Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft
File:                     uesVSGZ3c32yc5_WVGKu55BhaMI.mft (raw, json)
Hash identifier:          tp7WsB3ZPKIFvwXFE4WGCkTlEfpyUbJPQqWoZ7Obfs8=
Subject key identifier:   DB:2F:77:F5:C6:48:E0:BC:25:52:58:D3:4C:D5:CA:DC:11:5D:CD:3D
Authority key identifier: B9:EB:15:48:66:77:73:7D:B2:73:9F:D6:54:62:AE:E7:90:61:68:C2
Certificate issuer:       /CN=A91DA649/serialNumber=B9EB15486677737DB2739FD65462AEE7906168C2
Certificate serial:       0BDD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uesVSGZ3c32yc5_WVGKu55BhaMI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft
Manifest number:          0BD5
Signing time:             Fri 31 Jan 2025 18:40:31 +0000
Manifest this update:     Fri 31 Jan 2025 18:40:30 +0000
Manifest next update:     Fri 07 Feb 2025 18:40:30 +0000
Files and hashes:         1: uesVSGZ3c32yc5_WVGKu55BhaMI.crl (hash: LyMBj2ZtXk7w6VzYiAxcBDOSC9CTZiMigiba9Er7XtM=)
                          2: C4391160305611EABE7DF272C4F9AE02.roa (hash: 3CS63lxTVcr1lDEM5PMs5CO7XzdKCmryVXHiyIzoBgE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3037 (0xbdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA649/serialNumber=B9EB15486677737DB2739FD65462AEE7906168C2
        Validity
            Not Before: Jan 31 18:40:30 2025 GMT
            Not After : Feb  7 18:40:30 2025 GMT
        Subject: CN=679d191f-3959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6c:3e:66:4c:7d:da:5e:f2:da:ec:14:0a:7c:
                    ce:30:f7:2d:8a:d7:6a:b9:18:c5:fc:c0:2d:8e:89:
                    0a:48:83:03:a6:aa:88:a0:f7:49:57:d6:89:c5:ea:
                    ad:66:6b:ca:6e:74:36:ff:99:0e:c1:37:d5:7c:a1:
                    18:72:cf:0a:64:97:6e:e6:6f:e9:a6:58:54:3c:cd:
                    fb:bd:22:b6:ff:9f:24:d3:aa:02:53:9c:e7:df:fc:
                    b8:77:29:aa:b8:73:40:12:72:f6:13:51:51:33:7d:
                    ac:21:3f:19:ff:c6:ff:7f:06:4b:5d:69:9f:42:58:
                    6f:72:2f:a5:a0:5a:e1:16:d3:1b:98:96:5b:62:87:
                    24:1b:9f:70:f3:c7:a5:c8:57:a0:50:53:6b:0b:1e:
                    63:b6:4f:fd:f8:1d:25:f7:fc:b4:6d:6b:f1:a2:f7:
                    94:1f:7c:c7:0c:1c:04:f0:f5:a0:46:cf:43:9f:ab:
                    65:f8:4f:30:fe:96:94:3c:b5:0c:e0:8e:29:34:02:
                    08:f4:b2:d2:f0:59:26:4c:15:0e:89:39:5e:c6:ef:
                    16:d3:c5:79:15:f8:b6:0d:94:49:e6:69:f8:a5:1d:
                    15:39:66:e5:03:7f:9a:43:0a:a1:2a:0a:ee:bd:96:
                    ad:50:b4:41:ce:f2:71:2e:74:05:38:f9:b3:7f:5c:
                    52:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:2F:77:F5:C6:48:E0:BC:25:52:58:D3:4C:D5:CA:DC:11:5D:CD:3D
            X509v3 Authority Key Identifier:
                keyid:B9:EB:15:48:66:77:73:7D:B2:73:9F:D6:54:62:AE:E7:90:61:68:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uesVSGZ3c32yc5_WVGKu55BhaMI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:d3:c7:5f:09:c5:8a:70:1d:e7:6d:80:73:f4:9c:ea:41:77:
         32:53:7d:5b:e2:8c:9c:0d:68:af:05:bb:ca:cd:75:aa:6b:b1:
         2d:ab:70:40:54:1c:51:53:1d:dc:95:b5:06:11:22:4f:2c:9c:
         fc:fb:18:02:c9:9a:e6:be:03:37:51:4d:5e:e5:6d:00:17:1d:
         07:68:01:45:b1:01:dd:70:cb:f7:e4:e7:a6:53:24:53:b5:34:
         88:d9:c0:ca:5b:30:06:b5:b7:04:30:f5:a2:66:c7:53:0c:7d:
         1a:9c:43:58:15:7d:2c:4e:39:6e:9e:9a:8a:2a:5f:89:9e:0f:
         17:f0:49:c3:23:65:95:c9:7a:65:5b:9d:44:52:b0:c0:d8:17:
         e6:bc:3f:16:f5:6f:82:73:6c:3b:73:cc:a2:9c:4d:54:8e:ca:
         68:37:85:14:74:e6:f5:35:e0:1f:d5:ed:4d:3c:58:6a:53:82:
         54:2e:14:d2:6c:c4:a3:6b:b9:38:74:9c:22:15:9b:94:9a:56:
         0d:27:b0:f6:35:39:f2:c0:bf:a3:63:dc:35:a3:44:6a:c1:61:
         40:0d:ab:d7:3e:5f:f8:99:d3:2f:e9:f2:b0:4a:d0:61:e4:35:
         3e:82:42:c7:00:db:ba:59:b5:ff:d2:43:23:ff:26:31:23:97:
         fe:14:5f:50
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REE2NDkxMTAvBgNVBAUTKEI5RUIxNTQ4NjY3NzczN0RCMjczOUZENjU0NjJBRUU3
OTA2MTY4QzIwHhcNMjUwMTMxMTg0MDMwWhcNMjUwMjA3MTg0MDMwWjAYMRYwFAYD
VQQDEw02NzlkMTkxZi0zOTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtmw+Zkx92l7y2uwUCnzOMPctitdquRjF/MAtjokKSIMDpqqIoPdJV9aJxeqt
ZmvKbnQ2/5kOwTfVfKEYcs8KZJdu5m/pplhUPM37vSK2/58k06oCU5zn3/y4dymq
uHNAEnL2E1FRM32sIT8Z/8b/fwZLXWmfQlhvci+loFrhFtMbmJZbYockG59w88el
yFegUFNrCx5jtk/9+B0l9/y0bWvxoveUH3zHDBwE8PWgRs9Dn6tl+E8w/paUPLUM
4I4pNAII9LLS8FkmTBUOiTlexu8W08V5Ffi2DZRJ5mn4pR0VOWblA3+aQwqhKgru
vZatULRBzvJxLnQFOPmzf1xSrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNsvd/XG
SOC8JVJY00zVytwRXc09MB8GA1UdIwQYMBaAFLnrFUhmd3N9snOf1lRirueQYWjC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTY0OS81RDk3Nzc0QzBG
NTExMUVBOEM0QTVDMEFDNEY5QUUwMi91ZXNWU0daM2MzMnljNV9XVkdLdTU1Qmhh
TUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Vlc1ZTR1ozYzMyeWM1X1dWR0t1NTVCaGFNSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QTY0OS81RDk3Nzc0QzBGNTExMUVBOEM0QTVDMEFDNEY5QUUwMi91ZXNWU0daM2Mz
MnljNV9XVkdLdTU1QmhhTUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB708dfCcWKcB3nbYBz9JzqQXcyU31b4oycDWivBbvKzXWqa7Etq3BA
VBxRUx3clbUGESJPLJz8+xgCyZrmvgM3UU1e5W0AFx0HaAFFsQHdcMv35OemUyRT
tTSI2cDKWzAGtbcEMPWiZsdTDH0anENYFX0sTjlunpqKKl+Jng8X8EnDI2WVyXpl
W51EUrDA2BfmvD8W9W+Cc2w7c8yinE1UjspoN4UUdOb1NeAf1e1NPFhqU4JULhTS
bMSja7k4dJwiFZuUmlYNJ7D2NTnywL+jY9w1o0RqwWFADavXPl/4mdMv6fKwStBh
5DU+gkLHANu6WbX/0kMj/yYxI5f+FF9Q
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:55:44 2025 by rpki-client