Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft
File:                     bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft (raw, json)
Hash identifier:          7LPDaWvCl7JYdCRIPg0RNgZaEL/puxfbO2FX4k7Cx2E=
Subject key identifier:   BB:96:8A:B1:E9:EE:8F:F9:F2:37:9F:67:B1:10:FD:20:E7:44:81:CA
Authority key identifier: 6C:19:46:97:81:6F:9B:13:0B:A5:3C:F4:BE:E6:76:01:59:4E:8C:B1
Certificate issuer:       /CN=A91CCAF1/serialNumber=6C194697816F9B130BA53CF4BEE67601594E8CB1
Certificate serial:       39
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft
Manifest number:          39
Signing time:             Fri 31 Jan 2025 06:35:31 +0000
Manifest this update:     Fri 31 Jan 2025 06:35:30 +0000
Manifest next update:     Fri 07 Feb 2025 06:35:30 +0000
Files and hashes:         1: bBlGl4FvmxMLpTz0vuZ2AVlOjLE.crl (hash: YuuSE2nwTiw1wdogZ2280qUE67jbAX2UJFBkn6jEXnA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCAF1/serialNumber=6C194697816F9B130BA53CF4BEE67601594E8CB1
        Validity
            Not Before: Jan 31 06:35:30 2025 GMT
            Not After : Feb  7 06:35:30 2025 GMT
        Subject: CN=679c6f32-4283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9e:36:6a:b7:d6:95:6b:ff:84:f8:dd:a9:62:
                    45:e4:81:c3:6a:26:f6:d9:68:84:46:ac:ee:39:16:
                    a3:39:8e:40:9a:83:bd:bc:d5:ef:ad:f4:4c:71:c9:
                    f6:cf:23:73:18:70:4a:ef:5d:95:7b:43:56:a9:57:
                    95:cd:3f:89:c6:4e:ef:15:13:bd:98:3c:de:d7:c1:
                    cb:22:2c:eb:47:a7:d7:6d:81:16:54:25:26:13:6f:
                    e2:9e:d3:03:a7:4b:b1:26:47:81:57:a8:1c:21:58:
                    45:fc:56:7f:76:47:ea:5d:cf:4d:86:2a:d5:0b:3d:
                    4e:28:65:46:54:39:89:28:55:a3:1b:f0:1f:94:27:
                    26:72:cb:1d:79:05:d7:ce:97:91:98:14:89:c8:30:
                    59:5c:ce:3b:24:71:f2:02:55:1f:c5:10:68:94:6c:
                    1f:3d:ea:f6:4c:bc:5f:34:a7:4a:76:b6:51:21:93:
                    ca:1b:12:b1:67:b9:83:4e:b3:4e:57:c1:82:c4:d1:
                    86:56:a5:66:c5:06:b6:87:32:c2:8e:1a:4b:a8:02:
                    6b:6b:3e:31:30:b2:b2:f0:68:7f:33:20:36:09:1b:
                    f0:cf:12:28:d3:b7:fe:97:04:6a:43:8a:0a:ae:b8:
                    11:60:2f:75:4d:9e:a6:0c:c6:76:fb:95:5b:02:83:
                    5d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:96:8A:B1:E9:EE:8F:F9:F2:37:9F:67:B1:10:FD:20:E7:44:81:CA
            X509v3 Authority Key Identifier:
                keyid:6C:19:46:97:81:6F:9B:13:0B:A5:3C:F4:BE:E6:76:01:59:4E:8C:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:d0:c7:8c:c2:3e:ba:ba:f6:ec:72:36:86:6e:77:c4:c5:16:
         1e:85:c3:92:e7:8f:9f:a1:a6:e7:7e:5e:03:0f:50:78:49:c2:
         76:70:95:62:d0:cf:70:69:2c:d8:98:b8:a1:0a:bb:f9:2f:d2:
         a3:48:84:d1:90:db:d6:94:51:3f:ae:67:a1:4a:71:36:c4:4e:
         ef:cf:ed:a5:a0:67:e2:62:2b:5a:ca:8a:ee:8e:2b:17:2d:31:
         22:9f:7c:e7:e0:62:1e:30:31:fb:42:71:20:e8:35:36:d0:73:
         f8:85:18:32:36:e7:ab:e9:2c:36:35:4e:4b:e4:ff:3c:5a:4e:
         e5:89:82:9b:d1:2a:c8:90:21:30:f6:ed:94:82:c8:0e:24:2f:
         44:a5:45:3f:33:2a:75:57:fe:38:02:3a:1b:23:05:1a:64:42:
         c8:8b:02:9f:a3:7e:eb:00:ef:25:eb:2c:1a:d4:a7:90:7c:90:
         39:6e:86:55:fb:5f:85:03:2c:fc:f9:31:4a:88:58:a3:ba:c3:
         04:42:6b:0a:d1:55:c7:bc:90:ad:eb:e3:24:92:cb:7d:79:f0:
         6f:30:55:99:19:4f:e5:c4:29:cb:07:82:36:f9:81:67:f5:33:
         00:4e:7c:50:e9:72:0a:29:81:0d:b3:13:ca:9a:c5:9d:b3:29:
         f4:39:b1:f6
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
Q0FGMTExMC8GA1UEBRMoNkMxOTQ2OTc4MTZGOUIxMzBCQTUzQ0Y0QkVFNjc2MDE1
OTRFOENCMTAeFw0yNTAxMzEwNjM1MzBaFw0yNTAyMDcwNjM1MzBaMBgxFjAUBgNV
BAMTDTY3OWM2ZjMyLTQyODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCynjZqt9aVa/+E+N2pYkXkgcNqJvbZaIRGrO45FqM5jkCag7281e+t9ExxyfbP
I3MYcErvXZV7Q1apV5XNP4nGTu8VE72YPN7XwcsiLOtHp9dtgRZUJSYTb+Ke0wOn
S7EmR4FXqBwhWEX8Vn92R+pdz02GKtULPU4oZUZUOYkoVaMb8B+UJyZyyx15BdfO
l5GYFInIMFlczjskcfICVR/FEGiUbB896vZMvF80p0p2tlEhk8obErFnuYNOs05X
wYLE0YZWpWbFBraHMsKOGkuoAmtrPjEwsrLwaH8zIDYJG/DPEijTt/6XBGpDigqu
uBFgL3VNnqYMxnb7lVsCg13bAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUu5aKsenu
j/nyN59nsRD9IOdEgcowHwYDVR0jBBgwFoAUbBlGl4FvmxMLpTz0vuZ2AVlOjLEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDQUYxLzA5QzBEMzY2OEFB
RDExRUZCRUY5MTY2QUM0RjlBRTAyL2JCbEdsNEZ2bXhNTHBUejB2dVoyQVZsT2pM
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvYkJsR2w0RnZteE1McFR6MHZ1WjJBVmxPakxFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND
QUYxLzA5QzBEMzY2OEFBRDExRUZCRUY5MTY2QUM0RjlBRTAyL2JCbEdsNEZ2bXhN
THBUejB2dVoyQVZsT2pMRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBACXQx4zCPrq69uxyNoZud8TFFh6Fw5Lnj5+hpud+XgMPUHhJwnZwlWLQ
z3BpLNiYuKEKu/kv0qNIhNGQ29aUUT+uZ6FKcTbETu/P7aWgZ+JiK1rKiu6OKxct
MSKffOfgYh4wMftCcSDoNTbQc/iFGDI256vpLDY1Tkvk/zxaTuWJgpvRKsiQITD2
7ZSCyA4kL0SlRT8zKnVX/jgCOhsjBRpkQsiLAp+jfusA7yXrLBrUp5B8kDluhlX7
X4UDLPz5MUqIWKO6wwRCawrRVce8kK3r4ySSy3158G8wVZkZT+XEKcsHgjb5gWf1
MwBOfFDpcgopgQ2zE8qaxZ2zKfQ5sfY=
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:18 2025 by rpki-client