Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft
File:                     0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft (raw, json)
Hash identifier:          RLMSZHTimQarlMGEmABqg5NeRK87QBN+4k++wmGbSuA=
Subject key identifier:   38:B3:42:9D:59:B8:E1:CC:C7:31:D6:37:FA:69:1E:E5:3C:CA:B9:F6
Authority key identifier: D2:9B:64:E6:34:46:5A:B4:13:20:54:BB:7E:83:C9:D5:F1:83:49:F7
Certificate issuer:       /CN=A91D26C6/serialNumber=D29B64E634465AB4132054BB7E83C9D5F18349F7
Certificate serial:       0673
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ptk5jRGWrQTIFS7foPJ1fGDSfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft
Manifest number:          065E
Signing time:             Thu 30 Jan 2025 22:26:23 +0000
Manifest this update:     Thu 30 Jan 2025 22:26:23 +0000
Manifest next update:     Thu 06 Feb 2025 22:26:23 +0000
Files and hashes:         1: 0ptk5jRGWrQTIFS7foPJ1fGDSfc.crl (hash: ItqSJvX2PVxGAhTvvWwhetmXRXCsHfLJqMqbOFQB0KY=)
                          2: 3B03239684CE11EF9D90A966C4F9AE02.roa (hash: 7djnd9V7YynlX4aPPI5ziy7BTc5PK1nPRmP5FcdsnbM=)
                          3: 6A8A22841DCE11EF85CAC83EC4F9AE02.roa (hash: oSIv8di1nBYFk+5mBIHhAz3HS/TpuPa73V53udRJHWY=)
                          4: DD3C61621DCD11EF88E9EE3DC4F9AE02.roa (hash: G27vxGc4AAV38UzLImTap6lHREuZgSB88+/EZ+pmblM=)
                          5: 178E201EA51911EDB711B90AC4F9AE02.roa (hash: eEJ4R9RPyabJK8Lajsv+2k2anT5Rg1VLQX5uRv/Cz2s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1651 (0x673)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D26C6/serialNumber=D29B64E634465AB4132054BB7E83C9D5F18349F7
        Validity
            Not Before: Jan 30 22:26:23 2025 GMT
            Not After : Feb  6 22:26:23 2025 GMT
        Subject: CN=679bfc8f-12f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:18:0e:5d:11:f3:a7:f8:1d:e1:c7:9f:62:40:
                    d3:82:5e:c2:76:f4:51:40:d4:d5:6c:3e:00:0e:52:
                    f7:18:ef:95:43:b5:50:d4:e1:a3:74:fe:9c:7a:6d:
                    26:e2:52:46:33:f0:82:59:2f:24:3d:2e:b1:99:db:
                    a5:db:3c:84:07:3e:24:7b:cd:42:67:42:2e:e7:22:
                    b3:33:d2:2a:ae:8c:d2:7c:ee:64:e9:54:a1:10:2c:
                    98:b3:ba:eb:87:41:85:36:c4:2d:00:2b:40:62:da:
                    6e:e3:c5:a9:ce:31:95:86:2b:17:c2:ab:b6:bd:77:
                    b8:b1:32:15:ce:55:01:01:8b:27:fb:82:ff:7d:52:
                    7b:8b:1c:6a:94:6a:5a:95:95:f1:e4:a9:f6:fd:ce:
                    fa:78:5e:38:40:b1:48:b8:2f:67:ea:3b:93:3e:f9:
                    57:10:05:1a:9a:a9:12:d5:3b:ae:25:da:82:16:08:
                    4d:d9:f4:46:ca:d9:1d:dd:af:d7:ab:d9:1a:00:bd:
                    19:53:fa:cf:13:b8:05:46:cb:d3:63:4d:4b:aa:07:
                    a5:2c:65:67:1e:d4:b3:7f:2d:47:19:b6:fb:92:fd:
                    65:15:cc:dd:14:5a:0b:dd:25:aa:f2:9d:5f:7e:90:
                    0b:20:22:13:83:51:ce:3c:71:fc:7b:1e:6d:bc:af:
                    48:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:B3:42:9D:59:B8:E1:CC:C7:31:D6:37:FA:69:1E:E5:3C:CA:B9:F6
            X509v3 Authority Key Identifier:
                keyid:D2:9B:64:E6:34:46:5A:B4:13:20:54:BB:7E:83:C9:D5:F1:83:49:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ptk5jRGWrQTIFS7foPJ1fGDSfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:75:2d:2f:1e:ac:7e:0a:b1:34:f3:05:75:23:d0:7b:bc:55:
         a2:c6:90:f7:3b:32:9e:e2:4e:da:58:ae:94:c4:5b:9e:11:d8:
         da:41:62:b6:4d:51:87:7e:c6:d9:cd:db:3a:c3:dc:e0:93:51:
         28:73:a4:5e:04:67:f7:04:81:cd:82:7a:18:22:80:b1:7d:8e:
         c7:d0:8b:31:b8:82:cf:a2:f4:ae:2f:50:48:1b:01:da:69:40:
         79:6b:57:6c:27:03:4f:39:e9:d3:89:36:d0:5c:64:1a:46:5f:
         ff:bd:c2:1d:f6:11:47:fb:d2:14:9b:36:93:b0:66:4d:38:4d:
         f9:3e:64:8c:13:08:5f:ab:5a:18:86:79:39:6a:95:0f:cd:2a:
         39:eb:3b:03:36:74:f4:cc:24:d5:31:12:e4:d0:20:86:c4:a6:
         03:b8:fe:72:44:4b:31:51:ae:24:ca:d8:84:c4:2e:d0:18:2c:
         38:97:4b:5c:93:72:a4:ab:70:52:88:e7:f2:c3:4c:94:41:34:
         62:05:2f:f3:a3:97:36:2f:8a:81:f9:e3:dd:c2:6d:c9:e5:79:
         e8:7f:d6:bc:22:7b:fe:b3:4d:f6:09:14:e4:7a:e8:c1:32:d9:
         c4:0d:f5:90:bc:fe:f0:34:77:32:08:be:a3:73:ac:27:dc:59:
         21:ee:99:4e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBnMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDI2QzYxMTAvBgNVBAUTKEQyOUI2NEU2MzQ0NjVBQjQxMzIwNTRCQjdFODNDOUQ1
RjE4MzQ5RjcwHhcNMjUwMTMwMjIyNjIzWhcNMjUwMjA2MjIyNjIzWjAYMRYwFAYD
VQQDEw02NzliZmM4Zi0xMmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwBgOXRHzp/gd4cefYkDTgl7CdvRRQNTVbD4ADlL3GO+VQ7VQ1OGjdP6cem0m
4lJGM/CCWS8kPS6xmdul2zyEBz4ke81CZ0Iu5yKzM9IqrozSfO5k6VShECyYs7rr
h0GFNsQtACtAYtpu48WpzjGVhisXwqu2vXe4sTIVzlUBAYsn+4L/fVJ7ixxqlGpa
lZXx5Kn2/c76eF44QLFIuC9n6juTPvlXEAUamqkS1TuuJdqCFghN2fRGytkd3a/X
q9kaAL0ZU/rPE7gFRsvTY01LqgelLGVnHtSzfy1HGbb7kv1lFczdFFoL3SWq8p1f
fpALICITg1HOPHH8ex5tvK9IFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDizQp1Z
uOHMxzHWN/ppHuU8yrn2MB8GA1UdIwQYMBaAFNKbZOY0Rlq0EyBUu36DydXxg0n3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjZDNi81OEU5OUU5NDZG
NzkxMUVCQTREMjIyODdDNEY5QUUwMi8wcHRrNWpSR1dyUVRJRlM3Zm9QSjFmR0RT
ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBwdGs1alJHV3JRVElGUzdmb1BKMWZHRFNmYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MjZDNi81OEU5OUU5NDZGNzkxMUVCQTREMjIyODdDNEY5QUUwMi8wcHRrNWpSR1dy
UVRJRlM3Zm9QSjFmR0RTZmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAydS0vHqx+CrE08wV1I9B7vFWixpD3OzKe4k7aWK6UxFueEdjaQWK2
TVGHfsbZzds6w9zgk1Eoc6ReBGf3BIHNgnoYIoCxfY7H0IsxuILPovSuL1BIGwHa
aUB5a1dsJwNPOenTiTbQXGQaRl//vcId9hFH+9IUmzaTsGZNOE35PmSMEwhfq1oY
hnk5apUPzSo56zsDNnT0zCTVMRLk0CCGxKYDuP5yREsxUa4kytiExC7QGCw4l0tc
k3Kkq3BSiOfyw0yUQTRiBS/zo5c2L4qB+ePdwm3J5Xnof9a8Inv+s032CRTkeujB
MtnEDfWQvP7wNHcyCL6jc6wn3Fkh7plO
-----END CERTIFICATE-----
Generated at Wed Apr 30 15:41:29 2025 by rpki-client