Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft
File:                     CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft (raw, json)
Hash identifier:          cRriToxH2uSsXn4WPkiEzKH4DgcG5q2U9RqKPuE+8hM=
Subject key identifier:   1A:1B:3E:2D:EA:2B:51:F8:69:EF:B7:D5:F2:15:70:73:AD:93:E1:23
Authority key identifier: 08:D9:F4:83:E4:54:21:58:F6:2C:BE:70:58:69:EB:ED:77:FB:92:7F
Certificate issuer:       /CN=A91FF7FC/serialNumber=08D9F483E4542158F62CBE705869EBED77FB927F
Certificate serial:       0484
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft
Manifest number:          047F
Signing time:             Fri 31 Jan 2025 00:04:53 +0000
Manifest this update:     Fri 31 Jan 2025 00:04:52 +0000
Manifest next update:     Fri 07 Feb 2025 00:04:52 +0000
Files and hashes:         1: CNn0g-RUIVj2LL5wWGnr7Xf7kn8.crl (hash: rqj+wxeEuPlViaVKzeZ/6n168mmb5DaRg34mTlMCfhU=)
                          2: 5CA72CF82A6911EC94518740C4F9AE02.roa (hash: DNv6RERe4SqIzEBmNx3Q6xCWL7cpJvtrVCrMm/mBf0c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1156 (0x484)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF7FC/serialNumber=08D9F483E4542158F62CBE705869EBED77FB927F
        Validity
            Not Before: Jan 31 00:04:52 2025 GMT
            Not After : Feb  7 00:04:52 2025 GMT
        Subject: CN=679c13a5-b94a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:55:77:b4:21:48:4b:27:79:e0:2d:d7:33:80:
                    2a:5b:44:d9:ab:f9:ad:c8:15:85:2c:b3:82:70:4b:
                    80:2c:45:52:05:a4:07:f9:3d:32:3c:ad:6a:03:8e:
                    b4:60:ff:c3:63:f9:2f:3f:43:cd:f5:54:98:1b:91:
                    d9:9f:67:d2:2a:dd:48:1e:dc:2b:bd:b3:a8:b2:13:
                    c3:cf:1c:ab:55:fe:f2:47:cd:54:50:ad:e0:0b:32:
                    db:9a:6a:fc:16:23:df:e2:ab:0f:7c:af:21:e6:45:
                    95:90:7d:86:af:62:c3:b5:5e:c8:da:47:0e:8c:59:
                    f6:2d:36:67:1a:be:d1:f0:58:d7:e1:6f:a1:6e:45:
                    79:12:24:e4:89:b9:18:01:e3:b7:bd:08:1b:dd:5d:
                    66:6d:f0:c3:f2:7f:b0:e4:49:fe:77:1b:35:5e:fd:
                    d8:ca:3d:84:b9:ca:ff:e0:84:80:5c:bf:14:00:37:
                    92:66:9d:11:62:eb:3d:61:c8:53:bd:ca:40:68:5a:
                    77:ee:8b:e1:8e:6c:d9:a9:97:45:b8:62:78:e6:f2:
                    56:00:90:cc:83:54:b1:29:dd:39:12:f7:e8:c3:59:
                    b9:90:94:93:0b:67:6d:ba:ba:f2:89:7c:ea:1b:ce:
                    37:eb:17:a2:84:fe:59:9a:37:4a:fa:97:5d:4e:87:
                    43:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:1B:3E:2D:EA:2B:51:F8:69:EF:B7:D5:F2:15:70:73:AD:93:E1:23
            X509v3 Authority Key Identifier:
                keyid:08:D9:F4:83:E4:54:21:58:F6:2C:BE:70:58:69:EB:ED:77:FB:92:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:09:eb:0a:8e:d3:31:75:57:77:b7:5f:f9:9a:a3:1c:a4:3c:
         fa:30:80:1f:24:d2:fe:a2:f0:28:72:ff:26:52:e3:65:74:29:
         2e:20:ae:60:e9:ce:cf:14:ae:9f:c8:54:c4:ef:b6:ef:b5:64:
         be:99:1b:fb:39:04:21:e3:c2:01:f7:0c:32:0d:6b:72:34:e7:
         83:22:fa:42:0a:3d:48:c6:ef:93:0c:c4:ac:9e:f4:33:03:2b:
         94:db:4c:0c:6a:0f:ea:11:af:7c:c5:52:34:1d:0a:b5:04:4e:
         48:b4:8f:66:38:46:38:0f:67:67:0c:49:dd:cc:7e:e4:c9:44:
         ce:e4:a4:c6:4b:52:3f:c6:73:d5:e8:f0:2f:91:bd:70:b0:1f:
         bb:d3:a4:cd:77:d9:07:a9:be:87:27:e3:b3:ac:eb:ba:9a:49:
         ce:02:64:30:c7:e1:e6:7a:47:c0:f2:67:52:50:c3:ad:b0:95:
         20:23:c3:5e:db:3f:29:5d:02:f2:f3:90:5d:77:09:b7:38:b0:
         71:00:bd:a0:a7:8b:fc:fa:7a:c4:26:29:35:14:0e:5e:af:7d:
         0c:86:60:7a:b1:11:30:b6:0e:c0:5c:ca:dc:f4:15:2f:00:61:
         86:c1:f7:6b:cd:3e:28:68:ce:bc:e9:a2:dd:6d:d7:1f:e5:70:
         c3:9c:91:b3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkY3RkMxMTAvBgNVBAUTKDA4RDlGNDgzRTQ1NDIxNThGNjJDQkU3MDU4NjlFQkVE
NzdGQjkyN0YwHhcNMjUwMTMxMDAwNDUyWhcNMjUwMjA3MDAwNDUyWjAYMRYwFAYD
VQQDEw02NzljMTNhNS1iOTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs1V3tCFISyd54C3XM4AqW0TZq/mtyBWFLLOCcEuALEVSBaQH+T0yPK1qA460
YP/DY/kvP0PN9VSYG5HZn2fSKt1IHtwrvbOoshPDzxyrVf7yR81UUK3gCzLbmmr8
FiPf4qsPfK8h5kWVkH2Gr2LDtV7I2kcOjFn2LTZnGr7R8FjX4W+hbkV5EiTkibkY
AeO3vQgb3V1mbfDD8n+w5En+dxs1Xv3Yyj2Eucr/4ISAXL8UADeSZp0RYus9YchT
vcpAaFp37ovhjmzZqZdFuGJ45vJWAJDMg1SxKd05Evfow1m5kJSTC2dturryiXzq
G8436xeihP5ZmjdK+pddTodD6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBobPi3q
K1H4ae+31fIVcHOtk+EjMB8GA1UdIwQYMBaAFAjZ9IPkVCFY9iy+cFhp6+13+5J/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjdGQy80RTIzQjM5QzJB
NjIxMUVDQTlBNjdDMzBDNEY5QUUwMi9DTm4wZy1SVUlWajJMTDV3V0ducjdYZjdr
bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NObjBnLVJVSVZqMkxMNXdXR25yN1hmN2tuOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RjdGQy80RTIzQjM5QzJBNjIxMUVDQTlBNjdDMzBDNEY5QUUwMi9DTm4wZy1SVUlW
ajJMTDV3V0ducjdYZjdrbjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBGCesKjtMxdVd3t1/5mqMcpDz6MIAfJNL+ovAocv8mUuNldCkuIK5g
6c7PFK6fyFTE77bvtWS+mRv7OQQh48IB9wwyDWtyNOeDIvpCCj1Ixu+TDMSsnvQz
AyuU20wMag/qEa98xVI0HQq1BE5ItI9mOEY4D2dnDEndzH7kyUTO5KTGS1I/xnPV
6PAvkb1wsB+706TNd9kHqb6HJ+OzrOu6mknOAmQwx+HmekfA8mdSUMOtsJUgI8Ne
2z8pXQLy85Bddwm3OLBxAL2gp4v8+nrEJik1FA5er30MhmB6sREwtg7AXMrc9BUv
AGGGwfdrzT4oaM686aLdbdcf5XDDnJGz
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:37:57 2025 by rpki-client