Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft
File:                     SJjKo3y70Riu0iofvIoLVbiAmNE.mft (raw, json)
Hash identifier:          d2ya3RUafShW3aEJnwzl6l/5c+enpwXS40DgRTJgCPY=
Subject key identifier:   E6:89:05:93:DF:61:40:FC:4B:2B:09:A5:D6:C7:97:D8:63:D7:1A:32
Authority key identifier: 48:98:CA:A3:7C:BB:D1:18:AE:D2:2A:1F:BC:8A:0B:55:B8:80:98:D1
Certificate issuer:       /CN=A91C7DC6/serialNumber=4898CAA37CBBD118AED22A1FBC8A0B55B88098D1
Certificate serial:       071D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJjKo3y70Riu0iofvIoLVbiAmNE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft
Manifest number:          0718
Signing time:             Thu 30 Jan 2025 21:45:12 +0000
Manifest this update:     Thu 30 Jan 2025 21:45:12 +0000
Manifest next update:     Thu 06 Feb 2025 21:45:12 +0000
Files and hashes:         1: SJjKo3y70Riu0iofvIoLVbiAmNE.crl (hash: aAugsOSiNyOMsqDAvAebMFMYQBeKgICavCXMmRGfRNo=)
                          2: 6F96208C227011EBA0973F7FC4F9AE02.roa (hash: +l+y88slcd8CMQ9n/dTzp3oShT4cTaRVlDNuVo8APSc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1821 (0x71d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7DC6/serialNumber=4898CAA37CBBD118AED22A1FBC8A0B55B88098D1
        Validity
            Not Before: Jan 30 21:45:12 2025 GMT
            Not After : Feb  6 21:45:12 2025 GMT
        Subject: CN=679bf2e8-5cdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:24:20:f1:5b:f3:b4:29:1d:85:3e:00:c8:48:
                    ad:41:87:97:dd:89:c2:57:c0:93:14:0a:21:56:11:
                    c0:d1:d4:37:30:55:b9:33:38:b3:9a:ea:6c:a1:39:
                    2a:78:25:97:72:42:e0:54:7d:fa:79:9b:dc:10:07:
                    f4:86:1a:73:ba:3b:fc:9d:a0:45:61:cc:b7:b3:22:
                    4a:83:ee:df:68:8c:aa:46:76:64:ee:60:9b:98:13:
                    a0:5c:2b:bc:16:65:2b:60:7a:73:f6:72:b5:53:d5:
                    18:00:51:7c:ad:c5:1a:9f:d3:ab:fd:b9:ae:f2:59:
                    26:bf:0f:71:7c:a6:7e:09:1e:91:72:72:6c:fd:3e:
                    d9:4a:2b:3a:be:d6:76:89:60:2f:bb:de:72:a5:aa:
                    e6:82:f2:8b:d6:02:5a:ef:50:f8:b9:65:b2:d5:d8:
                    0a:87:49:bb:f5:07:af:73:b4:5e:81:72:a0:bb:05:
                    eb:aa:b4:7d:10:3d:d9:13:0c:af:07:a9:66:eb:0d:
                    a6:1a:9c:6c:fd:b6:9e:90:a1:8f:f1:96:27:64:4b:
                    77:d9:cd:6d:c5:53:08:91:ff:d4:e3:e0:61:70:3b:
                    4a:90:12:ba:db:4f:0f:98:9b:18:39:68:1c:0e:f4:
                    e2:58:cd:c5:ea:4e:77:01:07:5c:e9:94:cd:f0:c7:
                    16:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:89:05:93:DF:61:40:FC:4B:2B:09:A5:D6:C7:97:D8:63:D7:1A:32
            X509v3 Authority Key Identifier:
                keyid:48:98:CA:A3:7C:BB:D1:18:AE:D2:2A:1F:BC:8A:0B:55:B8:80:98:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJjKo3y70Riu0iofvIoLVbiAmNE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:73:20:40:62:c7:ca:33:c8:35:ae:57:7e:4b:a4:85:ed:38:
         b4:07:2b:93:1c:f5:97:03:ec:eb:d6:21:be:e6:49:c4:01:33:
         05:a4:df:00:35:b4:d1:96:df:29:9e:0f:1b:78:0a:3f:51:d6:
         dc:69:dd:80:f3:27:01:49:20:9f:25:43:ae:6e:33:4c:cf:54:
         60:16:d5:a9:97:36:64:c0:0f:85:1d:18:11:84:f7:66:87:cf:
         ee:53:dc:42:bd:5c:8e:81:59:ce:bd:91:79:20:4c:b9:de:07:
         90:e7:de:a1:17:d8:f2:fb:80:ef:d5:19:69:4c:34:f3:f8:81:
         dc:53:45:a7:f8:26:f2:6f:14:58:85:91:bb:28:65:f1:29:74:
         23:f6:3d:b7:73:17:3a:34:d4:98:77:53:78:08:b6:e0:27:9b:
         88:4a:ca:c3:b0:1c:a8:61:08:77:b5:40:d7:da:cf:95:71:32:
         06:11:26:4b:77:fc:70:43:fc:be:a1:ca:fc:cb:5d:ca:96:4f:
         68:29:be:94:65:86:83:38:88:63:c1:51:bc:80:d4:bf:0e:15:
         5d:64:e3:03:1c:dd:95:c7:47:cb:4f:cc:79:c4:c4:fe:e6:ad:
         73:b6:58:9e:de:b5:cb:1c:3c:dc:36:4d:05:3f:da:fb:6b:bc:
         d3:0c:4c:a3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBx0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzdEQzYxMTAvBgNVBAUTKDQ4OThDQUEzN0NCQkQxMThBRUQyMkExRkJDOEEwQjU1
Qjg4MDk4RDEwHhcNMjUwMTMwMjE0NTEyWhcNMjUwMjA2MjE0NTEyWjAYMRYwFAYD
VQQDEw02NzliZjJlOC01Y2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6SQg8VvztCkdhT4AyEitQYeX3YnCV8CTFAohVhHA0dQ3MFW5MzizmupsoTkq
eCWXckLgVH36eZvcEAf0hhpzujv8naBFYcy3syJKg+7faIyqRnZk7mCbmBOgXCu8
FmUrYHpz9nK1U9UYAFF8rcUan9Or/bmu8lkmvw9xfKZ+CR6RcnJs/T7ZSis6vtZ2
iWAvu95yparmgvKL1gJa71D4uWWy1dgKh0m79Qevc7RegXKguwXrqrR9ED3ZEwyv
B6lm6w2mGpxs/baekKGP8ZYnZEt32c1txVMIkf/U4+BhcDtKkBK6208PmJsYOWgc
DvTiWM3F6k53AQdc6ZTN8McWZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOaJBZPf
YUD8SysJpdbHl9hj1xoyMB8GA1UdIwQYMBaAFEiYyqN8u9EYrtIqH7yKC1W4gJjR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0RDNi81Q0E4NERFNDIy
NkUxMUVCQjA0OUE4N0NDNEY5QUUwMi9TSmpLbzN5NzBSaXUwaW9mdklvTFZiaUFt
TkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NKaktvM3k3MFJpdTBpb2Z2SW9MVmJpQW1ORS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
N0RDNi81Q0E4NERFNDIyNkUxMUVCQjA0OUE4N0NDNEY5QUUwMi9TSmpLbzN5NzBS
aXUwaW9mdklvTFZiaUFtTkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAAcyBAYsfKM8g1rld+S6SF7Ti0ByuTHPWXA+zr1iG+5knEATMFpN8A
NbTRlt8png8beAo/Udbcad2A8ycBSSCfJUOubjNMz1RgFtWplzZkwA+FHRgRhPdm
h8/uU9xCvVyOgVnOvZF5IEy53geQ596hF9jy+4Dv1RlpTDTz+IHcU0Wn+CbybxRY
hZG7KGXxKXQj9j23cxc6NNSYd1N4CLbgJ5uISsrDsByoYQh3tUDX2s+VcTIGESZL
d/xwQ/y+ocr8y13Klk9oKb6UZYaDOIhjwVG8gNS/DhVdZOMDHN2Vx0fLT8x5xMT+
5q1ztlie3rXLHDzcNk0FP9r7a7zTDEyj
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:06:04 2025 by rpki-client