Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft
File:                     inP7xm5uPo6rLV_CtomRCR8CHkU.mft (raw, json)
Hash identifier:          xFweFG+PUaKM8fu1dpa71M8pK5Kd4vcDTPPnIMNb+uE=
Subject key identifier:   E5:D7:00:7E:DC:9E:51:98:8F:3F:4D:58:D3:51:69:07:0E:AC:A6:F2
Authority key identifier: 8A:73:FB:C6:6E:6E:3E:8E:AB:2D:5F:C2:B6:89:91:09:1F:02:1E:45
Certificate issuer:       /CN=A91DD309/serialNumber=8A73FBC66E6E3E8EAB2D5FC2B68991091F021E45
Certificate serial:       1BC2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inP7xm5uPo6rLV_CtomRCR8CHkU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft
Manifest number:          1BA8
Signing time:             Fri 31 Jan 2025 16:16:47 +0000
Manifest this update:     Fri 31 Jan 2025 16:16:46 +0000
Manifest next update:     Fri 07 Feb 2025 16:16:46 +0000
Files and hashes:         1: inP7xm5uPo6rLV_CtomRCR8CHkU.crl (hash: B3CXkSRcS0S9X1qzYXX8/6PD73sIpBJ392cCcbi+dNU=)
                          2: 5949B76C00DB11E8A9CA373DC4F9AE02.roa (hash: uYIH2Df820V7sq00NPl6eOckfu5/+u+T1sNhFFho9vo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7106 (0x1bc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD309/serialNumber=8A73FBC66E6E3E8EAB2D5FC2B68991091F021E45
        Validity
            Not Before: Jan 31 16:16:46 2025 GMT
            Not After : Feb  7 16:16:46 2025 GMT
        Subject: CN=679cf76e-5dd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f2:31:d5:48:fd:76:42:02:59:ba:56:30:38:
                    16:e6:44:cb:20:75:e5:1a:c9:4e:ae:58:31:2f:56:
                    3e:15:e4:53:18:d8:8c:27:58:f2:d9:ae:8f:09:f4:
                    84:8f:f0:15:c8:05:40:ee:b4:5d:e3:20:7a:f0:69:
                    35:6c:98:d0:6c:df:11:79:4e:5d:2c:07:2d:1e:2d:
                    8e:40:e1:ac:76:ac:2e:e3:92:4c:43:e9:c8:f5:ee:
                    1c:f4:e3:1b:91:56:23:c5:22:e1:40:ad:37:a5:03:
                    54:d7:0a:17:a3:06:8f:a3:b9:65:3a:fc:98:10:ff:
                    dd:01:e2:42:b6:a1:b7:c2:aa:f1:d3:20:64:d7:07:
                    85:20:40:83:75:7c:ba:df:c4:63:aa:10:1f:9c:8e:
                    bd:e7:06:f4:41:c2:2d:49:54:29:da:af:f7:f5:05:
                    33:de:cc:70:4e:4b:1f:df:42:32:1c:7c:72:f6:98:
                    f5:74:5f:68:d6:a3:75:ae:12:36:a6:b2:88:6b:64:
                    c4:32:cc:24:e6:d5:7f:32:a7:c8:73:ab:12:c0:dd:
                    5c:68:39:b0:9a:cd:27:19:42:b5:91:2f:2e:b2:00:
                    cc:d1:23:c5:19:b4:b2:b0:60:5d:2f:41:d6:dd:dc:
                    17:05:50:5e:a7:59:c2:99:fb:49:c1:c9:e8:a3:31:
                    57:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D7:00:7E:DC:9E:51:98:8F:3F:4D:58:D3:51:69:07:0E:AC:A6:F2
            X509v3 Authority Key Identifier:
                keyid:8A:73:FB:C6:6E:6E:3E:8E:AB:2D:5F:C2:B6:89:91:09:1F:02:1E:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inP7xm5uPo6rLV_CtomRCR8CHkU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:1b:3e:c1:5e:96:37:62:90:6c:0a:17:aa:91:51:d0:f9:9b:
         3f:20:3a:fa:de:96:aa:fd:ad:ba:7d:f5:ef:b9:c3:c3:14:42:
         ab:56:88:5a:43:7d:1f:c8:57:e8:f0:35:91:e6:33:29:24:71:
         7c:48:20:a2:3a:fb:7b:1c:f9:92:ae:bb:d2:3a:19:86:c9:e6:
         be:50:3e:0f:cd:6e:cd:a4:e9:13:9f:7d:8b:a4:5a:b0:29:f8:
         8e:f7:10:47:94:f7:fe:50:25:b6:9e:bd:68:b0:cb:20:07:a5:
         38:63:90:7c:2e:e3:54:85:68:8a:de:79:ef:04:8e:19:ef:1e:
         7d:32:b5:0e:b0:e7:8f:1a:ee:17:da:7a:21:92:19:17:b5:95:
         70:0d:f3:0a:7d:0e:58:ea:db:29:47:9f:46:f7:74:4e:e6:93:
         70:d4:6c:da:42:1e:ef:bd:69:d0:44:b6:42:8b:ff:e8:63:38:
         94:62:78:90:6f:76:72:13:e2:ea:a5:b5:36:60:1f:4a:0d:66:
         09:6a:1e:11:f8:d0:b1:c6:be:2f:68:95:df:64:cd:75:9b:a3:
         a6:cd:e0:da:d3:50:8a:23:97:76:89:20:ba:a4:a6:f5:a6:bb:
         ce:30:d5:cd:f6:3a:0f:4d:19:ba:35:b2:28:64:dd:9b:96:e6:
         a6:e3:3d:36
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICG8IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REQzMDkxMTAvBgNVBAUTKDhBNzNGQkM2NkU2RTNFOEVBQjJENUZDMkI2ODk5MTA5
MUYwMjFFNDUwHhcNMjUwMTMxMTYxNjQ2WhcNMjUwMjA3MTYxNjQ2WjAYMRYwFAYD
VQQDEw02NzljZjc2ZS01ZGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwPIx1Uj9dkICWbpWMDgW5kTLIHXlGslOrlgxL1Y+FeRTGNiMJ1jy2a6PCfSE
j/AVyAVA7rRd4yB68Gk1bJjQbN8ReU5dLActHi2OQOGsdqwu45JMQ+nI9e4c9OMb
kVYjxSLhQK03pQNU1woXowaPo7llOvyYEP/dAeJCtqG3wqrx0yBk1weFIECDdXy6
38RjqhAfnI695wb0QcItSVQp2q/39QUz3sxwTksf30IyHHxy9pj1dF9o1qN1rhI2
prKIa2TEMswk5tV/MqfIc6sSwN1caDmwms0nGUK1kS8usgDM0SPFGbSysGBdL0HW
3dwXBVBep1nCmftJwcnoozFXUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOXXAH7c
nlGYjz9NWNNRaQcOrKbyMB8GA1UdIwQYMBaAFIpz+8Zubj6Oqy1fwraJkQkfAh5F
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDMwOS8xRkQ2QTZFRUZB
NjkxMUU2OEVDMTIzMzNDNEY5QUUwMi9pblA3eG01dVBvNnJMVl9DdG9tUkNSOENI
a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2luUDd4bTV1UG82ckxWX0N0b21SQ1I4Q0hrVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RDMwOS8xRkQ2QTZFRUZBNjkxMUU2OEVDMTIzMzNDNEY5QUUwMi9pblA3eG01dVBv
NnJMVl9DdG9tUkNSOENIa1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAmGz7BXpY3YpBsCheqkVHQ+Zs/IDr63paq/a26ffXvucPDFEKrVoha
Q30fyFfo8DWR5jMpJHF8SCCiOvt7HPmSrrvSOhmGyea+UD4PzW7NpOkTn32LpFqw
KfiO9xBHlPf+UCW2nr1osMsgB6U4Y5B8LuNUhWiK3nnvBI4Z7x59MrUOsOePGu4X
2nohkhkXtZVwDfMKfQ5Y6tspR59G93RO5pNw1GzaQh7vvWnQRLZCi//oYziUYniQ
b3ZyE+LqpbU2YB9KDWYJah4R+NCxxr4vaJXfZM11m6OmzeDa01CKI5d2iSC6pKb1
prvOMNXN9joPTRm6NbIoZN2bluam4z02
-----END CERTIFICATE-----