Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft
File:                     1j3oKnWfllf48HOyUSUarme6S6Y.mft (raw, json)
Hash identifier:          RXCvXEBXx1UGb2Gyb/V6YIPQzyoIMKAdN1dLDw8Joz8=
Subject key identifier:   07:6E:B7:73:EE:33:41:44:CC:A4:A1:7F:0D:F4:CF:BE:2E:AE:FC:AC
Authority key identifier: D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6
Certificate issuer:       /CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
Certificate serial:       0437
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft
Manifest number:          03E2
Signing time:             Sat 29 Mar 2025 00:59:21 +0000
Manifest this update:     Sat 29 Mar 2025 00:59:21 +0000
Manifest next update:     Sat 05 Apr 2025 00:59:21 +0000
Files and hashes:         1: 1j3oKnWfllf48HOyUSUarme6S6Y.crl (hash: sblQZnM61oh0ZtCIk+KRyfEq/UCCXqB8+KMBy95MOrY=)
                          2: ABE3468CBB5611EE936F4785C4F9AE02.roa (hash: 85cGKhcFvfLsa3fKkS4OSkRQ0VqdCtjeFSWGED/065w=)
                          3: A15115E6DF3E11EC83CCFE1EC4F9AE02.roa (hash: AFhkaTS9H9SYq32LCGLZ0ybHnkII09gZHj0VVB5f314=)
                          4: 9FEE9516DF3E11EC83CCFE1EC4F9AE02.roa (hash: cotJkdbyDdnoqnW03wwLgBND9x/lhPuMs/gJ3BCR7lI=)
                          5: A09F8E52DF3E11EC83CCFE1EC4F9AE02.roa (hash: 1tRgJ3aPzibyR+z50Gw9nZnYt8M73G+bJYsVfkg2zT8=)
                          6: F563D916248D11EF93237035C4F9AE02.roa (hash: B9+ujxo3UgWLMG+B0g5KGVMUgAJmIzvebILB++raaNc=)
                          7: 9DEFF2FADF3E11EC83CCFE1EC4F9AE02.roa (hash: K8HM6DIcOQOpn7mr5HRxJGQ+LZPGnSM+a9C5ehvgnkk=)
                          8: 86C8EBA2B12A11EF985A2D32C4F9AE02.roa (hash: 7nV+jajMliwqjNqYG+S6G7SOAx0aeStohPloUPjdM80=)
                          9: 9F598EEEDF3E11EC83CCFE1EC4F9AE02.roa (hash: ML8bUrH07kWDsJzW00Kjv/Bk94cyav3h3f9sQ1/S5a0=)
                          10: 9D13F282DF3E11EC83CCFE1EC4F9AE02.roa (hash: 4TUF4fCsd6U4sl8CKjbb5lEPYX8IdLYlZccOBdKP5o0=)
                          11: 56EC4CB4927911EFABEC2D46C4F9AE02.roa (hash: 5jFOXz91ZZ50fpVnfRxRJl436xHddATVpaygKT2CLho=)
                          12: A1FED136DF3E11EC83CCFE1EC4F9AE02.roa (hash: gOJa8cYlazWQ7UQ+EjuycM05p/sMIN86mUAHCGBMKow=)
                          13: 05163DEADD8711EC9BF56E5BC4F9AE02.roa (hash: zGN2nOJQWd9Hxkuu+Xvwm7K9HCh0xLUXhnRjE+idexs=)
                          14: 9EB0F9FADF3E11EC83CCFE1EC4F9AE02.roa (hash: BczitAlbCQvjk6wnUERPJgdefO0W2XIU7kagZ/uo8Uo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1079 (0x437)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA
        Validity
            Not Before: Mar 29 00:59:21 2025 GMT
            Not After : Apr  5 00:59:21 2025 GMT
        Subject: CN=67e745e9-62f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:30:2b:6b:54:59:67:1c:00:e4:8b:ba:91:38:
                    7d:bb:6e:7e:59:c5:16:92:be:c0:5e:78:a7:8f:49:
                    97:38:32:37:61:d2:ef:54:8f:81:86:ce:f3:ef:b0:
                    f3:86:ec:df:48:8d:9d:c3:0d:64:b4:44:67:af:78:
                    4c:94:b6:87:f7:07:4a:34:a7:ea:c4:9c:0f:89:8e:
                    70:80:b3:58:42:24:f1:3a:1e:11:eb:b8:9c:0a:fc:
                    11:db:b0:a0:ac:15:a4:c5:8b:da:4b:e9:69:0e:16:
                    5c:73:ba:93:3f:f4:85:1c:38:75:6b:b7:35:43:3f:
                    d2:42:a7:44:25:11:58:9e:94:ee:07:82:4f:f8:ce:
                    f5:8f:24:25:4c:40:84:d6:42:6e:a9:58:ca:ba:61:
                    2f:4c:1a:69:cc:8e:54:e6:a6:ae:d5:2c:b6:bf:81:
                    bd:71:27:1a:65:51:9d:56:a6:0a:da:9a:a1:74:d3:
                    8e:c1:f2:24:e9:94:88:32:ad:03:4b:cf:d9:29:20:
                    f9:90:3a:a5:93:6c:bb:9d:d9:fb:2e:cd:5a:85:34:
                    9d:84:d4:e3:f9:50:35:88:d1:ab:08:ce:c8:7c:9e:
                    13:0b:e4:79:e6:f4:64:ae:9d:d0:bc:f9:76:0f:52:
                    ae:b0:53:b8:66:19:5b:19:be:e8:54:86:b9:e5:9b:
                    37:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:6E:B7:73:EE:33:41:44:CC:A4:A1:7F:0D:F4:CF:BE:2E:AE:FC:AC
            X509v3 Authority Key Identifier:
                keyid:D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:cf:fa:5b:fe:85:4d:d0:61:0b:4a:44:99:87:83:0c:d3:d9:
         55:a9:3b:1c:3e:6e:18:a3:ca:14:45:22:62:fe:3f:a9:fe:bd:
         08:6c:d3:e7:43:2a:8c:fd:2a:a5:fd:e7:8f:b4:21:54:5d:52:
         75:b6:43:70:bd:87:5f:30:a4:05:bc:07:a4:5d:33:79:9e:88:
         5d:50:7c:0c:5d:5c:dc:6a:7d:70:2f:f9:ef:15:17:7c:a9:8f:
         70:81:54:fb:c5:46:95:7e:66:6c:53:b0:f6:af:64:36:4a:91:
         0d:99:e4:e8:bf:2f:d6:f5:85:a5:71:95:b8:a4:2d:cc:91:91:
         08:4c:f0:6d:4c:a5:fb:ed:6f:aa:b4:cb:29:4f:35:77:0d:1e:
         0d:31:e4:c4:86:81:10:e3:d6:c7:5a:77:c9:f7:30:af:a4:ee:
         ce:ac:11:aa:8b:b5:40:db:7e:19:d7:4b:0d:fb:70:46:0a:3b:
         3f:83:15:f0:19:ab:2b:4c:95:f1:9a:7a:af:a1:9e:f5:52:bb:
         53:8a:3a:b3:bf:29:80:ca:75:cc:98:51:5e:1f:c3:90:85:72:
         c2:77:bb:3d:57:79:d8:e5:e4:0c:58:17:f3:e1:85:55:70:48:
         ea:68:c0:db:c5:2a:26:35:e2:4e:74:aa:0d:8b:f8:f0:f6:88:
         37:2f:32:0f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjYyQ0ExMTAvBgNVBAUTKEQ2M0RFODJBNzU5Rjk2NTdGOEYwNzNCMjUxMjUxQUFF
NjdCQTRCQTYwHhcNMjUwMzI5MDA1OTIxWhcNMjUwNDA1MDA1OTIxWjAYMRYwFAYD
VQQDEw02N2U3NDVlOS02MmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvTAra1RZZxwA5Iu6kTh9u25+WcUWkr7AXninj0mXODI3YdLvVI+Bhs7z77Dz
huzfSI2dww1ktERnr3hMlLaH9wdKNKfqxJwPiY5wgLNYQiTxOh4R67icCvwR27Cg
rBWkxYvaS+lpDhZcc7qTP/SFHDh1a7c1Qz/SQqdEJRFYnpTuB4JP+M71jyQlTECE
1kJuqVjKumEvTBppzI5U5qau1Sy2v4G9cScaZVGdVqYK2pqhdNOOwfIk6ZSIMq0D
S8/ZKSD5kDqlk2y7ndn7Ls1ahTSdhNTj+VA1iNGrCM7IfJ4TC+R55vRkrp3QvPl2
D1KusFO4ZhlbGb7oVIa55Zs3fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAdut3Pu
M0FEzKShfw30z74urvysMB8GA1UdIwQYMBaAFNY96Cp1n5ZX+PBzslElGq5nukum
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJDQS9FQzFFRTY1MjhB
NTcxMUVDOTZFQkMwMTRDNEY5QUUwMi8xajNvS25XZmxsZjQ4SE95VVNVYXJtZTZT
NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzFqM29LbldmbGxmNDhIT3lVU1Vhcm1lNlM2WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NjJDQS9FQzFFRTY1MjhBNTcxMUVDOTZFQkMwMTRDNEY5QUUwMi8xajNvS25XZmxs
ZjQ4SE95VVNVYXJtZTZTNlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBOz/pb/oVN0GELSkSZh4MM09lVqTscPm4Yo8oURSJi/j+p/r0IbNPn
QyqM/Sql/eePtCFUXVJ1tkNwvYdfMKQFvAekXTN5nohdUHwMXVzcan1wL/nvFRd8
qY9wgVT7xUaVfmZsU7D2r2Q2SpENmeTovy/W9YWlcZW4pC3MkZEITPBtTKX77W+q
tMspTzV3DR4NMeTEhoEQ49bHWnfJ9zCvpO7OrBGqi7VA234Z10sN+3BGCjs/gxXw
GasrTJXxmnqvoZ71UrtTijqzvymAynXMmFFeH8OQhXLCd7s9V3nY5eQMWBfz4YVV
cEjqaMDbxSomNeJOdKoNi/jw9og3LzIP
-----END CERTIFICATE-----
Generated at Sun Apr 6 16:35:03 2025 by rpki-client