Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C162D/6A0CFE901C1411EB82C09A62C4F9AE02/fXiohwseVXPWM8mnsAQKLuQF2VE.mft
File:                     fXiohwseVXPWM8mnsAQKLuQF2VE.mft (raw, json)
Hash identifier:          kd6fOLYlzhwivRhcjpgphs7xY+TckUUeAijUmzaBksc=
Subject key identifier:   33:F8:16:6F:A6:D8:BB:40:50:42:E3:BF:F8:38:3B:EB:72:0E:3A:C8
Authority key identifier: 7D:78:A8:87:0B:1E:55:73:D6:33:C9:A7:B0:04:0A:2E:E4:05:D9:51
Certificate issuer:       /CN=A91C162D/serialNumber=7D78A8870B1E5573D633C9A7B0040A2EE405D951
Certificate serial:       0730
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXiohwseVXPWM8mnsAQKLuQF2VE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C162D/6A0CFE901C1411EB82C09A62C4F9AE02/fXiohwseVXPWM8mnsAQKLuQF2VE.mft
Manifest number:          0729
Signing time:             Thu 30 Jan 2025 21:41:40 +0000
Manifest this update:     Thu 30 Jan 2025 21:41:39 +0000
Manifest next update:     Thu 06 Feb 2025 21:41:39 +0000
Files and hashes:         1: fXiohwseVXPWM8mnsAQKLuQF2VE.crl (hash: P9q3FsBVahTIWZ4TUBEApCJBkXjYtujz/Gol1nDOhVo=)
                          2: 460D934A1C1611EB8BD35065C4F9AE02.roa (hash: lRmEF7OdQxrawwnYP3zjW/dSXGqk4ZIrvP4DGro+L9M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1840 (0x730)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C162D/serialNumber=7D78A8870B1E5573D633C9A7B0040A2EE405D951
        Validity
            Not Before: Jan 30 21:41:39 2025 GMT
            Not After : Feb  6 21:41:39 2025 GMT
        Subject: CN=679bf213-1076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e1:ba:ef:e1:48:d5:f5:1f:d1:f8:33:50:5a:
                    7f:e5:a6:2f:b8:51:0a:8d:80:8b:41:7c:64:7c:95:
                    4e:d8:11:d8:cd:b6:95:1c:72:cc:83:09:18:08:c1:
                    70:53:16:a0:a6:33:55:c3:5f:75:17:eb:48:f7:c9:
                    bd:00:e0:bf:81:a7:c5:78:98:53:c7:ee:11:bf:a3:
                    3d:c6:95:e8:4d:9d:05:4e:98:f3:b8:88:0c:7f:19:
                    e3:51:72:25:26:b3:99:11:9d:6e:28:c0:ae:5e:79:
                    3b:48:ee:d1:a0:0b:19:3a:97:f5:a5:cd:f1:50:9c:
                    80:0f:7e:a6:5c:56:03:0a:28:3c:d4:ef:40:18:8d:
                    22:b0:4a:68:e3:b6:7e:21:1c:85:48:8a:6f:40:83:
                    31:58:fc:7d:30:50:bc:60:7b:8a:28:82:58:05:3a:
                    83:b6:22:a1:57:4a:c4:83:c9:87:79:e2:61:29:72:
                    9c:e5:3c:26:3e:7c:ae:02:1f:65:28:04:d6:26:28:
                    b6:da:bd:2b:e4:71:e0:bd:d3:fe:6a:49:be:bd:c0:
                    0f:01:bf:cd:e1:81:02:cd:26:8b:23:e1:fb:d6:aa:
                    cb:78:6e:7a:47:c3:68:d4:d4:c4:29:d8:da:06:f3:
                    73:a7:83:bf:b2:45:bd:3e:5f:26:66:2e:62:80:3d:
                    f4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F8:16:6F:A6:D8:BB:40:50:42:E3:BF:F8:38:3B:EB:72:0E:3A:C8
            X509v3 Authority Key Identifier:
                keyid:7D:78:A8:87:0B:1E:55:73:D6:33:C9:A7:B0:04:0A:2E:E4:05:D9:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C162D/6A0CFE901C1411EB82C09A62C4F9AE02/fXiohwseVXPWM8mnsAQKLuQF2VE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXiohwseVXPWM8mnsAQKLuQF2VE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C162D/6A0CFE901C1411EB82C09A62C4F9AE02/fXiohwseVXPWM8mnsAQKLuQF2VE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:d8:51:5b:36:d6:f0:da:3b:e5:d1:de:da:18:b4:50:7b:9c:
         c3:9a:70:4f:3e:2d:d8:ed:69:20:b9:19:2d:cf:57:9e:3f:c4:
         40:c8:b5:92:0e:6a:ca:91:e5:12:54:9e:5b:60:6a:cb:31:eb:
         4a:bd:11:05:5b:24:60:19:78:98:7b:cb:c4:a2:97:c0:43:ab:
         4f:24:b5:35:6d:67:2c:c1:67:0d:fd:b2:e3:3a:c5:a1:6d:be:
         63:1d:15:d6:23:f5:d5:91:07:fc:81:e0:30:42:e0:54:1f:b4:
         85:de:28:aa:47:1e:de:96:7f:e9:c7:8a:ea:0c:4a:09:88:ee:
         8c:4c:05:c9:75:19:91:00:c5:77:32:f9:94:c3:b8:37:31:b9:
         2b:8c:92:8b:a6:d8:a1:f7:d4:0e:95:93:9e:78:b0:9b:0f:77:
         58:fb:0d:7e:3e:1a:4d:96:cb:03:5c:38:d9:c6:bc:fc:e0:18:
         9b:62:26:d7:22:9c:fa:8a:b8:e3:80:96:ab:dd:f3:67:fa:ae:
         87:ad:85:5d:91:32:6c:7f:78:8e:6a:ba:35:4e:bf:bc:bb:5d:
         37:f0:03:4c:3c:4d:8a:08:85:a0:d1:e8:58:02:5f:51:94:84:
         3e:5c:40:3e:a4:7e:6e:2c:f5:df:58:8f:52:a4:72:80:62:d1:
         97:e2:0e:7e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBzAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzE2MkQxMTAvBgNVBAUTKDdENzhBODg3MEIxRTU1NzNENjMzQzlBN0IwMDQwQTJF
RTQwNUQ5NTEwHhcNMjUwMTMwMjE0MTM5WhcNMjUwMjA2MjE0MTM5WjAYMRYwFAYD
VQQDEw02NzliZjIxMy0xMDc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6OG67+FI1fUf0fgzUFp/5aYvuFEKjYCLQXxkfJVO2BHYzbaVHHLMgwkYCMFw
UxagpjNVw191F+tI98m9AOC/gafFeJhTx+4Rv6M9xpXoTZ0FTpjzuIgMfxnjUXIl
JrOZEZ1uKMCuXnk7SO7RoAsZOpf1pc3xUJyAD36mXFYDCig81O9AGI0isEpo47Z+
IRyFSIpvQIMxWPx9MFC8YHuKKIJYBTqDtiKhV0rEg8mHeeJhKXKc5TwmPnyuAh9l
KATWJii22r0r5HHgvdP+akm+vcAPAb/N4YECzSaLI+H71qrLeG56R8No1NTEKdja
BvNzp4O/skW9Pl8mZi5igD30SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDP4Fm+m
2LtAUELjv/g4O+tyDjrIMB8GA1UdIwQYMBaAFH14qIcLHlVz1jPJp7AECi7kBdlR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTYyRC82QTBDRkU5MDFD
MTQxMUVCODJDMDlBNjJDNEY5QUUwMi9mWGlvaHdzZVZYUFdNOG1uc0FRS0x1UUYy
VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZYaW9od3NlVlhQV004bW5zQVFLTHVRRjJWRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MTYyRC82QTBDRkU5MDFDMTQxMUVCODJDMDlBNjJDNEY5QUUwMi9mWGlvaHdzZVZY
UFdNOG1uc0FRS0x1UUYyVkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAm2FFbNtbw2jvl0d7aGLRQe5zDmnBPPi3Y7WkguRktz1eeP8RAyLWS
DmrKkeUSVJ5bYGrLMetKvREFWyRgGXiYe8vEopfAQ6tPJLU1bWcswWcN/bLjOsWh
bb5jHRXWI/XVkQf8geAwQuBUH7SF3iiqRx7eln/px4rqDEoJiO6MTAXJdRmRAMV3
MvmUw7g3MbkrjJKLptih99QOlZOeeLCbD3dY+w1+PhpNlssDXDjZxrz84BibYibX
Ipz6irjjgJar3fNn+q6HrYVdkTJsf3iOaro1Tr+8u1038ANMPE2KCIWg0ehYAl9R
lIQ+XEA+pH5uLPXfWI9SpHKAYtGX4g5+
-----END CERTIFICATE-----