Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.mft
File:                     V5ly5g6m9GOEiRrQ4_QXkMgIBfE.mft (raw, json)
Hash identifier:          wn6FCY6IoYpL4wmz8WoqD6pVsYmbDGEMtE2MaE6KDtw=
Subject key identifier:   32:6A:63:CD:47:A9:06:8A:D4:3A:3D:AD:DD:08:F5:6E:C8:93:46:3D
Authority key identifier: 57:99:72:E6:0E:A6:F4:63:84:89:1A:D0:E3:F4:17:90:C8:08:05:F1
Certificate issuer:       /CN=A919C1A2/serialNumber=579972E60EA6F46384891AD0E3F41790C80805F1
Certificate serial:       01D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.mft
Manifest number:          01D3
Signing time:             Sat 29 Mar 2025 02:25:12 +0000
Manifest this update:     Sat 29 Mar 2025 02:25:11 +0000
Manifest next update:     Sat 05 Apr 2025 02:25:11 +0000
Files and hashes:         1: V5ly5g6m9GOEiRrQ4_QXkMgIBfE.crl (hash: Dw3WN/Mllp4BKMb020d0EyYuiDr/l5/0qhHTMVZCQjs=)
                          2: 46B3DF5A46E111EDB39B8526C4F9AE02.roa (hash: qtQ5quSwMYsKVelHw8PoUcCRH9+p/SKKBVtmk8NHuxo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 472 (0x1d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C1A2
        Validity
            Not Before: Mar 29 02:25:11 2025 GMT
            Not After : Apr  5 02:25:11 2025 GMT
        Subject: CN=67e75a08-dcff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bf:ac:bf:bc:26:f6:d0:14:47:37:75:c8:e7:
                    59:90:74:dd:2e:34:48:89:45:9c:f1:4b:af:ff:aa:
                    76:f6:03:fb:10:4c:c2:b6:a5:01:24:e3:37:df:82:
                    5b:e4:93:07:c6:0a:b5:f6:6d:6c:ef:18:76:38:74:
                    dd:f1:4b:08:b2:8f:96:6a:96:b1:e1:1a:02:fb:88:
                    a1:be:35:1d:04:d1:32:f3:40:9d:c9:c8:27:16:26:
                    93:1b:28:47:01:0d:73:64:15:fe:a7:6e:31:e3:ba:
                    68:78:94:94:bf:ae:8e:ab:ce:7f:b2:0d:9b:96:e8:
                    d0:1e:9b:07:64:26:58:4d:fb:43:28:3e:ed:ae:b3:
                    98:e0:8f:7d:21:8d:96:65:ba:38:20:c8:07:11:96:
                    2f:4e:45:8c:16:8a:c6:cd:d1:b1:c7:d5:e0:1c:a8:
                    32:46:94:bf:30:ad:3f:a9:59:98:db:b4:83:6c:11:
                    4d:0e:1f:be:9e:42:14:2d:e2:59:2c:29:2b:31:46:
                    03:0a:f9:e5:82:c3:7e:04:e3:e2:32:e4:44:d0:4b:
                    9e:29:8c:57:53:d6:37:43:de:8e:5d:2e:7b:c9:38:
                    ba:78:48:36:53:8b:7b:5a:c3:05:74:65:a3:e8:f8:
                    8b:af:76:de:8f:36:e6:83:d8:49:76:13:a9:fe:74:
                    9c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:6A:63:CD:47:A9:06:8A:D4:3A:3D:AD:DD:08:F5:6E:C8:93:46:3D
            X509v3 Authority Key Identifier:
                keyid:57:99:72:E6:0E:A6:F4:63:84:89:1A:D0:E3:F4:17:90:C8:08:05:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:7b:9b:31:a7:f5:c9:e6:cc:b9:1c:5f:bc:49:e4:76:a1:18:
         f8:23:8f:b9:93:10:98:3b:8a:95:3a:c2:7b:fd:59:77:9a:11:
         6d:c5:47:d0:cd:93:a1:a9:98:98:e2:59:8c:6c:d6:d5:9d:8d:
         58:7b:b7:1c:68:f9:7d:c9:df:6b:70:07:05:f5:31:89:8e:aa:
         c8:08:d7:d6:e6:9b:47:dd:00:e9:96:70:3d:c4:2f:98:a4:e8:
         1c:48:4a:a1:76:ba:ad:f8:95:a5:5d:3a:c6:a1:1a:10:ab:7d:
         d9:82:2d:34:93:ae:9b:fe:bc:20:de:17:95:c4:38:ec:7f:b8:
         7a:6e:50:0d:8f:aa:8c:4a:e0:01:02:76:17:45:6c:00:5a:1a:
         b6:76:fa:09:59:1c:4e:50:20:6d:3c:33:a5:1b:46:7b:cf:ab:
         fa:4d:09:0e:55:6a:7d:ec:26:a0:4c:64:4d:08:9f:5e:ee:05:
         33:92:59:67:50:0b:36:06:a3:b5:2a:c1:2b:b7:0f:78:9a:4c:
         2f:76:78:10:9d:8c:2f:98:dd:ea:87:98:98:10:67:e3:ff:c8:
         5f:dd:99:7c:63:7b:da:26:54:92:bf:3d:b6:1b:1d:8f:b7:0b:
         f6:36:44:f4:1a:d2:2c:cf:2c:82:08:6d:fe:e7:5a:d0:68:a6:
         41:21:f2:bb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUMxQTIxMTAvBgNVBAUTKDU3OTk3MkU2MEVBNkY0NjM4NDg5MUFEMEUzRjQxNzkw
QzgwODA1RjEwHhcNMjUwMzI5MDIyNTExWhcNMjUwNDA1MDIyNTExWjAYMRYwFAYD
VQQDEw02N2U3NWEwOC1kY2ZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwL+sv7wm9tAURzd1yOdZkHTdLjRIiUWc8Uuv/6p29gP7EEzCtqUBJOM334Jb
5JMHxgq19m1s7xh2OHTd8UsIso+Wapax4RoC+4ihvjUdBNEy80CdycgnFiaTGyhH
AQ1zZBX+p24x47poeJSUv66Oq85/sg2blujQHpsHZCZYTftDKD7trrOY4I99IY2W
Zbo4IMgHEZYvTkWMForGzdGxx9XgHKgyRpS/MK0/qVmY27SDbBFNDh++nkIULeJZ
LCkrMUYDCvnlgsN+BOPiMuRE0EueKYxXU9Y3Q96OXS57yTi6eEg2U4t7WsMFdGWj
6PiLr3bejzbmg9hJdhOp/nScHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDJqY81H
qQaK1Do9rd0I9W7Ik0Y9MB8GA1UdIwQYMBaAFFeZcuYOpvRjhIka0OP0F5DICAXx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzFBMi80NzRDRDg0NDQ2
REQxMUVEOTI0MDIzMjBDNEY5QUUwMi9WNWx5NWc2bTlHT0VpUnJRNF9RWGtNZ0lC
ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Y1bHk1ZzZtOUdPRWlSclE0X1FYa01nSUJmRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QzFBMi80NzRDRDg0NDQ2REQxMUVEOTI0MDIzMjBDNEY5QUUwMi9WNWx5NWc2bTlH
T0VpUnJRNF9RWGtNZ0lCZkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBve5sxp/XJ5sy5HF+8SeR2oRj4I4+5kxCYO4qVOsJ7/Vl3mhFtxUfQ
zZOhqZiY4lmMbNbVnY1Ye7ccaPl9yd9rcAcF9TGJjqrICNfW5ptH3QDplnA9xC+Y
pOgcSEqhdrqt+JWlXTrGoRoQq33Zgi00k66b/rwg3heVxDjsf7h6blANj6qMSuAB
AnYXRWwAWhq2dvoJWRxOUCBtPDOlG0Z7z6v6TQkOVWp97CagTGRNCJ9e7gUzklln
UAs2BqO1KsErtw94mkwvdngQnYwvmN3qh5iYEGfj/8hf3Zl8Y3vaJlSSvz22Gx2P
twv2NkT0GtIszyyCCG3+51rQaKZBIfK7
-----END CERTIFICATE-----
Generated at Wed Apr 9 01:34:06 2025 by rpki-client