    14:b1:1c:70:90:56:51:24:87:fa:58:54:f9:4f:d8:
                    db:91:7f:73:fd:67:27:a3:04:05:0c:32:f9:38:43:
                    a3:5d:cb:f5:1c:7a:2f:c5:af:41:a2:75:91:ec:7b:
                    7c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:E2:51:C1:7E:51:16:19:7C:15:FE:14:4F:77:B8:BA:B8:78:1F:79
            X509v3 Authority Key Identifier:
                keyid:22:6F:72:89:D4:E3:7F:EC:E2:26:0C:64:D3:BC:BA:7A:C0:31:5A:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Im9yidTjf-ziJgxk07y6esAxWnU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:fe:44:cb:4a:88:7a:cf:b3:75:6f:28:fd:19:0c:be:1c:1e:
         ea:b9:08:1a:d8:2d:64:76:67:8a:07:76:29:7f:a6:6d:a5:87:
         ea:c5:a7:6a:f2:70:ab:51:58:46:10:7b:82:a8:e3:37:2a:71:
         bd:67:70:8b:11:84:50:60:6b:98:2b:63:d7:72:e1:d3:72:8a:
         98:97:70:1f:4e:4a:b2:f0:77:f2:ab:eb:fa:82:d2:3b:35:46:
         d2:8c:8a:4c:86:c5:6b:3d:51:d1:75:ec:02:c1:53:8f:c4:4b:
         b3:c8:f9:41:47:5f:47:e9:58:52:ff:5f:b2:af:26:30:7b:45:
         e2:b0:26:e0:d2:be:84:ad:bd:0b:0f:b2:c5:7b:4e:ea:8d:1f:
         f6:3c:08:2b:f6:37:fd:23:1b:67:b1:b1:e9:e5:de:91:02:a6:
         a7:2c:7c:d2:d6:06:92:49:4d:db:71:84:a0:9b:24:cc:02:e2:
         ac:2f:eb:ba:68:53:f5:d4:d3:9c:53:a1:f6:93:6d:4b:c7:6f:
         ff:c8:93:77:21:6d:d2:cc:6c:12:bc:62:16:83:a4:45:4a:a8:
         9b:43:da:b5:3a:36:fc:2b:6c:d2:36:59:bd:69:c2:57:82:e6:
         73:1c:73:9c:d0:5a:d7:a5:62:f5:6f:04:a6:9a:44:5a:ec:25:
         6f:e3:71:6d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkMyNjkxMTAvBgNVBAUTKDIyNkY3Mjg5RDRFMzdGRUNFMjI2MEM2NEQzQkNCQTdB
QzAzMTVBNzUwHhcNMjUwMTMxMDEyNzE0WhcNMjUwMjA3MDEyNzE0WjAYMRYwFAYD
VQQDEw02NzljMjZmMi0xYWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy0Bi74lfT+VwEEso6PACS3aftbxLAwLAmV/mD3NHbNTVrmgFpTHfwdeDiNUe
toCzsS+J3as5EzTtU3l0scqoxbxs75qhrs+LixHLcCaEC3XXy5JS0WlG9Infy4Yh
AcbvrQaqGUci5gAHt9ev6vYqXUdYIIi3kA8y1dz4FeyUuDFcxKQBvbON0V19VyMf
FJT8K51y6sqlKp4BRqEn7Nui+MotzaacN+rsYmV1YGVWU2GaoX3R7MYcCBTeOmg9
X0ldSo5UHdNJ6PobU9BJsT4GKa0UsRxwkFZRJIf6WFT5T9jbkX9z/WcnowQFDDL5
OEOjXcv1HHovxa9BonWR7Ht8VQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFALiUcF+
URYZfBX+FE93uLq4eB95MB8GA1UdIwQYMBaAFCJvconU43/s4iYMZNO8unrAMVp1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzI2OS9CMTYxMzExOENG
RTUxMUVDOTRCQkM3NUFDNEY5QUUwMi9JbTl5aWRUamYtemlKZ3hrMDd5NmVzQXhX
blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0ltOXlpZFRqZi16aUpneGswN3k2ZXNBeFduVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QzI2OS9CMTYxMzExOENGRTUxMUVDOTRCQkM3NUFDNEY5QUUwMi9JbTl5aWRUamYt
emlKZ3hrMDd5NmVzQXhXblUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBR/kTLSoh6z7N1byj9GQy+HB7quQga2C1kdmeKB3Ypf6ZtpYfqxadq
8nCrUVhGEHuCqOM3KnG9Z3CLEYRQYGuYK2PXcuHTcoqYl3AfTkqy8Hfyq+v6gtI7
NUbSjIpMhsVrPVHRdewCwVOPxEuzyPlBR19H6VhS/1+yryYwe0XisCbg0r6Erb0L
D7LFe07qjR/2PAgr9jf9IxtnsbHp5d6RAqanLHzS1gaSSU3bcYSgmyTMAuKsL+u6
aFP11NOcU6H2k21Lx2//yJN3IW3SzGwSvGIWg6RFSqibQ9q1Ojb8K2zSNlm9acJX
guZzHHOc0FrXpWL1bwSmmkRa7CVv43Ft
-----END CERTIFICATE-----