Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.mft
File:                     UiKhYZ3_8Eywl7tRagdMzR2v_Hg.mft (raw, json)
Hash identifier:          Z610k+HiO98ya4Ni0bPAlVO6A8BzIXbCqdjDG0/SHmw=
Subject key identifier:   F8:D5:8A:BD:46:B4:F4:D5:46:71:80:FE:DA:5C:15:D5:F0:58:5C:47
Authority key identifier: 52:22:A1:61:9D:FF:F0:4C:B0:97:BB:51:6A:07:4C:CD:1D:AF:FC:78
Certificate issuer:       /CN=A9136D7D/serialNumber=5222A1619DFFF04CB097BB516A074CCD1DAFFC78
Certificate serial:       0205
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.mft
Manifest number:          01FD
Signing time:             Fri 31 Jan 2025 02:11:58 +0000
Manifest this update:     Fri 31 Jan 2025 02:11:57 +0000
Manifest next update:     Fri 07 Feb 2025 02:11:57 +0000
Files and hashes:         1: UiKhYZ3_8Eywl7tRagdMzR2v_Hg.crl (hash: JB+SpTz7f+3c0P/Yvl3icyW8thzCghF2hs4zDUJE6xk=)
                          2: A9E3A5041C3411EFBF05095BC4F9AE02.roa (hash: DS6aoQLqOLSS763BWHIUmquh48JGAfBdAQCJMqSDzPU=)
                          3: E4A016C01CD211EFB606D514C4F9AE02.roa (hash: yMapl0YXXAfKwoBzESq2p7IfMt1+B0piySrxnFgxgIw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 517 (0x205)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136D7D/serialNumber=5222A1619DFFF04CB097BB516A074CCD1DAFFC78
        Validity
            Not Before: Jan 31 02:11:57 2025 GMT
            Not After : Feb  7 02:11:57 2025 GMT
        Subject: CN=679c316e-07a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2f:aa:d2:83:fe:3e:72:95:20:f2:03:58:a6:
                    00:40:35:43:bf:b8:46:c6:a9:30:e1:7d:b0:29:a5:
                    ef:82:01:a1:58:57:52:64:fb:fe:71:c2:1e:78:f1:
                    2e:16:b6:fe:ea:fb:14:b4:ce:1a:0b:2c:f6:ca:f0:
                    10:c3:95:e2:76:80:3b:17:69:28:55:cd:d6:83:02:
                    ea:fc:51:7f:0d:a4:7f:cd:e2:ed:55:0e:07:c3:de:
                    47:88:87:ee:fa:1d:9a:70:a9:85:78:f1:71:e4:e8:
                    99:e0:bd:d4:c5:0a:86:8a:35:70:cb:e1:30:c5:76:
                    fe:bc:39:15:54:4e:94:a9:4f:2a:dd:39:ea:98:aa:
                    a5:8e:18:2c:ee:e7:bb:bc:9c:2a:99:21:1c:ed:d1:
                    d9:c7:97:7f:73:81:43:89:8d:8c:aa:ee:6a:b8:3f:
                    3e:c1:f9:44:ca:0c:a5:ef:49:7f:f2:79:8a:2a:c2:
                    43:0a:e0:91:6b:95:c3:37:ca:87:63:a7:43:4c:5a:
                    70:a9:45:09:55:c0:06:d0:49:5e:ce:b1:23:74:a5:
                    92:67:3a:c5:c4:55:1b:3f:8a:56:c0:81:c7:b0:08:
                    27:98:b9:df:57:2f:26:2f:73:7e:0b:c0:a3:30:7b:
                    7e:94:17:cf:c8:ce:38:3d:1e:2f:fd:63:80:d8:4a:
                    f3:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:D5:8A:BD:46:B4:F4:D5:46:71:80:FE:DA:5C:15:D5:F0:58:5C:47
            X509v3 Authority Key Identifier:
                keyid:52:22:A1:61:9D:FF:F0:4C:B0:97:BB:51:6A:07:4C:CD:1D:AF:FC:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:64:61:06:e6:dc:57:cd:79:29:d8:2d:60:7c:0d:76:6c:cc:
         8f:0f:f8:cf:51:64:19:09:5b:a4:d2:91:26:73:0f:6f:3e:14:
         ab:47:59:17:94:24:51:68:8b:c7:22:58:e5:2c:15:d9:a7:84:
         4f:c8:03:12:26:11:d1:fe:ea:ad:4a:98:c0:ae:72:b6:29:5f:
         f7:7f:a0:ac:b6:6d:b6:9e:3f:e3:83:f9:c3:8e:8c:41:cb:0e:
         6b:b9:28:33:ce:48:7f:a0:23:a0:cb:f3:19:24:7c:1c:36:98:
         0f:4a:b0:49:17:56:0a:7b:df:2e:67:3d:cc:41:65:56:77:84:
         06:03:68:0a:70:8b:5c:1a:cb:40:49:37:30:77:e4:a4:db:11:
         34:7b:65:b8:da:a4:13:02:2d:77:81:be:1d:1e:bf:bc:c2:11:
         42:34:9d:9f:5b:34:21:bc:38:52:db:b0:f5:bd:fa:06:90:66:
         94:ce:7f:ec:46:73:08:3e:b7:70:08:8e:1a:71:3b:34:0c:26:
         d6:25:19:85:50:47:52:77:8a:c0:50:92:8a:02:af:7c:7c:4d:
         48:02:d9:6c:f3:85:7d:a8:b0:79:95:ba:64:e6:de:56:4d:00:
         06:a4:ef:5a:f7:6e:d9:ab:8a:ae:c7:89:23:59:f8:10:a3:d9:
         a3:c1:f1:a6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzZEN0QxMTAvBgNVBAUTKDUyMjJBMTYxOURGRkYwNENCMDk3QkI1MTZBMDc0Q0NE
MURBRkZDNzgwHhcNMjUwMTMxMDIxMTU3WhcNMjUwMjA3MDIxMTU3WjAYMRYwFAYD
VQQDEw02NzljMzE2ZS0wN2EwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmy+q0oP+PnKVIPIDWKYAQDVDv7hGxqkw4X2wKaXvggGhWFdSZPv+ccIeePEu
Frb+6vsUtM4aCyz2yvAQw5XidoA7F2koVc3WgwLq/FF/DaR/zeLtVQ4Hw95HiIfu
+h2acKmFePFx5OiZ4L3UxQqGijVwy+EwxXb+vDkVVE6UqU8q3TnqmKqljhgs7ue7
vJwqmSEc7dHZx5d/c4FDiY2Mqu5quD8+wflEygyl70l/8nmKKsJDCuCRa5XDN8qH
Y6dDTFpwqUUJVcAG0ElezrEjdKWSZzrFxFUbP4pWwIHHsAgnmLnfVy8mL3N+C8Cj
MHt+lBfPyM44PR4v/WOA2ErzSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPjVir1G
tPTVRnGA/tpcFdXwWFxHMB8GA1UdIwQYMBaAFFIioWGd//BMsJe7UWoHTM0dr/x4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkQ3RC9BMzM5NjMwRTI3
NTAxMUVEOTE0N0IyNzNDNEY5QUUwMi9VaUtoWVozXzhFeXdsN3RSYWdkTXpSMnZf
SGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VpS2hZWjNfOEV5d2w3dFJhZ2RNelIydl9IZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NkQ3RC9BMzM5NjMwRTI3NTAxMUVEOTE0N0IyNzNDNEY5QUUwMi9VaUtoWVozXzhF
eXdsN3RSYWdkTXpSMnZfSGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQADZGEG5txXzXkp2C1gfA12bMyPD/jPUWQZCVuk0pEmcw9vPhSrR1kX
lCRRaIvHIljlLBXZp4RPyAMSJhHR/uqtSpjArnK2KV/3f6Cstm22nj/jg/nDjoxB
yw5ruSgzzkh/oCOgy/MZJHwcNpgPSrBJF1YKe98uZz3MQWVWd4QGA2gKcItcGstA
STcwd+Sk2xE0e2W42qQTAi13gb4dHr+8whFCNJ2fWzQhvDhS27D1vfoGkGaUzn/s
RnMIPrdwCI4acTs0DCbWJRmFUEdSd4rAUJKKAq98fE1IAtls84V9qLB5lbpk5t5W
TQAGpO9a927Zq4qux4kjWfgQo9mjwfGm
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:03:21 2025 by rpki-client