Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft
File:                     IAg9TfqETFcnVYxMdW2yDfgHzYE.mft (raw, json)
Hash identifier:          BLQTMqcXvCKwaWHa0SLsP1O0bAy3gZwNJJQ+jzSROVI=
Subject key identifier:   DE:FE:07:AF:8C:F4:5C:C5:8B:EC:E8:A8:06:C0:A0:36:5B:C0:C3:9D
Authority key identifier: 20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81
Certificate issuer:       /CN=A91EAE60/serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81
Certificate serial:       2742
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft
Manifest number:          26F3
Signing time:             Fri 31 Jan 2025 15:41:30 +0000
Manifest this update:     Fri 31 Jan 2025 15:41:29 +0000
Manifest next update:     Fri 07 Feb 2025 15:41:29 +0000
Files and hashes:         1: IAg9TfqETFcnVYxMdW2yDfgHzYE.crl (hash: +1PNjhyKMUnFJjSn535DLWIgOSQ8FqN248RlF2l8JVw=)
                          2: B9AC3CD4B0F011E5A08A224DC4F9AE02.roa (hash: UoNQyiMbzRM8LTAnCH5+6vt93Lw53vJESQHvBWYcjss=)
                          3: BD84664CB0F011E5A08A224DC4F9AE02.roa (hash: cpPBl2HZl2WMGx0/E7w0QxRgBvloFKsPNiFCwchG+b8=)
                          4: BBF567AEB0F011E5A08A224DC4F9AE02.roa (hash: gUaglzjVEo/jAQam5U3T7T5H9G5lSnkvKcItCzMbsY0=)
                          5: AE887848662211E7BC7E2636C4F9AE02.roa (hash: lXtCcZI3WY8OIlNn2pthb5U4nO4x25l4CIfkoHRn3ik=)
                          6: 42724A42D87811E98F4DC832C4F9AE02.roa (hash: g3qXc5xzXRuZuGvrf+0l5unc13/FwmeQdJGJ36GeWJ8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10050 (0x2742)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAE60/serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81
        Validity
            Not Before: Jan 31 15:41:29 2025 GMT
            Not After : Feb  7 15:41:29 2025 GMT
        Subject: CN=679cef2a-6d80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ee:6b:0b:f7:f9:39:53:6d:c7:f4:bb:af:c0:
                    0c:df:9a:8d:53:03:15:17:d6:8b:6f:fc:28:a0:36:
                    0b:49:a9:8a:ba:99:90:ee:e6:c3:10:fa:96:f1:b6:
                    22:be:61:93:6d:d8:5c:f7:e0:1f:8a:28:1d:e9:ea:
                    3a:7a:a2:a2:a8:1d:49:e3:b5:ed:07:0f:29:b2:4c:
                    cf:70:c4:59:ad:58:ea:aa:87:c0:ea:c8:f4:dd:74:
                    9a:ba:76:e9:51:fe:55:be:1c:1e:40:4a:e0:88:d6:
                    25:d6:9b:42:76:92:93:f9:a4:92:b2:06:3d:95:f1:
                    d5:1f:10:db:5f:b7:43:3e:18:54:e1:33:20:9b:28:
                    77:c1:60:96:ab:72:61:15:f8:04:8a:ba:8b:5e:5d:
                    e5:ca:e0:b6:c2:93:33:90:fd:d7:99:bc:93:12:76:
                    02:46:8c:d8:c7:98:d1:b7:2a:d7:d4:2d:20:2f:d1:
                    aa:8c:72:20:2f:52:89:ef:ed:4a:3a:fe:d1:86:e9:
                    f3:0e:fc:d2:68:ff:96:9f:e5:cf:09:fe:9a:05:b6:
                    28:2a:7c:49:a8:2a:5c:c6:9a:21:d4:a9:43:d8:44:
                    b0:d9:52:64:64:37:55:11:09:85:ed:77:4b:32:fd:
                    b4:37:c6:18:79:dc:05:a8:16:76:cc:60:6f:f2:34:
                    86:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:FE:07:AF:8C:F4:5C:C5:8B:EC:E8:A8:06:C0:A0:36:5B:C0:C3:9D
            X509v3 Authority Key Identifier:
                keyid:20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:c3:ed:b4:b6:a5:81:1e:74:0c:3d:74:e7:6f:de:ac:69:b2:
         10:80:44:04:3c:4b:ce:f8:5e:82:dd:5e:30:40:7f:ba:09:fe:
         a0:75:1b:39:17:a5:3c:90:e6:bb:ad:4c:90:87:73:1e:ca:7d:
         fd:e4:45:b7:05:1f:1e:02:c4:16:85:3a:51:48:07:36:37:35:
         a1:b3:0c:73:bc:aa:69:9d:a7:13:dc:20:3b:43:94:26:26:3a:
         13:10:6d:6c:73:ea:9b:0c:f7:99:f4:3e:17:b8:0f:84:0b:42:
         c1:d7:99:ac:7a:e6:9c:7b:d9:e5:d6:7a:c1:5a:ec:a2:bd:1f:
         d8:7d:4d:0e:c2:48:dd:da:7b:4f:4f:9b:bd:2e:09:6b:b4:70:
         ce:58:f0:b8:62:0f:dd:95:66:ec:c2:11:7b:20:6c:54:35:8e:
         41:1d:f9:09:85:f0:85:0c:c6:52:ac:15:06:36:e5:a8:df:a0:
         2e:2b:8d:e8:c6:a2:89:7a:2f:25:b1:a8:02:cd:41:dd:5b:fb:
         27:7c:1a:33:9c:af:a5:b8:56:22:9c:a4:eb:fe:98:45:81:41:
         fb:ca:8a:73:86:65:c5:63:95:fa:66:ba:97:34:26:5d:78:17:
         25:a0:e4:40:c3:cd:1d:2c:ee:32:96:37:d8:a2:e2:5d:8a:50:
         b4:e7:cb:41
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICJ0IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUFFNjAxMTAvBgNVBAUTKDIwMDgzRDRERkE4NDRDNTcyNzU1OEM0Qzc1NkRCMjBE
RjgwN0NEODEwHhcNMjUwMTMxMTU0MTI5WhcNMjUwMjA3MTU0MTI5WjAYMRYwFAYD
VQQDEw02NzljZWYyYS02ZDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsO5rC/f5OVNtx/S7r8AM35qNUwMVF9aLb/wooDYLSamKupmQ7ubDEPqW8bYi
vmGTbdhc9+Afiigd6eo6eqKiqB1J47XtBw8pskzPcMRZrVjqqofA6sj03XSaunbp
Uf5VvhweQErgiNYl1ptCdpKT+aSSsgY9lfHVHxDbX7dDPhhU4TMgmyh3wWCWq3Jh
FfgEirqLXl3lyuC2wpMzkP3XmbyTEnYCRozYx5jRtyrX1C0gL9GqjHIgL1KJ7+1K
Ov7RhunzDvzSaP+Wn+XPCf6aBbYoKnxJqCpcxpoh1KlD2ESw2VJkZDdVEQmF7XdL
Mv20N8YYedwFqBZ2zGBv8jSGBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN7+B6+M
9FzFi+zoqAbAoDZbwMOdMB8GA1UdIwQYMBaAFCAIPU36hExXJ1WMTHVtsg34B82B
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUU2MC9GMTk5NjcxMkM3
Q0YxMUU0QjEzQkUxMjFDNEY5QUUwMi9JQWc5VGZxRVRGY25WWXhNZFcyeURmZ0h6
WUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lBZzlUZnFFVEZjblZZeE1kVzJ5RGZnSHpZRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QUU2MC9GMTk5NjcxMkM3Q0YxMUU0QjEzQkUxMjFDNEY5QUUwMi9JQWc5VGZxRVRG
Y25WWXhNZFcyeURmZ0h6WUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAzw+20tqWBHnQMPXTnb96sabIQgEQEPEvO+F6C3V4wQH+6Cf6gdRs5
F6U8kOa7rUyQh3Meyn395EW3BR8eAsQWhTpRSAc2NzWhswxzvKppnacT3CA7Q5Qm
JjoTEG1sc+qbDPeZ9D4XuA+EC0LB15mseuace9nl1nrBWuyivR/YfU0Owkjd2ntP
T5u9LglrtHDOWPC4Yg/dlWbswhF7IGxUNY5BHfkJhfCFDMZSrBUGNuWo36AuK43o
xqKJei8lsagCzUHdW/snfBoznK+luFYinKTr/phFgUH7yopzhmXFY5X6ZrqXNCZd
eBcloORAw80dLO4yljfYouJdilC058tB
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:22:58 2025 by rpki-client