Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft
File:                     _JvUY9Aun9Lfw8Oa5M1asyJljCo.mft (raw, json)
Hash identifier:          /xe1ZKeXJtnV7pHplOmi22+YHL3X0fh8iZx0zpOUEEs=
Subject key identifier:   35:89:AC:61:5D:71:1D:5E:8D:B0:25:EC:9A:17:93:35:68:D7:B5:0C
Authority key identifier: FC:9B:D4:63:D0:2E:9F:D2:DF:C3:C3:9A:E4:CD:5A:B3:22:65:8C:2A
Certificate issuer:       /CN=A91AB6EB/serialNumber=FC9BD463D02E9FD2DFC3C39AE4CD5AB322658C2A
Certificate serial:       0AB5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft
Manifest number:          09FA
Signing time:             Fri 28 Mar 2025 20:26:24 +0000
Manifest this update:     Fri 28 Mar 2025 20:26:24 +0000
Manifest next update:     Fri 04 Apr 2025 20:26:24 +0000
Files and hashes:         1: _JvUY9Aun9Lfw8Oa5M1asyJljCo.crl (hash: xGRvtgNHumoZRX1G0b/bsTM+GCV+k4xtHcvBVeyjOgY=)
                          2: 23A38F44D74C11EF9514995EC4F9AE02.roa (hash: cj/OytvVnHfcbk5Gia2XhIeg24Q5C0dlS7O/OI0qxz0=)
                          3: 22E7F194D74C11EF9514995EC4F9AE02.roa (hash: rqWS/3ICXDmKk/YhS9D0rPCVnaMDW+z6BaHmzEy88cw=)
                          4: 1517BF2ED77711EF8E6D7517C4F9AE02.roa (hash: vaFX8SCMmHEvr5Ib9mcWdU+hQiZLjmlJABjS+fsvvGA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2741 (0xab5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB6EB
        Validity
            Not Before: Mar 28 20:26:24 2025 GMT
            Not After : Apr  4 20:26:24 2025 GMT
        Subject: CN=67e705f0-531e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:17:fd:1f:7e:f0:42:2c:aa:3f:ce:59:2b:e2:
                    cf:ce:96:b2:a5:31:ca:ad:3e:09:3c:3c:8d:f1:29:
                    86:a8:b9:e6:66:25:b2:d7:30:fc:3b:a6:33:07:e7:
                    96:cc:84:0b:0a:3c:15:8b:65:74:ff:0b:7c:2a:4c:
                    a0:83:78:8d:94:fa:f3:60:15:bf:b5:e9:3e:26:08:
                    b5:19:b1:07:e3:fe:ec:a5:45:5a:cd:2a:03:9c:7a:
                    f9:be:13:bb:41:7a:3e:31:03:a1:f4:bf:40:aa:1e:
                    d6:7f:4c:b3:68:58:05:22:ce:f5:df:68:2a:9a:c9:
                    ad:a1:4a:f5:52:60:71:fc:09:19:b1:c8:8f:a9:11:
                    5b:14:c0:83:31:0b:92:89:79:87:fc:78:d4:60:e2:
                    90:d9:66:3f:c3:b0:61:f4:74:90:02:8b:2e:bc:bb:
                    3a:b1:b4:53:c3:c4:8c:6d:35:69:16:a7:e0:9a:f9:
                    5e:7e:ae:5f:48:a0:a2:58:08:aa:59:2e:59:4b:30:
                    fa:2c:41:e7:f9:a0:14:b7:b4:bf:d6:fe:cd:c3:79:
                    cd:29:b5:8f:05:81:44:6e:92:b0:de:30:2e:e6:7a:
                    f5:01:da:7a:93:8c:e1:00:60:e4:db:4d:60:e3:9f:
                    a8:30:1e:31:fd:56:5d:6f:18:ad:fa:72:45:07:a1:
                    51:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:89:AC:61:5D:71:1D:5E:8D:B0:25:EC:9A:17:93:35:68:D7:B5:0C
            X509v3 Authority Key Identifier:
                keyid:FC:9B:D4:63:D0:2E:9F:D2:DF:C3:C3:9A:E4:CD:5A:B3:22:65:8C:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:38:b5:2d:67:d2:33:f7:8e:06:0e:12:82:d9:0a:5d:56:14:
         42:8a:ce:54:2d:36:b6:b9:bb:79:eb:91:5c:2b:3c:2b:50:19:
         52:2c:ad:f2:b8:59:90:2b:70:d1:10:30:93:17:5e:49:20:32:
         70:ba:57:d8:9d:59:57:f0:8d:56:06:fd:a1:d6:41:fb:77:97:
         72:f1:e2:d1:94:cf:00:aa:ae:19:f4:22:4c:3c:e9:00:30:fb:
         7a:e8:13:90:44:31:0c:f8:94:3e:64:26:18:b3:0d:eb:33:e7:
         5f:4e:20:f5:9d:65:b6:51:ec:1f:e8:57:21:16:ec:d4:d5:04:
         cd:5e:ff:65:d3:03:58:5e:66:09:68:9e:7b:a0:95:d2:44:76:
         dd:2a:0d:17:7a:63:b3:33:c3:f4:b1:a6:f3:23:de:35:e9:c3:
         a3:d0:bb:b0:7a:c4:c8:3b:65:35:a2:48:06:9d:26:8c:07:a9:
         55:45:30:bd:d2:37:b5:1b:9f:6a:0c:b8:e0:ed:2f:8b:fd:3f:
         97:ac:a4:98:18:4a:17:a6:47:1d:48:b0:de:c7:54:0d:f4:e9:
         da:25:08:19:57:89:a1:e9:bd:df:cd:cd:76:6d:89:d3:9f:dd:
         28:c4:8e:76:74:40:43:a4:b0:59:66:37:99:af:0f:14:a6:77:
         92:fc:e6:13
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCrUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUI2RUIxMTAvBgNVBAUTKEZDOUJENDYzRDAyRTlGRDJERkMzQzM5QUU0Q0Q1QUIz
MjI2NThDMkEwHhcNMjUwMzI4MjAyNjI0WhcNMjUwNDA0MjAyNjI0WjAYMRYwFAYD
VQQDEw02N2U3MDVmMC01MzFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqhf9H37wQiyqP85ZK+LPzpaypTHKrT4JPDyN8SmGqLnmZiWy1zD8O6YzB+eW
zIQLCjwVi2V0/wt8Kkygg3iNlPrzYBW/tek+Jgi1GbEH4/7spUVazSoDnHr5vhO7
QXo+MQOh9L9Aqh7Wf0yzaFgFIs7132gqmsmtoUr1UmBx/AkZsciPqRFbFMCDMQuS
iXmH/HjUYOKQ2WY/w7Bh9HSQAosuvLs6sbRTw8SMbTVpFqfgmvlefq5fSKCiWAiq
WS5ZSzD6LEHn+aAUt7S/1v7Nw3nNKbWPBYFEbpKw3jAu5nr1Adp6k4zhAGDk201g
45+oMB4x/VZdbxit+nJFB6FRFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDWJrGFd
cR1ejbAl7JoXkzVo17UMMB8GA1UdIwQYMBaAFPyb1GPQLp/S38PDmuTNWrMiZYwq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjZFQi8wMTM5MUIwMDhF
MkIxMUVBQkY4NkRBNENDNEY5QUUwMi9fSnZVWTlBdW45TGZ3OE9hNU0xYXN5Smxq
Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19KdlVZOUF1bjlMZnc4T2E1TTFhc3lKbGpDby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QjZFQi8wMTM5MUIwMDhFMkIxMUVBQkY4NkRBNENDNEY5QUUwMi9fSnZVWTlBdW45
TGZ3OE9hNU0xYXN5SmxqQ28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCqOLUtZ9Iz944GDhKC2QpdVhRCis5ULTa2ubt565FcKzwrUBlSLK3y
uFmQK3DREDCTF15JIDJwulfYnVlX8I1WBv2h1kH7d5dy8eLRlM8Aqq4Z9CJMPOkA
MPt66BOQRDEM+JQ+ZCYYsw3rM+dfTiD1nWW2Uewf6FchFuzU1QTNXv9l0wNYXmYJ
aJ57oJXSRHbdKg0XemOzM8P0sabzI9416cOj0LuwesTIO2U1okgGnSaMB6lVRTC9
0je1G59qDLjg7S+L/T+XrKSYGEoXpkcdSLDex1QN9OnaJQgZV4mh6b3fzc12bYnT
n90oxI52dEBDpLBZZjeZrw8UpneS/OYT
-----END CERTIFICATE-----
Generated at Mon Apr 7 07:10:14 2025 by rpki-client