Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft
File:                     liwsnV7f2s79sTh-ML7D_776XNA.mft (raw, json)
Hash identifier:          xv+bqLELA+PYgq2RiMyoAYxXrW5iYRRaaXQNJXJ/ocU=
Subject key identifier:   DB:BA:46:19:99:89:3C:9D:00:BF:DE:42:DA:B7:24:70:7E:70:BE:CE
Authority key identifier: 96:2C:2C:9D:5E:DF:DA:CE:FD:B1:38:7E:30:BE:C3:FF:BE:FA:5C:D0
Certificate issuer:       /CN=A91EDA20/serialNumber=962C2C9D5EDFDACEFDB1387E30BEC3FFBEFA5CD0
Certificate serial:       017F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft
Manifest number:          0170
Signing time:             Fri 31 Jan 2025 03:08:11 +0000
Manifest this update:     Fri 31 Jan 2025 03:08:10 +0000
Manifest next update:     Fri 07 Feb 2025 03:08:10 +0000
Files and hashes:         1: liwsnV7f2s79sTh-ML7D_776XNA.crl (hash: ZIsITEHCYrofJVBj3BW4RtluK0RfngGkuM+xD/KlIr8=)
                          2: 94E348AE300C11EE8D3CE611C4F9AE02.roa (hash: Uym/b9nY/gYTeMVuMVvwXFH6Eb9WyNB5xqqWttntyaU=)
                          3: 5CA025DE300C11EE903A6211C4F9AE02.roa (hash: AtrqEUaPUwyGi4Q0ISyifRT08YXUMJLB3W3/RHwJLus=)
                          4: 81BA905AB5E811EDA7091163C4F9AE02.roa (hash: y6J4Nd5HI2QEm6dWVe814mbT0DsqgpoN8B2fWKlHKUM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 383 (0x17f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDA20/serialNumber=962C2C9D5EDFDACEFDB1387E30BEC3FFBEFA5CD0
        Validity
            Not Before: Jan 31 03:08:10 2025 GMT
            Not After : Feb  7 03:08:10 2025 GMT
        Subject: CN=679c3e9b-db21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:4d:43:1c:ac:42:4e:b3:16:89:52:5c:bf:09:
                    76:b5:db:60:30:c7:13:7f:fe:ea:fd:b3:16:65:76:
                    bd:f4:ff:d6:77:39:ed:8e:83:ba:3a:85:0c:a8:ef:
                    f6:e4:40:24:9a:36:58:46:1d:90:2c:81:98:22:8a:
                    26:dc:3c:72:4f:93:80:ce:69:c5:09:ad:1e:de:f5:
                    8a:bf:27:0c:7c:6b:09:cf:67:2e:8b:1a:ce:17:a2:
                    5c:b8:36:1c:d4:f7:1f:0a:af:db:e6:71:78:0c:a3:
                    0b:dd:38:b4:34:fa:45:a6:2e:81:ec:db:52:9e:54:
                    c6:aa:3e:fd:d1:fc:96:bd:05:2a:91:80:a6:e2:fa:
                    8c:89:06:0c:3e:25:fc:10:fd:d5:a5:99:c9:b1:e4:
                    a0:13:71:63:87:b6:89:4c:3c:94:de:4b:2f:e0:3a:
                    05:fc:82:57:d3:7f:fd:da:b0:29:10:76:13:97:b1:
                    81:ab:74:82:ae:4f:61:21:cb:ca:39:ba:04:68:56:
                    5a:96:34:a6:80:95:ae:4e:c1:e0:d0:16:7d:7d:94:
                    e8:22:73:d5:5c:74:8c:14:5b:4c:c9:38:d5:3b:4b:
                    33:16:84:10:5e:09:f9:e7:80:68:6a:a6:f1:32:20:
                    77:dc:6f:b1:de:8b:f7:86:78:4d:dc:8a:bf:60:e4:
                    d5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:BA:46:19:99:89:3C:9D:00:BF:DE:42:DA:B7:24:70:7E:70:BE:CE
            X509v3 Authority Key Identifier:
                keyid:96:2C:2C:9D:5E:DF:DA:CE:FD:B1:38:7E:30:BE:C3:FF:BE:FA:5C:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:f2:5c:11:ff:55:71:5c:52:a8:5f:a8:82:ec:84:14:e6:04:
         25:67:9e:79:4f:5c:f3:fa:f5:2b:ca:5a:5e:9e:4f:92:63:19:
         e2:0b:13:27:35:ae:22:9b:bb:ef:d0:45:ae:99:76:0a:0d:47:
         4d:e7:6d:9e:5b:19:8b:2f:7c:2d:5f:42:3c:68:34:54:d1:aa:
         b6:10:e7:c8:f1:44:64:be:d8:44:19:9e:8f:48:4f:9f:08:7b:
         f6:ee:d2:bd:2d:b7:89:e3:80:a5:e9:00:88:96:52:0a:2c:5d:
         90:58:6b:94:80:5c:b9:bb:7f:01:16:78:b3:7b:7b:57:bb:f5:
         da:0b:10:29:c8:8b:df:19:05:92:44:a7:b1:18:0f:95:98:02:
         f6:0c:45:2f:19:95:31:8a:82:a0:db:47:17:12:0f:86:24:da:
         62:64:6e:6a:8e:e2:b4:30:81:8a:94:3e:d7:b1:b3:ee:31:79:
         ef:e3:8d:31:91:99:39:7a:d8:08:fb:73:ce:16:f0:c6:f6:cd:
         1f:a0:1b:c1:33:0e:3f:ab:5f:34:4c:6e:4f:d9:a5:29:8f:92:
         86:cc:5e:d8:b5:9d:4c:cf:99:ed:4c:9f:bc:df:e0:77:bd:ad:
         ca:fe:05:6a:9d:1a:ea:d9:c3:01:3e:e9:b2:d4:22:ec:3d:42:
         38:b1:94:48
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RURBMjAxMTAvBgNVBAUTKDk2MkMyQzlENUVERkRBQ0VGREIxMzg3RTMwQkVDM0ZG
QkVGQTVDRDAwHhcNMjUwMTMxMDMwODEwWhcNMjUwMjA3MDMwODEwWjAYMRYwFAYD
VQQDEw02NzljM2U5Yi1kYjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8k1DHKxCTrMWiVJcvwl2tdtgMMcTf/7q/bMWZXa99P/WdzntjoO6OoUMqO/2
5EAkmjZYRh2QLIGYIoom3DxyT5OAzmnFCa0e3vWKvycMfGsJz2cuixrOF6JcuDYc
1PcfCq/b5nF4DKML3Ti0NPpFpi6B7NtSnlTGqj790fyWvQUqkYCm4vqMiQYMPiX8
EP3VpZnJseSgE3Fjh7aJTDyU3ksv4DoF/IJX03/92rApEHYTl7GBq3SCrk9hIcvK
OboEaFZaljSmgJWuTsHg0BZ9fZToInPVXHSMFFtMyTjVO0szFoQQXgn554Boaqbx
MiB33G+x3ov3hnhN3Iq/YOTV2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNu6RhmZ
iTydAL/eQtq3JHB+cL7OMB8GA1UdIwQYMBaAFJYsLJ1e39rO/bE4fjC+w/+++lzQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREEyMC9CNzNCRjM3Q0I1
RTMxMUVEQUI1NDQ1NUFDNEY5QUUwMi9saXdzblY3ZjJzNzlzVGgtTUw3RF83NzZY
TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xpd3NuVjdmMnM3OXNUaC1NTDdEXzc3NlhOQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
REEyMC9CNzNCRjM3Q0I1RTMxMUVEQUI1NDQ1NUFDNEY5QUUwMi9saXdzblY3ZjJz
NzlzVGgtTUw3RF83NzZYTkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC98lwR/1VxXFKoX6iC7IQU5gQlZ555T1zz+vUrylpenk+SYxniCxMn
Na4im7vv0EWumXYKDUdN522eWxmLL3wtX0I8aDRU0aq2EOfI8URkvthEGZ6PSE+f
CHv27tK9LbeJ44Cl6QCIllIKLF2QWGuUgFy5u38BFnize3tXu/XaCxApyIvfGQWS
RKexGA+VmAL2DEUvGZUxioKg20cXEg+GJNpiZG5qjuK0MIGKlD7XsbPuMXnv440x
kZk5etgI+3POFvDG9s0foBvBMw4/q180TG5P2aUpj5KGzF7YtZ1Mz5ntTJ+83+B3
va3K/gVqnRrq2cMBPumy1CLsPUI4sZRI
-----END CERTIFICATE-----