Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.mft
File:                     9BV_dExCEMP_Rqrw4CLe5on0bj8.mft (raw, json)
Hash identifier:          2s2I95m8tQYVBhg1TA7ZkkGUMK1EpEOJpeyEn47JMKY=
Subject key identifier:   B1:A8:75:3A:CE:B4:FA:A2:58:FF:05:84:BD:97:67:F2:2C:B9:F8:B7
Authority key identifier: F4:15:7F:74:4C:42:10:C3:FF:46:AA:F0:E0:22:DE:E6:89:F4:6E:3F
Certificate issuer:       /CN=A91F7B81/serialNumber=F4157F744C4210C3FF46AAF0E022DEE689F46E3F
Certificate serial:       03BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BV_dExCEMP_Rqrw4CLe5on0bj8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.mft
Manifest number:          03BB
Signing time:             Fri 31 Jan 2025 00:42:56 +0000
Manifest this update:     Fri 31 Jan 2025 00:42:55 +0000
Manifest next update:     Fri 07 Feb 2025 00:42:55 +0000
Files and hashes:         1: 9BV_dExCEMP_Rqrw4CLe5on0bj8.crl (hash: RIKpc1r+2pd3MbuR1Ucrq94hL6cd+300u3PAGDM31Wg=)
                          2: B4C25A82772811ECA418E366C4F9AE02.roa (hash: +nAeLjb+TBEYVVPImLnPfEQNMqbzuQHLMiBByx+ZAiw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 959 (0x3bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7B81/serialNumber=F4157F744C4210C3FF46AAF0E022DEE689F46E3F
        Validity
            Not Before: Jan 31 00:42:55 2025 GMT
            Not After : Feb  7 00:42:55 2025 GMT
        Subject: CN=679c1c90-539b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:81:b9:cd:3d:04:f3:ae:67:2b:ca:b1:5d:3d:
                    2b:57:c3:82:57:2a:76:46:f1:9d:9b:83:6c:02:22:
                    ad:ab:c0:5d:f6:a2:88:5e:b4:6a:30:87:97:89:1c:
                    7c:94:b4:08:db:a7:f8:ee:c7:89:a3:2a:7e:f8:cf:
                    9a:07:c5:34:35:d4:ed:aa:4e:34:1c:04:f8:b9:cb:
                    fa:be:fd:b6:2d:a4:b2:b2:dd:11:48:63:e5:3c:35:
                    e0:6d:72:6e:36:bc:75:62:0d:b9:ad:47:48:d9:c0:
                    29:37:9e:5b:94:c6:8a:4e:11:43:02:f4:14:f2:87:
                    c1:c6:95:cb:c8:4a:6e:4a:a8:b2:bd:67:07:b8:43:
                    74:34:fa:40:ea:45:66:20:30:39:1b:dd:35:bb:54:
                    82:14:4a:bd:d6:a5:b9:db:b9:04:93:03:b8:b2:28:
                    73:97:ae:c5:21:10:10:b7:fe:73:de:2d:2d:00:be:
                    b7:fe:f6:bd:a4:97:95:71:f5:77:16:a1:7d:b0:d9:
                    e8:ba:45:16:ed:f0:08:39:3e:38:98:aa:fa:db:44:
                    62:9f:1c:24:5e:b8:6a:02:d4:86:29:8a:cc:c2:60:
                    c0:da:0b:f5:59:b2:1f:15:4c:d5:ec:59:09:d5:b1:
                    34:2c:a4:54:05:33:83:71:ed:7c:4d:dc:0b:e3:4f:
                    5d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:A8:75:3A:CE:B4:FA:A2:58:FF:05:84:BD:97:67:F2:2C:B9:F8:B7
            X509v3 Authority Key Identifier:
                keyid:F4:15:7F:74:4C:42:10:C3:FF:46:AA:F0:E0:22:DE:E6:89:F4:6E:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BV_dExCEMP_Rqrw4CLe5on0bj8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:eb:4c:67:d8:d3:db:4f:77:b5:e6:82:1b:24:4a:bc:ab:69:
         29:ce:6b:e3:2c:fc:db:50:fa:4b:95:72:68:00:e5:01:a8:13:
         f7:42:c5:08:36:6b:ba:2c:a9:a8:54:80:db:7a:f8:1e:76:93:
         9c:67:fc:44:cf:a3:84:75:4a:30:b2:c2:fc:bf:fa:23:cb:6c:
         06:47:58:59:43:9b:8e:07:c8:e6:c0:58:96:94:97:f9:48:6d:
         7c:66:8f:76:3a:3a:f2:e3:2c:8c:80:1f:be:19:e4:78:0b:ee:
         ff:da:43:fc:31:33:3f:d2:7b:2d:60:ae:9a:cd:83:d8:c3:ad:
         17:fb:d4:1c:9b:e3:31:02:30:8e:56:9b:8b:2a:8a:51:9e:e4:
         2e:2e:c0:30:a5:f2:f4:2b:a2:b3:2a:88:a7:b6:c9:b5:57:2f:
         73:c6:cf:8b:d6:8a:61:b0:dc:81:5f:e4:f1:e8:6b:95:a7:f3:
         76:ef:2b:e8:ab:e2:db:22:2a:53:d5:b2:69:30:a0:35:43:7a:
         29:95:7c:f6:e1:48:a9:9e:4c:c9:15:6b:c1:5c:1d:6d:e8:cb:
         fd:51:3b:6b:bd:53:79:13:8d:e8:dd:13:be:95:e8:22:8a:70:
         de:98:cf:54:65:98:bb:06:c6:dc:d7:ff:30:2e:1e:9b:63:8a:
         18:5e:5b:8b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA78wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjdCODExMTAvBgNVBAUTKEY0MTU3Rjc0NEM0MjEwQzNGRjQ2QUFGMEUwMjJERUU2
ODlGNDZFM0YwHhcNMjUwMTMxMDA0MjU1WhcNMjUwMjA3MDA0MjU1WjAYMRYwFAYD
VQQDEw02NzljMWM5MC01MzliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2IG5zT0E865nK8qxXT0rV8OCVyp2RvGdm4NsAiKtq8Bd9qKIXrRqMIeXiRx8
lLQI26f47seJoyp++M+aB8U0NdTtqk40HAT4ucv6vv22LaSyst0RSGPlPDXgbXJu
Nrx1Yg25rUdI2cApN55blMaKThFDAvQU8ofBxpXLyEpuSqiyvWcHuEN0NPpA6kVm
IDA5G901u1SCFEq91qW527kEkwO4sihzl67FIRAQt/5z3i0tAL63/va9pJeVcfV3
FqF9sNnoukUW7fAIOT44mKr620RinxwkXrhqAtSGKYrMwmDA2gv1WbIfFUzV7FkJ
1bE0LKRUBTODce18TdwL409drQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLGodTrO
tPqiWP8FhL2XZ/Isufi3MB8GA1UdIwQYMBaAFPQVf3RMQhDD/0aq8OAi3uaJ9G4/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0I4MS80OUM4OTI1RTc3
MjQxMUVDQTc2NTkwNjBDNEY5QUUwMi85QlZfZEV4Q0VNUF9ScXJ3NENMZTVvbjBi
ajguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlCVl9kRXhDRU1QX1Jxcnc0Q0xlNW9uMGJqOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
N0I4MS80OUM4OTI1RTc3MjQxMUVDQTc2NTkwNjBDNEY5QUUwMi85QlZfZEV4Q0VN
UF9ScXJ3NENMZTVvbjBiajgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA160xn2NPbT3e15oIbJEq8q2kpzmvjLPzbUPpLlXJoAOUBqBP3QsUI
Nmu6LKmoVIDbevgedpOcZ/xEz6OEdUowssL8v/ojy2wGR1hZQ5uOB8jmwFiWlJf5
SG18Zo92Ojry4yyMgB++GeR4C+7/2kP8MTM/0nstYK6azYPYw60X+9Qcm+MxAjCO
VpuLKopRnuQuLsAwpfL0K6KzKointsm1Vy9zxs+L1ophsNyBX+Tx6GuVp/N27yvo
q+LbIipT1bJpMKA1Q3oplXz24UipnkzJFWvBXB1t6Mv9UTtrvVN5E43o3RO+legi
inDemM9UZZi7Bsbc1/8wLh6bY4oYXluL
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:13:38 2025 by rpki-client