Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.mft
File:                     aUhYuSvKfAh2W8a7wYOSPrVxH4E.mft (raw, json)
Hash identifier:          e3HQg7fyTx0eFouwdw8yhMaLDQs4QqUvneyQCrUVPlc=
Subject key identifier:   02:E9:85:E1:42:0A:4A:32:73:17:97:D1:7C:22:A1:72:DA:A2:EE:70
Authority key identifier: 69:48:58:B9:2B:CA:7C:08:76:5B:C6:BB:C1:83:92:3E:B5:71:1F:81
Certificate issuer:       /CN=A913A748/serialNumber=694858B92BCA7C08765BC6BBC183923EB5711F81
Certificate serial:       8C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aUhYuSvKfAh2W8a7wYOSPrVxH4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.mft
Manifest number:          88
Signing time:             Sat 29 Mar 2025 05:53:27 +0000
Manifest this update:     Sat 29 Mar 2025 05:53:27 +0000
Manifest next update:     Sat 05 Apr 2025 05:53:27 +0000
Files and hashes:         1: aUhYuSvKfAh2W8a7wYOSPrVxH4E.crl (hash: bav4MKO2uVRAjJAZG0P3kBx9ao2hC2EjlKNBiQPAkPM=)
                          2: 1B86A7CCE2CA11EFAA007D32C4F9AE02.roa (hash: sPbStdVNUQpgeo3cCvwb+dSIcpm/Yx/AptYb/ozc94k=)
                          3: F31A7084E2C911EFADAB3C32C4F9AE02.roa (hash: LFS2UufFNk1EGZW0kkO6tt4P+aiBcuisDdPBhJ+0Sd4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 140 (0x8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A748
        Validity
            Not Before: Mar 29 05:53:27 2025 GMT
            Not After : Apr  5 05:53:27 2025 GMT
        Subject: CN=67e78ad7-df6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:27:18:a0:00:dc:bb:c2:97:25:66:8c:2f:be:
                    94:35:37:1f:f8:2c:d1:b5:35:2d:92:74:2c:1b:6e:
                    0b:c8:c8:8b:1a:79:4e:f4:35:6d:10:36:56:55:58:
                    3e:a4:83:a2:56:b8:db:6d:00:6f:24:a8:4b:07:8d:
                    81:6b:11:fa:d8:33:f5:b1:e3:80:6f:d7:dd:2e:75:
                    6c:dd:7d:a5:7b:fc:76:a8:56:38:01:35:8c:7b:80:
                    74:37:ca:5c:c5:51:00:9d:48:09:0d:d9:d1:f1:e7:
                    34:78:86:42:37:b5:a6:a7:c1:27:3b:78:6d:42:fa:
                    da:47:49:3c:d4:c2:58:96:2c:64:13:f9:b0:b8:16:
                    80:5e:d3:dd:d3:91:8b:11:34:5b:21:89:99:37:3a:
                    75:a2:d5:01:02:6b:e7:7e:c7:d6:0b:9c:5f:83:47:
                    81:d6:97:59:06:4e:42:a9:2f:26:cf:14:0f:4e:fe:
                    59:9a:f7:4b:63:f7:17:5e:8a:24:d0:d4:29:24:fb:
                    9d:c3:0a:2b:8c:1f:a2:c9:39:46:59:38:b8:f6:2a:
                    4b:a7:5e:21:7f:bf:93:15:14:b9:62:62:4d:71:08:
                    43:ab:68:b9:6b:c3:7c:a8:73:0e:d8:7f:86:e2:c9:
                    04:d8:ac:c7:1c:ad:11:31:81:24:6b:ac:89:90:7a:
                    f8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:E9:85:E1:42:0A:4A:32:73:17:97:D1:7C:22:A1:72:DA:A2:EE:70
            X509v3 Authority Key Identifier:
                keyid:69:48:58:B9:2B:CA:7C:08:76:5B:C6:BB:C1:83:92:3E:B5:71:1F:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aUhYuSvKfAh2W8a7wYOSPrVxH4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:28:65:9f:48:b9:6f:e6:a4:8b:9c:6a:e0:87:08:90:93:b7:
         82:97:63:0b:4c:95:f9:1a:39:d2:e5:5c:80:87:99:e0:4d:6e:
         cd:ce:aa:a5:fc:e4:e4:6c:5e:26:1c:3f:3f:f4:04:bb:9d:2e:
         9e:fb:74:26:5a:af:f5:24:cd:a5:1f:47:a3:da:47:ca:ad:6c:
         e4:3c:d7:02:7f:a0:6a:dd:08:05:95:f5:ff:80:85:5a:19:a7:
         b8:3b:bf:11:f3:85:f3:a9:63:3b:0b:4b:2c:7b:0f:c7:5b:bf:
         19:7d:04:b2:2b:fb:c0:80:e3:7f:1b:8d:15:bf:e9:ed:cf:34:
         3c:4d:3b:3a:16:9f:4e:04:c2:77:83:5c:be:70:86:ac:8d:cc:
         b1:a2:e2:89:fe:f6:2a:70:59:45:63:8c:58:10:ef:e6:81:01:
         63:91:8f:33:bf:9b:e8:90:16:17:59:62:3a:50:fe:2b:21:64:
         a4:23:5e:3f:dc:a0:75:c7:da:ff:72:aa:d6:7d:eb:83:e0:ba:
         a8:ae:a1:7f:ef:93:6e:31:44:10:15:40:fa:5d:f8:91:02:01:
         46:d1:46:03:c3:fc:e8:69:01:05:e5:44:ce:6d:8a:de:17:69:
         40:03:fc:12:f3:f1:db:e7:95:0e:71:0f:ff:f0:dc:d8:80:31:
         45:c3:a8:f9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0E3NDgxMTAvBgNVBAUTKDY5NDg1OEI5MkJDQTdDMDg3NjVCQzZCQkMxODM5MjNF
QjU3MTFGODEwHhcNMjUwMzI5MDU1MzI3WhcNMjUwNDA1MDU1MzI3WjAYMRYwFAYD
VQQDEw02N2U3OGFkNy1kZjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqicYoADcu8KXJWaML76UNTcf+CzRtTUtknQsG24LyMiLGnlO9DVtEDZWVVg+
pIOiVrjbbQBvJKhLB42BaxH62DP1seOAb9fdLnVs3X2le/x2qFY4ATWMe4B0N8pc
xVEAnUgJDdnR8ec0eIZCN7Wmp8EnO3htQvraR0k81MJYlixkE/mwuBaAXtPd05GL
ETRbIYmZNzp1otUBAmvnfsfWC5xfg0eB1pdZBk5CqS8mzxQPTv5ZmvdLY/cXXook
0NQpJPudwworjB+iyTlGWTi49ipLp14hf7+TFRS5YmJNcQhDq2i5a8N8qHMO2H+G
4skE2KzHHK0RMYEka6yJkHr42wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFALpheFC
CkoycxeX0XwioXLaou5wMB8GA1UdIwQYMBaAFGlIWLkrynwIdlvGu8GDkj61cR+B
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTc0OC9BMjE4MzdCMDQy
QjExMUVGOTJFNTY1NzhDNEY5QUUwMi9hVWhZdVN2S2ZBaDJXOGE3d1lPU1ByVnhI
NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2FVaFl1U3ZLZkFoMlc4YTd3WU9TUHJWeEg0RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QTc0OC9BMjE4MzdCMDQyQjExMUVGOTJFNTY1NzhDNEY5QUUwMi9hVWhZdVN2S2ZB
aDJXOGE3d1lPU1ByVnhINEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC0KGWfSLlv5qSLnGrghwiQk7eCl2MLTJX5GjnS5VyAh5ngTW7Nzqql
/OTkbF4mHD8/9AS7nS6e+3QmWq/1JM2lH0ej2kfKrWzkPNcCf6Bq3QgFlfX/gIVa
Gae4O78R84XzqWM7C0ssew/HW78ZfQSyK/vAgON/G40Vv+ntzzQ8TTs6Fp9OBMJ3
g1y+cIasjcyxouKJ/vYqcFlFY4xYEO/mgQFjkY8zv5vokBYXWWI6UP4rIWSkI14/
3KB1x9r/cqrWfeuD4LqorqF/75NuMUQQFUD6XfiRAgFG0UYDw/zoaQEF5UTObYre
F2lAA/wS8/Hb55UOcQ//8NzYgDFFw6j5
-----END CERTIFICATE-----
Generated at Sun Apr 6 22:00:22 2025 by rpki-client