Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft
File:                     9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft (raw, json)
Hash identifier:          6O9Af4oI6egI9TWvJnCpKkdWaIYFQUqkGlxGj/VSK3Y=
Subject key identifier:   2E:9F:5A:7B:08:88:5A:D7:D7:E0:2D:20:49:B7:51:5E:8E:13:7B:35
Authority key identifier: F4:CF:CA:1D:66:0B:F1:61:B3:F4:09:AD:CB:0C:13:C0:FA:82:24:64
Certificate issuer:       /CN=A91E2695/serialNumber=F4CFCA1D660BF161B3F409ADCB0C13C0FA822464
Certificate serial:       14F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft
Manifest number:          14E6
Signing time:             Fri 31 Jan 2025 16:49:51 +0000
Manifest this update:     Fri 31 Jan 2025 16:49:51 +0000
Manifest next update:     Fri 07 Feb 2025 16:49:51 +0000
Files and hashes:         1: 9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl (hash: E3QIvp+wckRSiSEN4fbGQvhX41bR1YUWQAHa64LzQaw=)
                          2: 6208BAD4499611E8B421BE5CC4F9AE02.roa (hash: S5mRurG916ui1hjUc9swark9ywmNDAZ5nDRIJrKsR2I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5360 (0x14f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2695/serialNumber=F4CFCA1D660BF161B3F409ADCB0C13C0FA822464
        Validity
            Not Before: Jan 31 16:49:51 2025 GMT
            Not After : Feb  7 16:49:51 2025 GMT
        Subject: CN=679cff2f-fac1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e9:81:04:f2:63:71:b1:03:7d:da:82:ba:63:
                    58:3d:46:c9:84:11:b7:bf:51:83:8f:46:4f:eb:99:
                    56:a7:02:b0:34:03:2f:ae:1b:67:6e:ef:21:bf:5e:
                    31:7f:75:ce:65:5d:f2:37:1f:d7:aa:50:67:96:cc:
                    db:65:c1:c8:89:af:fb:03:f7:fb:9e:27:06:2b:09:
                    87:43:fd:46:40:8b:1b:73:b1:95:7a:7e:07:53:33:
                    f8:f0:53:d8:70:15:a1:bb:f1:28:5a:82:8f:01:b7:
                    b0:b3:da:3e:c2:48:bd:f1:05:7f:37:dc:b3:88:72:
                    2a:44:de:ba:68:41:93:61:15:7c:05:9a:2b:5d:8b:
                    50:e9:c0:bf:9e:b8:48:f7:38:fc:97:c7:fe:b7:c9:
                    8a:3e:fa:31:38:93:58:09:c7:51:30:51:d1:56:fa:
                    26:24:e6:b6:68:52:87:a3:4a:bb:0e:f2:5d:b2:cb:
                    5e:09:59:66:9f:5d:61:e6:5d:f5:b3:87:97:ea:6d:
                    d1:8c:d5:07:c7:bc:9d:b7:c5:13:8a:55:99:cf:ac:
                    30:3a:a1:9a:8f:b2:e7:09:cd:b8:95:aa:db:82:ea:
                    21:74:ff:9d:7c:3c:14:6c:c1:13:ef:24:fd:d4:07:
                    1a:eb:ec:0f:93:94:ee:87:7f:fd:eb:3a:97:c7:ff:
                    d4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:9F:5A:7B:08:88:5A:D7:D7:E0:2D:20:49:B7:51:5E:8E:13:7B:35
            X509v3 Authority Key Identifier:
                keyid:F4:CF:CA:1D:66:0B:F1:61:B3:F4:09:AD:CB:0C:13:C0:FA:82:24:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:2b:c1:43:84:7c:c5:24:60:63:f1:a2:31:d7:30:a6:59:e2:
         9c:d1:75:a5:74:51:58:b9:e7:b6:c6:f9:53:fe:35:42:f7:70:
         9a:b4:a2:6e:62:d8:ca:c6:32:d6:4b:ea:c8:c1:cd:84:7a:3f:
         64:31:66:21:d0:8f:5a:3b:97:12:53:c9:68:c3:b2:6d:a3:b8:
         11:50:92:47:ba:68:14:f1:34:a7:ee:32:82:d8:5f:bd:08:24:
         99:e7:33:7a:c8:02:96:3f:b0:60:e0:d6:9a:34:2d:08:76:f0:
         3a:a2:22:a6:0f:b2:eb:04:3a:e1:a6:f8:8a:c9:0a:cb:4b:1c:
         1d:83:79:b8:8a:c9:84:e0:0a:b5:16:d2:2f:b5:15:50:3a:a9:
         b9:35:8c:56:15:86:04:bd:ea:89:3c:e0:ea:33:4a:27:d9:34:
         10:c6:5f:96:9d:69:54:df:76:09:c2:e0:81:84:28:0f:cb:65:
         26:fd:97:55:d0:8b:1e:e0:72:82:b5:8a:16:c6:04:e0:2f:d7:
         99:cb:44:c6:41:01:32:7e:bf:c6:b8:70:91:44:81:c5:2b:a8:
         b4:2a:07:8a:f6:e4:e7:11:b4:eb:3d:b0:24:d8:76:c5:b5:92:
         9b:97:ac:34:d8:63:a1:4a:8f:d8:d4:92:76:80:80:8f:b4:8b:
         a0:d8:83:3d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICFPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTI2OTUxMTAvBgNVBAUTKEY0Q0ZDQTFENjYwQkYxNjFCM0Y0MDlBRENCMEMxM0Mw
RkE4MjI0NjQwHhcNMjUwMTMxMTY0OTUxWhcNMjUwMjA3MTY0OTUxWjAYMRYwFAYD
VQQDEw02NzljZmYyZi1mYWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr+mBBPJjcbEDfdqCumNYPUbJhBG3v1GDj0ZP65lWpwKwNAMvrhtnbu8hv14x
f3XOZV3yNx/XqlBnlszbZcHIia/7A/f7nicGKwmHQ/1GQIsbc7GVen4HUzP48FPY
cBWhu/EoWoKPAbews9o+wki98QV/N9yziHIqRN66aEGTYRV8BZorXYtQ6cC/nrhI
9zj8l8f+t8mKPvoxOJNYCcdRMFHRVvomJOa2aFKHo0q7DvJdssteCVlmn11h5l31
s4eX6m3RjNUHx7ydt8UTilWZz6wwOqGaj7LnCc24larbguohdP+dfDwUbMET7yT9
1Aca6+wPk5Tuh3/96zqXx//UtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC6fWnsI
iFrX1+AtIEm3UV6OE3s1MB8GA1UdIwQYMBaAFPTPyh1mC/Fhs/QJrcsME8D6giRk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjY5NS9CQjg3QUM0QTQ3
RjgxMUU4ODBFNEY0MTBDNEY5QUUwMi85TV9LSFdZTDhXR3o5QW10eXd3VHdQcUNK
R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlNX0tIV1lMOFdHejlBbXR5d3dUd1BxQ0pHUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MjY5NS9CQjg3QUM0QTQ3RjgxMUU4ODBFNEY0MTBDNEY5QUUwMi85TV9LSFdZTDhX
R3o5QW10eXd3VHdQcUNKR1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBoK8FDhHzFJGBj8aIx1zCmWeKc0XWldFFYuee2xvlT/jVC93CatKJu
YtjKxjLWS+rIwc2Eej9kMWYh0I9aO5cSU8low7Jto7gRUJJHumgU8TSn7jKC2F+9
CCSZ5zN6yAKWP7Bg4NaaNC0IdvA6oiKmD7LrBDrhpviKyQrLSxwdg3m4ismE4Aq1
FtIvtRVQOqm5NYxWFYYEveqJPODqM0on2TQQxl+WnWlU33YJwuCBhCgPy2Um/ZdV
0Ise4HKCtYoWxgTgL9eZy0TGQQEyfr/GuHCRRIHFK6i0KgeK9uTnEbTrPbAk2HbF
tZKbl6w02GOhSo/Y1JJ2gICPtIug2IM9
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:35:38 2025 by rpki-client