Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft
File:                     rea1d9VLWrCQBc5hO7E2SGUuams.mft (raw, json)
Hash identifier:          /nNi+LBuQsXsW2BiPBIt99RO9P9lKJEbk0Z78qsepC8=
Subject key identifier:   6A:C2:4A:BA:8B:FD:63:24:75:4E:5B:D6:E5:E3:A2:73:92:B0:84:46
Authority key identifier: AD:E6:B5:77:D5:4B:5A:B0:90:05:CE:61:3B:B1:36:48:65:2E:6A:6B
Certificate issuer:       /CN=A91F4553/serialNumber=ADE6B577D54B5AB09005CE613BB13648652E6A6B
Certificate serial:       051B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rea1d9VLWrCQBc5hO7E2SGUuams.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft
Manifest number:          0517
Signing time:             Thu 30 Jan 2025 23:36:15 +0000
Manifest this update:     Thu 30 Jan 2025 23:36:14 +0000
Manifest next update:     Thu 06 Feb 2025 23:36:14 +0000
Files and hashes:         1: rea1d9VLWrCQBc5hO7E2SGUuams.crl (hash: 2cOC5amXDyP/6bGB7HWXqkk9f9wWoDrbA12aMFi1TBw=)
                          2: A1491F7CEB7811EB9134133BC4F9AE02.roa (hash: yAlIecRARh3umrfcsK/yx6rBFPCYyzog9iWJaTHp1QU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1307 (0x51b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4553/serialNumber=ADE6B577D54B5AB09005CE613BB13648652E6A6B
        Validity
            Not Before: Jan 30 23:36:14 2025 GMT
            Not After : Feb  6 23:36:14 2025 GMT
        Subject: CN=679c0cef-0e03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:cf:14:61:d3:83:bb:01:cd:34:a0:24:0f:45:
                    9a:16:2d:c9:aa:e5:39:a6:52:3e:63:e3:03:22:af:
                    d5:bc:3b:90:2e:e4:18:c9:65:c3:6d:43:87:50:7b:
                    8e:e0:b5:34:82:c1:e3:41:dd:74:b4:d7:79:41:e1:
                    c5:07:9f:4e:ab:20:f7:83:9e:c6:38:1a:1f:8e:16:
                    22:29:90:1a:c2:99:8e:86:49:d2:4a:ad:93:7a:c2:
                    1a:da:2e:82:6d:e1:1d:b0:5e:c4:17:ba:6c:92:ca:
                    fc:05:58:8f:51:3c:9f:bb:4c:b2:3e:a1:eb:17:d1:
                    e2:71:7f:ee:4e:71:2e:17:24:30:1b:ee:1b:a8:7a:
                    da:7e:34:9c:da:78:c9:55:66:3b:c6:a0:48:ca:63:
                    33:b4:64:a9:28:a5:be:87:08:9c:02:f4:de:16:f8:
                    68:8b:da:7e:60:cd:22:5f:5a:4e:fa:ae:bd:32:e2:
                    a3:56:5e:a6:11:e0:fa:99:50:61:c9:26:12:95:70:
                    dc:c1:92:8f:1a:89:0b:1b:e4:8b:de:93:3a:64:50:
                    15:65:bf:0f:74:9d:00:73:ef:4e:6c:53:38:69:b3:
                    10:3f:56:2d:51:8a:14:5b:d6:01:5c:07:30:cc:66:
                    a6:22:01:98:5b:69:4c:2f:6c:2a:d4:31:b6:29:f3:
                    62:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:C2:4A:BA:8B:FD:63:24:75:4E:5B:D6:E5:E3:A2:73:92:B0:84:46
            X509v3 Authority Key Identifier:
                keyid:AD:E6:B5:77:D5:4B:5A:B0:90:05:CE:61:3B:B1:36:48:65:2E:6A:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rea1d9VLWrCQBc5hO7E2SGUuams.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:55:60:42:46:5f:2e:06:19:20:db:d9:9b:ef:b5:07:50:06:
         92:dc:ef:35:20:b7:fb:19:04:2a:4d:0f:b6:24:56:b9:74:7c:
         4f:20:2f:28:7f:ac:35:14:bb:a4:b9:76:1b:c9:bf:7f:8c:ee:
         1e:08:3d:11:12:b4:e0:1a:8a:68:7d:d1:b5:29:cf:bf:29:01:
         a3:39:9c:61:e9:50:0d:c3:ca:8f:da:4f:50:6e:5c:6a:b9:86:
         d1:44:e4:ba:89:b3:66:a0:57:7b:89:c7:f3:13:46:c8:e4:84:
         24:6e:d4:e6:dc:14:7f:09:3d:77:c0:61:0f:b4:1c:07:15:c9:
         53:0a:56:9e:d7:66:7a:9b:ab:aa:d2:eb:de:6d:54:75:9b:ff:
         45:22:2e:7d:d5:3a:a2:20:20:0d:3e:cb:da:a9:9d:95:15:89:
         50:75:1d:40:11:cf:56:2a:84:4e:19:86:5f:1e:a2:54:69:8d:
         20:19:d7:f5:f2:f6:d0:bd:75:6c:59:ef:df:35:6a:bc:b1:67:
         8b:9a:ed:0c:ee:b8:ad:80:cf:6f:e9:b1:99:8c:c8:9b:4f:5f:
         2e:3f:cf:68:72:dc:f5:5d:28:15:45:a3:d3:f4:2f:60:80:49:
         7b:a4:b7:6b:31:91:a8:ff:2d:aa:a1:ab:86:f0:17:91:12:5f:
         f6:a7:9a:80
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBRswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjQ1NTMxMTAvBgNVBAUTKEFERTZCNTc3RDU0QjVBQjA5MDA1Q0U2MTNCQjEzNjQ4
NjUyRTZBNkIwHhcNMjUwMTMwMjMzNjE0WhcNMjUwMjA2MjMzNjE0WjAYMRYwFAYD
VQQDEw02NzljMGNlZi0wZTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAys8UYdODuwHNNKAkD0WaFi3JquU5plI+Y+MDIq/VvDuQLuQYyWXDbUOHUHuO
4LU0gsHjQd10tNd5QeHFB59OqyD3g57GOBofjhYiKZAawpmOhknSSq2TesIa2i6C
beEdsF7EF7psksr8BViPUTyfu0yyPqHrF9HicX/uTnEuFyQwG+4bqHrafjSc2njJ
VWY7xqBIymMztGSpKKW+hwicAvTeFvhoi9p+YM0iX1pO+q69MuKjVl6mEeD6mVBh
ySYSlXDcwZKPGokLG+SL3pM6ZFAVZb8PdJ0Ac+9ObFM4abMQP1YtUYoUW9YBXAcw
zGamIgGYW2lML2wq1DG2KfNilwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGrCSrqL
/WMkdU5b1uXjonOSsIRGMB8GA1UdIwQYMBaAFK3mtXfVS1qwkAXOYTuxNkhlLmpr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDU1My80RDIzQkIwRUVC
NzQxMUVCQUZCNDc2MzFDNEY5QUUwMi9yZWExZDlWTFdyQ1FCYzVoTzdFMlNHVXVh
bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JlYTFkOVZMV3JDUUJjNWhPN0UyU0dVdWFtcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NDU1My80RDIzQkIwRUVCNzQxMUVCQUZCNDc2MzFDNEY5QUUwMi9yZWExZDlWTFdy
Q1FCYzVoTzdFMlNHVXVhbXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCQVWBCRl8uBhkg29mb77UHUAaS3O81ILf7GQQqTQ+2JFa5dHxPIC8o
f6w1FLukuXYbyb9/jO4eCD0RErTgGopofdG1Kc+/KQGjOZxh6VANw8qP2k9Qblxq
uYbRROS6ibNmoFd7icfzE0bI5IQkbtTm3BR/CT13wGEPtBwHFclTClae12Z6m6uq
0uvebVR1m/9FIi591TqiICANPsvaqZ2VFYlQdR1AEc9WKoROGYZfHqJUaY0gGdf1
8vbQvXVsWe/fNWq8sWeLmu0M7ritgM9v6bGZjMibT18uP89octz1XSgVRaPT9C9g
gEl7pLdrMZGo/y2qoauG8BeREl/2p5qA
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:54:13 2025 by rpki-client