Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91542DD/93979746E64D11E98A18857BC4F9AE02/HID51XftxGA1IDFKF6RctqfFwWA.mft
File:                     HID51XftxGA1IDFKF6RctqfFwWA.mft (raw, json)
Hash identifier:          d2joeMrWs8sdOz7ahqx08h07p6XFQBngFydnQVGbpWE=
Subject key identifier:   19:F5:FD:2C:A1:71:77:8A:02:76:8D:D3:CE:59:B0:49:55:40:F9:00
Authority key identifier: 1C:80:F9:D5:77:ED:C4:60:35:20:31:4A:17:A4:5C:B6:A7:C5:C1:60
Certificate issuer:       /CN=A91542DD/serialNumber=1C80F9D577EDC4603520314A17A45CB6A7C5C160
Certificate serial:       0CA6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HID51XftxGA1IDFKF6RctqfFwWA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91542DD/93979746E64D11E98A18857BC4F9AE02/HID51XftxGA1IDFKF6RctqfFwWA.mft
Manifest number:          0C9E
Signing time:             Tue 21 Jan 2025 21:45:54 +0000
Manifest this update:     Tue 21 Jan 2025 21:45:53 +0000
Manifest next update:     Tue 28 Jan 2025 21:45:53 +0000
Files and hashes:         1: HID51XftxGA1IDFKF6RctqfFwWA.crl (hash: egIY+VmaNdkhL+RWlwR91BsuY0DV614gFXKktzVJ69g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3238 (0xca6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91542DD, serialNumber=1C80F9D577EDC4603520314A17A45CB6A7C5C160
        Validity
            Not Before: Jan 21 21:45:53 2025 GMT
            Not After : Jan 28 21:45:53 2025 GMT
        Subject: CN=67901592-fa3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ad:70:e6:70:44:63:1c:ad:d6:92:46:40:54:
                    46:dc:a8:62:f5:82:75:a4:26:7a:5a:82:cc:f8:95:
                    8a:e1:46:f4:95:62:73:bc:4f:43:75:d3:06:85:c9:
                    f0:66:85:cd:7a:c1:d5:e2:18:11:6f:de:17:af:6e:
                    89:7c:9e:a5:d6:c2:f1:2c:7d:a3:53:e9:68:80:1e:
                    e0:7f:04:fa:78:46:c5:e4:99:6a:8c:c5:72:83:1c:
                    a2:21:6e:ff:ae:db:7a:05:11:d0:14:93:e6:6c:e0:
                    61:3e:3b:87:05:42:d7:23:dd:ec:b8:7b:d6:98:70:
                    bb:fc:ca:d4:cf:6d:c6:2e:15:80:46:cd:8d:45:18:
                    d9:6f:ac:56:54:31:d0:5f:27:97:38:b6:0c:04:83:
                    14:65:64:58:da:69:d2:5a:c8:78:44:a8:be:01:24:
                    92:6a:72:62:cd:96:2e:1b:56:d8:3b:f2:74:01:c0:
                    04:07:09:e2:8d:35:1f:d4:ac:d2:04:6c:f7:63:3f:
                    e7:fa:bb:1e:45:5f:aa:a4:66:20:38:ff:e3:31:36:
                    e6:5d:25:72:d0:1b:b2:b2:ec:4a:da:e3:5c:68:fd:
                    be:04:a4:65:04:d0:36:da:05:ef:1b:81:f2:4d:76:
                    f3:7e:9a:c5:76:b0:03:17:0d:a0:84:11:16:3c:69:
                    51:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F5:FD:2C:A1:71:77:8A:02:76:8D:D3:CE:59:B0:49:55:40:F9:00
            X509v3 Authority Key Identifier:
                keyid:1C:80:F9:D5:77:ED:C4:60:35:20:31:4A:17:A4:5C:B6:A7:C5:C1:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91542DD/93979746E64D11E98A18857BC4F9AE02/HID51XftxGA1IDFKF6RctqfFwWA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HID51XftxGA1IDFKF6RctqfFwWA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91542DD/93979746E64D11E98A18857BC4F9AE02/HID51XftxGA1IDFKF6RctqfFwWA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:7e:24:dc:fa:68:79:3e:1d:d5:33:05:8d:20:2b:d9:28:f3:
         d9:d6:2f:07:35:f6:b5:2b:6c:ad:ac:87:f0:d7:7b:3d:b2:46:
         39:e6:0e:ba:89:84:eb:f7:01:4e:89:d4:5f:0b:dd:4d:6c:97:
         44:9f:de:63:8e:cd:e9:77:65:81:1d:8a:07:23:2b:e2:14:cc:
         cc:60:d6:4f:ec:5e:6e:0f:4a:86:b7:82:43:25:c0:67:82:ee:
         37:48:c0:8a:85:c4:b3:a4:64:59:e9:1f:65:b1:e4:98:21:b4:
         bc:6f:24:9e:d1:91:6c:36:1c:25:89:52:e7:e3:e3:62:4f:5d:
         24:7d:3d:e3:32:61:3a:f1:16:0e:4f:c0:f3:13:9d:8b:b2:c9:
         df:0a:09:ea:6b:86:43:b0:df:f7:13:d8:e7:0a:d2:ff:cc:f0:
         00:b1:8e:77:6b:04:34:c7:06:bf:83:20:58:02:68:1b:6d:65:
         fd:94:b3:92:82:35:ec:fa:96:e0:9d:6e:ea:8b:9f:ce:63:65:
         1e:ae:99:be:13:3d:39:77:da:81:e8:a0:59:e5:8b:86:bc:e2:
         49:ba:ea:d7:96:22:2f:0a:ca:fe:46:3a:b8:08:4a:57:35:5b:
         15:54:9d:81:1a:70:06:b5:82:80:3e:91:7e:41:39:84:d1:e6:
         ce:4a:16:1a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTQyREQxMTAvBgNVBAUTKDFDODBGOUQ1NzdFREM0NjAzNTIwMzE0QTE3QTQ1Q0I2
QTdDNUMxNjAwHhcNMjUwMTIxMjE0NTUzWhcNMjUwMTI4MjE0NTUzWjAYMRYwFAYD
VQQDEw02NzkwMTU5Mi1mYTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz61w5nBEYxyt1pJGQFRG3Khi9YJ1pCZ6WoLM+JWK4Ub0lWJzvE9DddMGhcnw
ZoXNesHV4hgRb94Xr26JfJ6l1sLxLH2jU+logB7gfwT6eEbF5JlqjMVygxyiIW7/
rtt6BRHQFJPmbOBhPjuHBULXI93suHvWmHC7/MrUz23GLhWARs2NRRjZb6xWVDHQ
XyeXOLYMBIMUZWRY2mnSWsh4RKi+ASSSanJizZYuG1bYO/J0AcAEBwnijTUf1KzS
BGz3Yz/n+rseRV+qpGYgOP/jMTbmXSVy0BuysuxK2uNcaP2+BKRlBNA22gXvG4Hy
TXbzfprFdrADFw2ghBEWPGlR4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBn1/Syh
cXeKAnaN085ZsElVQPkAMB8GA1UdIwQYMBaAFByA+dV37cRgNSAxShekXLanxcFg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDJERC85Mzk3OTc0NkU2
NEQxMUU5OEExODg1N0JDNEY5QUUwMi9ISUQ1MVhmdHhHQTFJREZLRjZSY3RxZkZ3
V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hJRDUxWGZ0eEdBMUlERktGNlJjdHFmRndXQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NDJERC85Mzk3OTc0NkU2NEQxMUU5OEExODg1N0JDNEY5QUUwMi9ISUQ1MVhmdHhH
QTFJREZLRjZSY3RxZkZ3V0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBgfiTc+mh5Ph3VMwWNICvZKPPZ1i8HNfa1K2ytrIfw13s9skY55g66
iYTr9wFOidRfC91NbJdEn95jjs3pd2WBHYoHIyviFMzMYNZP7F5uD0qGt4JDJcBn
gu43SMCKhcSzpGRZ6R9lseSYIbS8bySe0ZFsNhwliVLn4+NiT10kfT3jMmE68RYO
T8DzE52LssnfCgnqa4ZDsN/3E9jnCtL/zPAAsY53awQ0xwa/gyBYAmgbbWX9lLOS
gjXs+pbgnW7qi5/OY2Uerpm+Ez05d9qB6KBZ5YuGvOJJuurXliIvCsr+Rjq4CEpX
NVsVVJ2BGnAGtYKAPpF+QTmE0ebOShYa
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:15:44 2025 by rpki-client