Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft
File:                     CzZuBwz-cA5HfuR01slUndOzi_I.mft (raw, json)
Hash identifier:          dXJ9zQavPpmEd7rns4t+4Cv+g5QThBldh6oMuNwqczU=
Subject key identifier:   8E:77:BA:F5:1A:F0:B8:B5:72:C1:62:BA:D0:78:7D:8C:73:E3:F4:B5
Authority key identifier: 0B:36:6E:07:0C:FE:70:0E:47:7E:E4:74:D6:C9:54:9D:D3:B3:8B:F2
Certificate issuer:       /CN=A913819A/serialNumber=0B366E070CFE700E477EE474D6C9549DD3B38BF2
Certificate serial:       5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CzZuBwz-cA5HfuR01slUndOzi_I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft
Manifest number:          4C
Signing time:             Fri 31 Jan 2025 06:32:44 +0000
Manifest this update:     Fri 31 Jan 2025 06:32:44 +0000
Manifest next update:     Fri 07 Feb 2025 06:32:44 +0000
Files and hashes:         1: CzZuBwz-cA5HfuR01slUndOzi_I.crl (hash: 460s0LXIF0CpKkfmUZbav2gP/CWTPEvn5gJ/4NZj1JE=)
                          2: 3EFB586286BB11EFBD5D541DC4F9AE02.roa (hash: gTljkeOtiLUXIev71WvDZsUroRxts5KzF3IxcDIZHnk=)
                          3: D985E93886B111EFA11BDF53C4F9AE02.roa (hash: rP5j4C0CGZJsw2gJYjo66ntxudPoLAvM82b5Jln8ZuY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913819A/serialNumber=0B366E070CFE700E477EE474D6C9549DD3B38BF2
        Validity
            Not Before: Jan 31 06:32:44 2025 GMT
            Not After : Feb  7 06:32:44 2025 GMT
        Subject: CN=679c6e8c-b005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f0:89:c6:66:79:92:51:37:11:37:be:23:0d:
                    55:ca:fb:3e:b0:7d:24:4a:e2:b5:11:72:95:6b:59:
                    48:ed:1e:42:9d:66:da:bd:49:b5:d9:12:c8:85:df:
                    d8:14:12:7d:cf:a4:b7:6f:70:78:50:65:83:99:c3:
                    6a:a4:64:ad:ed:31:82:56:6f:59:2b:3d:ba:e6:b8:
                    b8:92:64:51:f4:54:0f:8d:56:c9:a4:9d:61:c6:16:
                    6e:01:49:f3:e8:f2:f2:df:f4:f7:db:95:0d:21:f6:
                    a2:2b:b9:78:65:66:03:be:66:c1:d0:46:35:b4:39:
                    2d:97:9f:75:16:d0:fe:bf:c8:03:f8:96:dd:d2:28:
                    f2:66:03:ef:aa:cd:ee:fb:3b:75:4d:1c:83:90:a3:
                    89:cf:ae:fb:d2:b3:93:d7:b5:77:64:64:b4:03:c8:
                    20:a5:d5:26:7a:0e:16:7f:02:b7:ec:7f:df:dc:e0:
                    00:cd:4a:65:6a:e3:5d:4e:27:18:ed:45:5e:d0:fe:
                    59:f0:e6:4a:20:ef:69:fa:01:ee:4b:27:b7:e0:01:
                    10:64:6b:0e:de:2a:b9:d7:22:a3:6c:fa:66:98:48:
                    d8:0f:90:16:42:a6:6a:16:57:20:01:b7:3c:e8:18:
                    ca:92:29:e1:af:de:b6:3a:92:5f:d7:81:37:9d:21:
                    b9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:77:BA:F5:1A:F0:B8:B5:72:C1:62:BA:D0:78:7D:8C:73:E3:F4:B5
            X509v3 Authority Key Identifier:
                keyid:0B:36:6E:07:0C:FE:70:0E:47:7E:E4:74:D6:C9:54:9D:D3:B3:8B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CzZuBwz-cA5HfuR01slUndOzi_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:53:8f:b1:d7:14:7b:99:b0:6a:e0:48:74:23:53:1f:8e:0b:
         ab:33:53:49:9a:83:d8:e3:d9:db:9b:4b:13:62:35:43:d6:f6:
         3f:85:de:4f:c9:b8:f1:ac:da:c7:9b:4d:9e:59:c9:0f:11:55:
         72:d7:1a:a0:f7:5c:87:f4:92:c7:87:ba:2b:73:86:d0:5b:e8:
         33:4f:63:99:1e:4c:ca:75:ab:21:90:65:91:fa:74:2b:00:17:
         6f:f1:77:23:c0:38:7b:3f:b4:51:e9:b3:13:e4:2c:c7:3e:0a:
         05:67:a9:f8:b1:b3:e6:c2:25:71:e8:87:a8:ff:76:9b:6d:d6:
         30:9b:07:c1:ee:99:4f:2e:53:62:e3:b4:13:be:bc:8e:f4:8d:
         e7:66:e5:99:91:d7:50:a5:c1:4e:f2:8d:12:e5:d3:c7:cf:ca:
         15:7f:43:eb:3b:10:66:d2:3e:00:12:1e:91:1c:18:fa:12:cb:
         d1:ea:71:09:55:1c:cd:fd:cd:a1:28:15:c4:3b:f3:a0:fa:36:
         00:33:2b:7e:6d:44:a9:3f:0a:d5:f9:e6:0a:ab:1d:4c:2a:01:
         60:40:37:3e:fc:85:d1:d4:f6:54:5b:73:59:df:f2:f6:b3:70:
         df:50:6b:00:ea:7a:d4:c7:1b:02:a2:66:56:1c:ec:38:b4:f3:
         ca:66:ab:9b
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
ODE5QTExMC8GA1UEBRMoMEIzNjZFMDcwQ0ZFNzAwRTQ3N0VFNDc0RDZDOTU0OURE
M0IzOEJGMjAeFw0yNTAxMzEwNjMyNDRaFw0yNTAyMDcwNjMyNDRaMBgxFjAUBgNV
BAMTDTY3OWM2ZThjLWIwMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC08InGZnmSUTcRN74jDVXK+z6wfSRK4rURcpVrWUjtHkKdZtq9SbXZEsiF39gU
En3PpLdvcHhQZYOZw2qkZK3tMYJWb1krPbrmuLiSZFH0VA+NVsmknWHGFm4BSfPo
8vLf9PfblQ0h9qIruXhlZgO+ZsHQRjW0OS2Xn3UW0P6/yAP4lt3SKPJmA++qze77
O3VNHIOQo4nPrvvSs5PXtXdkZLQDyCCl1SZ6DhZ/Arfsf9/c4ADNSmVq411OJxjt
RV7Q/lnw5kog72n6Ae5LJ7fgARBkaw7eKrnXIqNs+maYSNgPkBZCpmoWVyABtzzo
GMqSKeGv3rY6kl/XgTedIbmLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjne69Rrw
uLVywWK60Hh9jHPj9LUwHwYDVR0jBBgwFoAUCzZuBwz+cA5HfuR01slUndOzi/Iw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4MTlBLzVGODlGNDMwODZC
MTExRUZBRjZFQ0I1MkM0RjlBRTAyL0N6WnVCd3otY0E1SGZ1UjAxc2xVbmRPemlf
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvQ3padUJ3ei1jQTVIZnVSMDFzbFVuZE96aV9JLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4
MTlBLzVGODlGNDMwODZCMTExRUZBRjZFQ0I1MkM0RjlBRTAyL0N6WnVCd3otY0E1
SGZ1UjAxc2xVbmRPemlfSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAG5Tj7HXFHuZsGrgSHQjUx+OC6szU0mag9jj2dubSxNiNUPW9j+F3k/J
uPGs2sebTZ5ZyQ8RVXLXGqD3XIf0kseHuitzhtBb6DNPY5keTMp1qyGQZZH6dCsA
F2/xdyPAOHs/tFHpsxPkLMc+CgVnqfixs+bCJXHoh6j/dptt1jCbB8HumU8uU2Lj
tBO+vI70jedm5ZmR11ClwU7yjRLl08fPyhV/Q+s7EGbSPgASHpEcGPoSy9HqcQlV
HM39zaEoFcQ786D6NgAzK35tRKk/CtX55gqrHUwqAWBANz78hdHU9lRbc1nf8vaz
cN9QawDqetTHGwKiZlYc7Di088pmq5s=
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:28:51 2025 by rpki-client