Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft
File:                     UgupTND7nnwUDfvAzFi5PPVMIvM.mft (raw, json)
Hash identifier:          P6ijNm9ARwrIP/xI9UPcZrMCtKlg7a76HNpqvroYVkM=
Subject key identifier:   0A:1B:A0:7A:16:43:B4:66:42:17:4B:24:47:0F:5E:54:8D:F1:1E:65
Authority key identifier: 52:0B:A9:4C:D0:FB:9E:7C:14:0D:FB:C0:CC:58:B9:3C:F5:4C:22:F3
Certificate issuer:       /CN=A91F8981/serialNumber=520BA94CD0FB9E7C140DFBC0CC58B93CF54C22F3
Certificate serial:       4D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UgupTND7nnwUDfvAzFi5PPVMIvM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft
Manifest number:          4C
Signing time:             Fri 31 Jan 2025 06:21:41 +0000
Manifest this update:     Fri 31 Jan 2025 06:21:40 +0000
Manifest next update:     Fri 07 Feb 2025 06:21:40 +0000
Files and hashes:         1: UgupTND7nnwUDfvAzFi5PPVMIvM.crl (hash: EvAv33MGjnzunBlV+2lMcM9DRbcdynei0woeMyj6grA=)
                          2: D79D112E6C7F11EF92105459C4F9AE02.roa (hash: HfxBV0ZJ9ixuR1eesZIIiZUZrrfXBYTU4Z7Ry5c0lbg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8981/serialNumber=520BA94CD0FB9E7C140DFBC0CC58B93CF54C22F3
        Validity
            Not Before: Jan 31 06:21:40 2025 GMT
            Not After : Feb  7 06:21:40 2025 GMT
        Subject: CN=679c6bf4-03b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6d:a0:3b:6f:cd:65:cc:83:8e:4c:34:9b:e1:
                    9c:1c:60:ec:bb:af:c1:f1:ae:81:ec:6c:69:00:94:
                    3e:e2:6e:36:29:0a:aa:df:ff:84:1b:37:61:6f:9d:
                    6f:78:bd:17:29:98:18:01:ae:68:b6:86:74:ff:19:
                    75:4b:40:20:5d:b3:04:f2:45:b4:60:07:88:9f:5a:
                    e2:de:dc:16:72:da:57:d1:50:2e:a5:7a:03:30:2d:
                    86:29:ac:c5:c4:1f:6c:06:07:60:39:f7:b7:c0:ab:
                    b0:27:11:e7:28:c6:7f:8c:e6:52:61:1e:15:60:48:
                    32:b3:ed:a0:75:4e:8b:c3:54:54:ad:dd:d7:db:50:
                    74:b8:65:12:ca:2c:6d:98:18:20:dd:e6:7e:d3:1b:
                    c7:c1:9c:ba:14:b8:29:7e:46:12:1a:ba:c5:94:7f:
                    07:98:6b:e3:6d:dd:eb:ae:01:ed:63:bb:c2:c5:6b:
                    e4:8d:b3:59:17:16:99:6b:36:b1:a0:ea:41:2e:cb:
                    1b:11:6f:32:e4:3d:cd:37:eb:e8:6c:64:68:9e:77:
                    2b:26:b6:bc:9c:de:11:5e:96:0a:e0:61:09:d7:8d:
                    3f:14:92:fa:b1:f9:d8:59:b4:75:49:ab:72:51:6f:
                    c9:89:02:3a:5a:d5:ae:7b:df:a5:26:10:44:13:6d:
                    e1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:1B:A0:7A:16:43:B4:66:42:17:4B:24:47:0F:5E:54:8D:F1:1E:65
            X509v3 Authority Key Identifier:
                keyid:52:0B:A9:4C:D0:FB:9E:7C:14:0D:FB:C0:CC:58:B9:3C:F5:4C:22:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UgupTND7nnwUDfvAzFi5PPVMIvM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:d5:5e:e7:9d:55:35:99:79:eb:cf:73:b9:3e:43:cc:fd:b3:
         1a:e2:5d:95:44:0a:19:82:db:ea:c3:c5:9f:52:51:77:e5:f1:
         85:a5:c3:f9:f0:cf:32:80:1a:e5:b8:c6:82:f8:f2:2a:bd:0a:
         1f:bf:5a:eb:bb:54:bc:de:b1:30:17:b0:fe:00:3e:27:3a:96:
         70:1e:0b:d6:81:a0:44:8b:22:ec:a4:8f:76:17:78:ea:68:86:
         83:28:36:44:49:e7:07:1c:a1:60:73:87:4e:de:a5:70:98:33:
         b6:e9:7e:12:fe:86:d5:d1:29:46:72:9b:6c:ad:2d:69:c8:c6:
         87:09:8e:02:30:31:e0:1c:62:6c:df:db:7c:4b:c0:67:01:e5:
         ae:50:98:9c:15:dd:93:84:f2:a6:17:05:86:84:4c:21:ce:66:
         0c:d7:f0:4e:98:f5:36:d2:a3:8d:5d:01:58:b6:a3:15:56:98:
         0b:d8:8d:c5:81:2f:46:ef:f2:3f:7e:4d:7f:34:f3:18:c0:30:
         97:e2:87:b2:71:20:3e:e4:b8:54:b1:fa:bb:ab:10:0d:df:d0:
         dc:5e:78:38:bb:ed:35:07:5e:78:5a:5f:40:93:2f:ec:60:a7:
         33:f2:23:ed:a6:2a:7f:7a:b1:6a:8c:ec:18:59:e9:88:f6:bf:
         cd:08:2c:57
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
ODk4MTExMC8GA1UEBRMoNTIwQkE5NENEMEZCOUU3QzE0MERGQkMwQ0M1OEI5M0NG
NTRDMjJGMzAeFw0yNTAxMzEwNjIxNDBaFw0yNTAyMDcwNjIxNDBaMBgxFjAUBgNV
BAMTDTY3OWM2YmY0LTAzYjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC6baA7b81lzIOOTDSb4ZwcYOy7r8HxroHsbGkAlD7ibjYpCqrf/4QbN2FvnW94
vRcpmBgBrmi2hnT/GXVLQCBdswTyRbRgB4ifWuLe3BZy2lfRUC6legMwLYYprMXE
H2wGB2A597fAq7AnEecoxn+M5lJhHhVgSDKz7aB1TovDVFSt3dfbUHS4ZRLKLG2Y
GCDd5n7TG8fBnLoUuCl+RhIausWUfweYa+Nt3euuAe1ju8LFa+SNs1kXFplrNrGg
6kEuyxsRbzLkPc036+hsZGiedysmtryc3hFelgrgYQnXjT8Ukvqx+dhZtHVJq3JR
b8mJAjpa1a5736UmEEQTbeGfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUChugehZD
tGZCF0skRw9eVI3xHmUwHwYDVR0jBBgwFoAUUgupTND7nnwUDfvAzFi5PPVMIvMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4OTgxLzFDRjZDRDc0NkM3
RjExRUY5MTREN0Q1N0M0RjlBRTAyL1VndXBUTkQ3bm53VURmdkF6Rmk1UFBWTUl2
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvVWd1cFRORDdubndVRGZ2QXpGaTVQUFZNSXZNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4
OTgxLzFDRjZDRDc0NkM3RjExRUY5MTREN0Q1N0M0RjlBRTAyL1VndXBUTkQ3bm53
VURmdkF6Rmk1UFBWTUl2TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAB/VXuedVTWZeevPc7k+Q8z9sxriXZVEChmC2+rDxZ9SUXfl8YWlw/nw
zzKAGuW4xoL48iq9Ch+/Wuu7VLzesTAXsP4APic6lnAeC9aBoESLIuykj3YXeOpo
hoMoNkRJ5wccoWBzh07epXCYM7bpfhL+htXRKUZym2ytLWnIxocJjgIwMeAcYmzf
23xLwGcB5a5QmJwV3ZOE8qYXBYaETCHOZgzX8E6Y9TbSo41dAVi2oxVWmAvYjcWB
L0bv8j9+TX808xjAMJfih7JxID7kuFSx+rurEA3f0NxeeDi77TUHXnhaX0CTL+xg
pzPyI+2mKn96sWqM7BhZ6Yj2v80ILFc=
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:52:39 2025 by rpki-client