Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft
File:                     TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft (raw, json)
Hash identifier:          QXn53zPyRcEkHGfMrTvG/2x/nSbel35kWnUS4YvN9eg=
Subject key identifier:   8D:59:C7:6D:BA:62:A3:9C:AD:07:E0:9A:97:DE:67:9E:37:2F:BC:A5
Authority key identifier: 4D:71:A7:A1:8A:82:AD:D0:44:BC:28:EF:5D:F2:19:6B:0F:D2:1D:5C
Certificate issuer:       /CN=A91EF590/serialNumber=4D71A7A18A82ADD044BC28EF5DF2196B0FD21D5C
Certificate serial:       06E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXGnoYqCrdBEvCjvXfIZaw_SHVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft
Manifest number:          06DE
Signing time:             Thu 30 Jan 2025 21:57:59 +0000
Manifest this update:     Thu 30 Jan 2025 21:57:58 +0000
Manifest next update:     Thu 06 Feb 2025 21:57:58 +0000
Files and hashes:         1: TXGnoYqCrdBEvCjvXfIZaw_SHVw.crl (hash: WHdMUsULnUoEZ7xutyBb8pqwgsdfXccRmeTJIE+oYjk=)
                          2: E9573898390E11EBAC72036BC4F9AE02.roa (hash: obihlxRhU0PPosQc2ueIbFqyf53tOUTNgrbX1TDxlFA=)
                          3: E9E53D64390E11EBAC72036BC4F9AE02.roa (hash: c0U5pKKCCV/RAy6tBF7y0xcEN5d947WhkMFfGLpOrGM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1768 (0x6e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF590/serialNumber=4D71A7A18A82ADD044BC28EF5DF2196B0FD21D5C
        Validity
            Not Before: Jan 30 21:57:58 2025 GMT
            Not After : Feb  6 21:57:58 2025 GMT
        Subject: CN=679bf5e6-064a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5b:d8:9c:d7:b7:e4:3a:b9:64:a6:e9:01:bd:
                    75:1b:90:84:19:8c:4c:56:be:31:22:fc:66:aa:5d:
                    15:41:88:38:bc:bd:02:ba:24:2f:06:9d:7b:df:e8:
                    76:d6:6f:bf:92:ed:a3:78:66:ea:30:d6:13:ac:c3:
                    d1:e4:f1:1c:41:6b:56:58:8f:78:98:32:8f:5a:0b:
                    54:76:bb:88:80:7f:2a:f4:2a:0d:fa:02:80:7f:7a:
                    90:5d:a3:18:06:1f:ed:fa:37:b3:41:cd:3e:24:89:
                    d2:1b:2d:7d:bb:59:5d:c4:db:ed:6d:da:ba:46:47:
                    31:6c:eb:1a:07:4a:ce:9a:02:ca:de:9a:a7:5f:0d:
                    0c:cf:cf:ba:46:b3:6d:a5:d4:11:c9:fc:a6:b8:0a:
                    58:cf:bb:7b:b7:39:92:96:5a:a3:7b:ef:ef:33:70:
                    bb:cd:4f:df:f5:86:ae:b9:22:de:c3:8a:4a:82:8d:
                    74:1f:95:64:2f:ab:eb:ae:12:fa:a9:2e:8d:19:dd:
                    db:5a:33:20:43:21:88:77:2c:79:b7:9f:05:c9:b3:
                    c0:ab:3e:87:49:8a:f3:76:dc:e6:10:06:7f:7c:d2:
                    ec:cc:7e:16:ec:66:ef:23:3f:14:4d:32:ab:53:18:
                    fb:f0:37:59:61:36:a0:4e:90:7d:74:31:21:73:8d:
                    dc:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:59:C7:6D:BA:62:A3:9C:AD:07:E0:9A:97:DE:67:9E:37:2F:BC:A5
            X509v3 Authority Key Identifier:
                keyid:4D:71:A7:A1:8A:82:AD:D0:44:BC:28:EF:5D:F2:19:6B:0F:D2:1D:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXGnoYqCrdBEvCjvXfIZaw_SHVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:88:52:95:4d:56:d4:9d:cd:22:d1:c5:68:4e:40:df:e3:aa:
         bd:ca:d2:b1:b0:44:a8:6d:6a:9d:a0:67:04:ef:3f:67:3d:90:
         d2:a6:3e:76:67:39:28:7e:84:68:b0:c9:60:32:b8:f7:73:6a:
         c5:c9:dd:d4:38:f4:c4:ea:47:82:9f:96:f6:69:7e:ad:5e:fc:
         f1:3f:9d:98:a5:c5:b3:32:2d:ff:aa:26:32:89:17:71:3d:9e:
         2c:26:ab:14:8c:5e:30:1b:ac:40:bf:4d:ba:67:d1:a0:1d:20:
         68:dc:6f:9f:29:78:fc:0d:eb:81:f9:ec:f9:19:bd:66:86:a0:
         51:74:6f:26:7f:7f:0e:be:6f:a2:f7:b6:c2:45:62:cb:47:f9:
         77:f5:8f:0a:e2:f7:43:61:3c:ac:d4:35:58:cb:9c:d5:b8:f0:
         f8:bb:97:4f:1d:2b:ae:35:d2:30:ab:70:14:17:68:6d:6b:d9:
         1b:96:65:0e:d0:3d:78:45:4f:e4:43:68:73:8f:a9:5a:08:36:
         e3:fc:25:4f:97:e6:b2:64:e0:2d:46:8a:7e:1d:ef:b7:ae:a6:
         67:dc:5e:28:0d:f0:76:12:21:9a:75:07:fd:2f:c2:63:ef:c7:
         25:4c:ec:83:05:70:cd:a6:9c:42:05:3a:ac:88:87:2e:c3:8b:
         3f:54:18:fc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBugwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUY1OTAxMTAvBgNVBAUTKDRENzFBN0ExOEE4MkFERDA0NEJDMjhFRjVERjIxOTZC
MEZEMjFENUMwHhcNMjUwMTMwMjE1NzU4WhcNMjUwMjA2MjE1NzU4WjAYMRYwFAYD
VQQDEw02NzliZjVlNi0wNjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtVvYnNe35Dq5ZKbpAb11G5CEGYxMVr4xIvxmql0VQYg4vL0CuiQvBp173+h2
1m+/ku2jeGbqMNYTrMPR5PEcQWtWWI94mDKPWgtUdruIgH8q9CoN+gKAf3qQXaMY
Bh/t+jezQc0+JInSGy19u1ldxNvtbdq6RkcxbOsaB0rOmgLK3pqnXw0Mz8+6RrNt
pdQRyfymuApYz7t7tzmSllqje+/vM3C7zU/f9YauuSLew4pKgo10H5VkL6vrrhL6
qS6NGd3bWjMgQyGIdyx5t58FybPAqz6HSYrzdtzmEAZ/fNLszH4W7GbvIz8UTTKr
Uxj78DdZYTagTpB9dDEhc43c2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI1Zx226
YqOcrQfgmpfeZ543L7ylMB8GA1UdIwQYMBaAFE1xp6GKgq3QRLwo713yGWsP0h1c
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjU5MC8yRjdCMTdDNDM5
MEQxMUVCODhCQzYxNjVDNEY5QUUwMi9UWEdub1lxQ3JkQkV2Q2p2WGZJWmF3X1NI
VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RYR25vWXFDcmRCRXZDanZYZklaYXdfU0hWdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RjU5MC8yRjdCMTdDNDM5MEQxMUVCODhCQzYxNjVDNEY5QUUwMi9UWEdub1lxQ3Jk
QkV2Q2p2WGZJWmF3X1NIVncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBViFKVTVbUnc0i0cVoTkDf46q9ytKxsESobWqdoGcE7z9nPZDSpj52
ZzkofoRosMlgMrj3c2rFyd3UOPTE6keCn5b2aX6tXvzxP52YpcWzMi3/qiYyiRdx
PZ4sJqsUjF4wG6xAv026Z9GgHSBo3G+fKXj8DeuB+ez5Gb1mhqBRdG8mf38Ovm+i
97bCRWLLR/l39Y8K4vdDYTys1DVYy5zVuPD4u5dPHSuuNdIwq3AUF2hta9kblmUO
0D14RU/kQ2hzj6laCDbj/CVPl+ayZOAtRop+He+3rqZn3F4oDfB2EiGadQf9L8Jj
78clTOyDBXDNppxCBTqsiIcuw4s/VBj8
-----END CERTIFICATE-----
Generated at Sun Apr 27 01:58:07 2025 by rpki-client