Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC8F7/8093C308B2A511EE90DEA220C4F9AE02/sZJ_E4KvyIRDDJZerSibw77GS-w.mft
File:                     sZJ_E4KvyIRDDJZerSibw77GS-w.mft (raw, json)
Hash identifier:          B2AyekqzAUG0qjJVdYhm6X99yO50B3cJ11zx5duH/TU=
Subject key identifier:   60:C4:08:C6:FA:67:B5:43:F5:42:81:46:CF:88:03:DD:64:B0:30:61
Authority key identifier: B1:92:7F:13:82:AF:C8:84:43:0C:96:5E:AD:28:9B:C3:BE:C6:4B:EC
Certificate issuer:       /CN=A91EC8F7/serialNumber=B1927F1382AFC884430C965EAD289BC3BEC64BEC
Certificate serial:       C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZJ_E4KvyIRDDJZerSibw77GS-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC8F7/8093C308B2A511EE90DEA220C4F9AE02/sZJ_E4KvyIRDDJZerSibw77GS-w.mft
Manifest number:          C4
Signing time:             Fri 31 Jan 2025 04:54:59 +0000
Manifest this update:     Fri 31 Jan 2025 04:54:59 +0000
Manifest next update:     Fri 07 Feb 2025 04:54:59 +0000
Files and hashes:         1: sZJ_E4KvyIRDDJZerSibw77GS-w.crl (hash: ZBQw88H+8wGpqe0x07fLOZDjnOa9FW/yGVRTVONRNUo=)
                          2: B0A65A04B2A711EEA3E1C240C4F9AE02.roa (hash: hORZ5AISHPiAhkgQPGt4LkQHQaYezLZ+UwdT1yQrlr0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 197 (0xc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC8F7/serialNumber=B1927F1382AFC884430C965EAD289BC3BEC64BEC
        Validity
            Not Before: Jan 31 04:54:59 2025 GMT
            Not After : Feb  7 04:54:59 2025 GMT
        Subject: CN=679c57a3-9e05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:81:0f:40:bd:f2:9a:ff:ae:08:4a:87:cd:59:
                    05:72:74:ca:7d:c9:a8:f8:31:fb:40:f1:44:6e:d4:
                    ce:39:a5:b9:14:bc:05:c9:bb:94:03:26:f6:41:18:
                    1d:c3:88:59:81:61:ac:b9:5a:bd:ce:a9:cf:15:93:
                    fc:7b:78:e5:a7:b2:a5:66:0f:29:c7:a1:a2:cf:4f:
                    6f:79:63:81:67:b6:c5:af:fc:33:fa:3d:82:7f:16:
                    50:8e:f3:d1:38:35:c0:aa:02:93:f5:23:87:bd:1e:
                    12:96:f2:22:c7:14:4a:35:ff:ed:0b:9a:9f:2f:9a:
                    98:41:c9:55:9d:e5:1a:8e:14:13:76:12:f8:93:bf:
                    ec:22:66:3d:3d:32:6d:a3:c1:0d:49:54:8f:7c:db:
                    9d:b5:35:23:49:33:4f:75:eb:3a:53:14:de:77:f1:
                    d2:da:23:f4:82:ee:13:3c:f2:bb:25:cf:d0:4c:19:
                    15:c0:91:7e:9b:83:9d:7e:00:f5:c1:c2:2d:fc:ef:
                    99:bf:6e:ac:2f:f2:92:90:c5:04:12:31:0b:e2:68:
                    92:7b:c4:cd:52:9d:8a:ff:8b:e4:10:11:fb:a9:b1:
                    83:bd:55:ab:88:7f:37:30:38:7a:da:30:af:b9:40:
                    ff:b3:f8:31:a6:70:cc:ac:0c:25:c7:52:30:fb:a5:
                    0e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:C4:08:C6:FA:67:B5:43:F5:42:81:46:CF:88:03:DD:64:B0:30:61
            X509v3 Authority Key Identifier:
                keyid:B1:92:7F:13:82:AF:C8:84:43:0C:96:5E:AD:28:9B:C3:BE:C6:4B:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC8F7/8093C308B2A511EE90DEA220C4F9AE02/sZJ_E4KvyIRDDJZerSibw77GS-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZJ_E4KvyIRDDJZerSibw77GS-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC8F7/8093C308B2A511EE90DEA220C4F9AE02/sZJ_E4KvyIRDDJZerSibw77GS-w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:57:a5:ec:9e:7c:57:78:2e:d4:c2:af:22:8a:96:e4:1a:e2:
         96:cb:38:33:c8:ed:00:a8:6d:9b:27:a1:47:ac:69:7e:dd:b6:
         fd:b4:14:39:f3:5e:23:7a:5e:46:a4:51:30:25:af:aa:e4:a7:
         66:04:19:fd:ca:ff:09:69:0f:5e:6f:0b:64:6d:ff:cb:b8:62:
         12:e5:d5:c0:09:69:3f:eb:92:f9:63:f2:b8:17:b9:b6:b6:fa:
         39:25:b1:9d:94:68:5f:d4:0c:c7:22:78:55:3d:c3:5d:2a:36:
         d3:fd:56:56:ff:fb:f1:04:f1:8b:08:2f:dc:48:1d:bb:2c:d3:
         da:b5:e9:da:10:87:47:8e:77:a7:bb:18:28:6e:0b:a3:1e:68:
         03:6b:38:bd:95:4e:4a:9b:ec:be:1e:56:b2:99:6b:af:13:1a:
         b4:02:c8:84:40:34:3a:d2:cb:6e:5f:64:df:5e:56:a0:5b:cb:
         29:bf:0d:54:33:13:9e:ea:21:49:54:f9:48:01:ed:b3:c2:11:
         59:04:f6:e8:e2:69:6d:e8:ec:ae:15:35:a5:29:3d:c8:50:da:
         67:c9:67:cb:17:e2:7b:1e:d6:63:dd:e7:8e:d3:3a:05:ae:dd:
         a8:ab:95:06:6a:f5:1a:49:95:fa:8a:92:76:f3:48:bf:e6:52:
         96:cf:ab:52
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUM4RjcxMTAvBgNVBAUTKEIxOTI3RjEzODJBRkM4ODQ0MzBDOTY1RUFEMjg5QkMz
QkVDNjRCRUMwHhcNMjUwMTMxMDQ1NDU5WhcNMjUwMjA3MDQ1NDU5WjAYMRYwFAYD
VQQDEw02NzljNTdhMy05ZTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA44EPQL3ymv+uCEqHzVkFcnTKfcmo+DH7QPFEbtTOOaW5FLwFybuUAyb2QRgd
w4hZgWGsuVq9zqnPFZP8e3jlp7KlZg8px6Giz09veWOBZ7bFr/wz+j2CfxZQjvPR
ODXAqgKT9SOHvR4SlvIixxRKNf/tC5qfL5qYQclVneUajhQTdhL4k7/sImY9PTJt
o8ENSVSPfNudtTUjSTNPdes6UxTed/HS2iP0gu4TPPK7Jc/QTBkVwJF+m4OdfgD1
wcIt/O+Zv26sL/KSkMUEEjEL4miSe8TNUp2K/4vkEBH7qbGDvVWriH83MDh62jCv
uUD/s/gxpnDMrAwlx1Iw+6UOPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGDECMb6
Z7VD9UKBRs+IA91ksDBhMB8GA1UdIwQYMBaAFLGSfxOCr8iEQwyWXq0om8O+xkvs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzhGNy84MDkzQzMwOEIy
QTUxMUVFOTBERUEyMjBDNEY5QUUwMi9zWkpfRTRLdnlJUkRESlplclNpYnc3N0dT
LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NaSl9FNEt2eUlSRERKWmVyU2lidzc3R1Mtdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QzhGNy84MDkzQzMwOEIyQTUxMUVFOTBERUEyMjBDNEY5QUUwMi9zWkpfRTRLdnlJ
UkRESlplclNpYnc3N0dTLXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQByV6XsnnxXeC7Uwq8iipbkGuKWyzgzyO0AqG2bJ6FHrGl+3bb9tBQ5
814jel5GpFEwJa+q5KdmBBn9yv8JaQ9ebwtkbf/LuGIS5dXACWk/65L5Y/K4F7m2
tvo5JbGdlGhf1AzHInhVPcNdKjbT/VZW//vxBPGLCC/cSB27LNPatenaEIdHjnen
uxgobgujHmgDazi9lU5Km+y+HlaymWuvExq0AsiEQDQ60stuX2TfXlagW8spvw1U
MxOe6iFJVPlIAe2zwhFZBPbo4mlt6OyuFTWlKT3IUNpnyWfLF+J7HtZj3eeO0zoF
rt2oq5UGavUaSZX6ipJ280i/5lKWz6tS
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:48:22 2025 by rpki-client