Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF24F/65DDFAB402FA11EBA3A0A231C4F9AE02/HretI1L3xupKYveEzl-7EW3ybsI.mft
File:                     HretI1L3xupKYveEzl-7EW3ybsI.mft (raw, json)
Hash identifier:          e/22y6Vc37zwdSngdFr4jmBnqs1LdTG4ufUIljCBrgw=
Subject key identifier:   1D:80:B7:C5:36:D0:5A:4C:84:78:4C:E0:6A:8B:78:08:9F:0E:AF:C0
Authority key identifier: 1E:B7:AD:23:52:F7:C6:EA:4A:62:F7:84:CE:5F:BB:11:6D:F2:6E:C2
Certificate issuer:       /CN=A91EF24F/serialNumber=1EB7AD2352F7C6EA4A62F784CE5FBB116DF26EC2
Certificate serial:       07AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HretI1L3xupKYveEzl-7EW3ybsI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF24F/65DDFAB402FA11EBA3A0A231C4F9AE02/HretI1L3xupKYveEzl-7EW3ybsI.mft
Manifest number:          0792
Signing time:             Thu 30 Jan 2025 21:23:02 +0000
Manifest this update:     Thu 30 Jan 2025 21:23:02 +0000
Manifest next update:     Thu 06 Feb 2025 21:23:02 +0000
Files and hashes:         1: HretI1L3xupKYveEzl-7EW3ybsI.crl (hash: uRfzFDdt+QczGiGeTWq5ZVD3675jRtu+1K+FhU6t37c=)
                          2: 84B96CA6904111EF8D11A381C4F9AE02.roa (hash: apZe4MVRPNoFnu0VdCcMOgQQIHarERu0kJz1jLlb1yY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1963 (0x7ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF24F/serialNumber=1EB7AD2352F7C6EA4A62F784CE5FBB116DF26EC2
        Validity
            Not Before: Jan 30 21:23:02 2025 GMT
            Not After : Feb  6 21:23:02 2025 GMT
        Subject: CN=679bedb6-2c44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:95:5b:b6:0c:5d:3f:5d:c1:03:e4:a2:32:c1:
                    07:61:87:f9:14:df:33:2a:a5:99:d7:db:9e:18:22:
                    83:75:f7:82:67:35:ec:f3:ac:cd:5f:c3:b6:13:fc:
                    d0:ee:1e:7b:af:1d:5c:cc:a2:23:5f:73:12:ec:f6:
                    82:18:bd:e2:9c:65:1f:67:a3:9b:4e:73:d4:fc:88:
                    57:85:7d:02:67:f6:d4:53:2a:b4:12:1b:8f:3c:0b:
                    0a:4c:39:4c:65:cb:ca:05:da:99:54:b1:f5:df:5a:
                    9d:0b:bf:1b:ca:41:df:e8:05:4f:c9:25:ea:8b:1a:
                    be:28:d7:11:23:c5:31:e4:2d:40:1b:b6:25:6d:f7:
                    2c:87:de:9a:70:a2:23:d3:1a:91:40:08:e4:9c:35:
                    b6:34:2e:e5:4d:e4:2e:cb:24:0d:9a:bd:2e:55:9b:
                    ba:5f:90:c2:3e:5f:1f:ce:d6:bc:c7:b2:f0:f3:24:
                    17:1f:08:54:c4:1c:e2:7b:95:dc:ae:95:d3:92:8b:
                    40:1f:66:5e:f2:6b:31:f4:bd:e8:80:97:b8:21:c4:
                    7a:92:39:c5:4e:ae:09:3e:bd:d6:e0:85:f8:0f:d8:
                    19:5f:00:c1:12:ee:99:a1:f0:71:5b:8c:78:55:f4:
                    66:41:f3:12:b0:19:5a:3c:ca:20:bc:dc:39:08:5c:
                    4b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:80:B7:C5:36:D0:5A:4C:84:78:4C:E0:6A:8B:78:08:9F:0E:AF:C0
            X509v3 Authority Key Identifier:
                keyid:1E:B7:AD:23:52:F7:C6:EA:4A:62:F7:84:CE:5F:BB:11:6D:F2:6E:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF24F/65DDFAB402FA11EBA3A0A231C4F9AE02/HretI1L3xupKYveEzl-7EW3ybsI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HretI1L3xupKYveEzl-7EW3ybsI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF24F/65DDFAB402FA11EBA3A0A231C4F9AE02/HretI1L3xupKYveEzl-7EW3ybsI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:b1:d7:fb:48:e6:8c:e3:35:b5:1e:65:d4:ba:bc:3b:bf:f0:
         a9:ff:84:4a:2a:f0:4c:45:c5:bd:44:8b:39:07:6f:1c:a9:3f:
         19:49:12:85:c2:06:fe:73:d2:67:60:3d:1d:1f:b1:36:c1:4a:
         a5:e1:ed:fd:1f:e2:ae:19:03:8d:35:03:79:da:4c:05:95:1a:
         e2:e9:80:d8:0f:37:e4:c9:a5:1c:e5:01:48:a3:78:cc:95:e8:
         37:c0:6b:c7:c4:3d:71:6d:86:cc:92:1b:e2:c1:0d:4c:ff:89:
         ac:72:8e:bc:1f:6b:98:a0:f7:ac:f6:a7:69:e5:64:ad:ad:05:
         fb:07:0e:75:4b:b6:e9:aa:9d:25:20:c2:16:ab:3f:e0:aa:ee:
         a2:d5:2f:8b:7b:ef:45:c9:b9:43:1c:23:3f:b5:bc:b0:fd:b2:
         d0:fe:2f:42:64:8c:fb:33:8f:7d:fa:92:39:e3:27:6e:8e:63:
         01:7e:7b:a8:d1:ab:db:3f:ca:86:25:63:f4:c5:04:ca:0e:50:
         1d:74:88:af:f3:8d:53:1d:2c:5b:71:8c:3c:ba:a5:36:b9:3d:
         3b:12:21:aa:a8:15:d7:f5:40:71:ff:10:bb:14:f7:dd:54:cd:
         f1:45:53:3b:22:c5:a4:66:cd:3a:16:01:d5:a0:94:b5:d7:5a:
         12:7b:1e:62
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB6swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUYyNEYxMTAvBgNVBAUTKDFFQjdBRDIzNTJGN0M2RUE0QTYyRjc4NENFNUZCQjEx
NkRGMjZFQzIwHhcNMjUwMTMwMjEyMzAyWhcNMjUwMjA2MjEyMzAyWjAYMRYwFAYD
VQQDEw02NzliZWRiNi0yYzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwpVbtgxdP13BA+SiMsEHYYf5FN8zKqWZ19ueGCKDdfeCZzXs86zNX8O2E/zQ
7h57rx1czKIjX3MS7PaCGL3inGUfZ6ObTnPU/IhXhX0CZ/bUUyq0EhuPPAsKTDlM
ZcvKBdqZVLH131qdC78bykHf6AVPySXqixq+KNcRI8Ux5C1AG7Ylbfcsh96acKIj
0xqRQAjknDW2NC7lTeQuyyQNmr0uVZu6X5DCPl8fzta8x7Lw8yQXHwhUxBzie5Xc
rpXTkotAH2Ze8msx9L3ogJe4IcR6kjnFTq4JPr3W4IX4D9gZXwDBEu6ZofBxW4x4
VfRmQfMSsBlaPMogvNw5CFxLGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB2At8U2
0FpMhHhM4GqLeAifDq/AMB8GA1UdIwQYMBaAFB63rSNS98bqSmL3hM5fuxFt8m7C
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjI0Ri82NURERkFCNDAy
RkExMUVCQTNBMEEyMzFDNEY5QUUwMi9IcmV0STFMM3h1cEtZdmVFemwtN0VXM3li
c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hyZXRJMUwzeHVwS1l2ZUV6bC03RVczeWJzSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RjI0Ri82NURERkFCNDAyRkExMUVCQTNBMEEyMzFDNEY5QUUwMi9IcmV0STFMM3h1
cEtZdmVFemwtN0VXM3lic0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAIsdf7SOaM4zW1HmXUurw7v/Cp/4RKKvBMRcW9RIs5B28cqT8ZSRKF
wgb+c9JnYD0dH7E2wUql4e39H+KuGQONNQN52kwFlRri6YDYDzfkyaUc5QFIo3jM
leg3wGvHxD1xbYbMkhviwQ1M/4msco68H2uYoPes9qdp5WStrQX7Bw51S7bpqp0l
IMIWqz/gqu6i1S+Le+9FyblDHCM/tbyw/bLQ/i9CZIz7M499+pI54ydujmMBfnuo
0avbP8qGJWP0xQTKDlAddIiv841THSxbcYw8uqU2uT07EiGqqBXX9UBx/xC7FPfd
VM3xRVM7IsWkZs06FgHVoJS111oSex5i
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:41:52 2025 by rpki-client