Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.mft
File:                     1Sj61Lh2q_twrziSIg8pPheRtrw.mft (raw, json)
Hash identifier:          xq6yiIPgYqpUyC9tzEYj7YXtEClBu7P02BtEU6t9E+c=
Subject key identifier:   0B:12:33:A7:81:5B:A8:3C:CD:8C:75:83:49:75:05:9B:67:A5:BD:1A
Authority key identifier: D5:28:FA:D4:B8:76:AB:FB:70:AF:38:92:22:0F:29:3E:17:91:B6:BC
Certificate issuer:       /CN=A91CE6C5/serialNumber=D528FAD4B876ABFB70AF3892220F293E1791B6BC
Certificate serial:       02FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Sj61Lh2q_twrziSIg8pPheRtrw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.mft
Manifest number:          02F3
Signing time:             Fri 31 Jan 2025 01:24:07 +0000
Manifest this update:     Fri 31 Jan 2025 01:24:07 +0000
Manifest next update:     Fri 07 Feb 2025 01:24:07 +0000
Files and hashes:         1: 1Sj61Lh2q_twrziSIg8pPheRtrw.crl (hash: xr8Upv8r8aiKpfm8Eq1gEP6YvF6aV1gZWsmhhVBtzoo=)
                          2: C0E56FB2D56B11EFB540FB53C4F9AE02.roa (hash: 4vLurmpeiFN7tjyB91fDIOCK/d511+2WLb9SGBrwU1k=)
                          3: A0841A68D0D511EC81001E73C4F9AE02.roa (hash: 28rk2f2SK8fYlNSOWgKUvbvWyh9sktvms5gVEW96hEM=)
                          4: F0E906D6046C11EFBDB55E14C4F9AE02.roa (hash: XvChKVsKHEK1ZO1syDy5U6icCS7rFP0XZCWXt+ycNCw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 766 (0x2fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE6C5/serialNumber=D528FAD4B876ABFB70AF3892220F293E1791B6BC
        Validity
            Not Before: Jan 31 01:24:07 2025 GMT
            Not After : Feb  7 01:24:07 2025 GMT
        Subject: CN=679c2637-6a9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6e:fc:f8:ba:89:d1:34:37:46:0b:9d:9c:c8:
                    88:6c:85:38:bd:55:31:cf:27:90:33:d0:1a:92:27:
                    8b:c0:0e:1f:e1:4d:14:7f:75:b7:11:05:e8:67:e2:
                    39:6e:7d:55:eb:f2:15:13:04:21:52:73:ab:69:5f:
                    61:ec:e8:4f:0e:bd:f2:de:a4:86:a3:a9:85:0c:ec:
                    73:8b:ee:ec:60:07:22:26:25:34:dc:8d:fc:0c:64:
                    8f:46:1f:16:c9:fc:ab:de:91:f4:0e:d2:86:46:3f:
                    6f:25:26:dd:0b:08:98:d1:70:42:3e:44:0b:f9:bf:
                    a6:8a:1e:ba:c4:98:b2:a7:17:a7:b9:8f:26:35:58:
                    23:c9:68:68:84:e2:eb:43:4c:81:c6:5a:6b:c8:b9:
                    45:48:da:44:22:3b:68:14:67:4f:f3:0b:86:b4:51:
                    38:e5:11:ef:34:41:69:8d:78:e0:11:11:8d:3a:f3:
                    3f:94:db:28:3b:d1:35:15:97:9b:57:f7:7f:2e:23:
                    16:8d:7c:fc:0f:69:e6:2a:4a:4c:8d:99:29:83:1a:
                    99:60:f3:5d:a8:9b:15:9a:fe:36:72:b0:b6:64:ed:
                    b6:e6:27:56:67:d6:e4:b6:6c:54:21:a8:b9:a3:df:
                    2e:29:bd:77:3a:2e:5c:32:a9:dc:b4:7e:1a:42:73:
                    36:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:12:33:A7:81:5B:A8:3C:CD:8C:75:83:49:75:05:9B:67:A5:BD:1A
            X509v3 Authority Key Identifier:
                keyid:D5:28:FA:D4:B8:76:AB:FB:70:AF:38:92:22:0F:29:3E:17:91:B6:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Sj61Lh2q_twrziSIg8pPheRtrw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:e5:a5:95:5d:ac:f9:28:a1:ff:58:35:83:e5:ea:4b:01:97:
         5a:26:9a:c9:22:1e:a3:a8:cf:39:9c:e4:db:8e:5b:36:95:18:
         26:8f:dd:2e:38:15:2b:b6:c3:88:ff:cc:32:e3:e3:54:ef:4f:
         66:0d:3d:d2:29:0b:06:b0:2c:c0:29:b4:58:f4:de:a3:ae:81:
         0e:a1:f9:f7:d9:7d:19:2e:b7:1d:6a:03:b2:fa:10:47:83:21:
         49:3e:91:6b:94:d4:a2:07:14:fa:8b:18:fe:b7:9b:25:fe:05:
         3b:cc:c6:a6:6e:aa:95:05:b0:d9:ee:82:ba:03:ed:7c:b0:29:
         a4:4c:a3:b2:cd:52:a7:4f:a4:24:f8:a6:04:17:7d:a0:8d:4f:
         fc:5f:aa:07:11:fb:f2:6e:1e:ee:e3:0f:a3:a6:32:d6:91:d4:
         00:90:15:a4:fd:eb:d8:11:a6:37:70:8a:47:e4:1e:31:f0:e4:
         a2:f8:d2:5b:0a:e5:21:06:6b:6b:61:3c:95:14:8f:d8:6b:7e:
         be:09:7f:6c:aa:17:3d:7d:ba:46:76:f7:1a:a5:12:27:24:c6:
         50:af:2c:f7:ae:c7:81:80:1e:12:d0:e3:b9:5f:8b:6e:b8:c4:
         15:35:0e:13:1a:fc:04:18:23:be:20:a7:81:fd:d0:cf:fd:59:
         55:c4:e1:26
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAv4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0U2QzUxMTAvBgNVBAUTKEQ1MjhGQUQ0Qjg3NkFCRkI3MEFGMzg5MjIyMEYyOTNF
MTc5MUI2QkMwHhcNMjUwMTMxMDEyNDA3WhcNMjUwMjA3MDEyNDA3WjAYMRYwFAYD
VQQDEw02NzljMjYzNy02YTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArW78+LqJ0TQ3RgudnMiIbIU4vVUxzyeQM9AakieLwA4f4U0Uf3W3EQXoZ+I5
bn1V6/IVEwQhUnOraV9h7OhPDr3y3qSGo6mFDOxzi+7sYAciJiU03I38DGSPRh8W
yfyr3pH0DtKGRj9vJSbdCwiY0XBCPkQL+b+mih66xJiypxenuY8mNVgjyWhohOLr
Q0yBxlpryLlFSNpEIjtoFGdP8wuGtFE45RHvNEFpjXjgERGNOvM/lNsoO9E1FZeb
V/d/LiMWjXz8D2nmKkpMjZkpgxqZYPNdqJsVmv42crC2ZO225idWZ9bktmxUIai5
o98uKb13Oi5cMqnctH4aQnM2swIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAsSM6eB
W6g8zYx1g0l1BZtnpb0aMB8GA1UdIwQYMBaAFNUo+tS4dqv7cK84kiIPKT4Xkba8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTZDNS9FODI2NjAyMEM2
QzAxMUVDOEFCNzU1M0ZDNEY5QUUwMi8xU2o2MUxoMnFfdHdyemlTSWc4cFBoZVJ0
cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFTajYxTGgycV90d3J6aVNJZzhwUGhlUnRydy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RTZDNS9FODI2NjAyMEM2QzAxMUVDOEFCNzU1M0ZDNEY5QUUwMi8xU2o2MUxoMnFf
dHdyemlTSWc4cFBoZVJ0cncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAj5aWVXaz5KKH/WDWD5epLAZdaJprJIh6jqM85nOTbjls2lRgmj90u
OBUrtsOI/8wy4+NU709mDT3SKQsGsCzAKbRY9N6jroEOofn32X0ZLrcdagOy+hBH
gyFJPpFrlNSiBxT6ixj+t5sl/gU7zMambqqVBbDZ7oK6A+18sCmkTKOyzVKnT6Qk
+KYEF32gjU/8X6oHEfvybh7u4w+jpjLWkdQAkBWk/evYEaY3cIpH5B4x8OSi+NJb
CuUhBmtrYTyVFI/Ya36+CX9sqhc9fbpGdvcapRInJMZQryz3rseBgB4S0OO5X4tu
uMQVNQ4TGvwEGCO+IKeB/dDP/VlVxOEm
-----END CERTIFICATE-----