Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft
File:                     GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft (raw, json)
Hash identifier:          swkA0rFGlfmm7KR2YLJk2spNvPI60N0siNjYVOgYliQ=
Subject key identifier:   A1:BB:11:20:F1:05:79:21:12:94:B6:D3:31:3E:9D:79:E3:34:68:40
Authority key identifier: 19:B9:A5:2C:C9:02:50:3E:CD:E3:02:BD:02:47:74:7E:A9:19:3B:60
Certificate issuer:       /CN=A91ED3AE/serialNumber=19B9A52CC902503ECDE302BD0247747EA9193B60
Certificate serial:       04B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbmlLMkCUD7N4wK9Akd0fqkZO2A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft
Manifest number:          04AF
Signing time:             Thu 30 Jan 2025 23:57:57 +0000
Manifest this update:     Thu 30 Jan 2025 23:57:57 +0000
Manifest next update:     Thu 06 Feb 2025 23:57:57 +0000
Files and hashes:         1: GbmlLMkCUD7N4wK9Akd0fqkZO2A.crl (hash: YNJPpFqFZ4/blXtItmO3WjQ06raItgPFAnKGwiAY23I=)
                          2: 491FFA9A177011ECA96DF680C4F9AE02.roa (hash: 18vER1Lof7BBdRkjx2HLM4452WsfjA5t+edYoithe90=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1206 (0x4b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED3AE/serialNumber=19B9A52CC902503ECDE302BD0247747EA9193B60
        Validity
            Not Before: Jan 30 23:57:57 2025 GMT
            Not After : Feb  6 23:57:57 2025 GMT
        Subject: CN=679c1205-be7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:5f:1d:99:64:bf:00:16:dd:c7:65:af:ea:bd:
                    e7:f6:6d:bd:5c:71:d8:3d:cd:c0:ed:f1:84:86:06:
                    12:3d:9c:aa:42:5d:41:43:5c:90:a3:d3:3e:b0:ae:
                    fa:be:da:b2:19:e4:c8:49:95:80:88:dc:33:19:11:
                    2f:52:d4:51:6f:e8:a6:9e:f7:b0:36:23:52:15:3d:
                    a0:90:3a:91:f9:ff:b9:ed:e4:bc:75:b0:e6:91:c8:
                    3b:9c:7c:d2:c0:bf:f3:0b:ed:11:e3:94:89:b2:84:
                    d3:53:2a:4b:65:c8:af:df:f7:56:6a:f1:48:1d:74:
                    21:4c:b3:9f:81:ac:28:8b:0a:47:52:44:02:08:e8:
                    c5:14:0d:71:d2:69:77:2f:a5:68:c0:14:38:80:7a:
                    d9:95:0e:68:73:f6:f0:eb:f5:98:71:7d:36:f4:10:
                    8c:2b:b0:37:ab:a6:9f:eb:5d:d1:78:ec:ef:2a:6b:
                    5d:af:3f:08:41:47:93:43:d5:6d:71:97:67:55:64:
                    60:4d:a3:14:9f:a7:08:e2:d1:bf:1c:4e:fa:f9:1e:
                    97:5b:cc:c6:78:5d:dc:75:e3:b8:a6:19:72:2f:19:
                    cd:56:75:70:13:80:d4:5c:43:36:44:a5:37:28:e2:
                    f4:ea:55:ac:70:61:a7:af:8e:47:77:1d:ec:ab:99:
                    58:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:BB:11:20:F1:05:79:21:12:94:B6:D3:31:3E:9D:79:E3:34:68:40
            X509v3 Authority Key Identifier:
                keyid:19:B9:A5:2C:C9:02:50:3E:CD:E3:02:BD:02:47:74:7E:A9:19:3B:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbmlLMkCUD7N4wK9Akd0fqkZO2A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:53:c8:be:5c:ef:de:76:59:5d:bc:ce:d5:2b:ae:d9:13:22:
         67:68:68:c5:4b:17:3d:9f:ba:40:9f:4d:22:13:03:a8:ba:e1:
         9a:25:63:a8:6e:aa:4d:b5:4f:d7:63:bd:2c:f1:81:35:b1:b1:
         eb:51:78:54:99:9f:b5:06:00:1c:70:19:74:d4:28:2a:1d:81:
         34:25:5c:b3:06:29:47:4e:49:15:79:10:ff:79:f1:0b:50:25:
         31:63:e4:d4:ff:4d:6d:ee:c8:cb:d0:33:45:47:79:5a:d0:d6:
         af:a1:36:d6:50:d2:e2:95:f7:58:eb:e4:a5:38:56:ad:27:0d:
         0d:56:01:9b:bf:d5:fd:78:5e:11:5e:5e:22:45:44:df:10:06:
         29:a1:06:e5:ef:d9:6c:b0:46:8d:3f:39:f7:4e:15:60:e5:49:
         57:76:b5:c3:ce:37:7c:95:f3:92:d6:5f:1f:9d:0b:4d:7c:a8:
         9c:35:e0:98:f8:2c:bc:47:98:08:31:b0:06:f9:e3:f7:04:7d:
         ed:52:85:96:f6:15:82:6e:bb:28:da:63:55:4e:31:65:73:34:
         67:13:1c:e6:94:67:c0:31:a0:56:3d:39:58:5a:66:2d:4c:2b:
         7b:aa:59:19:33:3a:22:bc:e7:87:71:5f:d0:37:a7:91:d8:ff:
         12:94:fe:fb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBLYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUQzQUUxMTAvBgNVBAUTKDE5QjlBNTJDQzkwMjUwM0VDREUzMDJCRDAyNDc3NDdF
QTkxOTNCNjAwHhcNMjUwMTMwMjM1NzU3WhcNMjUwMjA2MjM1NzU3WjAYMRYwFAYD
VQQDEw02NzljMTIwNS1iZTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA718dmWS/ABbdx2Wv6r3n9m29XHHYPc3A7fGEhgYSPZyqQl1BQ1yQo9M+sK76
vtqyGeTISZWAiNwzGREvUtRRb+imnvewNiNSFT2gkDqR+f+57eS8dbDmkcg7nHzS
wL/zC+0R45SJsoTTUypLZciv3/dWavFIHXQhTLOfgawoiwpHUkQCCOjFFA1x0ml3
L6VowBQ4gHrZlQ5oc/bw6/WYcX029BCMK7A3q6af613ReOzvKmtdrz8IQUeTQ9Vt
cZdnVWRgTaMUn6cI4tG/HE76+R6XW8zGeF3cdeO4phlyLxnNVnVwE4DUXEM2RKU3
KOL06lWscGGnr45Hdx3sq5lYMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKG7ESDx
BXkhEpS20zE+nXnjNGhAMB8GA1UdIwQYMBaAFBm5pSzJAlA+zeMCvQJHdH6pGTtg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDNBRS80MTEyQ0I1ODE3
NjUxMUVDOEIxNkEzNzFDNEY5QUUwMi9HYm1sTE1rQ1VEN040d0s5QWtkMGZxa1pP
MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dibWxMTWtDVUQ3TjR3SzlBa2QwZnFrWk8yQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RDNBRS80MTEyQ0I1ODE3NjUxMUVDOEIxNkEzNzFDNEY5QUUwMi9HYm1sTE1rQ1VE
N040d0s5QWtkMGZxa1pPMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBaU8i+XO/edlldvM7VK67ZEyJnaGjFSxc9n7pAn00iEwOouuGaJWOo
bqpNtU/XY70s8YE1sbHrUXhUmZ+1BgAccBl01CgqHYE0JVyzBilHTkkVeRD/efEL
UCUxY+TU/01t7sjL0DNFR3la0NavoTbWUNLilfdY6+SlOFatJw0NVgGbv9X9eF4R
Xl4iRUTfEAYpoQbl79lssEaNPzn3ThVg5UlXdrXDzjd8lfOS1l8fnQtNfKicNeCY
+Cy8R5gIMbAG+eP3BH3tUoWW9hWCbrso2mNVTjFlczRnExzmlGfAMaBWPTlYWmYt
TCt7qlkZMzoivOeHcV/QN6eR2P8SlP77
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:52:50 2025 by rpki-client