Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft
File:                     nE_-Zd6jUjPTnocCI4VlV03tRm4.mft (raw, json)
Hash identifier:          uqfNTPeKTnWOqHhazO88jCuYAepuoOZGlOs5bT5OIhM=
Subject key identifier:   6A:C5:27:83:B9:90:56:6A:DD:C7:86:6F:70:C2:50:A9:7F:BF:5D:DC
Authority key identifier: 9C:4F:FE:65:DE:A3:52:33:D3:9E:87:02:23:85:65:57:4D:ED:46:6E
Certificate issuer:       /CN=A91CAA4E/serialNumber=9C4FFE65DEA35233D39E8702238565574DED466E
Certificate serial:       06EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft
Manifest number:          19CE
Signing time:             Fri 31 Jan 2025 17:02:31 +0000
Manifest this update:     Fri 31 Jan 2025 17:02:30 +0000
Manifest next update:     Fri 07 Feb 2025 17:02:30 +0000
Files and hashes:         1: nE_-Zd6jUjPTnocCI4VlV03tRm4.crl (hash: n2Ce/FPPXGCfFbACDy7lPVVBksbXUbKe5KnR0Rs9Fp8=)
                          2: FFFE92D29CE611EE883A672FC4F9AE02.roa (hash: GWwckZ18h6sa8xUJU0MBnoisjDnt082CFlW4eSRU0Y4=)
                          3: 653DCD9ADEE811EF9DE2374CC4F9AE02.roa (hash: Mazx36+KDEkICPeaUfwJ/FcwJ2wGDeNl/2eEhKXlMWc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1770 (0x6ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CAA4E/serialNumber=9C4FFE65DEA35233D39E8702238565574DED466E
        Validity
            Not Before: Jan 31 17:02:30 2025 GMT
            Not After : Feb  7 17:02:30 2025 GMT
        Subject: CN=679d0227-e3c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bd:81:16:c5:70:a7:5f:52:a0:15:c0:7f:91:
                    dc:ad:f8:94:b9:0c:93:f1:d1:f0:43:cc:c6:db:c3:
                    7d:66:ba:2e:1a:3b:b3:1b:df:9c:19:c7:71:63:94:
                    c3:09:d4:9e:02:3b:f0:33:38:98:58:c8:d7:4a:bf:
                    51:8d:17:f3:15:f4:6d:90:21:b3:b3:97:7d:69:75:
                    47:4e:4d:d2:df:06:ad:2b:b8:67:13:1f:21:31:9d:
                    c7:e5:b8:fa:7a:25:b9:da:3f:fa:17:a3:72:30:09:
                    72:65:28:25:d7:d2:69:3c:66:97:70:23:f0:81:2f:
                    a6:f8:b7:05:19:c3:36:f0:14:eb:7d:9f:d9:3e:d3:
                    25:0e:c8:ad:a4:2b:58:2e:f6:c4:99:b3:ec:85:99:
                    c4:cf:4f:98:16:fb:96:a5:30:15:c6:eb:e2:6d:4e:
                    51:01:bb:0c:19:7a:ee:c7:df:1b:d1:38:5c:e6:ae:
                    eb:d5:6b:54:44:bc:3d:e4:4f:f9:b6:02:3e:8e:c2:
                    2f:f5:b6:29:f0:f9:3d:1c:8a:1d:22:64:17:f9:2a:
                    96:ca:c7:61:9b:6e:58:c6:0c:ba:a4:97:d5:1c:a1:
                    52:01:22:e8:48:44:17:6a:22:e1:98:ce:11:85:08:
                    ff:48:0a:b7:87:da:e3:13:0f:77:ca:a8:2f:cb:b1:
                    b2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:C5:27:83:B9:90:56:6A:DD:C7:86:6F:70:C2:50:A9:7F:BF:5D:DC
            X509v3 Authority Key Identifier:
                keyid:9C:4F:FE:65:DE:A3:52:33:D3:9E:87:02:23:85:65:57:4D:ED:46:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:f3:c8:5c:f7:a7:00:3b:40:fd:08:30:f1:4f:dc:3b:90:65:
         bd:79:06:0d:0d:59:43:cb:3a:77:02:42:e8:24:7c:3e:5e:8c:
         0e:5d:b9:54:ec:c2:b9:fd:41:30:eb:16:7c:a1:de:17:01:92:
         b5:e8:82:a1:5a:b4:e4:8b:60:3e:f6:07:a6:c3:43:ba:8f:31:
         3c:93:3c:25:01:14:bb:60:fd:97:45:90:88:c0:3f:a3:60:8b:
         6a:8f:dc:11:b8:b7:50:31:9d:80:d6:ac:b3:f6:d7:7b:47:59:
         5e:e5:82:68:73:38:fa:36:57:84:76:25:e5:e4:8c:20:15:e4:
         f3:d4:f3:e5:7e:59:ed:7a:b4:57:19:38:6f:26:eb:8c:ef:c0:
         df:a4:8c:d6:1b:e0:9d:24:d4:f7:62:a9:52:84:a0:99:1a:4c:
         ed:53:38:37:77:99:c4:8e:9b:35:a0:a2:38:41:36:b4:76:ef:
         f8:95:b8:f6:e9:c0:57:d4:30:0f:62:3e:fe:7f:5c:02:ba:b3:
         1e:84:c3:af:45:42:f9:fa:c6:8b:35:03:21:48:a6:30:5a:62:
         05:5f:2e:83:f8:5e:d5:00:1f:bd:07:a1:84:dc:be:e1:9f:36:
         4b:b4:1c:93:b5:40:eb:1d:73:b8:da:4b:65:a0:12:91:c0:5b:
         2c:a3:6d:b5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBuowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0FBNEUxMTAvBgNVBAUTKDlDNEZGRTY1REVBMzUyMzNEMzlFODcwMjIzODU2NTU3
NERFRDQ2NkUwHhcNMjUwMTMxMTcwMjMwWhcNMjUwMjA3MTcwMjMwWjAYMRYwFAYD
VQQDEw02NzlkMDIyNy1lM2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsL2BFsVwp19SoBXAf5HcrfiUuQyT8dHwQ8zG28N9ZrouGjuzG9+cGcdxY5TD
CdSeAjvwMziYWMjXSr9RjRfzFfRtkCGzs5d9aXVHTk3S3watK7hnEx8hMZ3H5bj6
eiW52j/6F6NyMAlyZSgl19JpPGaXcCPwgS+m+LcFGcM28BTrfZ/ZPtMlDsitpCtY
LvbEmbPshZnEz0+YFvuWpTAVxuvibU5RAbsMGXrux98b0Thc5q7r1WtURLw95E/5
tgI+jsIv9bYp8Pk9HIodImQX+SqWysdhm25Yxgy6pJfVHKFSASLoSEQXaiLhmM4R
hQj/SAq3h9rjEw93yqgvy7GyjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGrFJ4O5
kFZq3ceGb3DCUKl/v13cMB8GA1UdIwQYMBaAFJxP/mXeo1Iz056HAiOFZVdN7UZu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUE0RS81NUU5Nzk1QUE5
NEYxMUU4QUEwQzkwMEVDNEY5QUUwMi9uRV8tWmQ2alVqUFRub2NDSTRWbFYwM3RS
bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25FXy1aZDZqVWpQVG5vY0NJNFZsVjAzdFJtNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QUE0RS81NUU5Nzk1QUE5NEYxMUU4QUEwQzkwMEVDNEY5QUUwMi9uRV8tWmQ2alVq
UFRub2NDSTRWbFYwM3RSbTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB188hc96cAO0D9CDDxT9w7kGW9eQYNDVlDyzp3AkLoJHw+XowOXblU
7MK5/UEw6xZ8od4XAZK16IKhWrTki2A+9gemw0O6jzE8kzwlARS7YP2XRZCIwD+j
YItqj9wRuLdQMZ2A1qyz9td7R1le5YJoczj6NleEdiXl5IwgFeTz1PPlflnterRX
GThvJuuM78DfpIzWG+CdJNT3YqlShKCZGkztUzg3d5nEjps1oKI4QTa0du/4lbj2
6cBX1DAPYj7+f1wCurMehMOvRUL5+saLNQMhSKYwWmIFXy6D+F7VAB+9B6GE3L7h
nzZLtByTtUDrHXO42ktloBKRwFsso221
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:36:19 2025 by rpki-client