Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft
File:                     c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft (raw, json)
Hash identifier:          l1xuIlChYNVLxYFFaB1DT6Hs9M+PqZMYN9Zoxm3QjTg=
Subject key identifier:   34:46:9A:99:5C:E1:04:72:DB:96:5B:97:A0:A5:AA:16:F7:DF:8C:91
Authority key identifier: 73:CE:12:74:CD:DF:17:C3:0D:A3:AB:CF:F8:1F:D9:F1:2F:D1:B4:F2
Certificate issuer:       /CN=A91DE2B2/serialNumber=73CE1274CDDF17C30DA3ABCFF81FD9F12FD1B4F2
Certificate serial:       3457
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft
Manifest number:          344F
Signing time:             Fri 31 Jan 2025 15:03:28 +0000
Manifest this update:     Fri 31 Jan 2025 15:03:27 +0000
Manifest next update:     Fri 07 Feb 2025 15:03:27 +0000
Files and hashes:         1: c84SdM3fF8MNo6vP-B_Z8S_RtPI.crl (hash: ZOfUbDE2fYRw61gC6HTPtK4mXEhegfN/L4q8Tx75Suc=)
                          2: 0B1273668FA411E78001F63DC4F9AE02.roa (hash: k3e6uk50CslChWb70mel5/uXC1n+xgHkfi8aZq+HzkQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13399 (0x3457)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE2B2/serialNumber=73CE1274CDDF17C30DA3ABCFF81FD9F12FD1B4F2
        Validity
            Not Before: Jan 31 15:03:27 2025 GMT
            Not After : Feb  7 15:03:27 2025 GMT
        Subject: CN=679ce640-d469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ea:41:aa:a6:cc:34:ca:de:c2:3c:cc:f7:b5:
                    ff:99:14:e9:9b:bf:f7:bd:93:3b:7d:2d:e2:e1:c2:
                    bd:cc:4e:4f:32:e3:84:42:95:30:95:1a:b3:44:d5:
                    b0:b1:31:65:91:24:b1:bd:e6:7e:e1:e3:45:d4:eb:
                    de:db:c0:ca:5a:60:f9:99:5a:d7:2c:3e:8a:0d:3e:
                    ad:80:47:8a:df:a8:3d:bf:15:14:6e:67:78:44:79:
                    c2:cf:6e:cc:fc:f2:e1:f7:ef:ca:42:be:41:46:7c:
                    fc:c1:84:e5:00:8b:0c:85:fb:11:bf:21:bb:fe:6b:
                    65:de:94:ff:8e:ae:f2:e2:e9:37:df:91:51:e6:2b:
                    cf:f8:4d:6d:89:e5:35:9d:7a:c3:16:0c:af:53:0e:
                    7b:f6:09:6d:84:9a:50:6c:37:d9:0d:2d:ad:bc:09:
                    5b:ac:1e:a3:4b:b7:98:10:f8:22:5b:02:03:ef:e0:
                    55:24:63:7e:01:da:94:7c:9a:7b:fd:23:6f:1b:cb:
                    f1:84:db:7b:2c:76:6b:4c:db:42:ce:18:49:cd:72:
                    12:55:b8:e5:7c:2b:0e:43:e6:31:ae:c6:8b:3f:89:
                    fe:32:eb:ae:33:8d:69:68:01:2e:7d:60:7a:98:c3:
                    6e:62:05:b5:6b:4b:a0:8f:93:85:be:a7:00:47:0e:
                    6f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:46:9A:99:5C:E1:04:72:DB:96:5B:97:A0:A5:AA:16:F7:DF:8C:91
            X509v3 Authority Key Identifier:
                keyid:73:CE:12:74:CD:DF:17:C3:0D:A3:AB:CF:F8:1F:D9:F1:2F:D1:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:c5:7b:ac:83:19:9d:a5:c2:29:54:78:c3:cb:64:76:c9:d4:
         6a:a5:fb:cc:69:48:8e:47:ea:93:84:2b:95:04:0f:bb:16:40:
         4c:37:cc:bd:73:b3:91:04:d9:d4:01:d4:d9:8f:56:46:91:a9:
         06:9d:1e:11:09:57:a6:b0:13:f1:1b:55:00:ca:1a:8e:3a:41:
         65:65:e8:9f:ae:3f:20:2f:e2:15:e1:3c:cf:fe:ae:49:62:72:
         9f:97:93:d9:aa:b9:66:30:1f:b5:36:0f:b2:88:cd:3e:63:2d:
         68:5a:4d:12:1d:2d:62:aa:7c:7a:76:86:81:fd:dd:4d:7b:8f:
         8d:7a:a9:49:a7:57:50:ac:b9:a1:1e:8d:59:7a:91:05:81:f1:
         3b:02:de:89:71:4c:7a:23:95:99:d0:9e:57:9e:81:c2:48:11:
         18:a5:5f:6f:77:cf:56:0c:ed:e8:6d:3d:90:65:8b:dc:88:9b:
         74:3e:fb:7d:24:79:fb:51:a6:4a:40:54:cd:af:0d:9f:6c:07:
         93:55:43:37:43:95:09:3d:83:72:25:17:c4:b6:46:e3:5a:fa:
         5d:0d:a0:23:ff:b6:85:01:32:f3:9e:ab:bc:1c:c4:b3:6d:dc:
         f7:40:f9:78:83:b5:a7:ab:fb:78:6b:b6:07:25:24:fd:7c:6a:
         21:15:0a:0c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNFcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REUyQjIxMTAvBgNVBAUTKDczQ0UxMjc0Q0RERjE3QzMwREEzQUJDRkY4MUZEOUYx
MkZEMUI0RjIwHhcNMjUwMTMxMTUwMzI3WhcNMjUwMjA3MTUwMzI3WjAYMRYwFAYD
VQQDEw02NzljZTY0MC1kNDY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtupBqqbMNMrewjzM97X/mRTpm7/3vZM7fS3i4cK9zE5PMuOEQpUwlRqzRNWw
sTFlkSSxveZ+4eNF1Ove28DKWmD5mVrXLD6KDT6tgEeK36g9vxUUbmd4RHnCz27M
/PLh9+/KQr5BRnz8wYTlAIsMhfsRvyG7/mtl3pT/jq7y4uk335FR5ivP+E1tieU1
nXrDFgyvUw579glthJpQbDfZDS2tvAlbrB6jS7eYEPgiWwID7+BVJGN+AdqUfJp7
/SNvG8vxhNt7LHZrTNtCzhhJzXISVbjlfCsOQ+YxrsaLP4n+MuuuM41paAEufWB6
mMNuYgW1a0ugj5OFvqcARw5vTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDRGmplc
4QRy25Zbl6Clqhb334yRMB8GA1UdIwQYMBaAFHPOEnTN3xfDDaOrz/gf2fEv0bTy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTJCMi81M0NBNDYyQTFE
OUQxMUUyQUY0NTZEOEMwOEIwMkNEMi9jODRTZE0zZkY4TU5vNnZQLUJfWjhTX1J0
UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2M4NFNkTTNmRjhNTm82dlAtQl9aOFNfUnRQSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RTJCMi81M0NBNDYyQTFEOUQxMUUyQUY0NTZEOEMwOEIwMkNEMi9jODRTZE0zZkY4
TU5vNnZQLUJfWjhTX1J0UEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCOxXusgxmdpcIpVHjDy2R2ydRqpfvMaUiOR+qThCuVBA+7FkBMN8y9
c7ORBNnUAdTZj1ZGkakGnR4RCVemsBPxG1UAyhqOOkFlZeifrj8gL+IV4TzP/q5J
YnKfl5PZqrlmMB+1Ng+yiM0+Yy1oWk0SHS1iqnx6doaB/d1Ne4+NeqlJp1dQrLmh
Ho1ZepEFgfE7At6JcUx6I5WZ0J5XnoHCSBEYpV9vd89WDO3obT2QZYvciJt0Pvt9
JHn7UaZKQFTNrw2fbAeTVUM3Q5UJPYNyJRfEtkbjWvpdDaAj/7aFATLznqu8HMSz
bdz3QPl4g7Wnq/t4a7YHJST9fGohFQoM
-----END CERTIFICATE-----