Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0416/54750BDA637C11EC9C822317C4F9AE02/43R0Hh7G7NjwB3XisOiSmLY45mo.mft
File:                     43R0Hh7G7NjwB3XisOiSmLY45mo.mft (raw, json)
Hash identifier:          HZpGDM27ySXfUZj5BgwDvtXKoX5/2xHBA2gqSiXeW9k=
Subject key identifier:   95:C2:64:56:3D:78:E9:D4:C0:0B:A9:5B:5B:93:4A:A1:0D:5D:9B:89
Authority key identifier: E3:74:74:1E:1E:C6:EC:D8:F0:07:75:E2:B0:E8:92:98:B6:38:E6:6A
Certificate issuer:       /CN=A91B0416/serialNumber=E374741E1EC6ECD8F00775E2B0E89298B638E66A
Certificate serial:       0431
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/43R0Hh7G7NjwB3XisOiSmLY45mo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0416/54750BDA637C11EC9C822317C4F9AE02/43R0Hh7G7NjwB3XisOiSmLY45mo.mft
Manifest number:          042C
Signing time:             Tue 27 May 2025 01:26:35 +0000
Manifest this update:     Tue 27 May 2025 01:26:34 +0000
Manifest next update:     Tue 03 Jun 2025 01:26:34 +0000
Files and hashes:         1: 43R0Hh7G7NjwB3XisOiSmLY45mo.crl (hash: UWe4btwYyo2oh4uoCN5BaoaVDCKLmlcNB5+ulkznI6s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1073 (0x431)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0416, serialNumber=E374741E1EC6ECD8F00775E2B0E89298B638E66A
        Validity
            Not Before: May 27 01:26:34 2025 GMT
            Not After : Jun  3 01:26:34 2025 GMT
        Subject: CN=683514cb-6069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9c:01:5f:5b:fe:b0:10:b8:e9:3d:ef:6a:0c:
                    ce:a0:68:43:43:4c:92:5f:39:02:c9:4b:d2:74:ea:
                    bd:71:16:08:fe:f7:88:10:6e:b5:0b:9f:b4:b8:c6:
                    09:a2:05:1b:f3:b2:94:ef:23:ab:03:8e:1e:f0:06:
                    58:ab:39:83:c5:cd:94:d2:39:c8:61:f5:8a:e9:93:
                    47:ba:18:2a:95:d3:82:9c:b3:79:3b:4a:b4:5e:8e:
                    6e:95:41:fd:6f:e4:8d:e4:38:ad:d9:e3:06:0e:08:
                    bb:ca:59:a6:7e:79:d3:3a:58:e3:de:aa:45:22:95:
                    b9:9a:fc:fd:ed:42:6f:c0:73:58:15:1f:1d:22:d7:
                    fb:4e:1e:b4:c5:38:f7:b7:99:c8:2c:98:2e:1b:70:
                    b4:94:fa:5a:e5:50:c9:fd:ee:2c:2e:0b:d3:7d:f2:
                    ff:2a:a8:8d:12:a7:46:b2:9a:26:5c:ea:0d:ff:34:
                    e2:3d:a7:37:43:f0:3f:a4:a7:75:0a:f5:c5:08:d8:
                    60:4d:86:20:08:8a:0f:c2:7f:50:9d:9e:ae:22:6c:
                    85:76:52:02:21:19:43:5c:3e:0a:48:7a:4f:b7:2f:
                    ca:98:6a:c4:b2:06:75:52:4e:24:3b:89:f0:45:2b:
                    86:76:82:37:12:86:db:1e:09:b9:ed:95:cf:4f:45:
                    9b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:C2:64:56:3D:78:E9:D4:C0:0B:A9:5B:5B:93:4A:A1:0D:5D:9B:89
            X509v3 Authority Key Identifier:
                keyid:E3:74:74:1E:1E:C6:EC:D8:F0:07:75:E2:B0:E8:92:98:B6:38:E6:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0416/54750BDA637C11EC9C822317C4F9AE02/43R0Hh7G7NjwB3XisOiSmLY45mo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/43R0Hh7G7NjwB3XisOiSmLY45mo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0416/54750BDA637C11EC9C822317C4F9AE02/43R0Hh7G7NjwB3XisOiSmLY45mo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:8d:6c:ea:b8:c3:8b:f1:aa:0d:cd:01:dc:28:f1:98:ed:e0:
         bb:31:82:62:af:11:5d:be:ff:9d:b0:07:d4:17:99:e7:29:54:
         11:32:5f:8c:97:78:d0:1a:77:49:1e:80:56:2e:e0:24:0d:e4:
         fe:1b:d4:bb:df:3a:3b:ab:f0:78:6f:93:b8:2c:5b:78:48:d3:
         a8:b9:09:de:ca:1d:a4:a0:51:5d:28:82:de:37:90:4d:94:08:
         56:a1:ff:6f:37:79:4a:73:41:e6:04:38:af:1e:1c:ef:cf:17:
         dc:f2:a3:b7:fa:b9:a2:83:4c:57:b3:44:33:bc:d4:1d:75:a0:
         5b:1f:ce:24:53:80:46:6d:a3:cd:d5:40:6a:db:c2:fb:9d:fb:
         fe:0e:c6:5d:58:42:b7:68:b5:b3:9a:c7:1d:f6:5a:01:1e:94:
         1c:19:fb:d8:3c:39:ec:1c:fd:a6:db:9f:6d:5d:18:11:0e:74:
         65:96:bf:42:d9:dd:53:0a:21:14:20:b8:2d:fb:05:40:a0:1e:
         be:e9:fc:94:f5:ce:34:9d:20:73:ea:bc:c2:d4:c1:cd:15:55:
         f6:80:c0:e6:71:59:fd:6f:ce:f4:d1:65:61:15:ec:95:b2:a0:
         35:40:a0:09:8d:0a:a5:0e:95:e1:72:b8:d5:24:e7:67:c1:f9:
         96:09:0d:68
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBDEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjA0MTYxMTAvBgNVBAUTKEUzNzQ3NDFFMUVDNkVDRDhGMDA3NzVFMkIwRTg5Mjk4
QjYzOEU2NkEwHhcNMjUwNTI3MDEyNjM0WhcNMjUwNjAzMDEyNjM0WjAYMRYwFAYD
VQQDEw02ODM1MTRjYi02MDY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn5wBX1v+sBC46T3vagzOoGhDQ0ySXzkCyUvSdOq9cRYI/veIEG61C5+0uMYJ
ogUb87KU7yOrA44e8AZYqzmDxc2U0jnIYfWK6ZNHuhgqldOCnLN5O0q0Xo5ulUH9
b+SN5Dit2eMGDgi7ylmmfnnTOljj3qpFIpW5mvz97UJvwHNYFR8dItf7Th60xTj3
t5nILJguG3C0lPpa5VDJ/e4sLgvTffL/KqiNEqdGspomXOoN/zTiPac3Q/A/pKd1
CvXFCNhgTYYgCIoPwn9QnZ6uImyFdlICIRlDXD4KSHpPty/KmGrEsgZ1Uk4kO4nw
RSuGdoI3EobbHgm57ZXPT0WbVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJXCZFY9
eOnUwAupW1uTSqENXZuJMB8GA1UdIwQYMBaAFON0dB4exuzY8Ad14rDokpi2OOZq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDQxNi81NDc1MEJEQTYz
N0MxMUVDOUM4MjIzMTdDNEY5QUUwMi80M1IwSGg3RzdOandCM1hpc09pU21MWTQ1
bW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzQzUjBIaDdHN05qd0IzWGlzT2lTbUxZNDVtby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MDQxNi81NDc1MEJEQTYzN0MxMUVDOUM4MjIzMTdDNEY5QUUwMi80M1IwSGg3RzdO
andCM1hpc09pU21MWTQ1bW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB3jWzquMOL8aoNzQHcKPGY7eC7MYJirxFdvv+dsAfUF5nnKVQRMl+M
l3jQGndJHoBWLuAkDeT+G9S73zo7q/B4b5O4LFt4SNOouQneyh2koFFdKILeN5BN
lAhWof9vN3lKc0HmBDivHhzvzxfc8qO3+rmig0xXs0QzvNQddaBbH84kU4BGbaPN
1UBq28L7nfv+DsZdWEK3aLWzmscd9loBHpQcGfvYPDnsHP2m259tXRgRDnRllr9C
2d1TCiEUILgt+wVAoB6+6fyU9c40nSBz6rzC1MHNFVX2gMDmcVn9b8700WVhFeyV
sqA1QKAJjQqlDpXhcrjVJOdnwfmWCQ1o
-----END CERTIFICATE-----