Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0D1A/706B35982C2811ECB4902416C4F9AE02/zsJ8djIfZke8cP1A2bcKYu21h6M.mft
File:                     zsJ8djIfZke8cP1A2bcKYu21h6M.mft (raw, json)
Hash identifier:          ctgaIooRZvw/UNV2sYLJ1aUwu2qIagkN9Vx1hLswXlw=
Subject key identifier:   77:47:8C:02:30:86:05:2A:05:93:22:28:65:6D:7D:BA:B3:99:ED:1D
Authority key identifier: CE:C2:7C:76:32:1F:66:47:BC:70:FD:40:D9:B7:0A:62:ED:B5:87:A3
Certificate issuer:       /CN=A91D0D1A/serialNumber=CEC27C76321F6647BC70FD40D9B70A62EDB587A3
Certificate serial:       046C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zsJ8djIfZke8cP1A2bcKYu21h6M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0D1A/706B35982C2811ECB4902416C4F9AE02/zsJ8djIfZke8cP1A2bcKYu21h6M.mft
Manifest number:          0466
Signing time:             Thu 19 Dec 2024 00:03:22 +0000
Manifest this update:     Thu 19 Dec 2024 00:03:21 +0000
Manifest next update:     Thu 26 Dec 2024 00:03:21 +0000
Files and hashes:         1: zsJ8djIfZke8cP1A2bcKYu21h6M.crl (hash: nprjafybunyzWQHkhpDxj/otvgZbXz55fPrsgWeTaa0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1132 (0x46c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0D1A
        Validity
            Not Before: Dec 19 00:03:21 2024 GMT
            Not After : Dec 26 00:03:21 2024 GMT
        Subject: CN=676362c9-3c64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2b:1a:95:50:34:be:fe:a9:65:c0:b6:78:4a:
                    12:db:ac:97:17:53:1e:09:67:ce:e7:96:47:b2:1b:
                    b0:a6:c4:2a:7a:ef:c0:67:fb:63:8f:45:eb:19:5c:
                    01:8e:93:a6:f2:ad:a2:83:f6:a4:45:f0:e8:25:79:
                    cf:d4:47:8e:56:fe:54:b4:f1:fb:d5:aa:ae:ab:1a:
                    78:bb:ae:2b:89:bd:54:09:c3:ea:a8:2b:b6:c6:1b:
                    8b:9f:de:0b:bb:4f:fc:f1:aa:59:3c:8d:ab:f7:30:
                    0f:f6:f5:ea:ff:be:43:d1:31:aa:09:1e:c8:7f:98:
                    2b:82:f3:68:c9:4f:1e:82:8b:08:5b:d2:b6:86:1c:
                    67:c8:e3:6a:6b:07:f3:ba:5c:88:3e:ae:f3:e9:60:
                    46:5d:0d:cc:fb:cb:15:2d:e2:0b:8d:62:1d:5d:3a:
                    a0:49:fb:7f:fe:06:a2:1d:b3:c3:a3:66:2d:27:1a:
                    37:a1:ec:63:68:ec:bc:31:ad:c8:04:10:1b:26:f3:
                    6a:d3:3f:f6:a9:89:dd:83:1c:5d:44:20:fd:e6:fc:
                    03:fb:47:6c:9e:78:ff:1b:49:2f:79:b1:96:82:16:
                    9e:93:76:1e:a9:79:fa:db:c8:5b:32:3f:d4:d9:e0:
                    35:a4:93:d7:17:f0:0f:1f:96:6a:8e:36:1b:cc:78:
                    b0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:47:8C:02:30:86:05:2A:05:93:22:28:65:6D:7D:BA:B3:99:ED:1D
            X509v3 Authority Key Identifier:
                keyid:CE:C2:7C:76:32:1F:66:47:BC:70:FD:40:D9:B7:0A:62:ED:B5:87:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0D1A/706B35982C2811ECB4902416C4F9AE02/zsJ8djIfZke8cP1A2bcKYu21h6M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zsJ8djIfZke8cP1A2bcKYu21h6M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0D1A/706B35982C2811ECB4902416C4F9AE02/zsJ8djIfZke8cP1A2bcKYu21h6M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e5:3d:0a:35:bb:98:98:e9:10:2f:e3:88:79:38:fd:9f:e6:4d:
         2f:17:26:be:17:4a:1e:dc:ec:19:b9:b7:66:2b:1d:d6:e9:c4:
         c7:7a:65:05:d0:55:c9:06:3b:82:f0:f1:e2:fb:6f:07:36:88:
         db:04:b6:63:e3:03:1b:97:06:c4:0b:53:8d:f2:f2:ad:ea:33:
         99:d0:91:49:2f:9b:f8:16:7e:5b:75:d8:99:2e:72:7c:b2:0b:
         11:55:e4:7b:b9:6f:25:9f:17:bf:c8:b5:96:b0:03:6b:47:8b:
         67:a6:88:a6:88:c9:fa:80:f2:d8:50:b9:ca:c4:ed:fd:33:1f:
         81:26:74:e7:bf:03:1a:87:ea:f4:f2:51:47:37:92:38:89:a9:
         75:ba:84:37:29:fa:d0:75:e2:db:5d:dc:bc:f1:a3:c1:b7:58:
         da:07:ba:0b:32:8f:60:d5:32:8d:36:b6:1b:b4:3a:59:8d:fc:
         e7:b8:14:6e:67:9f:95:b0:5f:e2:7a:00:85:e7:b3:af:7e:30:
         d4:b1:5f:21:8d:10:80:56:bd:57:23:3c:87:d9:66:58:04:37:
         6e:74:77:07:4d:57:ce:0f:a3:c5:9a:34:fa:97:e4:0c:90:f9:
         95:a8:d3:6d:66:bd:99:d6:db:b7:a4:d3:3a:bc:16:01:d1:5c:
         74:3d:21:c8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBGwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDBEMUExMTAvBgNVBAUTKENFQzI3Qzc2MzIxRjY2NDdCQzcwRkQ0MEQ5QjcwQTYy
RURCNTg3QTMwHhcNMjQxMjE5MDAwMzIxWhcNMjQxMjI2MDAwMzIxWjAYMRYwFAYD
VQQDEw02NzYzNjJjOS0zYzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnCsalVA0vv6pZcC2eEoS26yXF1MeCWfO55ZHshuwpsQqeu/AZ/tjj0XrGVwB
jpOm8q2ig/akRfDoJXnP1EeOVv5UtPH71aquqxp4u64rib1UCcPqqCu2xhuLn94L
u0/88apZPI2r9zAP9vXq/75D0TGqCR7If5grgvNoyU8egosIW9K2hhxnyONqawfz
ulyIPq7z6WBGXQ3M+8sVLeILjWIdXTqgSft//gaiHbPDo2YtJxo3oexjaOy8Ma3I
BBAbJvNq0z/2qYndgxxdRCD95vwD+0dsnnj/G0kvebGWghaek3YeqXn628hbMj/U
2eA1pJPXF/APH5ZqjjYbzHiwKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHdHjAIw
hgUqBZMiKGVtfbqzme0dMB8GA1UdIwQYMBaAFM7CfHYyH2ZHvHD9QNm3CmLttYej
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEQxQS83MDZCMzU5ODJD
MjgxMUVDQjQ5MDI0MTZDNEY5QUUwMi96c0o4ZGpJZlprZThjUDFBMmJjS1l1MjFo
Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pzSjhkaklmWmtlOGNQMUEyYmNLWXUyMWg2TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MEQxQS83MDZCMzU5ODJDMjgxMUVDQjQ5MDI0MTZDNEY5QUUwMi96c0o4ZGpJZlpr
ZThjUDFBMmJjS1l1MjFoNk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDlPQo1u5iY6RAv44h5OP2f5k0vFya+F0oe3OwZubdmKx3W6cTHemUF
0FXJBjuC8PHi+28HNojbBLZj4wMblwbEC1ON8vKt6jOZ0JFJL5v4Fn5bddiZLnJ8
sgsRVeR7uW8lnxe/yLWWsANrR4tnpoimiMn6gPLYULnKxO39Mx+BJnTnvwMah+r0
8lFHN5I4ial1uoQ3KfrQdeLbXdy88aPBt1jaB7oLMo9g1TKNNrYbtDpZjfznuBRu
Z5+VsF/iegCF57OvfjDUsV8hjRCAVr1XIzyH2WZYBDdudHcHTVfOD6PFmjT6l+QM
kPmVqNNtZr2Z1tu3pNM6vBYB0Vx0PSHI
-----END CERTIFICATE-----
Generated at Sun Apr 6 23:41:26 2025 by rpki-client