Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft
File:                     MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft (raw, json)
Hash identifier:          fEk7LbPVStUWb9GaAmh8zkVxThdSHhiZ2Vvbjmp6D7Q=
Subject key identifier:   C9:A5:EB:C5:49:FA:F8:D4:43:40:0B:62:31:37:60:9E:08:8D:5E:86
Authority key identifier: 30:34:DE:F0:4D:9A:03:EE:22:89:89:24:E3:12:64:C0:1D:E0:03:03
Certificate issuer:       /CN=A91E81A5/serialNumber=3034DEF04D9A03EE22898924E31264C01DE00303
Certificate serial:       0161
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft
Manifest number:          015E
Signing time:             Fri 31 Jan 2025 03:17:20 +0000
Manifest this update:     Fri 31 Jan 2025 03:17:20 +0000
Manifest next update:     Fri 07 Feb 2025 03:17:20 +0000
Files and hashes:         1: MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl (hash: FFo3Xq0U1a55kzLVjhVCpBAnfdWcWfWbDNW425mkhj8=)
                          2: 7BD5A1FCCA0B11ED8B414F75C4F9AE02.roa (hash: QOfAhP3S+ePBd5bLXcD9SSvstPxykfxAtUO9d7xqQdE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 353 (0x161)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E81A5/serialNumber=3034DEF04D9A03EE22898924E31264C01DE00303
        Validity
            Not Before: Jan 31 03:17:20 2025 GMT
            Not After : Feb  7 03:17:20 2025 GMT
        Subject: CN=679c40c0-1614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d1:e0:65:2d:cd:d4:cd:c1:15:5b:71:50:f2:
                    11:b1:28:51:4d:8c:9f:cc:78:1b:58:ce:83:0c:f7:
                    2d:5a:38:b0:8b:9b:89:81:d2:21:ba:34:58:05:23:
                    2a:e5:1e:18:cd:bf:0c:2c:59:d1:0a:94:17:06:b0:
                    44:ae:e6:1c:68:e6:46:20:06:11:8b:2e:8b:60:be:
                    94:6f:1d:62:8e:6e:fc:91:fd:99:44:e6:5d:28:d7:
                    e4:7c:ae:41:c6:da:c5:d8:f8:de:bf:8f:48:44:c7:
                    ad:e8:cc:cf:f2:19:57:11:9d:24:bf:f1:9e:c5:4d:
                    1f:98:dd:10:5a:e2:dc:fb:fc:96:bb:d7:d7:fc:6b:
                    43:4c:4e:57:4a:e5:c3:e2:64:29:87:6c:de:47:6a:
                    57:a3:31:b1:06:8c:7f:66:0b:61:40:0f:4b:b5:28:
                    4f:40:7d:c6:cf:e9:be:4c:dc:9b:d8:55:29:4b:63:
                    f6:c9:63:eb:2b:2a:04:8b:be:de:83:d7:32:14:2b:
                    3f:8a:3e:bc:8b:c1:03:65:a0:0e:9b:03:d8:5e:eb:
                    00:81:3f:86:2d:ad:26:c6:1b:49:51:a0:19:47:78:
                    5d:f4:fa:af:c0:0f:ae:ba:7b:d9:67:a6:c2:a9:2d:
                    d8:b9:d8:5b:e8:e5:1a:29:78:61:21:37:17:95:fd:
                    89:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A5:EB:C5:49:FA:F8:D4:43:40:0B:62:31:37:60:9E:08:8D:5E:86
            X509v3 Authority Key Identifier:
                keyid:30:34:DE:F0:4D:9A:03:EE:22:89:89:24:E3:12:64:C0:1D:E0:03:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:04:c7:80:5d:dc:54:7c:94:ae:60:67:33:7b:da:08:b5:95:
         dd:3d:4e:32:1c:64:9b:6b:92:9e:c7:80:2b:96:ed:e3:79:5a:
         35:5f:f3:12:a7:4c:44:cd:8b:9b:81:65:e1:bf:a6:88:bc:a4:
         3a:29:ff:83:60:10:04:2a:75:c4:49:f5:81:4d:9f:42:35:24:
         96:ec:c7:f9:d9:14:e6:5d:c8:a8:24:97:f3:b8:29:24:3b:cd:
         84:51:ed:9a:65:ed:2e:f0:27:f6:97:d0:7c:0f:36:43:61:60:
         41:29:70:e7:cc:97:3f:e0:ce:1b:47:31:b4:f1:8b:9f:74:73:
         34:7a:68:9b:80:ea:c4:e9:7d:d0:f4:e8:21:2b:8a:22:e1:27:
         f3:d4:e8:7b:06:9a:c7:76:4e:dc:01:c3:14:d2:b0:86:bc:81:
         ed:85:e9:f5:3f:4c:de:96:85:bb:4a:95:3c:62:b2:5d:96:6c:
         1d:5b:c5:f1:9c:0b:df:00:a0:ad:5c:79:1e:03:99:bf:ff:ee:
         4b:fe:55:4f:2a:3d:70:d2:35:fb:b5:87:c7:03:7d:a3:dd:05:
         71:e0:b3:c6:53:f6:8f:a9:a3:f5:8a:60:de:d6:bf:3b:b9:e3:
         58:3d:74:c1:23:22:3d:5f:4f:27:1d:73:43:8d:9b:f6:06:e3:
         13:c5:48:9a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTgxQTUxMTAvBgNVBAUTKDMwMzRERUYwNEQ5QTAzRUUyMjg5ODkyNEUzMTI2NEMw
MURFMDAzMDMwHhcNMjUwMTMxMDMxNzIwWhcNMjUwMjA3MDMxNzIwWjAYMRYwFAYD
VQQDEw02NzljNDBjMC0xNjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5dHgZS3N1M3BFVtxUPIRsShRTYyfzHgbWM6DDPctWjiwi5uJgdIhujRYBSMq
5R4Yzb8MLFnRCpQXBrBEruYcaOZGIAYRiy6LYL6Ubx1ijm78kf2ZROZdKNfkfK5B
xtrF2Pjev49IRMet6MzP8hlXEZ0kv/GexU0fmN0QWuLc+/yWu9fX/GtDTE5XSuXD
4mQph2zeR2pXozGxBox/ZgthQA9LtShPQH3Gz+m+TNyb2FUpS2P2yWPrKyoEi77e
g9cyFCs/ij68i8EDZaAOmwPYXusAgT+GLa0mxhtJUaAZR3hd9PqvwA+uunvZZ6bC
qS3Yudhb6OUaKXhhITcXlf2JXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMml68VJ
+vjUQ0ALYjE3YJ4IjV6GMB8GA1UdIwQYMBaAFDA03vBNmgPuIomJJOMSZMAd4AMD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODFBNS9DMTU4NDNCNENB
MDcxMUVEOEY5RTJBNzBDNEY5QUUwMi9NRFRlOEUyYUEtNGlpWWtrNHhKa3dCM2dB
d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01EVGU4RTJhQS00aWlZa2s0eEprd0IzZ0F3TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
ODFBNS9DMTU4NDNCNENBMDcxMUVEOEY5RTJBNzBDNEY5QUUwMi9NRFRlOEUyYUEt
NGlpWWtrNHhKa3dCM2dBd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCgBMeAXdxUfJSuYGcze9oItZXdPU4yHGSba5Kex4Arlu3jeVo1X/MS
p0xEzYubgWXhv6aIvKQ6Kf+DYBAEKnXESfWBTZ9CNSSW7Mf52RTmXcioJJfzuCkk
O82EUe2aZe0u8Cf2l9B8DzZDYWBBKXDnzJc/4M4bRzG08YufdHM0emibgOrE6X3Q
9OghK4oi4Sfz1Oh7BprHdk7cAcMU0rCGvIHthen1P0zeloW7SpU8YrJdlmwdW8Xx
nAvfAKCtXHkeA5m//+5L/lVPKj1w0jX7tYfHA32j3QVx4LPGU/aPqaP1imDe1r87
ueNYPXTBIyI9X08nHXNDjZv2BuMTxUia
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:15:39 2025 by rpki-client