Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.mft
File:                     rC4NP0JyIX_vudMtzhozLelqOF4.mft (raw, json)
Hash identifier:          LUsodH9OuHfKIlORwZHvuwd5npuLPzqOEkQ+IrP3iww=
Subject key identifier:   F1:03:9C:7C:8B:54:54:C7:C9:0F:C5:6B:F6:50:19:62:42:A0:9B:83
Authority key identifier: AC:2E:0D:3F:42:72:21:7F:EF:B9:D3:2D:CE:1A:33:2D:E9:6A:38:5E
Certificate issuer:       /CN=A91DD5E1/serialNumber=AC2E0D3F4272217FEFB9D32DCE1A332DE96A385E
Certificate serial:       0865
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rC4NP0JyIX_vudMtzhozLelqOF4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.mft
Manifest number:          085D
Signing time:             Thu 30 Jan 2025 20:44:34 +0000
Manifest this update:     Thu 30 Jan 2025 20:44:34 +0000
Manifest next update:     Thu 06 Feb 2025 20:44:34 +0000
Files and hashes:         1: rC4NP0JyIX_vudMtzhozLelqOF4.crl (hash: C2M8DdZzFm4t48Ab+3BhgtAurWtEaYFRhwocPhzzN4Q=)
                          2: E034D1A6BC6F11EA8FE53280C4F9AE02.roa (hash: r0YFlYuIRf7Aj55A1t3w3hfTwFR/8iacpEclsozeKco=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2149 (0x865)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD5E1/serialNumber=AC2E0D3F4272217FEFB9D32DCE1A332DE96A385E
        Validity
            Not Before: Jan 30 20:44:34 2025 GMT
            Not After : Feb  6 20:44:34 2025 GMT
        Subject: CN=679be4b2-92af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:68:fe:8e:23:7e:98:8b:c5:62:b1:37:a8:68:
                    7a:40:22:27:52:d6:3d:94:a6:25:53:5c:c9:0b:c1:
                    80:fb:0d:b2:1f:08:70:ae:60:95:e7:8b:7a:d4:19:
                    5f:80:b0:06:77:53:53:68:37:79:e8:9b:8f:fa:3e:
                    e8:92:67:c2:26:a1:a2:26:8f:47:9a:98:05:08:99:
                    f7:d7:de:34:bd:38:43:ac:5e:a3:e0:d9:02:d3:72:
                    95:c5:83:a4:21:7b:7e:2e:fd:52:3f:3a:3b:56:6e:
                    e4:f9:b7:44:68:6e:8a:79:95:c3:81:1f:95:99:67:
                    62:f3:7a:46:5d:c9:ad:21:54:6c:f9:8f:51:d0:a8:
                    ba:a9:3b:06:30:c4:34:5b:18:55:f9:41:8f:68:ae:
                    4d:48:5f:0e:51:fe:c2:5d:75:67:37:d0:36:08:69:
                    24:2b:f2:51:28:45:5e:cf:7d:54:4f:ed:80:8c:c9:
                    4c:da:2a:23:57:16:62:7d:28:96:4a:f5:c0:ce:75:
                    23:d6:84:08:2f:0e:b8:5e:91:28:26:38:60:81:a7:
                    95:b9:c8:fe:77:b6:c7:5f:30:2d:f0:00:e7:b8:e1:
                    d4:dc:d8:10:32:f9:27:a3:6d:a7:78:56:7b:58:bd:
                    e2:36:d8:0c:8a:86:9a:17:20:b5:b2:8a:4c:7b:2c:
                    a4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:03:9C:7C:8B:54:54:C7:C9:0F:C5:6B:F6:50:19:62:42:A0:9B:83
            X509v3 Authority Key Identifier:
                keyid:AC:2E:0D:3F:42:72:21:7F:EF:B9:D3:2D:CE:1A:33:2D:E9:6A:38:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rC4NP0JyIX_vudMtzhozLelqOF4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:82:9a:32:61:5e:e0:42:0e:a2:b5:c0:30:a7:af:74:3f:fa:
         93:79:b9:98:78:ab:53:e3:60:0d:e8:99:78:51:6e:c5:a3:71:
         4d:5e:cd:f2:63:d3:f8:46:17:46:02:b5:ad:a4:16:49:01:e0:
         01:50:db:1f:a3:17:b6:3c:dd:3d:46:e3:f7:aa:a1:94:23:4b:
         f3:2d:63:de:9f:e9:f3:9d:8c:71:39:6e:cc:af:1d:8e:f7:b4:
         9a:db:de:bf:c0:7c:85:4a:11:52:b3:92:b8:7e:87:3f:a9:fc:
         ec:38:38:17:71:7a:41:c4:77:b7:57:54:b8:b9:fb:ea:0d:8f:
         c5:a2:78:06:6e:56:07:d2:e3:26:e7:ee:62:b3:13:fc:ae:fc:
         5b:08:46:e5:31:4a:68:25:99:2f:36:2f:8a:56:82:91:cf:b2:
         3d:c6:cc:6b:e0:e3:54:df:e2:64:7f:cd:49:23:08:a0:d8:3c:
         c9:54:54:91:2a:c4:20:f2:68:66:5a:d6:55:25:50:aa:db:5e:
         fb:f3:9e:75:5b:85:3b:2f:ef:b6:0c:6f:a6:ab:99:59:f5:0a:
         87:8a:8b:45:f4:a6:66:12:00:94:27:25:42:ec:e2:54:ce:41:
         7f:ce:d1:e6:30:30:2d:f8:cc:b2:04:4a:86:a5:20:ba:eb:b8:
         59:37:69:ba
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REQ1RTExMTAvBgNVBAUTKEFDMkUwRDNGNDI3MjIxN0ZFRkI5RDMyRENFMUEzMzJE
RTk2QTM4NUUwHhcNMjUwMTMwMjA0NDM0WhcNMjUwMjA2MjA0NDM0WjAYMRYwFAYD
VQQDEw02NzliZTRiMi05MmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApmj+jiN+mIvFYrE3qGh6QCInUtY9lKYlU1zJC8GA+w2yHwhwrmCV54t61Blf
gLAGd1NTaDd56JuP+j7okmfCJqGiJo9HmpgFCJn31940vThDrF6j4NkC03KVxYOk
IXt+Lv1SPzo7Vm7k+bdEaG6KeZXDgR+VmWdi83pGXcmtIVRs+Y9R0Ki6qTsGMMQ0
WxhV+UGPaK5NSF8OUf7CXXVnN9A2CGkkK/JRKEVez31UT+2AjMlM2iojVxZifSiW
SvXAznUj1oQILw64XpEoJjhggaeVucj+d7bHXzAt8ADnuOHU3NgQMvkno22neFZ7
WL3iNtgMioaaFyC1sopMeyykjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPEDnHyL
VFTHyQ/Fa/ZQGWJCoJuDMB8GA1UdIwQYMBaAFKwuDT9CciF/77nTLc4aMy3pajhe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDVFMS8xNjVCN0JGNkJD
NkUxMUVBQTVDQjAzN0RDNEY5QUUwMi9yQzROUDBKeUlYX3Z1ZE10emhvekxlbHFP
RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JDNE5QMEp5SVhfdnVkTXR6aG96TGVscU9GNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RDVFMS8xNjVCN0JGNkJDNkUxMUVBQTVDQjAzN0RDNEY5QUUwMi9yQzROUDBKeUlY
X3Z1ZE10emhvekxlbHFPRjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBygpoyYV7gQg6itcAwp690P/qTebmYeKtT42AN6Jl4UW7Fo3FNXs3y
Y9P4RhdGArWtpBZJAeABUNsfoxe2PN09RuP3qqGUI0vzLWPen+nznYxxOW7Mrx2O
97Sa296/wHyFShFSs5K4foc/qfzsODgXcXpBxHe3V1S4ufvqDY/FongGblYH0uMm
5+5isxP8rvxbCEblMUpoJZkvNi+KVoKRz7I9xsxr4ONU3+Jkf81JIwig2DzJVFSR
KsQg8mhmWtZVJVCq21778551W4U7L++2DG+mq5lZ9QqHiotF9KZmEgCUJyVC7OJU
zkF/ztHmMDAt+MyyBEqGpSC667hZN2m6
-----END CERTIFICATE-----