Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.mft
File:                     wuC1g9pA223YMwUcBSRZnhpZAsY.mft (raw, json)
Hash identifier:          CHRf1ezPaKALQddF7Do//jc1OGRAsUiMIjLkxiuiFGE=
Subject key identifier:   A1:F6:19:24:21:8B:E5:D5:D9:70:E2:62:4A:66:AF:9D:66:C3:DE:40
Authority key identifier: C2:E0:B5:83:DA:40:DB:6D:D8:33:05:1C:05:24:59:9E:1A:59:02:C6
Certificate issuer:       /CN=A91CCDD3/serialNumber=C2E0B583DA40DB6DD833051C0524599E1A5902C6
Certificate serial:       0814
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuC1g9pA223YMwUcBSRZnhpZAsY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.mft
Manifest number:          0804
Signing time:             Thu 30 Jan 2025 20:56:50 +0000
Manifest this update:     Thu 30 Jan 2025 20:56:49 +0000
Manifest next update:     Thu 06 Feb 2025 20:56:49 +0000
Files and hashes:         1: wuC1g9pA223YMwUcBSRZnhpZAsY.crl (hash: RTe6bn4fRCQS6jGCKPdFu7+hoR/Cp6iYBbVwarSCFE8=)
                          2: 68EAE318D09411EA9D19403FC4F9AE02.roa (hash: NfQ4UAwnkdfuKwTUzk7F8ZyufHOoP98CR8jhzDkK95Y=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2068 (0x814)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCDD3/serialNumber=C2E0B583DA40DB6DD833051C0524599E1A5902C6
        Validity
            Not Before: Jan 30 20:56:49 2025 GMT
            Not After : Feb  6 20:56:49 2025 GMT
        Subject: CN=679be791-0d80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:41:ea:0a:d1:ca:5f:ad:1d:c8:6e:41:ce:bc:
                    0b:2e:75:41:9b:55:1f:9e:88:bc:75:8d:a0:d9:05:
                    6e:0e:f2:71:3d:09:2c:e7:9f:e1:c6:2f:2a:28:d5:
                    41:18:9f:f3:cf:5c:73:d2:dc:d5:31:23:d5:e0:0e:
                    3a:5e:e0:b4:bb:02:8d:df:46:a9:f3:fa:d9:6d:47:
                    d9:b3:81:f1:de:37:ea:21:3b:0d:78:24:d0:56:17:
                    58:89:d1:16:f3:7a:d8:c5:4c:27:ae:1e:57:7e:22:
                    ce:e7:bc:a7:ce:e8:10:bb:b0:8f:df:90:79:6d:9d:
                    97:f8:6f:24:43:1e:66:16:66:c6:9b:bb:13:44:31:
                    09:05:0f:ad:08:d5:37:01:4d:17:a2:40:81:83:a2:
                    3a:09:4e:e9:46:64:0c:f3:bf:15:0d:3c:6b:c2:70:
                    1f:30:ca:82:3d:a9:20:14:5c:19:aa:9e:4e:46:e3:
                    75:3e:94:67:9a:b1:e0:52:b9:38:8e:cc:bd:39:91:
                    3a:93:f9:71:19:a9:70:8c:8c:43:e2:28:ff:41:99:
                    d5:b0:38:5c:24:2f:da:96:3e:15:6b:60:26:03:af:
                    5c:4d:d7:7e:c9:ae:70:41:d2:44:ee:22:79:da:2e:
                    c6:b1:22:db:b5:33:54:15:50:ac:47:6a:3b:71:f7:
                    7a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:F6:19:24:21:8B:E5:D5:D9:70:E2:62:4A:66:AF:9D:66:C3:DE:40
            X509v3 Authority Key Identifier:
                keyid:C2:E0:B5:83:DA:40:DB:6D:D8:33:05:1C:05:24:59:9E:1A:59:02:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuC1g9pA223YMwUcBSRZnhpZAsY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:f6:c9:9d:63:48:ad:cd:c7:a9:b5:5f:26:97:4b:b8:b0:55:
         4b:b5:7c:20:92:cb:db:3d:55:ef:57:f7:3a:1a:bd:2f:0e:83:
         27:cd:fd:0e:b2:38:f5:34:ef:a0:24:c7:89:9d:ea:43:84:d8:
         a8:39:72:b7:87:c3:3f:b3:ab:b7:46:e6:f3:bf:b1:98:3c:5d:
         47:22:c5:ff:c0:ca:b1:65:b0:3b:b3:52:c7:ad:15:0a:21:8d:
         30:ad:76:b0:f0:11:ff:a4:5b:63:49:f4:31:d3:5a:a1:4c:16:
         d2:88:ac:64:ba:05:01:f9:5e:c3:f6:18:9f:b7:ef:a6:55:87:
         ff:51:aa:bd:d4:7e:90:62:80:f4:81:8d:3b:ff:a0:f2:26:a2:
         bc:4d:57:81:55:21:ca:fd:c2:d6:cb:09:b9:3b:13:82:69:0c:
         bf:f7:00:d3:13:9f:b9:97:ab:29:1f:73:80:fc:a2:e3:55:0d:
         66:79:6f:35:9b:77:c5:5c:0e:86:9d:51:a8:d9:b8:82:38:c5:
         81:6d:db:ff:ce:82:45:75:15:52:c2:b4:ed:da:7a:08:93:c9:
         ae:3b:d6:85:84:d1:e4:51:4b:ef:a3:23:2c:d9:f0:bb:a7:7f:
         1f:5d:a6:e8:ab:3e:ad:8d:fe:c9:0f:56:6e:16:ed:8d:fa:d3:
         7e:5f:de:d6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCBQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0NERDMxMTAvBgNVBAUTKEMyRTBCNTgzREE0MERCNkREODMzMDUxQzA1MjQ1OTlF
MUE1OTAyQzYwHhcNMjUwMTMwMjA1NjQ5WhcNMjUwMjA2MjA1NjQ5WjAYMRYwFAYD
VQQDEw02NzliZTc5MS0wZDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA10HqCtHKX60dyG5BzrwLLnVBm1Ufnoi8dY2g2QVuDvJxPQks55/hxi8qKNVB
GJ/zz1xz0tzVMSPV4A46XuC0uwKN30ap8/rZbUfZs4Hx3jfqITsNeCTQVhdYidEW
83rYxUwnrh5XfiLO57ynzugQu7CP35B5bZ2X+G8kQx5mFmbGm7sTRDEJBQ+tCNU3
AU0XokCBg6I6CU7pRmQM878VDTxrwnAfMMqCPakgFFwZqp5ORuN1PpRnmrHgUrk4
jsy9OZE6k/lxGalwjIxD4ij/QZnVsDhcJC/alj4Va2AmA69cTdd+ya5wQdJE7iJ5
2i7GsSLbtTNUFVCsR2o7cfd6FQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKH2GSQh
i+XV2XDiYkpmr51mw95AMB8GA1UdIwQYMBaAFMLgtYPaQNtt2DMFHAUkWZ4aWQLG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0REMy8wRDcxNTAzMkQw
OTIxMUVBQTU3MTJBM0NDNEY5QUUwMi93dUMxZzlwQTIyM1lNd1VjQlNSWm5ocFpB
c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3d1QzFnOXBBMjIzWU13VWNCU1JabmhwWkFzWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
Q0REMy8wRDcxNTAzMkQwOTIxMUVBQTU3MTJBM0NDNEY5QUUwMi93dUMxZzlwQTIy
M1lNd1VjQlNSWm5ocFpBc1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBR9smdY0itzceptV8ml0u4sFVLtXwgksvbPVXvV/c6Gr0vDoMnzf0O
sjj1NO+gJMeJnepDhNioOXK3h8M/s6u3Rubzv7GYPF1HIsX/wMqxZbA7s1LHrRUK
IY0wrXaw8BH/pFtjSfQx01qhTBbSiKxkugUB+V7D9hift++mVYf/Uaq91H6QYoD0
gY07/6DyJqK8TVeBVSHK/cLWywm5OxOCaQy/9wDTE5+5l6spH3OA/KLjVQ1meW81
m3fFXA6GnVGo2biCOMWBbdv/zoJFdRVSwrTt2noIk8muO9aFhNHkUUvvoyMs2fC7
p38fXaboqz6tjf7JD1ZuFu2N+tN+X97W
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:03:22 2025 by rpki-client