Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC510/EC31E258BD1111EAB380A722C4F9AE02/9h2bowrjVcgD-A3M8sQV3gB9eVM.mft
File:                     9h2bowrjVcgD-A3M8sQV3gB9eVM.mft (raw, json)
Hash identifier:          /yJnLy9Rz0Px0Omb2my8glvP7Vxf9fgjMi2EqZecztE=
Subject key identifier:   F9:79:33:3D:AF:A0:D0:2B:DC:69:01:5F:B3:1C:C1:0B:58:DE:9E:33
Authority key identifier: F6:1D:9B:A3:0A:E3:55:C8:03:F8:0D:CC:F2:C4:15:DE:00:7D:79:53
Certificate issuer:       /CN=A91CC510/serialNumber=F61D9BA30AE355C803F80DCCF2C415DE007D7953
Certificate serial:       0883
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h2bowrjVcgD-A3M8sQV3gB9eVM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC510/EC31E258BD1111EAB380A722C4F9AE02/9h2bowrjVcgD-A3M8sQV3gB9eVM.mft
Manifest number:          086A
Signing time:             Thu 30 Jan 2025 20:44:47 +0000
Manifest this update:     Thu 30 Jan 2025 20:44:47 +0000
Manifest next update:     Thu 06 Feb 2025 20:44:47 +0000
Files and hashes:         1: 9h2bowrjVcgD-A3M8sQV3gB9eVM.crl (hash: STnB8G8iSMq6OGmq7nRU0VBWoN6/YxsHLZ2HYs6yfko=)
                          2: F84E14F6F7A411EC88E84259C4F9AE02.roa (hash: P/auEJgutUVl8dFubgi2n2lxk6hlWtNvdq3SLvKI4fQ=)
                          3: A069584E32B311EF809D8B35C4F9AE02.roa (hash: Gw0kNl2t8PieKLC+KrgxefhotSeMoj6pQV0MiEUUWsE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2179 (0x883)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC510/serialNumber=F61D9BA30AE355C803F80DCCF2C415DE007D7953
        Validity
            Not Before: Jan 30 20:44:47 2025 GMT
            Not After : Feb  6 20:44:47 2025 GMT
        Subject: CN=679be4bf-b0e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:73:a3:81:20:93:ca:41:5a:2e:2c:12:87:46:
                    9b:f7:5c:52:7d:e4:af:72:6d:6e:83:24:bc:96:98:
                    94:a2:4a:e7:97:eb:6f:49:26:cb:c8:96:07:d5:04:
                    4e:c5:3c:62:19:3f:3d:68:94:72:2e:40:38:32:ab:
                    e0:5e:8f:7a:3e:73:93:cb:e5:a8:0e:3e:a0:aa:0f:
                    73:a8:67:f9:57:49:dd:29:2b:5f:7a:a3:e1:bc:08:
                    64:5d:31:53:9a:48:68:c9:29:1b:be:55:70:f1:6d:
                    b8:db:50:3c:4d:fb:8c:e0:75:f4:de:75:02:4a:a1:
                    bc:72:26:41:a9:4d:a7:55:8f:3b:5b:6f:1c:b7:d2:
                    61:ec:6f:ee:a1:1b:a9:60:00:ee:a5:6c:21:f1:0c:
                    e7:6e:f2:12:fc:c5:a6:50:7a:cb:ee:8f:1c:7e:d8:
                    b1:e4:4f:41:a8:73:a1:48:01:7b:7d:b2:fe:b5:ec:
                    11:48:59:ba:e7:5f:f3:d0:66:84:42:05:a4:a6:82:
                    d0:57:79:a4:d3:2c:dd:69:b3:2b:7c:64:d2:b6:0f:
                    0d:35:b7:57:1f:81:2a:f5:87:bf:06:00:03:44:b7:
                    a2:ff:27:e9:aa:2d:02:69:0d:23:d1:34:e1:51:73:
                    17:10:b1:2f:12:ce:dd:43:dd:30:86:90:02:e5:1d:
                    d0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:79:33:3D:AF:A0:D0:2B:DC:69:01:5F:B3:1C:C1:0B:58:DE:9E:33
            X509v3 Authority Key Identifier:
                keyid:F6:1D:9B:A3:0A:E3:55:C8:03:F8:0D:CC:F2:C4:15:DE:00:7D:79:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC510/EC31E258BD1111EAB380A722C4F9AE02/9h2bowrjVcgD-A3M8sQV3gB9eVM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h2bowrjVcgD-A3M8sQV3gB9eVM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC510/EC31E258BD1111EAB380A722C4F9AE02/9h2bowrjVcgD-A3M8sQV3gB9eVM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:42:be:d5:05:3e:b8:3b:10:ab:92:f0:b2:d7:2a:02:95:49:
         22:a2:4d:0b:cb:22:53:35:ac:6f:73:36:f5:16:31:87:7d:79:
         02:76:17:84:38:46:03:9d:30:9b:ee:6c:35:1f:b0:35:97:e1:
         49:3b:af:c8:8f:0d:94:62:ed:7a:fa:a3:97:59:bf:5f:6b:c5:
         09:a0:83:4c:9c:c4:ba:ee:2d:42:67:2f:aa:d8:e8:59:2f:27:
         ab:fd:37:67:af:c7:69:cf:97:07:ae:58:92:b1:7c:c7:00:5a:
         da:bc:55:ca:ed:95:c5:b0:c2:8e:2c:07:73:1a:30:c4:91:54:
         b8:60:ec:69:30:42:8d:04:19:2c:70:c5:f1:e6:bd:a2:25:72:
         ed:5f:7b:10:93:ac:e2:e8:47:ba:ce:ac:31:d1:37:44:e5:13:
         29:ad:3d:7a:8c:12:4f:98:34:2d:d5:ac:84:18:b7:1b:5f:e2:
         27:88:1c:aa:48:75:1a:cb:18:40:75:24:a1:eb:27:6b:a4:ca:
         8c:65:a6:e5:e3:19:f6:f8:7c:d3:e3:e0:99:df:7d:b0:fa:ad:
         0b:32:9d:7f:a9:16:8a:90:2b:71:2a:42:18:9d:c5:42:fc:89:
         f3:36:29:3f:64:1f:ed:db:28:0c:a7:4c:2a:00:b1:f5:f9:f9:
         64:4d:79:0a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0M1MTAxMTAvBgNVBAUTKEY2MUQ5QkEzMEFFMzU1QzgwM0Y4MERDQ0YyQzQxNURF
MDA3RDc5NTMwHhcNMjUwMTMwMjA0NDQ3WhcNMjUwMjA2MjA0NDQ3WjAYMRYwFAYD
VQQDEw02NzliZTRiZi1iMGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2HOjgSCTykFaLiwSh0ab91xSfeSvcm1ugyS8lpiUokrnl+tvSSbLyJYH1QRO
xTxiGT89aJRyLkA4MqvgXo96PnOTy+WoDj6gqg9zqGf5V0ndKStfeqPhvAhkXTFT
mkhoySkbvlVw8W2421A8TfuM4HX03nUCSqG8ciZBqU2nVY87W28ct9Jh7G/uoRup
YADupWwh8QznbvIS/MWmUHrL7o8cftix5E9BqHOhSAF7fbL+tewRSFm651/z0GaE
QgWkpoLQV3mk0yzdabMrfGTStg8NNbdXH4Eq9Ye/BgADRLei/yfpqi0CaQ0j0TTh
UXMXELEvEs7dQ90whpAC5R3QSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPl5Mz2v
oNAr3GkBX7McwQtY3p4zMB8GA1UdIwQYMBaAFPYdm6MK41XIA/gNzPLEFd4AfXlT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzUxMC9FQzMxRTI1OEJE
MTExMUVBQjM4MEE3MjJDNEY5QUUwMi85aDJib3dyalZjZ0QtQTNNOHNRVjNnQjll
Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzloMmJvd3JqVmNnRC1BM004c1FWM2dCOWVWTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QzUxMC9FQzMxRTI1OEJEMTExMUVBQjM4MEE3MjJDNEY5QUUwMi85aDJib3dyalZj
Z0QtQTNNOHNRVjNnQjllVk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCfQr7VBT64OxCrkvCy1yoClUkiok0LyyJTNaxvczb1FjGHfXkCdheE
OEYDnTCb7mw1H7A1l+FJO6/Ijw2UYu16+qOXWb9fa8UJoINMnMS67i1CZy+q2OhZ
Lyer/Tdnr8dpz5cHrliSsXzHAFravFXK7ZXFsMKOLAdzGjDEkVS4YOxpMEKNBBks
cMXx5r2iJXLtX3sQk6zi6Ee6zqwx0TdE5RMprT16jBJPmDQt1ayEGLcbX+IniByq
SHUayxhAdSSh6ydrpMqMZabl4xn2+HzT4+CZ332w+q0LMp1/qRaKkCtxKkIYncVC
/InzNik/ZB/t2ygMp0wqALH1+flkTXkK
-----END CERTIFICATE-----