Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft
File:                     Z_VMOcER599-cHbFxxWyizXoWfk.mft (raw, json)
Hash identifier:          nVLZc+YCoD7PjHBSGvnbHSSfW4NpKI/occfVuESOiHM=
Subject key identifier:   31:FE:FF:C2:3A:42:1D:B0:86:CE:06:24:0D:33:1E:5C:55:91:E5:14
Authority key identifier: 67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9
Certificate issuer:       /CN=A9120F0D/serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9
Certificate serial:       1361
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft
Manifest number:          1337
Signing time:             Fri 31 Jan 2025 17:01:44 +0000
Manifest this update:     Fri 31 Jan 2025 17:01:43 +0000
Manifest next update:     Fri 07 Feb 2025 17:01:43 +0000
Files and hashes:         1: Z_VMOcER599-cHbFxxWyizXoWfk.crl (hash: YysXmmY3bU4q+3uCnKoqDfX3gnFwq27gdyHX37Vdz+I=)
                          2: E56024B49A7D11EF99ECF636C4F9AE02.roa (hash: uEmwwGXbLGwcgl1RlF9qOwgmZadJbirI6oSO1IuzJso=)
                          3: E48C805A9A7D11EF99ECF636C4F9AE02.roa (hash: O/obPP4Yy8LvINF30ra1g4yXQa4L78ykRo9/qSPYtDU=)
                          4: C19EC984774811EFB2DF8983C4F9AE02.roa (hash: c/pAynOTfJnEgUvwSHA5IHqTz1bA0PIkbnuNkyI5d1A=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4961 (0x1361)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120F0D/serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9
        Validity
            Not Before: Jan 31 17:01:43 2025 GMT
            Not After : Feb  7 17:01:43 2025 GMT
        Subject: CN=679d01f7-efa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f1:cf:24:46:f2:05:34:cb:8d:65:fb:0d:95:
                    11:34:65:24:4e:ab:98:0f:61:11:6f:fa:ed:23:23:
                    d8:d6:4a:0a:de:31:5d:23:4a:b0:e8:b4:f2:a0:a9:
                    25:7e:a3:e8:80:f1:8b:05:a2:49:b3:93:9f:73:33:
                    75:4e:fc:02:e2:09:5f:77:05:25:21:01:80:2c:4b:
                    55:1c:de:01:de:42:e3:df:41:3d:12:59:50:58:f4:
                    f7:75:00:31:5d:ef:49:9d:1b:5e:8c:2e:78:8e:75:
                    2b:ff:fd:9a:72:d5:b5:06:6f:18:36:ca:09:d1:b2:
                    0b:57:2e:0a:73:81:fb:d2:97:e3:0e:b2:0d:55:05:
                    12:a5:dc:e9:7e:15:11:f8:b0:a8:51:e6:42:b4:94:
                    71:0c:d3:1b:c5:8d:43:f3:37:9f:06:b0:65:54:ca:
                    18:f6:c4:90:6f:65:c5:47:fb:b2:69:0f:ba:56:49:
                    a5:d2:e4:bb:11:70:ff:f5:52:42:b8:8e:55:a6:d6:
                    d7:ac:8d:6c:fb:28:d7:b6:3f:e2:16:29:ce:8c:c9:
                    e5:ac:79:90:68:af:2f:a1:a0:a7:8f:8e:bd:f0:95:
                    43:2d:89:ab:53:89:90:12:74:64:b6:ce:7c:58:9e:
                    22:89:99:a5:38:61:83:b1:0f:f0:b2:e5:3b:c4:a9:
                    d8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:FE:FF:C2:3A:42:1D:B0:86:CE:06:24:0D:33:1E:5C:55:91:E5:14
            X509v3 Authority Key Identifier:
                keyid:67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:2b:29:c5:90:37:16:23:26:30:4e:22:ce:15:1a:1d:87:2f:
         e7:2e:59:1e:39:7e:96:2d:6a:3e:6b:8f:74:12:66:ca:19:a3:
         05:04:41:1d:44:ec:f2:c5:17:5e:15:2c:81:13:4e:03:7b:9d:
         9e:97:ba:71:8b:7a:4c:ce:6c:d3:01:1e:99:23:d1:a0:d4:df:
         d1:be:21:86:ec:6a:9d:94:98:56:a4:96:ae:31:ee:f6:a0:de:
         a9:28:17:04:df:61:18:b6:aa:c7:3d:48:9f:a2:95:1f:a0:48:
         2e:af:4d:b4:f0:7b:76:bc:35:0c:86:7e:18:22:bd:20:90:80:
         11:38:d5:77:ff:0b:10:0f:9e:1d:21:e7:42:43:61:3b:99:71:
         50:55:6d:56:76:39:a3:35:06:e6:85:13:ea:d6:e3:17:05:a4:
         8c:ef:9a:1f:6d:b4:11:ad:e8:12:b1:be:c0:cb:b9:0b:0f:62:
         5a:33:fa:82:34:3a:06:8f:b8:f3:6b:59:43:99:30:46:94:8f:
         50:f2:29:f5:a9:32:01:3d:3e:cb:44:50:35:f6:ff:d2:43:b1:
         0c:7b:13:bb:96:6a:70:7c:57:7e:22:20:8a:9b:23:75:80:08:
         f0:cd:6c:03:4f:de:d2:01:6b:9b:ff:40:96:76:e4:38:4c:2e:
         ad:3f:1e:68
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICE2EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjBGMEQxMTAvBgNVBAUTKDY3RjU0QzM5QzExMUU3REY3RTcwNzZDNUM3MTVCMjhC
MzVFODU5RjkwHhcNMjUwMTMxMTcwMTQzWhcNMjUwMjA3MTcwMTQzWjAYMRYwFAYD
VQQDEw02NzlkMDFmNy1lZmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1PHPJEbyBTTLjWX7DZURNGUkTquYD2ERb/rtIyPY1koK3jFdI0qw6LTyoKkl
fqPogPGLBaJJs5OfczN1TvwC4glfdwUlIQGALEtVHN4B3kLj30E9EllQWPT3dQAx
Xe9JnRtejC54jnUr//2actW1Bm8YNsoJ0bILVy4Kc4H70pfjDrINVQUSpdzpfhUR
+LCoUeZCtJRxDNMbxY1D8zefBrBlVMoY9sSQb2XFR/uyaQ+6Vkml0uS7EXD/9VJC
uI5VptbXrI1s+yjXtj/iFinOjMnlrHmQaK8voaCnj4698JVDLYmrU4mQEnRkts58
WJ4iiZmlOGGDsQ/wsuU7xKnYvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDH+/8I6
Qh2whs4GJA0zHlxVkeUUMB8GA1UdIwQYMBaAFGf1TDnBEefffnB2xccVsos16Fn5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEYwRC8wOEVDMkIwQ0Ez
NkUxMUU4Qjg5NjY2MkJDNEY5QUUwMi9aX1ZNT2NFUjU5OS1jSGJGeHhXeWl6WG9X
ZmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pfVk1PY0VSNTk5LWNIYkZ4eFd5aXpYb1dmay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MEYwRC8wOEVDMkIwQ0EzNkUxMUU4Qjg5NjY2MkJDNEY5QUUwMi9aX1ZNT2NFUjU5
OS1jSGJGeHhXeWl6WG9XZmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB8KynFkDcWIyYwTiLOFRodhy/nLlkeOX6WLWo+a490EmbKGaMFBEEd
ROzyxRdeFSyBE04De52el7pxi3pMzmzTAR6ZI9Gg1N/RviGG7GqdlJhWpJauMe72
oN6pKBcE32EYtqrHPUifopUfoEgur0208Ht2vDUMhn4YIr0gkIARONV3/wsQD54d
IedCQ2E7mXFQVW1WdjmjNQbmhRPq1uMXBaSM75ofbbQRregSsb7Ay7kLD2JaM/qC
NDoGj7jza1lDmTBGlI9Q8in1qTIBPT7LRFA19v/SQ7EMexO7lmpwfFd+IiCKmyN1
gAjwzWwDT97SAWub/0CWduQ4TC6tPx5o
-----END CERTIFICATE-----
Generated at Sat Apr 26 23:12:02 2025 by rpki-client