Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft
File:                     DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft (raw, json)
Hash identifier:          tikgpsX0WwpAzJrkoUINgmVK2M0G2fiZjkBJk4B80EA=
Subject key identifier:   72:0F:CF:40:60:8E:0C:5B:55:38:19:80:CC:F7:47:78:CA:89:58:7E
Authority key identifier: 0D:E5:96:CB:2C:60:CB:75:7D:B8:F4:0E:B8:6F:24:76:52:C1:3A:30
Certificate issuer:       /CN=A9135033/serialNumber=0DE596CB2C60CB757DB8F40EB86F247652C13A30
Certificate serial:       0CE6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeWWyyxgy3V9uPQOuG8kdlLBOjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft
Manifest number:          0CD6
Signing time:             Fri 31 Jan 2025 18:04:38 +0000
Manifest this update:     Fri 31 Jan 2025 18:04:37 +0000
Manifest next update:     Fri 07 Feb 2025 18:04:37 +0000
Files and hashes:         1: DeWWyyxgy3V9uPQOuG8kdlLBOjA.crl (hash: edDMQvnW4qogsHlUoO9HUfzELIUH6SJ+vxdvaTiqT/E=)
                          2: EEA979F83E6B11EFBB19C578C4F9AE02.roa (hash: oUt/sJh2Hvzgfm9kciRMGOXM5ppNIO6I7N+KqD7ITwE=)
                          3: 2328656A840211EEB9348E11C4F9AE02.roa (hash: 4UpFnemB/wBJ3bUtU7ElqTZfTqEcdngT1RKfpjLOFV4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3302 (0xce6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135033/serialNumber=0DE596CB2C60CB757DB8F40EB86F247652C13A30
        Validity
            Not Before: Jan 31 18:04:37 2025 GMT
            Not After : Feb  7 18:04:37 2025 GMT
        Subject: CN=679d10b5-15d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:03:aa:c2:e2:96:af:6b:e9:ed:ba:4a:39:e4:
                    ff:32:c0:ef:b7:13:91:a1:dd:e6:2a:0d:1a:53:f9:
                    bb:39:6d:f4:f9:10:a9:89:fb:bb:72:8d:23:5f:41:
                    59:4e:c2:d7:3d:07:82:c4:2d:aa:e8:1b:97:6d:50:
                    ed:a2:b2:d8:ce:13:58:f9:3c:8c:af:b5:01:a0:63:
                    41:29:ee:d0:ad:2c:3f:b4:92:b9:00:b7:cb:8c:ff:
                    31:2b:11:9c:60:1c:ec:e5:c7:fd:65:e9:87:da:c2:
                    b2:88:63:62:69:41:33:da:73:71:cf:43:63:72:21:
                    4c:be:7e:6c:aa:3d:08:6c:21:99:cf:e4:90:2b:bc:
                    4b:6b:af:fe:ea:23:d9:5c:89:bd:01:30:83:58:cc:
                    45:cf:5f:1d:9c:b9:67:86:ce:49:1d:bf:0c:79:b1:
                    4c:43:65:64:44:f3:ac:b7:13:07:cc:b1:2c:2e:63:
                    1d:6b:9c:d5:ed:76:e3:05:ef:54:b8:ca:3b:e9:88:
                    ed:6a:10:da:79:da:e0:2f:4d:ff:5b:3f:6b:a3:30:
                    6e:70:3e:2e:75:c2:e7:f7:a0:fc:09:25:6f:08:58:
                    32:34:eb:72:c8:56:82:8f:c0:e3:78:66:b9:8d:02:
                    df:e7:25:e7:42:80:63:b5:c8:eb:54:77:71:94:c5:
                    ff:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:0F:CF:40:60:8E:0C:5B:55:38:19:80:CC:F7:47:78:CA:89:58:7E
            X509v3 Authority Key Identifier:
                keyid:0D:E5:96:CB:2C:60:CB:75:7D:B8:F4:0E:B8:6F:24:76:52:C1:3A:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeWWyyxgy3V9uPQOuG8kdlLBOjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:a1:5e:10:22:4b:2f:a8:49:f7:68:a6:21:50:71:7c:29:18:
         9d:ee:8e:2c:11:f2:5e:ab:f0:5a:6d:42:6d:5c:4e:ad:8e:84:
         db:b2:57:0e:14:7e:93:10:7d:fc:55:e2:42:b1:44:fb:ac:5d:
         af:30:5a:0b:a9:58:a8:42:5e:2a:e5:5d:fe:22:75:ab:3f:36:
         7e:c8:af:58:7f:6e:ac:55:e1:42:0f:6c:92:83:d8:3d:ec:a4:
         21:32:74:1b:9c:68:71:95:a9:aa:dc:44:65:65:9e:6c:6d:2b:
         b1:9f:81:c9:d0:c2:ca:10:55:03:73:2a:9f:93:5c:d3:c7:9d:
         d8:c6:3b:3f:ca:01:a9:ec:9b:26:55:56:0d:b0:17:9f:e7:9b:
         66:82:67:10:21:42:55:e2:fc:6d:30:43:e9:90:35:54:09:1f:
         d5:be:55:0c:58:6a:cc:d4:b2:56:5e:9a:90:11:1d:79:1d:a3:
         1b:ae:8f:a3:eb:21:12:fc:05:29:86:64:6e:a8:76:6b:09:12:
         6b:55:c6:c4:42:08:98:b4:f1:59:3e:f6:ff:8d:82:1e:0a:eb:
         89:ee:c4:58:42:62:49:be:5c:60:11:03:d1:3b:b0:b2:cc:e1:
         e2:b2:3e:5a:39:0c:7d:a3:58:b8:64:03:4a:42:f4:cb:0f:ee:
         03:ff:33:e6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzUwMzMxMTAvBgNVBAUTKDBERTU5NkNCMkM2MENCNzU3REI4RjQwRUI4NkYyNDc2
NTJDMTNBMzAwHhcNMjUwMTMxMTgwNDM3WhcNMjUwMjA3MTgwNDM3WjAYMRYwFAYD
VQQDEw02NzlkMTBiNS0xNWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqgOqwuKWr2vp7bpKOeT/MsDvtxORod3mKg0aU/m7OW30+RCpifu7co0jX0FZ
TsLXPQeCxC2q6BuXbVDtorLYzhNY+TyMr7UBoGNBKe7QrSw/tJK5ALfLjP8xKxGc
YBzs5cf9ZemH2sKyiGNiaUEz2nNxz0NjciFMvn5sqj0IbCGZz+SQK7xLa6/+6iPZ
XIm9ATCDWMxFz18dnLlnhs5JHb8MebFMQ2VkRPOstxMHzLEsLmMda5zV7XbjBe9U
uMo76YjtahDaedrgL03/Wz9rozBucD4udcLn96D8CSVvCFgyNOtyyFaCj8DjeGa5
jQLf5yXnQoBjtcjrVHdxlMX/vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHIPz0Bg
jgxbVTgZgMz3R3jKiVh+MB8GA1UdIwQYMBaAFA3llsssYMt1fbj0DrhvJHZSwTow
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTAzMy81RDAwQUU1MkRE
NEMxMUU5QTZENEJCMURDNEY5QUUwMi9EZVdXeXl4Z3kzVjl1UFFPdUc4a2RsTEJP
akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RlV1d5eXhneTNWOXVQUU91RzhrZGxMQk9qQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NTAzMy81RDAwQUU1MkRENEMxMUU5QTZENEJCMURDNEY5QUUwMi9EZVdXeXl4Z3kz
Vjl1UFFPdUc4a2RsTEJPakEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCjoV4QIksvqEn3aKYhUHF8KRid7o4sEfJeq/BabUJtXE6tjoTbslcO
FH6TEH38VeJCsUT7rF2vMFoLqVioQl4q5V3+InWrPzZ+yK9Yf26sVeFCD2ySg9g9
7KQhMnQbnGhxlamq3ERlZZ5sbSuxn4HJ0MLKEFUDcyqfk1zTx53Yxjs/ygGp7Jsm
VVYNsBef55tmgmcQIUJV4vxtMEPpkDVUCR/VvlUMWGrM1LJWXpqQER15HaMbro+j
6yES/AUphmRuqHZrCRJrVcbEQgiYtPFZPvb/jYIeCuuJ7sRYQmJJvlxgEQPRO7Cy
zOHisj5aOQx9o1i4ZANKQvTLD+4D/zPm
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:26:14 2025 by rpki-client