Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.mft
File:                     S5eEFeFn2yY-8mSaHDuLstQ_Ybc.mft (raw, json)
Hash identifier:          E3nlSg0b4qQjD5uXKc9Bu0ZaeKvQ/idR0hU8fLYjMsQ=
Subject key identifier:   A9:95:EA:ED:5D:38:89:0C:7A:F0:28:AA:5F:AB:E3:84:BD:80:D0:DF
Authority key identifier: 4B:97:84:15:E1:67:DB:26:3E:F2:64:9A:1C:3B:8B:B2:D4:3F:61:B7
Certificate issuer:       /CN=A91EF8D6/serialNumber=4B978415E167DB263EF2649A1C3B8BB2D43F61B7
Certificate serial:       079B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.mft
Manifest number:          0796
Signing time:             Thu 30 Jan 2025 21:12:29 +0000
Manifest this update:     Thu 30 Jan 2025 21:12:28 +0000
Manifest next update:     Thu 06 Feb 2025 21:12:28 +0000
Files and hashes:         1: S5eEFeFn2yY-8mSaHDuLstQ_Ybc.crl (hash: IPbt5A391TmuH7lzr/3Vn7l9S3w8sGgMKQ8UiAyM/Vw=)
                          2: 6E603522F1AB11EA9F82A23DC4F9AE02.roa (hash: KoptiOsDqvLgibXDXS+iYOAkMcePb+TvYTbRUGx6+Fw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1947 (0x79b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF8D6/serialNumber=4B978415E167DB263EF2649A1C3B8BB2D43F61B7
        Validity
            Not Before: Jan 30 21:12:28 2025 GMT
            Not After : Feb  6 21:12:28 2025 GMT
        Subject: CN=679beb3c-d796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ad:81:ed:3a:c5:0a:c1:2b:17:e7:76:94:c2:
                    ea:fc:c9:55:c2:fb:12:a7:b8:69:27:ae:b2:02:4a:
                    1c:f4:0f:fb:f0:2d:92:c9:d5:6d:66:f9:1d:25:0f:
                    e1:63:aa:7c:70:dd:59:78:9d:a7:3e:a7:6b:ca:30:
                    04:8f:69:17:a6:a8:cf:89:83:21:e2:35:01:03:f9:
                    8e:e7:ef:e2:c6:7b:13:fc:e9:23:f4:33:fa:cf:35:
                    33:d8:2c:de:ff:f7:ed:2c:43:02:10:32:8e:43:c5:
                    84:2b:a2:dc:01:0e:f9:b8:d1:d6:76:4b:ca:58:37:
                    5b:1d:ce:9f:14:5c:c6:4f:5a:ca:34:48:a8:12:24:
                    73:dc:aa:8e:4e:8e:c3:1d:65:bf:58:66:0a:0c:22:
                    b2:9a:23:44:5d:1f:02:39:dd:cb:a1:34:3f:3b:24:
                    9c:1e:8f:7b:00:54:49:16:8f:ad:62:ce:bb:07:8c:
                    15:b2:a6:1a:2a:f0:23:e3:c3:38:0e:20:da:df:d6:
                    4f:bb:dd:79:a9:0a:cc:06:d4:90:55:ab:17:5b:2a:
                    98:cf:14:c0:f4:26:c9:35:41:33:69:1e:b6:41:d6:
                    3c:6c:86:04:71:0d:9c:fe:2c:c2:93:28:8d:48:29:
                    31:d7:aa:9b:8c:9f:4b:99:99:8c:ef:06:49:60:6f:
                    b1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:95:EA:ED:5D:38:89:0C:7A:F0:28:AA:5F:AB:E3:84:BD:80:D0:DF
            X509v3 Authority Key Identifier:
                keyid:4B:97:84:15:E1:67:DB:26:3E:F2:64:9A:1C:3B:8B:B2:D4:3F:61:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:26:c0:c8:71:49:4d:6d:d9:8c:b8:20:b2:5f:cb:f1:52:88:
         a1:3e:fe:39:88:fa:6b:e5:94:75:f9:44:0d:c0:e0:82:cf:72:
         89:d3:1f:f2:c9:09:fb:a3:9c:3d:db:45:f7:3b:e1:b0:89:a9:
         8a:ba:5f:68:3a:e1:4d:63:52:89:17:be:9a:df:9f:b6:d6:95:
         b1:56:8c:dd:86:73:e1:2e:4e:c5:da:ba:5f:a7:72:9c:80:f4:
         97:76:60:08:59:a3:86:8d:71:57:27:74:3f:e9:4c:3c:43:11:
         da:a5:32:a2:09:6e:d7:bc:d5:31:b3:53:2a:12:96:0a:0d:b6:
         33:46:60:36:03:31:4f:72:cc:9c:cd:3b:d2:53:ea:59:e5:19:
         c2:29:5d:90:ca:82:bd:a8:7b:f8:3c:b3:7c:b4:af:ed:04:d6:
         3d:26:7c:2c:b5:0b:d2:ba:03:42:5a:f7:52:3c:de:ac:0f:90:
         a4:7d:60:23:50:a0:d3:7b:6b:d4:04:cb:41:94:7c:3a:89:7c:
         ec:f3:81:00:71:2e:d7:6d:dc:fe:fa:d6:02:15:4f:2a:44:fc:
         6a:3d:d4:a7:44:ba:cd:b2:54:54:f3:2c:89:f4:67:5a:b0:1a:
         27:71:5e:78:53:83:e2:8f:f7:19:2d:45:9b:9b:40:13:4f:72:
         d1:bd:c8:ac
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB5swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUY4RDYxMTAvBgNVBAUTKDRCOTc4NDE1RTE2N0RCMjYzRUYyNjQ5QTFDM0I4QkIy
RDQzRjYxQjcwHhcNMjUwMTMwMjExMjI4WhcNMjUwMjA2MjExMjI4WjAYMRYwFAYD
VQQDEw02NzliZWIzYy1kNzk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAta2B7TrFCsErF+d2lMLq/MlVwvsSp7hpJ66yAkoc9A/78C2SydVtZvkdJQ/h
Y6p8cN1ZeJ2nPqdryjAEj2kXpqjPiYMh4jUBA/mO5+/ixnsT/Okj9DP6zzUz2Cze
//ftLEMCEDKOQ8WEK6LcAQ75uNHWdkvKWDdbHc6fFFzGT1rKNEioEiRz3KqOTo7D
HWW/WGYKDCKymiNEXR8COd3LoTQ/OyScHo97AFRJFo+tYs67B4wVsqYaKvAj48M4
DiDa39ZPu915qQrMBtSQVasXWyqYzxTA9CbJNUEzaR62QdY8bIYEcQ2c/izCkyiN
SCkx16qbjJ9LmZmM7wZJYG+x0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKmV6u1d
OIkMevAoql+r44S9gNDfMB8GA1UdIwQYMBaAFEuXhBXhZ9smPvJkmhw7i7LUP2G3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjhENi80RDQyRjU2Q0Yx
QTMxMUVBQjVGRDk4MjRDNEY5QUUwMi9TNWVFRmVGbjJ5WS04bVNhSER1THN0UV9Z
YmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1M1ZUVGZUZuMnlZLThtU2FIRHVMc3RRX1liYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RjhENi80RDQyRjU2Q0YxQTMxMUVBQjVGRDk4MjRDNEY5QUUwMi9TNWVFRmVGbjJ5
WS04bVNhSER1THN0UV9ZYmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCCJsDIcUlNbdmMuCCyX8vxUoihPv45iPpr5ZR1+UQNwOCCz3KJ0x/y
yQn7o5w920X3O+GwiamKul9oOuFNY1KJF76a35+21pWxVozdhnPhLk7F2rpfp3Kc
gPSXdmAIWaOGjXFXJ3Q/6Uw8QxHapTKiCW7XvNUxs1MqEpYKDbYzRmA2AzFPcsyc
zTvSU+pZ5RnCKV2QyoK9qHv4PLN8tK/tBNY9JnwstQvSugNCWvdSPN6sD5CkfWAj
UKDTe2vUBMtBlHw6iXzs84EAcS7Xbdz++tYCFU8qRPxqPdSnRLrNslRU8yyJ9Gda
sBoncV54U4Pij/cZLUWbm0ATT3LRvcis
-----END CERTIFICATE-----