Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft
File:                     iunN4Qvgt38JGw0468GWfIvAkZ4.mft (raw, json)
Hash identifier:          2XbpS0H1whyh6xJWGUts0IoFJTDNYNxsWnBvhhrlVl0=
Subject key identifier:   F8:35:25:B1:A7:F4:1D:38:FD:BA:8B:F7:88:7A:6D:26:27:35:18:14
Authority key identifier: 8A:E9:CD:E1:0B:E0:B7:7F:09:1B:0D:38:EB:C1:96:7C:8B:C0:91:9E
Certificate issuer:       /CN=A9116BB8/serialNumber=8AE9CDE10BE0B77F091B0D38EBC1967C8BC0919E
Certificate serial:       06EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iunN4Qvgt38JGw0468GWfIvAkZ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft
Manifest number:          06DC
Signing time:             Thu 30 Jan 2025 22:04:02 +0000
Manifest this update:     Thu 30 Jan 2025 22:04:01 +0000
Manifest next update:     Thu 06 Feb 2025 22:04:01 +0000
Files and hashes:         1: iunN4Qvgt38JGw0468GWfIvAkZ4.crl (hash: xGDVRlRle7pKuxuFyz+C6kPTFcl7VsePJvAKGos/ZVA=)
                          2: 490CDADA42F211EBB34A1A60C4F9AE02.roa (hash: j5L+2E8hgdO5g2Py+e+3EamQHHUmrpaxumPJliNw/Wc=)
                          3: 2100BD70343611EF97A95F35C4F9AE02.roa (hash: HQq1GzHEuZXBL5FuTD7w79nd+cfPjMIfL9rjnRYfJPw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1770 (0x6ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116BB8/serialNumber=8AE9CDE10BE0B77F091B0D38EBC1967C8BC0919E
        Validity
            Not Before: Jan 30 22:04:01 2025 GMT
            Not After : Feb  6 22:04:01 2025 GMT
        Subject: CN=679bf751-ce87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:21:8c:ec:c0:ed:6e:46:18:9f:58:87:86:15:
                    43:95:65:c7:10:2e:79:e5:99:2e:b0:cb:ef:eb:6a:
                    a1:23:97:8d:55:42:4c:17:37:ed:97:b3:59:bc:41:
                    ad:6a:23:0b:2e:66:2d:62:1d:05:59:ef:78:df:ca:
                    a2:9c:d0:33:38:af:65:31:8d:e8:f4:19:ca:0b:d4:
                    d6:14:a1:9f:38:07:03:a5:c1:70:e6:43:3d:9d:9d:
                    3a:7c:9c:56:47:f3:b8:2d:8f:c2:ab:1d:65:dc:37:
                    cc:f6:43:86:25:fc:95:66:24:a7:f0:a9:04:03:f3:
                    df:fa:e7:ae:fc:65:8f:f4:50:37:32:11:ad:3b:21:
                    58:c6:da:b8:00:b1:05:52:a4:91:ca:b6:28:8e:c3:
                    cb:11:a4:fd:93:5e:5b:b6:f1:1c:53:95:1e:f9:7c:
                    b9:62:55:e6:1b:e0:e1:9f:af:21:88:4f:2e:27:f6:
                    93:c2:99:1b:1b:ba:84:31:9c:94:62:38:b4:68:d8:
                    5e:df:c8:2b:4b:93:70:e5:8a:4e:0a:01:8f:58:35:
                    e2:a1:87:4d:98:3b:10:cf:ce:e4:ae:29:a0:0d:16:
                    81:7c:00:88:91:a9:b2:cd:a7:ca:f8:02:bd:24:2d:
                    f3:06:10:7a:6c:20:ee:41:9c:0f:2f:6f:36:77:1f:
                    d9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:35:25:B1:A7:F4:1D:38:FD:BA:8B:F7:88:7A:6D:26:27:35:18:14
            X509v3 Authority Key Identifier:
                keyid:8A:E9:CD:E1:0B:E0:B7:7F:09:1B:0D:38:EB:C1:96:7C:8B:C0:91:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iunN4Qvgt38JGw0468GWfIvAkZ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:9f:09:3e:18:a3:cd:ce:52:3f:e7:92:b0:e5:04:20:2e:a8:
         cf:53:de:44:f0:16:67:fe:b4:7a:2e:fe:8f:3c:a4:12:05:0a:
         fb:a3:23:6d:43:c2:02:29:56:2c:34:85:ae:d3:5b:69:73:16:
         8c:cb:4c:68:71:a6:af:db:43:13:53:cb:0f:32:1a:b1:5f:d0:
         95:fa:9f:ee:ac:f8:8f:9e:d8:92:50:47:ca:56:29:5f:23:a2:
         2d:b7:cd:16:b7:dd:cd:48:71:23:38:40:ce:a2:4b:1e:80:17:
         c0:22:13:ed:a3:d3:60:ec:1c:ce:bf:04:07:3a:aa:91:1a:ff:
         02:70:5b:50:4e:f1:d0:c5:cd:53:59:3b:d9:62:e1:36:42:d0:
         df:a4:3a:63:93:71:6c:2d:c3:55:54:49:dc:12:81:3d:a4:dc:
         41:91:15:bc:7d:96:79:e5:9e:50:ba:3b:90:f5:a3:a3:cf:86:
         2f:e5:77:4f:57:1a:7b:e3:1e:25:a5:89:35:54:d0:75:cf:d2:
         d1:a2:24:b4:af:ef:4f:3d:67:a5:7f:46:b4:d4:ce:e8:f7:73:
         18:a8:c2:a9:5c:25:66:8b:31:ac:0f:e4:2e:22:50:c2:75:b9:
         ca:fa:60:86:df:6b:b5:36:d0:dc:ba:6f:11:d2:49:ca:e5:fb:
         56:f4:49:1d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBuowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTZCQjgxMTAvBgNVBAUTKDhBRTlDREUxMEJFMEI3N0YwOTFCMEQzOEVCQzE5NjdD
OEJDMDkxOUUwHhcNMjUwMTMwMjIwNDAxWhcNMjUwMjA2MjIwNDAxWjAYMRYwFAYD
VQQDEw02NzliZjc1MS1jZTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8iGM7MDtbkYYn1iHhhVDlWXHEC555ZkusMvv62qhI5eNVUJMFzftl7NZvEGt
aiMLLmYtYh0FWe9438qinNAzOK9lMY3o9BnKC9TWFKGfOAcDpcFw5kM9nZ06fJxW
R/O4LY/Cqx1l3DfM9kOGJfyVZiSn8KkEA/Pf+ueu/GWP9FA3MhGtOyFYxtq4ALEF
UqSRyrYojsPLEaT9k15btvEcU5Ue+Xy5YlXmG+Dhn68hiE8uJ/aTwpkbG7qEMZyU
Yji0aNhe38grS5Nw5YpOCgGPWDXioYdNmDsQz87krimgDRaBfACIkamyzafK+AK9
JC3zBhB6bCDuQZwPL282dx/ZoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPg1JbGn
9B04/bqL94h6bSYnNRgUMB8GA1UdIwQYMBaAFIrpzeEL4Ld/CRsNOOvBlnyLwJGe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkJCOC8zOURDRjc1NDQy
RjAxMUVCOEEwOUM3NUFDNEY5QUUwMi9pdW5ONFF2Z3QzOEpHdzA0NjhHV2ZJdkFr
WjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2l1bk40UXZndDM4Skd3MDQ2OEdXZkl2QWtaNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NkJCOC8zOURDRjc1NDQyRjAxMUVCOEEwOUM3NUFDNEY5QUUwMi9pdW5ONFF2Z3Qz
OEpHdzA0NjhHV2ZJdkFrWjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQATnwk+GKPNzlI/55Kw5QQgLqjPU95E8BZn/rR6Lv6PPKQSBQr7oyNt
Q8ICKVYsNIWu01tpcxaMy0xocaav20MTU8sPMhqxX9CV+p/urPiPntiSUEfKVilf
I6Itt80Wt93NSHEjOEDOoksegBfAIhPto9Ng7BzOvwQHOqqRGv8CcFtQTvHQxc1T
WTvZYuE2QtDfpDpjk3FsLcNVVEncEoE9pNxBkRW8fZZ55Z5QujuQ9aOjz4Yv5XdP
Vxp74x4lpYk1VNB1z9LRoiS0r+9PPWelf0a01M7o93MYqMKpXCVmizGsD+QuIlDC
dbnK+mCG32u1NtDcum8R0knK5ftW9Ekd
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:04:11 2025 by rpki-client