Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.mft
File:                     ficJop5GIOVCf3NfN8A0c-NrWXo.mft (raw, json)
Hash identifier:          Yt1PrrHOpoEjFw2doBmL9ohTXJy4e2xaKnp/Ib7xs1A=
Subject key identifier:   8B:79:5C:55:9E:1D:01:52:73:DE:C5:29:77:9F:D6:CA:F7:5D:37:8C
Authority key identifier: 7E:27:09:A2:9E:46:20:E5:42:7F:73:5F:37:C0:34:73:E3:6B:59:7A
Certificate issuer:       /CN=A91DD0A4/serialNumber=7E2709A29E4620E5427F735F37C03473E36B597A
Certificate serial:       08CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ficJop5GIOVCf3NfN8A0c-NrWXo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.mft
Manifest number:          08C5
Signing time:             Thu 30 Jan 2025 20:33:15 +0000
Manifest this update:     Thu 30 Jan 2025 20:33:14 +0000
Manifest next update:     Thu 06 Feb 2025 20:33:14 +0000
Files and hashes:         1: ficJop5GIOVCf3NfN8A0c-NrWXo.crl (hash: u9qURxf8k34uQYbq4WHd1UqWdGG7JbfccDa8tbnDLM4=)
                          2: C8CCE2CCAA7411EA9DF2E685C4F9AE02.roa (hash: EY5IebdCRceAV1N2Sno2htu2PUjjGh0mWkvzE1zUnnE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2254 (0x8ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD0A4/serialNumber=7E2709A29E4620E5427F735F37C03473E36B597A
        Validity
            Not Before: Jan 30 20:33:14 2025 GMT
            Not After : Feb  6 20:33:14 2025 GMT
        Subject: CN=679be20a-143b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:23:d4:19:67:3e:59:37:e1:a4:52:8b:cc:db:
                    fe:69:62:a7:b9:a2:96:bd:9a:40:b7:d8:39:73:62:
                    34:eb:cb:94:b1:06:8d:07:35:c2:00:bd:21:88:db:
                    b5:98:35:54:c6:57:1d:6c:70:88:5a:6c:9c:d4:d1:
                    78:54:e0:6d:03:71:c0:2b:95:9c:b8:1a:29:81:f5:
                    09:41:a5:8a:40:26:af:be:f4:ab:21:4d:11:86:9f:
                    02:e9:8b:eb:39:cc:ed:ab:91:67:3c:89:83:7e:54:
                    f4:c3:77:b2:a7:c0:24:44:6d:94:7d:65:e2:cd:17:
                    34:9a:39:3d:dd:f9:5f:53:aa:4e:e9:1d:16:e7:43:
                    e4:77:6a:42:d8:e8:2d:12:64:89:13:6a:3e:a6:17:
                    a0:0c:b4:cc:b2:bf:74:7e:a4:0b:be:4b:d8:e2:29:
                    34:4f:8a:4a:49:0d:b9:e9:97:67:79:5b:1d:52:31:
                    fc:3e:f3:79:7a:af:14:1f:ba:af:6b:c7:e2:ac:59:
                    61:91:40:64:68:20:07:71:2e:70:0a:ef:0c:62:4f:
                    6a:07:dc:e2:03:0e:f6:ef:d5:98:5e:23:33:65:90:
                    d4:38:da:77:d0:c8:8a:80:e8:37:3f:af:21:69:57:
                    31:e8:7a:13:9a:fd:d5:73:b2:7a:aa:02:56:96:6f:
                    9c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:79:5C:55:9E:1D:01:52:73:DE:C5:29:77:9F:D6:CA:F7:5D:37:8C
            X509v3 Authority Key Identifier:
                keyid:7E:27:09:A2:9E:46:20:E5:42:7F:73:5F:37:C0:34:73:E3:6B:59:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ficJop5GIOVCf3NfN8A0c-NrWXo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:2e:60:4b:52:22:6d:a2:77:7f:64:f1:7a:63:4b:45:4c:4a:
         4a:c8:8b:01:20:a8:8b:20:36:1a:1b:7c:7a:62:4f:82:a9:fb:
         d9:7d:e6:ec:68:70:60:5f:76:a4:16:94:4a:4f:3a:a6:a0:32:
         f1:27:ee:5d:a6:20:f8:19:b0:cd:c9:4c:f4:9c:78:99:5e:f3:
         e0:35:b2:2e:ed:ef:f9:db:e2:35:13:6a:f5:69:5f:19:3f:12:
         c9:2d:0a:01:97:44:34:67:2f:a3:98:97:f1:46:9a:be:51:47:
         8b:72:c6:61:37:06:0f:50:52:7f:35:98:e3:4a:46:ca:3d:f0:
         1e:64:3f:7e:32:34:ae:cf:55:fa:f7:d0:39:71:56:b4:0e:97:
         c6:7b:74:e0:5c:7d:c5:a1:45:43:cf:4a:71:5e:7e:86:c9:5a:
         23:d8:bd:88:14:1b:95:3c:b8:ee:51:1d:39:17:4e:f0:67:44:
         0d:27:6d:6a:fa:81:29:98:02:27:f0:ee:e4:3a:7f:ee:b8:56:
         7c:2a:6b:57:a9:4b:73:60:e7:d6:f0:8b:15:d0:b3:48:1a:6e:
         f0:69:e3:bc:32:da:f4:58:2a:0f:c5:38:40:ef:77:ee:88:e4:
         0c:74:b5:af:8c:dc:b4:58:7c:cb:92:59:c0:88:d3:0f:8d:34:
         11:66:7c:99
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REQwQTQxMTAvBgNVBAUTKDdFMjcwOUEyOUU0NjIwRTU0MjdGNzM1RjM3QzAzNDcz
RTM2QjU5N0EwHhcNMjUwMTMwMjAzMzE0WhcNMjUwMjA2MjAzMzE0WjAYMRYwFAYD
VQQDEw02NzliZTIwYS0xNDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwCPUGWc+WTfhpFKLzNv+aWKnuaKWvZpAt9g5c2I068uUsQaNBzXCAL0hiNu1
mDVUxlcdbHCIWmyc1NF4VOBtA3HAK5WcuBopgfUJQaWKQCavvvSrIU0Rhp8C6Yvr
Ocztq5FnPImDflT0w3eyp8AkRG2UfWXizRc0mjk93flfU6pO6R0W50Pkd2pC2Ogt
EmSJE2o+phegDLTMsr90fqQLvkvY4ik0T4pKSQ256ZdneVsdUjH8PvN5eq8UH7qv
a8firFlhkUBkaCAHcS5wCu8MYk9qB9ziAw7279WYXiMzZZDUONp30MiKgOg3P68h
aVcx6HoTmv3Vc7J6qgJWlm+ctQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIt5XFWe
HQFSc97FKXef1sr3XTeMMB8GA1UdIwQYMBaAFH4nCaKeRiDlQn9zXzfANHPja1l6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDBBNC85NUQ1RTM5MkFB
NzMxMUVBQTEwQUNDODRDNEY5QUUwMi9maWNKb3A1R0lPVkNmM05mTjhBMGMtTnJX
WG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZpY0pvcDVHSU9WQ2YzTmZOOEEwYy1OcldYby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RDBBNC85NUQ1RTM5MkFBNzMxMUVBQTEwQUNDODRDNEY5QUUwMi9maWNKb3A1R0lP
VkNmM05mTjhBMGMtTnJXWG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCZLmBLUiJtond/ZPF6Y0tFTEpKyIsBIKiLIDYaG3x6Yk+CqfvZfebs
aHBgX3akFpRKTzqmoDLxJ+5dpiD4GbDNyUz0nHiZXvPgNbIu7e/52+I1E2r1aV8Z
PxLJLQoBl0Q0Zy+jmJfxRpq+UUeLcsZhNwYPUFJ/NZjjSkbKPfAeZD9+MjSuz1X6
99A5cVa0DpfGe3TgXH3FoUVDz0pxXn6GyVoj2L2IFBuVPLjuUR05F07wZ0QNJ21q
+oEpmAIn8O7kOn/uuFZ8KmtXqUtzYOfW8IsV0LNIGm7waeO8Mtr0WCoPxThA73fu
iOQMdLWvjNy0WHzLklnAiNMPjTQRZnyZ
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:13:25 2025 by rpki-client