Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD5B5/A46B9912164D11EE96858534C4F9AE02/pVDumUQoL8_DhLCCv_qI-G2wQXk.mft
File:                     pVDumUQoL8_DhLCCv_qI-G2wQXk.mft (raw, json)
Hash identifier:          T6wowayDPXLlr3EzGSHaZog2JT8ctf2g6E3bLUynO0k=
Subject key identifier:   3B:4C:5A:DE:84:00:3B:2E:2D:C8:0C:39:15:D8:38:07:32:CF:6F:FC
Authority key identifier: A5:50:EE:99:44:28:2F:CF:C3:84:B0:82:BF:FA:88:F8:6D:B0:41:79
Certificate issuer:       /CN=A91CD5B5/serialNumber=A550EE9944282FCFC384B082BFFA88F86DB04179
Certificate serial:       0139
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pVDumUQoL8_DhLCCv_qI-G2wQXk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD5B5/A46B9912164D11EE96858534C4F9AE02/pVDumUQoL8_DhLCCv_qI-G2wQXk.mft
Manifest number:          0131
Signing time:             Fri 31 Jan 2025 03:44:36 +0000
Manifest this update:     Fri 31 Jan 2025 03:44:35 +0000
Manifest next update:     Fri 07 Feb 2025 03:44:35 +0000
Files and hashes:         1: pVDumUQoL8_DhLCCv_qI-G2wQXk.crl (hash: Sa1o3x3eJCtry3tm1amoa1xkepi8I3HXOh+vnn/GjCk=)
                          2: 6C1498CE9B1811EFAEB7E76EC4F9AE02.roa (hash: yOtTIq0fcuWqwPlV5sPcr1ebgyRQ1WaOBXCbzpyrda0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 313 (0x139)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD5B5/serialNumber=A550EE9944282FCFC384B082BFFA88F86DB04179
        Validity
            Not Before: Jan 31 03:44:35 2025 GMT
            Not After : Feb  7 03:44:35 2025 GMT
        Subject: CN=679c4723-b9ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:68:68:99:fd:68:60:ef:4e:5a:8a:9c:10:e7:
                    0f:51:91:df:34:e0:43:08:85:9e:36:23:ae:1b:c4:
                    0b:2a:c2:63:8e:23:95:2c:89:f9:7d:c2:59:ed:8c:
                    b0:3c:ca:f1:c7:32:58:32:ab:c4:f2:30:5e:3f:ae:
                    1d:f8:39:3a:da:e2:e4:a2:6f:a8:79:40:c6:30:41:
                    50:e8:60:21:c1:05:31:b9:81:d3:72:5b:3c:e1:c3:
                    7a:e3:3f:67:f8:96:d5:79:ca:6c:15:8f:23:04:60:
                    b4:fd:c0:64:60:1b:52:d0:5f:01:aa:ee:0f:57:bc:
                    e9:b1:59:b2:34:5e:f6:b5:c0:a1:c6:ed:1e:74:94:
                    db:c0:45:82:dd:7a:28:62:9e:c4:af:44:13:4c:43:
                    03:ca:6d:85:55:63:60:92:28:bf:07:d9:d5:f2:48:
                    15:b9:22:23:c0:63:ca:bd:e4:c4:fc:f4:e2:41:9a:
                    15:68:7e:35:b0:1a:f0:2b:09:e6:13:81:b1:50:9a:
                    55:0c:97:66:21:75:59:df:e9:26:01:f5:18:27:5d:
                    7a:0f:90:06:72:f9:97:65:96:6b:dd:71:a6:19:34:
                    83:9b:6f:74:44:3f:63:d4:d7:6c:5f:79:12:c3:23:
                    d5:83:5b:a3:4c:1d:6a:9f:71:39:87:bb:32:cd:b4:
                    cb:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:4C:5A:DE:84:00:3B:2E:2D:C8:0C:39:15:D8:38:07:32:CF:6F:FC
            X509v3 Authority Key Identifier:
                keyid:A5:50:EE:99:44:28:2F:CF:C3:84:B0:82:BF:FA:88:F8:6D:B0:41:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD5B5/A46B9912164D11EE96858534C4F9AE02/pVDumUQoL8_DhLCCv_qI-G2wQXk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pVDumUQoL8_DhLCCv_qI-G2wQXk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD5B5/A46B9912164D11EE96858534C4F9AE02/pVDumUQoL8_DhLCCv_qI-G2wQXk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:a9:e5:07:5b:84:3b:ea:9d:ab:39:ad:51:ca:9d:c4:f4:03:
         da:f2:ab:dc:ac:26:11:8c:87:88:f0:d6:d2:c5:cb:38:4e:13:
         db:58:92:0b:8f:0f:8c:23:e0:6c:25:44:71:a9:55:7c:a6:07:
         6d:2a:da:05:a4:4a:1c:82:ec:33:5e:3e:bd:bf:60:af:f4:de:
         e6:66:d0:d5:77:9b:1d:f5:ca:f1:55:7f:74:5d:b4:f2:68:cd:
         f2:5f:c9:01:de:65:9c:61:ec:c1:a8:e0:df:31:81:f7:2e:28:
         ec:6d:29:27:d7:c3:30:f7:24:29:a7:75:9b:99:cc:ce:8a:f7:
         51:de:20:bc:36:3b:84:f2:87:d0:fb:4e:f2:27:d4:2d:c8:22:
         d1:21:fe:2b:30:cf:bf:ac:7b:30:9c:b0:63:54:61:61:40:8d:
         34:ec:7b:07:4e:23:0a:12:d1:7f:da:58:5e:6e:ea:6e:4c:24:
         66:e2:41:d0:b8:4f:60:aa:b2:19:9f:ba:db:aa:36:c8:f3:37:
         b2:a1:18:fe:f6:6e:1c:29:08:52:ad:34:f7:87:29:76:c9:df:
         43:68:55:d1:7d:d4:3e:2a:d4:30:76:16:ef:1c:d5:eb:f2:f4:
         77:03:56:76:cb:79:49:7a:03:e7:3b:84:25:0c:69:35:67:5a:
         ba:5c:b2:ed
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICATkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0Q1QjUxMTAvBgNVBAUTKEE1NTBFRTk5NDQyODJGQ0ZDMzg0QjA4MkJGRkE4OEY4
NkRCMDQxNzkwHhcNMjUwMTMxMDM0NDM1WhcNMjUwMjA3MDM0NDM1WjAYMRYwFAYD
VQQDEw02NzljNDcyMy1iOWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA22homf1oYO9OWoqcEOcPUZHfNOBDCIWeNiOuG8QLKsJjjiOVLIn5fcJZ7Yyw
PMrxxzJYMqvE8jBeP64d+Dk62uLkom+oeUDGMEFQ6GAhwQUxuYHTcls84cN64z9n
+JbVecpsFY8jBGC0/cBkYBtS0F8Bqu4PV7zpsVmyNF72tcChxu0edJTbwEWC3Xoo
Yp7Er0QTTEMDym2FVWNgkii/B9nV8kgVuSIjwGPKveTE/PTiQZoVaH41sBrwKwnm
E4GxUJpVDJdmIXVZ3+kmAfUYJ116D5AGcvmXZZZr3XGmGTSDm290RD9j1NdsX3kS
wyPVg1ujTB1qn3E5h7syzbTLqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDtMWt6E
ADsuLcgMORXYOAcyz2/8MB8GA1UdIwQYMBaAFKVQ7plEKC/Pw4Swgr/6iPhtsEF5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDVCNS9BNDZCOTkxMjE2
NEQxMUVFOTY4NTg1MzRDNEY5QUUwMi9wVkR1bVVRb0w4X0RoTENDdl9xSS1HMndR
WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BWRHVtVVFvTDhfRGhMQ0N2X3FJLUcyd1FYay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RDVCNS9BNDZCOTkxMjE2NEQxMUVFOTY4NTg1MzRDNEY5QUUwMi9wVkR1bVVRb0w4
X0RoTENDdl9xSS1HMndRWGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBnqeUHW4Q76p2rOa1Ryp3E9APa8qvcrCYRjIeI8NbSxcs4ThPbWJIL
jw+MI+BsJURxqVV8pgdtKtoFpEocguwzXj69v2Cv9N7mZtDVd5sd9crxVX90XbTy
aM3yX8kB3mWcYezBqODfMYH3LijsbSkn18Mw9yQpp3WbmczOivdR3iC8NjuE8ofQ
+07yJ9QtyCLRIf4rMM+/rHswnLBjVGFhQI007HsHTiMKEtF/2lhebupuTCRm4kHQ
uE9gqrIZn7rbqjbI8zeyoRj+9m4cKQhSrTT3hyl2yd9DaFXRfdQ+KtQwdhbvHNXr
8vR3A1Z2y3lJegPnO4QlDGk1Z1q6XLLt
-----END CERTIFICATE-----