Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft
File:                     3UAamS3TKfk027INWAtMpyeQ37E.mft (raw, json)
Hash identifier:          17J5dGsaZZe8jF2Sf25Cigw9dXd30iyYb/kusyp9w04=
Subject key identifier:   AA:BB:B2:D3:0F:53:36:67:90:2F:32:0D:B5:E0:4C:EB:F5:3E:14:CB
Authority key identifier: DD:40:1A:99:2D:D3:29:F9:34:DB:B2:0D:58:0B:4C:A7:27:90:DF:B1
Certificate issuer:       /CN=A91EAB64/serialNumber=DD401A992DD329F934DBB20D580B4CA72790DFB1
Certificate serial:       0381
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UAamS3TKfk027INWAtMpyeQ37E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft
Manifest number:          04C4
Signing time:             Fri 31 Jan 2025 00:55:27 +0000
Manifest this update:     Fri 31 Jan 2025 00:55:27 +0000
Manifest next update:     Fri 07 Feb 2025 00:55:27 +0000
Files and hashes:         1: 3UAamS3TKfk027INWAtMpyeQ37E.crl (hash: nLyU5Thl0he2SB2h0KpTnEYhtyy05x+bvXnzw/lRbtA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 897 (0x381)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAB64/serialNumber=DD401A992DD329F934DBB20D580B4CA72790DFB1
        Validity
            Not Before: Jan 31 00:55:27 2025 GMT
            Not After : Feb  7 00:55:27 2025 GMT
        Subject: CN=679c1f7f-c8f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:06:c7:51:ab:fc:67:ec:7e:cf:09:b5:06:ce:
                    f5:9b:33:22:2e:b4:a0:1b:c7:7b:da:b5:26:31:94:
                    2b:85:a9:1b:36:f4:63:6b:d1:bd:69:f7:b3:47:5d:
                    23:f7:75:9b:f7:9b:fd:48:8b:84:5d:2b:a2:b3:40:
                    5f:10:c3:c2:06:1b:9c:fd:3e:c1:58:64:f0:87:f4:
                    fd:3a:0d:99:03:6b:89:8b:bb:cf:c8:d0:41:21:16:
                    a4:62:7b:fa:65:53:83:d8:72:07:a8:95:13:c9:d6:
                    e6:2b:b2:d8:d2:78:eb:c1:32:4a:5f:5f:bd:45:ff:
                    59:2c:8a:8b:d7:5d:27:e8:77:df:8e:4a:bf:ad:47:
                    ec:62:50:59:4d:ad:be:ba:95:01:77:b8:84:c9:7c:
                    49:35:7d:27:6e:b6:94:58:9e:e7:ec:85:02:b8:bf:
                    96:0b:20:49:98:f7:77:4f:f5:4b:79:52:8c:1d:70:
                    7c:8c:8a:fd:fe:fe:07:a5:d0:cb:bd:af:31:1b:ca:
                    e4:40:a6:38:8d:b8:fb:52:2f:3a:c8:58:10:f6:e9:
                    18:da:4b:f6:fd:e2:5c:e2:e2:3f:c7:b3:41:40:4e:
                    27:43:9d:25:b7:3d:83:d8:34:e4:89:36:51:3e:8b:
                    89:14:82:41:d0:9b:14:cd:33:4a:88:5b:14:ce:c7:
                    7b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:BB:B2:D3:0F:53:36:67:90:2F:32:0D:B5:E0:4C:EB:F5:3E:14:CB
            X509v3 Authority Key Identifier:
                keyid:DD:40:1A:99:2D:D3:29:F9:34:DB:B2:0D:58:0B:4C:A7:27:90:DF:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UAamS3TKfk027INWAtMpyeQ37E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:d6:1b:bb:2e:65:d3:ba:52:99:20:f6:e2:ac:36:da:4e:3a:
         b4:5c:fa:3c:fa:2e:9f:76:ce:e8:ed:2a:84:c9:72:3e:fa:20:
         45:05:fe:60:a1:b1:76:d1:85:da:f7:da:7a:1e:9f:2e:bc:da:
         2c:ae:09:7c:96:c8:21:b6:f1:39:01:f7:82:c0:05:71:ca:67:
         05:9e:97:ab:e5:ac:8e:40:04:64:8a:a8:52:45:3c:ea:bb:3b:
         d9:79:54:73:dd:71:33:5a:bb:b3:10:53:ff:2d:00:6b:6f:bb:
         e1:51:46:54:8e:f0:99:06:e8:0e:fb:90:86:3f:bc:f5:02:fa:
         6b:d6:3e:2e:d4:d8:37:3f:ab:9c:44:93:03:bc:90:2a:8e:c9:
         bd:93:75:f1:22:bd:63:22:d0:50:7b:2b:bf:2e:ba:3c:bb:9d:
         9b:51:f0:cd:6a:73:9c:71:ee:f3:65:87:2d:6c:45:cd:79:ef:
         c7:36:c1:3d:56:58:85:27:b5:f9:3c:91:c4:49:b8:b2:4c:7e:
         2f:52:0f:e5:0a:98:9a:30:f9:86:1d:64:d1:f1:7a:34:56:6d:
         a9:d3:00:53:56:87:e7:b7:65:ad:da:42:2b:eb:d8:ea:cf:9b:
         10:e4:da:43:98:1a:25:3b:e9:84:3b:ac:9e:e8:00:42:8c:a5:
         38:05:67:a9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA4EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUFCNjQxMTAvBgNVBAUTKERENDAxQTk5MkREMzI5RjkzNERCQjIwRDU4MEI0Q0E3
Mjc5MERGQjEwHhcNMjUwMTMxMDA1NTI3WhcNMjUwMjA3MDA1NTI3WjAYMRYwFAYD
VQQDEw02NzljMWY3Zi1jOGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsQbHUav8Z+x+zwm1Bs71mzMiLrSgG8d72rUmMZQrhakbNvRja9G9afezR10j
93Wb95v9SIuEXSuis0BfEMPCBhuc/T7BWGTwh/T9Og2ZA2uJi7vPyNBBIRakYnv6
ZVOD2HIHqJUTydbmK7LY0njrwTJKX1+9Rf9ZLIqL110n6Hffjkq/rUfsYlBZTa2+
upUBd7iEyXxJNX0nbraUWJ7n7IUCuL+WCyBJmPd3T/VLeVKMHXB8jIr9/v4HpdDL
va8xG8rkQKY4jbj7Ui86yFgQ9ukY2kv2/eJc4uI/x7NBQE4nQ50ltz2D2DTkiTZR
PouJFIJB0JsUzTNKiFsUzsd7kQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKq7stMP
UzZnkC8yDbXgTOv1PhTLMB8GA1UdIwQYMBaAFN1AGpkt0yn5NNuyDVgLTKcnkN+x
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUI2NC85QjQ0RUI3NDhG
MjkxMUVDQjZBNjk5NkNDNEY5QUUwMi8zVUFhbVMzVEtmazAyN0lOV0F0TXB5ZVEz
N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNVQWFtUzNUS2ZrMDI3SU5XQXRNcHllUTM3RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QUI2NC85QjQ0RUI3NDhGMjkxMUVDQjZBNjk5NkNDNEY5QUUwMi8zVUFhbVMzVEtm
azAyN0lOV0F0TXB5ZVEzN0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBf1hu7LmXTulKZIPbirDbaTjq0XPo8+i6fds7o7SqEyXI++iBFBf5g
obF20YXa99p6Hp8uvNosrgl8lsghtvE5AfeCwAVxymcFnper5ayOQARkiqhSRTzq
uzvZeVRz3XEzWruzEFP/LQBrb7vhUUZUjvCZBugO+5CGP7z1Avpr1j4u1Ng3P6uc
RJMDvJAqjsm9k3XxIr1jItBQeyu/Lro8u52bUfDNanOcce7zZYctbEXNee/HNsE9
VliFJ7X5PJHESbiyTH4vUg/lCpiaMPmGHWTR8Xo0Vm2p0wBTVofnt2Wt2kIr69jq
z5sQ5NpDmBolO+mEO6ye6ABCjKU4BWep
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:00:41 2025 by rpki-client