Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft
File:                     Iu3562YIf9DpgXrnNsADnRiAiNU.mft (raw, json)
Hash identifier:          fsq48fbTJEJeXABnc3svd+HM7fYM8mPLbPPbmmtrVs8=
Subject key identifier:   FC:58:25:99:6B:6F:DE:74:AB:C0:55:01:9B:B7:50:C3:11:07:6F:A4
Authority key identifier: 22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5
Certificate issuer:       /CN=A9112DB1/serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5
Certificate serial:       0403
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft
Manifest number:          03DA
Signing time:             Fri 31 Jan 2025 00:49:33 +0000
Manifest this update:     Fri 31 Jan 2025 00:49:33 +0000
Manifest next update:     Fri 07 Feb 2025 00:49:33 +0000
Files and hashes:         1: Iu3562YIf9DpgXrnNsADnRiAiNU.crl (hash: P9igPzCDUTj2xiRreLnHiQwYo2WFg8Glx4/EakhRcN0=)
                          2: 8276BFA60BB811EFB091FD1CC4F9AE02.roa (hash: Z+d2uMxSGOWngmP2yoKBXhQJG1Ag5+yYUkcWKu8ENZs=)
                          3: 642A8EA2887911ECAFCDDE1FC4F9AE02.roa (hash: biN9tdHvCrBXyCcQr8koJ0sIQQhBNypDbtvOi2obKUY=)
                          4: 15E884EAF73311ED8E92F45DC4F9AE02.roa (hash: 4QNmYEjYSfs+rPixjKW3E7Qc4YMtxxHvXpHxkfjKdio=)
                          5: 20519AFE346111EFB91EA738C4F9AE02.roa (hash: aygeQkP1fHUp6GkG7Gr3GPYW0xo6LhPZYhejgYQHNPs=)
                          6: E5AC554A897211EEA179DA5DC4F9AE02.roa (hash: mwOsBea1rWND0sI63PEdPpPZAV46iFo2K535J85/wXc=)
                          7: 818F58F0EAF411EC9A14E22EC4F9AE02.roa (hash: mdVcVRRcQn5NQxP7IG4PI1LnoMUzNXgCmaEeGPjXZ1M=)
                          8: EB0EA48C8AD411ECB9E15216C4F9AE02.roa (hash: MRVu+zCM+pxSOQQI/PbLEOb/v/ucoSnxhhMwjFh2cvg=)
                          9: BEF172F4BD1311EDAB02753EC4F9AE02.roa (hash: iNceeXcWd+IpQqeSg0WLOtTc+/9CtvbI3t/g9CgtLpM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1027 (0x403)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112DB1/serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5
        Validity
            Not Before: Jan 31 00:49:33 2025 GMT
            Not After : Feb  7 00:49:33 2025 GMT
        Subject: CN=679c1e1d-f708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:45:1f:22:f8:01:f8:08:42:04:90:0e:fe:d7:
                    11:8f:71:63:7d:10:8f:dd:45:8e:1c:a2:1e:1f:7d:
                    85:a8:63:7e:3a:ef:cc:9b:0d:e3:fa:62:fa:4c:c5:
                    36:7d:ec:3e:3f:b6:eb:12:1a:a4:1a:99:2b:4d:04:
                    66:7d:1d:90:e9:66:20:b0:c0:74:f7:d7:6f:49:02:
                    18:fb:d4:a8:c5:2e:82:9a:cf:82:86:e2:1a:a8:82:
                    ec:1d:4b:e3:ed:15:70:94:2a:18:6e:e2:7a:9f:45:
                    1b:65:6e:8b:37:9b:35:8c:e3:a4:d8:be:ff:a5:35:
                    39:74:e8:8d:a0:9a:cc:f6:8b:ed:a1:25:9a:3c:38:
                    ef:ce:35:5a:36:5a:de:fb:4b:6b:4a:d5:a6:9d:0f:
                    61:18:f8:87:88:1f:aa:07:f8:48:d1:59:ee:9a:b6:
                    78:98:fe:65:63:63:bc:02:4d:14:0d:dc:e3:f7:c0:
                    75:b1:0e:fb:c9:f0:74:e5:e6:a1:3d:14:91:9f:62:
                    16:6a:b7:93:46:25:a5:a2:1e:f7:1b:51:24:c2:03:
                    cd:b4:8d:77:29:8e:dd:01:21:23:d8:38:62:ad:86:
                    06:51:3d:4b:13:83:7d:91:24:b9:6c:d3:90:3e:0f:
                    0b:19:41:19:5f:31:0e:87:d1:44:ab:da:eb:99:0a:
                    70:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:58:25:99:6B:6F:DE:74:AB:C0:55:01:9B:B7:50:C3:11:07:6F:A4
            X509v3 Authority Key Identifier:
                keyid:22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:e6:92:78:4c:b4:80:6d:63:b1:90:10:5e:3a:f2:30:51:c9:
         fa:f4:1e:e8:a8:36:d3:e6:ec:26:5d:87:15:83:2d:5a:09:b0:
         cf:63:4d:13:69:c9:07:c8:d1:71:c7:72:fc:a8:00:ef:5d:42:
         73:1c:46:66:ee:c6:49:2d:d2:1a:38:b3:4e:55:55:b3:55:fd:
         94:9b:22:bf:61:cb:47:d2:b3:4e:37:86:d7:df:eb:e1:07:4f:
         37:83:ad:d5:7e:c0:3d:e4:e7:dd:04:ef:77:13:38:61:29:9f:
         e6:95:82:f6:82:64:a4:29:d6:f2:11:e7:68:9f:5a:f3:54:0d:
         ac:87:65:6b:2c:88:a6:0a:04:87:a4:46:44:b7:e6:4d:de:be:
         28:34:af:20:73:5d:56:03:5c:5a:f4:33:aa:2b:08:02:18:f4:
         3b:c7:37:51:87:b6:ec:88:94:40:3e:e7:5c:09:31:5f:74:1a:
         82:91:f8:98:44:a4:53:92:fd:59:87:3a:e8:fd:7b:59:a5:01:
         c6:e5:6e:e6:91:06:d7:71:3b:4e:4c:fc:bf:e6:b9:d7:4a:60:
         d8:6e:df:61:09:07:c8:9d:a3:0e:c6:2b:60:24:c0:51:e0:a2:
         bf:f8:e0:7e:f9:57:2b:a1:31:34:c8:0c:8b:26:d5:65:d9:a7:
         a9:6a:6c:8b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBAMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTJEQjExMTAvBgNVBAUTKDIyRURGOUVCNjYwODdGRDBFOTgxN0FFNzM2QzAwMzlE
MTg4MDg4RDUwHhcNMjUwMTMxMDA0OTMzWhcNMjUwMjA3MDA0OTMzWjAYMRYwFAYD
VQQDEw02NzljMWUxZC1mNzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv0UfIvgB+AhCBJAO/tcRj3FjfRCP3UWOHKIeH32FqGN+Ou/Mmw3j+mL6TMU2
few+P7brEhqkGpkrTQRmfR2Q6WYgsMB099dvSQIY+9SoxS6Cms+ChuIaqILsHUvj
7RVwlCoYbuJ6n0UbZW6LN5s1jOOk2L7/pTU5dOiNoJrM9ovtoSWaPDjvzjVaNlre
+0trStWmnQ9hGPiHiB+qB/hI0VnumrZ4mP5lY2O8Ak0UDdzj98B1sQ77yfB05eah
PRSRn2IWareTRiWloh73G1EkwgPNtI13KY7dASEj2DhirYYGUT1LE4N9kSS5bNOQ
Pg8LGUEZXzEOh9FEq9rrmQpwvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPxYJZlr
b950q8BVAZu3UMMRB2+kMB8GA1UdIwQYMBaAFCLt+etmCH/Q6YF65zbAA50YgIjV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkRCMS8zRkE2OTIwMDgz
QzAxMUVDQjU0QjM5N0ZDNEY5QUUwMi9JdTM1NjJZSWY5RHBnWHJuTnNBRG5SaUFp
TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0l1MzU2MllJZjlEcGdYcm5Oc0FEblJpQWlOVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MkRCMS8zRkE2OTIwMDgzQzAxMUVDQjU0QjM5N0ZDNEY5QUUwMi9JdTM1NjJZSWY5
RHBnWHJuTnNBRG5SaUFpTlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBV5pJ4TLSAbWOxkBBeOvIwUcn69B7oqDbT5uwmXYcVgy1aCbDPY00T
ackHyNFxx3L8qADvXUJzHEZm7sZJLdIaOLNOVVWzVf2UmyK/YctH0rNON4bX3+vh
B083g63VfsA95OfdBO93EzhhKZ/mlYL2gmSkKdbyEedon1rzVA2sh2VrLIimCgSH
pEZEt+ZN3r4oNK8gc11WA1xa9DOqKwgCGPQ7xzdRh7bsiJRAPudcCTFfdBqCkfiY
RKRTkv1Zhzro/XtZpQHG5W7mkQbXcTtOTPy/5rnXSmDYbt9hCQfInaMOxitgJMBR
4KK/+OB++VcroTE0yAyLJtVl2aepamyL
-----END CERTIFICATE-----
Generated at Fri Apr 25 16:43:26 2025 by rpki-client