Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.mft
File:                     W4LojAFBMoI9Ag1cMKa_ttW1AiE.mft (raw, json)
Hash identifier:          1nMWKvPruGKwUcXzTiDYFOBd/xFJwArriHecXe/G/Co=
Subject key identifier:   66:F1:5C:49:DC:7F:C4:CF:F3:A2:DB:2A:4B:78:D1:ED:02:1B:F1:CB
Authority key identifier: 5B:82:E8:8C:01:41:32:82:3D:02:0D:5C:30:A6:BF:B6:D5:B5:02:21
Certificate issuer:       /CN=A911069A/serialNumber=5B82E88C014132823D020D5C30A6BFB6D5B50221
Certificate serial:       FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W4LojAFBMoI9Ag1cMKa_ttW1AiE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.mft
Manifest number:          F7
Signing time:             Fri 31 Jan 2025 04:20:22 +0000
Manifest this update:     Fri 31 Jan 2025 04:20:22 +0000
Manifest next update:     Fri 07 Feb 2025 04:20:22 +0000
Files and hashes:         1: W4LojAFBMoI9Ag1cMKa_ttW1AiE.crl (hash: UWKIPP+AY+vSjHwXGMb1VjRJMTziwdFNWSo49R3xtKQ=)
                          2: 12225D3A66F611EE82864875C4F9AE02.roa (hash: kCGrl3mXtq7SDelNlIUQzKXuGt3Lw19xPqDULlWm58o=)
                          3: 12C3947A66F611EE82864875C4F9AE02.roa (hash: 9fewhte7FG+d2VuRFA5Cc4zNjoexhBMgBSrFkyFPOWU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 251 (0xfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911069A/serialNumber=5B82E88C014132823D020D5C30A6BFB6D5B50221
        Validity
            Not Before: Jan 31 04:20:22 2025 GMT
            Not After : Feb  7 04:20:22 2025 GMT
        Subject: CN=679c4f86-6bce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:fd:eb:ff:43:2b:ef:da:3a:55:f1:87:cb:99:
                    28:84:9c:59:ca:8c:4d:c6:57:a1:f8:f8:4b:22:b1:
                    8a:26:03:68:89:ba:67:e0:63:17:6e:e6:b0:32:04:
                    a1:38:86:a6:30:eb:f4:04:c5:ef:a7:6d:09:aa:aa:
                    60:2d:eb:c0:f0:6e:36:33:32:09:9a:bc:24:c2:f8:
                    8f:41:86:a9:5a:44:4a:73:de:63:d2:0b:db:c9:5e:
                    b1:3f:c5:e0:e2:59:c8:d5:b5:33:2e:e2:7a:07:53:
                    ee:00:22:0b:16:10:85:10:96:94:b5:e9:2f:d2:71:
                    5f:ae:5c:04:28:45:8a:58:c4:5b:20:3d:6d:1a:0c:
                    6e:e9:0d:79:6a:54:6d:9d:93:e4:e7:78:2b:98:a6:
                    2e:a8:8c:a6:b3:34:6a:61:a3:aa:2c:d4:8c:f7:f9:
                    60:b3:71:24:44:ad:b2:7c:1a:12:7b:78:02:5a:f6:
                    19:b0:d0:18:cb:7f:fb:24:b1:9e:b3:85:f6:b2:81:
                    4d:2f:6f:6e:6c:7b:25:30:c7:f4:05:7a:54:14:2a:
                    4b:27:94:e9:e8:ee:c4:95:3e:51:80:d2:5f:18:15:
                    6b:ab:72:bf:d0:4d:04:b8:6c:f8:31:5d:a4:34:da:
                    a1:99:e2:20:6c:af:fd:4a:85:16:f2:0e:41:eb:9b:
                    3a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:F1:5C:49:DC:7F:C4:CF:F3:A2:DB:2A:4B:78:D1:ED:02:1B:F1:CB
            X509v3 Authority Key Identifier:
                keyid:5B:82:E8:8C:01:41:32:82:3D:02:0D:5C:30:A6:BF:B6:D5:B5:02:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W4LojAFBMoI9Ag1cMKa_ttW1AiE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:fc:00:86:e2:ef:c3:60:ae:fd:44:13:65:cf:7e:ad:02:a7:
         91:8a:85:d2:03:27:9c:79:99:d4:a2:a1:1a:e9:45:c8:3f:5f:
         d5:c9:26:25:9e:ba:b0:da:00:ec:66:f5:b1:bb:91:eb:8d:46:
         3f:2e:b4:5e:a0:9d:4a:d1:f8:25:ec:1c:b4:cf:68:74:a8:52:
         e0:35:7c:ca:59:80:78:9d:6a:2d:d8:48:42:c8:be:6c:6c:93:
         2c:5b:14:6a:6f:49:83:06:cf:40:43:0a:ba:7a:fc:f7:6b:bb:
         cc:7c:dc:1e:a2:71:dd:78:50:69:1c:bf:67:ae:9d:6d:92:6a:
         fb:9c:e7:6d:f3:32:8b:31:07:6f:de:7c:5e:ea:83:ec:d8:d6:
         89:a2:ea:b8:04:12:de:53:e8:bb:dd:6c:59:88:5b:13:62:d6:
         25:e2:9e:f9:92:bf:dd:82:bf:c5:a0:82:db:63:bb:90:b2:7c:
         4e:34:a2:09:3a:1a:71:b4:9c:d3:31:69:2c:86:ea:7c:9a:55:
         33:0d:ab:2c:2c:01:6a:e5:16:4d:9a:e1:42:36:95:f2:b3:9c:
         50:e8:4b:51:5b:66:f8:81:ca:1e:0b:48:89:40:7b:34:1c:e3:
         3f:97:36:4f:28:5a:8b:37:df:8d:b7:7f:71:b2:02:15:6e:83:
         83:ad:ee:d0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTA2OUExMTAvBgNVBAUTKDVCODJFODhDMDE0MTMyODIzRDAyMEQ1QzMwQTZCRkI2
RDVCNTAyMjEwHhcNMjUwMTMxMDQyMDIyWhcNMjUwMjA3MDQyMDIyWjAYMRYwFAYD
VQQDEw02NzljNGY4Ni02YmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8f3r/0Mr79o6VfGHy5kohJxZyoxNxleh+PhLIrGKJgNoibpn4GMXbuawMgSh
OIamMOv0BMXvp20JqqpgLevA8G42MzIJmrwkwviPQYapWkRKc95j0gvbyV6xP8Xg
4lnI1bUzLuJ6B1PuACILFhCFEJaUtekv0nFfrlwEKEWKWMRbID1tGgxu6Q15alRt
nZPk53grmKYuqIymszRqYaOqLNSM9/lgs3EkRK2yfBoSe3gCWvYZsNAYy3/7JLGe
s4X2soFNL29ubHslMMf0BXpUFCpLJ5Tp6O7ElT5RgNJfGBVrq3K/0E0EuGz4MV2k
NNqhmeIgbK/9SoUW8g5B65s6WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGbxXEnc
f8TP86LbKkt40e0CG/HLMB8GA1UdIwQYMBaAFFuC6IwBQTKCPQINXDCmv7bVtQIh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDY5QS85NjFCMkE0NjY2
RjUxMUVFQTQzODRGNzRDNEY5QUUwMi9XNExvakFGQk1vSTlBZzFjTUthX3R0VzFB
aUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1c0TG9qQUZCTW9JOUFnMWNNS2FfdHRXMUFpRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MDY5QS85NjFCMkE0NjY2RjUxMUVFQTQzODRGNzRDNEY5QUUwMi9XNExvakFGQk1v
STlBZzFjTUthX3R0VzFBaUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC3/ACG4u/DYK79RBNlz36tAqeRioXSAyeceZnUoqEa6UXIP1/VySYl
nrqw2gDsZvWxu5HrjUY/LrReoJ1K0fgl7By0z2h0qFLgNXzKWYB4nWot2EhCyL5s
bJMsWxRqb0mDBs9AQwq6evz3a7vMfNweonHdeFBpHL9nrp1tkmr7nOdt8zKLMQdv
3nxe6oPs2NaJouq4BBLeU+i73WxZiFsTYtYl4p75kr/dgr/FoILbY7uQsnxONKIJ
OhpxtJzTMWkshup8mlUzDassLAFq5RZNmuFCNpXys5xQ6EtRW2b4gcoeC0iJQHs0
HOM/lzZPKFqLN9+Nt39xsgIVboODre7Q
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:39:20 2025 by rpki-client