Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft
File:                     NSwvQv_2bLhqacZ-5hurbhEVTss.mft (raw, json)
Hash identifier:          T0d5B8C7Yhel8NEk1Y1M+jSDp9HxboZZYVitEX0ChKg=
Subject key identifier:   28:B6:F6:FE:A6:CF:1B:F8:D3:33:74:D4:9A:F1:6F:03:A6:A8:D7:92
Authority key identifier: 35:2C:2F:42:FF:F6:6C:B8:6A:69:C6:7E:E6:1B:AB:6E:11:15:4E:CB
Certificate issuer:       /CN=A91CCD0C/serialNumber=352C2F42FFF66CB86A69C67EE61BAB6E11154ECB
Certificate serial:       73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSwvQv_2bLhqacZ-5hurbhEVTss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft
Manifest number:          72
Signing time:             Fri 31 Jan 2025 05:52:12 +0000
Manifest this update:     Fri 31 Jan 2025 05:52:11 +0000
Manifest next update:     Fri 07 Feb 2025 05:52:11 +0000
Files and hashes:         1: NSwvQv_2bLhqacZ-5hurbhEVTss.crl (hash: wC0wX/f4uq6uWvWeWMIG/YLAxmViaw7vqXyIBgpcWw4=)
                          2: E5BB4DB260E411EF83727F5CC4F9AE02.roa (hash: eZp2CA+M2VeWLVisSQN2NYrGntfUlIE7QcZK9HLRl2Y=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115 (0x73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCD0C/serialNumber=352C2F42FFF66CB86A69C67EE61BAB6E11154ECB
        Validity
            Not Before: Jan 31 05:52:11 2025 GMT
            Not After : Feb  7 05:52:11 2025 GMT
        Subject: CN=679c650b-fdab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:56:f9:58:18:e5:93:dd:21:7b:d3:31:9d:93:
                    1d:50:65:71:42:fe:14:58:72:fd:c5:86:a1:c0:59:
                    74:af:56:79:15:e9:16:68:2c:98:e9:5f:e4:e7:1b:
                    c4:8a:cb:56:bb:05:d9:04:3b:c0:f2:fb:a9:75:70:
                    f7:2b:87:bb:0b:6e:ad:f7:0d:59:35:e9:90:b4:6a:
                    60:e6:33:ad:c1:49:fa:d2:4b:60:a8:0f:b8:ed:03:
                    8a:01:2a:db:c5:21:d3:85:25:f9:45:68:89:17:42:
                    2c:ff:30:16:12:8a:d0:25:b2:12:8e:aa:d6:b8:5e:
                    b8:7e:42:7a:55:89:39:16:97:7d:7e:1d:eb:3a:be:
                    9c:27:69:19:2f:b0:da:cc:7d:f8:0c:6a:b7:53:80:
                    78:be:5a:98:89:1c:cc:0f:2a:77:fb:dc:79:bb:43:
                    3f:0b:aa:0c:6f:2a:cb:bf:15:65:e0:f6:d8:57:a9:
                    94:02:b0:a7:27:ee:6c:d2:16:2a:43:ed:d2:21:8a:
                    3e:c2:38:e3:6c:e1:b3:17:38:30:cb:af:a6:7a:84:
                    02:0d:35:3d:6e:6c:a6:47:7e:6a:f9:d5:4d:1a:72:
                    b9:c2:e9:c8:78:4a:a6:7f:d3:70:e8:b8:4c:d6:21:
                    e7:5a:94:fa:b2:ff:97:a1:ef:f8:97:c6:df:df:c0:
                    3f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:B6:F6:FE:A6:CF:1B:F8:D3:33:74:D4:9A:F1:6F:03:A6:A8:D7:92
            X509v3 Authority Key Identifier:
                keyid:35:2C:2F:42:FF:F6:6C:B8:6A:69:C6:7E:E6:1B:AB:6E:11:15:4E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSwvQv_2bLhqacZ-5hurbhEVTss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:98:92:ac:23:13:f7:b5:d0:14:9c:42:32:ae:6d:49:cb:2f:
         ad:4a:16:67:47:a6:fa:c2:b9:08:3b:08:81:81:d6:ab:58:75:
         cf:16:01:60:c3:d3:7f:5a:89:5e:68:ec:e4:ab:d2:0e:47:9d:
         20:17:73:02:46:e0:c9:f2:ee:5c:d0:ac:75:7e:5d:7a:96:3f:
         1f:c3:e8:a3:55:16:76:2c:43:46:6f:ab:d7:ff:64:5f:0d:b2:
         be:8e:fc:26:47:9c:c2:6c:57:91:d1:ae:44:a4:2a:18:df:40:
         73:eb:4d:b6:59:1b:91:16:5e:cd:83:ff:15:d5:1d:b2:39:2d:
         56:2c:07:3a:4f:4b:d9:48:64:1a:1d:f5:7f:da:41:35:64:6f:
         f5:f1:b4:7d:73:4e:01:df:04:d3:69:78:1a:8e:d9:90:d5:50:
         a1:21:40:4c:5f:8d:ce:ba:35:7b:e4:ef:68:24:51:4c:e2:c5:
         d4:c8:d8:84:a5:30:d5:4a:67:1c:b2:18:cb:9e:27:c9:7f:a3:
         82:6a:ee:18:a5:d5:6b:b4:14:a6:b9:52:c2:2c:cb:d9:ba:ca:
         fb:df:18:f7:3c:d0:f3:d7:3e:d3:7d:d9:db:63:8f:07:21:77:
         af:c8:46:44:25:7f:4a:cc:a2:48:b8:60:88:a7:c0:d5:9c:c2:
         e1:00:04:95
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
Q0QwQzExMC8GA1UEBRMoMzUyQzJGNDJGRkY2NkNCODZBNjlDNjdFRTYxQkFCNkUx
MTE1NEVDQjAeFw0yNTAxMzEwNTUyMTFaFw0yNTAyMDcwNTUyMTFaMBgxFjAUBgNV
BAMTDTY3OWM2NTBiLWZkYWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCaVvlYGOWT3SF70zGdkx1QZXFC/hRYcv3FhqHAWXSvVnkV6RZoLJjpX+TnG8SK
y1a7BdkEO8Dy+6l1cPcrh7sLbq33DVk16ZC0amDmM63BSfrSS2CoD7jtA4oBKtvF
IdOFJflFaIkXQiz/MBYSitAlshKOqta4Xrh+QnpViTkWl31+Hes6vpwnaRkvsNrM
ffgMardTgHi+WpiJHMwPKnf73Hm7Qz8LqgxvKsu/FWXg9thXqZQCsKcn7mzSFipD
7dIhij7COONs4bMXODDLr6Z6hAINNT1ubKZHfmr51U0acrnC6ch4SqZ/03DouEzW
IedalPqy/5eh7/iXxt/fwD8vAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKLb2/qbP
G/jTM3TUmvFvA6ao15IwHwYDVR0jBBgwFoAUNSwvQv/2bLhqacZ+5hurbhEVTssw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDRDBDLzgxOUEwMjM0MzJD
QjExRUY5RUEwQzk2QUM0RjlBRTAyL05Td3ZRdl8yYkxocWFjWi01aHVyYmhFVlRz
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvTlN3dlF2XzJiTGhxYWNaLTVodXJiaEVWVHNzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND
RDBDLzgxOUEwMjM0MzJDQjExRUY5RUEwQzk2QUM0RjlBRTAyL05Td3ZRdl8yYkxo
cWFjWi01aHVyYmhFVlRzcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAEyYkqwjE/e10BScQjKubUnLL61KFmdHpvrCuQg7CIGB1qtYdc8WAWDD
039aiV5o7OSr0g5HnSAXcwJG4Mny7lzQrHV+XXqWPx/D6KNVFnYsQ0Zvq9f/ZF8N
sr6O/CZHnMJsV5HRrkSkKhjfQHPrTbZZG5EWXs2D/xXVHbI5LVYsBzpPS9lIZBod
9X/aQTVkb/XxtH1zTgHfBNNpeBqO2ZDVUKEhQExfjc66NXvk72gkUUzixdTI2ISl
MNVKZxyyGMueJ8l/o4Jq7hil1Wu0FKa5UsIsy9m6yvvfGPc80PPXPtN92dtjjwch
d6/IRkQlf0rMoki4YIinwNWcwuEABJU=
-----END CERTIFICATE-----