Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft
File:                     AwfvDynPItsJcPUIPAI8KqDW9Rc.mft (raw, json)
Hash identifier:          4X8COk2pYhXfg+P5wglnu5fkw9FjGNeojNoRzFL0tOM=
Subject key identifier:   1B:43:89:33:F4:FE:0A:9D:34:BF:F5:29:89:F9:DA:1C:0B:47:29:D7
Authority key identifier: 03:07:EF:0F:29:CF:22:DB:09:70:F5:08:3C:02:3C:2A:A0:D6:F5:17
Certificate issuer:       /CN=A91D8704/serialNumber=0307EF0F29CF22DB0970F5083C023C2AA0D6F517
Certificate serial:       0861
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwfvDynPItsJcPUIPAI8KqDW9Rc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft
Manifest number:          085A
Signing time:             Thu 30 Jan 2025 20:43:46 +0000
Manifest this update:     Thu 30 Jan 2025 20:43:46 +0000
Manifest next update:     Thu 06 Feb 2025 20:43:46 +0000
Files and hashes:         1: AwfvDynPItsJcPUIPAI8KqDW9Rc.crl (hash: MOySyBiJQZWCnq2aCMv37lrVZfEl9kqngj+LBM/67/I=)
                          2: B1AAC5B2BC4111EA9A5B2786C4F9AE02.roa (hash: RBbk8UhQUJAo0+DivNUUdglkSzsFknX4rSnxZW8gCTk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2145 (0x861)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8704/serialNumber=0307EF0F29CF22DB0970F5083C023C2AA0D6F517
        Validity
            Not Before: Jan 30 20:43:46 2025 GMT
            Not After : Feb  6 20:43:46 2025 GMT
        Subject: CN=679be482-07d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:55:8e:83:a9:52:4d:4b:f4:61:b5:19:a7:ac:
                    64:41:82:21:ba:f6:9d:dd:ab:74:3a:35:9e:98:80:
                    5f:3c:ec:0b:01:a5:26:7a:8e:17:f8:53:9b:ea:98:
                    e1:d4:49:05:42:75:1c:55:20:8b:bc:1b:be:d8:af:
                    9e:c0:58:3f:52:2d:65:87:85:22:82:85:a4:47:64:
                    fd:7a:ab:f5:5c:6e:67:e6:41:79:05:14:5c:1f:ea:
                    68:b2:3a:74:7a:b7:a1:41:8d:df:b0:56:72:cd:8e:
                    ef:89:f6:4f:42:75:93:3c:3c:d4:01:53:ba:4d:b8:
                    a3:e6:cd:3c:89:20:e3:6a:40:85:21:97:28:5e:36:
                    29:7b:46:7b:fc:28:43:02:32:9a:68:9a:06:e1:9c:
                    13:97:13:2b:68:e4:f5:cc:5e:cb:44:4d:07:70:94:
                    c8:3c:a2:1f:11:16:97:b9:c4:41:3e:78:d9:86:e7:
                    81:27:e1:e4:f2:0f:0f:df:cf:80:fe:97:f0:7b:01:
                    ab:69:12:72:00:af:a8:bf:bd:e8:94:35:1b:e9:90:
                    c6:ac:21:62:14:4a:3a:fa:f7:e9:0a:16:a4:25:1d:
                    7a:0c:2f:fa:9a:b0:37:30:20:7a:e1:a1:20:a3:7d:
                    96:3a:7e:a1:cc:85:d3:a9:97:c2:4f:96:6f:bf:15:
                    ae:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:43:89:33:F4:FE:0A:9D:34:BF:F5:29:89:F9:DA:1C:0B:47:29:D7
            X509v3 Authority Key Identifier:
                keyid:03:07:EF:0F:29:CF:22:DB:09:70:F5:08:3C:02:3C:2A:A0:D6:F5:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwfvDynPItsJcPUIPAI8KqDW9Rc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:ce:13:96:26:bd:0d:40:58:ca:43:e0:47:bb:18:bd:79:d2:
         5f:79:da:cf:2c:88:f7:7a:10:88:e9:07:11:f0:10:30:15:44:
         3c:d9:7e:1b:76:1a:e9:e6:b7:e1:d7:90:86:81:f5:42:f0:89:
         99:b9:81:8d:5f:2c:18:d3:05:e4:3f:9a:a1:51:66:db:7f:1c:
         79:4b:4f:a8:d5:9d:c4:b8:f8:c5:70:78:32:4d:c2:60:a4:a9:
         62:4c:58:f7:9e:28:67:39:62:d4:bb:74:6f:0f:d9:f6:b6:e7:
         fd:05:e9:a4:4e:b7:fc:a4:80:6c:c5:80:8d:ed:4f:c8:37:ef:
         3b:78:11:d8:14:af:94:4b:27:e9:9a:e0:46:06:80:6e:76:cf:
         46:68:d7:c8:e9:c9:f6:ae:4f:1e:17:47:18:88:3f:b1:a1:65:
         30:bb:fc:06:3f:ae:f6:22:e4:e0:34:3d:fb:2d:e2:f7:2d:de:
         ea:98:7f:6b:9c:5a:b0:5e:a6:bc:2f:29:3f:7a:67:14:73:d3:
         1c:37:62:42:e9:80:1c:62:a2:47:e1:03:c9:6e:43:24:af:64:
         6f:90:df:9e:2e:51:2c:e6:50:95:47:3d:d5:e4:44:16:c6:76:
         34:c8:6e:86:d1:04:e6:18:56:31:9a:58:75:20:45:e5:68:f4:
         5e:88:c2:5d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDg3MDQxMTAvBgNVBAUTKDAzMDdFRjBGMjlDRjIyREIwOTcwRjUwODNDMDIzQzJB
QTBENkY1MTcwHhcNMjUwMTMwMjA0MzQ2WhcNMjUwMjA2MjA0MzQ2WjAYMRYwFAYD
VQQDEw02NzliZTQ4Mi0wN2QzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAylWOg6lSTUv0YbUZp6xkQYIhuvad3at0OjWemIBfPOwLAaUmeo4X+FOb6pjh
1EkFQnUcVSCLvBu+2K+ewFg/Ui1lh4UigoWkR2T9eqv1XG5n5kF5BRRcH+posjp0
erehQY3fsFZyzY7vifZPQnWTPDzUAVO6Tbij5s08iSDjakCFIZcoXjYpe0Z7/ChD
AjKaaJoG4ZwTlxMraOT1zF7LRE0HcJTIPKIfERaXucRBPnjZhueBJ+Hk8g8P38+A
/pfwewGraRJyAK+ov73olDUb6ZDGrCFiFEo6+vfpChakJR16DC/6mrA3MCB64aEg
o32WOn6hzIXTqZfCT5ZvvxWuFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBtDiTP0
/gqdNL/1KYn52hwLRynXMB8GA1UdIwQYMBaAFAMH7w8pzyLbCXD1CDwCPCqg1vUX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODcwNC81NjU1QUM5OEJD
MEMxMUVBOTFFMDlCNjhDNEY5QUUwMi9Bd2Z2RHluUEl0c0pjUFVJUEFJOEtxRFc5
UmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0F3ZnZEeW5QSXRzSmNQVUlQQUk4S3FEVzlSYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
ODcwNC81NjU1QUM5OEJDMEMxMUVBOTFFMDlCNjhDNEY5QUUwMi9Bd2Z2RHluUEl0
c0pjUFVJUEFJOEtxRFc5UmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBuzhOWJr0NQFjKQ+BHuxi9edJfedrPLIj3ehCI6QcR8BAwFUQ82X4b
dhrp5rfh15CGgfVC8ImZuYGNXywY0wXkP5qhUWbbfxx5S0+o1Z3EuPjFcHgyTcJg
pKliTFj3nihnOWLUu3RvD9n2tuf9BemkTrf8pIBsxYCN7U/IN+87eBHYFK+USyfp
muBGBoBuds9GaNfI6cn2rk8eF0cYiD+xoWUwu/wGP672IuTgND37LeL3Ld7qmH9r
nFqwXqa8Lyk/emcUc9McN2JC6YAcYqJH4QPJbkMkr2RvkN+eLlEs5lCVRz3V5EQW
xnY0yG6G0QTmGFYxmlh1IEXlaPReiMJd
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:49:22 2025 by rpki-client