Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.mft
File:                     dp1E2bQcu8_FNnE7m5Uo9sq4fFw.mft (raw, json)
Hash identifier:          qDwgEevd5TpSpUYte09Ko7cTSnqaTNO4k3MZsJIfsCY=
Subject key identifier:   7E:BE:96:FA:5B:EB:7F:DC:36:A2:75:5B:24:1E:F3:B4:D5:82:B7:A2
Authority key identifier: 76:9D:44:D9:B4:1C:BB:CF:C5:36:71:3B:9B:95:28:F6:CA:B8:7C:5C
Certificate issuer:       /CN=A9150733/serialNumber=769D44D9B41CBBCFC536713B9B9528F6CAB87C5C
Certificate serial:       0128
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.mft
Manifest number:          0C0E
Signing time:             Thu 30 Jan 2025 19:23:15 +0000
Manifest this update:     Thu 30 Jan 2025 19:23:14 +0000
Manifest next update:     Thu 06 Feb 2025 19:23:14 +0000
Files and hashes:         1: dp1E2bQcu8_FNnE7m5Uo9sq4fFw.crl (hash: liODjxkIR8DsHxaePWxOqzDLcaA+S9rllNvr6nZdYBo=)
                          2: DC41F9C4214411EEBC685C79C4F9AE02.roa (hash: LlmFtucv67NIV6SVDjcp+KXSQX2AmgL34grHdaVZjas=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 296 (0x128)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150733/serialNumber=769D44D9B41CBBCFC536713B9B9528F6CAB87C5C
        Validity
            Not Before: Jan 30 19:23:14 2025 GMT
            Not After : Feb  6 19:23:14 2025 GMT
        Subject: CN=679bd1a3-14f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3e:97:d5:80:92:24:bf:50:77:9a:d1:51:42:
                    a5:64:7c:01:41:99:d5:fd:9c:a9:4b:7c:97:34:44:
                    cd:8b:9b:17:e7:a5:ab:88:23:78:22:8b:f9:eb:b3:
                    22:60:8b:3e:48:c9:7e:8f:fd:c3:15:db:53:be:3e:
                    9c:b7:7e:83:ee:6f:30:91:de:d6:e2:a6:1c:93:41:
                    6c:97:d0:ea:b0:fc:70:43:cc:4e:90:aa:b7:ef:27:
                    b6:02:75:4c:1e:cf:1e:01:93:a9:2f:5f:5e:fc:21:
                    43:89:b8:a6:20:ca:af:90:a4:e2:d2:56:9f:2f:7b:
                    1c:12:6f:29:e8:0b:cd:2a:b7:7f:da:0b:66:5c:bb:
                    35:ed:86:af:b1:c0:0d:fd:88:0f:8c:58:7f:1d:3d:
                    b9:97:11:d6:79:b2:e6:85:66:f7:18:f9:02:96:a2:
                    0e:9c:36:0b:c9:7f:1f:77:59:78:b1:c9:8a:5c:11:
                    36:79:cd:27:28:bb:ad:ff:cc:2d:e5:97:cf:17:0f:
                    23:ce:f6:c9:36:55:dc:42:23:ff:70:40:32:29:bf:
                    63:3c:80:fc:b0:27:c3:b0:89:fe:79:39:cc:db:f5:
                    a3:75:d1:c7:c2:8e:84:72:60:bc:ca:8c:f9:47:36:
                    fe:b2:61:d1:86:41:87:98:f9:87:a3:44:6a:ba:4a:
                    30:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:BE:96:FA:5B:EB:7F:DC:36:A2:75:5B:24:1E:F3:B4:D5:82:B7:A2
            X509v3 Authority Key Identifier:
                keyid:76:9D:44:D9:B4:1C:BB:CF:C5:36:71:3B:9B:95:28:F6:CA:B8:7C:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:6b:2e:c4:c4:ad:86:b0:5b:0e:ad:37:d7:b6:7c:c3:3a:bd:
         87:5e:e2:5c:8b:aa:e8:44:78:a0:99:14:3a:27:ed:12:49:dd:
         dd:22:69:da:2c:5d:99:1a:ad:c8:02:20:c2:06:5f:24:8a:2d:
         20:b2:9e:69:30:6d:2e:72:86:bf:81:d4:98:fe:46:82:c0:6a:
         cd:de:19:6c:3d:cb:01:b3:46:be:4a:cb:a7:3a:48:33:53:68:
         04:4b:3c:9a:4c:64:4a:27:63:4d:3c:65:69:f7:9d:1a:57:fc:
         52:4c:d3:9f:a6:c4:a7:fd:f3:62:2a:7c:73:9c:f5:12:95:f5:
         f2:a2:e8:bd:c1:e5:c4:bf:59:98:28:fa:3d:9d:c6:b5:25:56:
         d0:71:0c:74:ed:fd:48:57:fb:8c:f0:4e:d0:17:1f:d9:2f:cb:
         10:d4:05:f1:7d:4a:b9:5f:3c:c9:f5:5a:dd:5e:65:7b:e6:db:
         ba:0e:e2:d2:21:9e:5f:e0:0b:30:90:9c:a6:f6:48:64:55:05:
         1d:8b:dd:00:0a:cd:eb:ec:37:a5:d3:17:88:19:65:a3:8e:b6:
         01:54:93:c3:17:32:9a:66:41:3f:97:ea:70:25:89:45:24:55:
         aa:59:b7:80:d4:47:e5:0e:68:11:86:cf:b4:a2:a4:76:3e:12:
         d3:bd:09:c9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTA3MzMxMTAvBgNVBAUTKDc2OUQ0NEQ5QjQxQ0JCQ0ZDNTM2NzEzQjlCOTUyOEY2
Q0FCODdDNUMwHhcNMjUwMTMwMTkyMzE0WhcNMjUwMjA2MTkyMzE0WjAYMRYwFAYD
VQQDEw02NzliZDFhMy0xNGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxD6X1YCSJL9Qd5rRUUKlZHwBQZnV/ZypS3yXNETNi5sX56WriCN4Iov567Mi
YIs+SMl+j/3DFdtTvj6ct36D7m8wkd7W4qYck0Fsl9DqsPxwQ8xOkKq37ye2AnVM
Hs8eAZOpL19e/CFDibimIMqvkKTi0lafL3scEm8p6AvNKrd/2gtmXLs17YavscAN
/YgPjFh/HT25lxHWebLmhWb3GPkClqIOnDYLyX8fd1l4scmKXBE2ec0nKLut/8wt
5ZfPFw8jzvbJNlXcQiP/cEAyKb9jPID8sCfDsIn+eTnM2/WjddHHwo6EcmC8yoz5
Rzb+smHRhkGHmPmHo0RqukowhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH6+lvpb
63/cNqJ1WyQe87TVgreiMB8GA1UdIwQYMBaAFHadRNm0HLvPxTZxO5uVKPbKuHxc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDczMy8yMTc4NjhDRTNE
QjUxMUVBQTY0OTEzMTJDNEY5QUUwMi9kcDFFMmJRY3U4X0ZObkU3bTVVbzlzcTRm
RncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RwMUUyYlFjdThfRk5uRTdtNVVvOXNxNGZGdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MDczMy8yMTc4NjhDRTNEQjUxMUVBQTY0OTEzMTJDNEY5QUUwMi9kcDFFMmJRY3U4
X0ZObkU3bTVVbzlzcTRmRncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCeay7ExK2GsFsOrTfXtnzDOr2HXuJci6roRHigmRQ6J+0SSd3dImna
LF2ZGq3IAiDCBl8kii0gsp5pMG0ucoa/gdSY/kaCwGrN3hlsPcsBs0a+SsunOkgz
U2gESzyaTGRKJ2NNPGVp950aV/xSTNOfpsSn/fNiKnxznPUSlfXyoui9weXEv1mY
KPo9nca1JVbQcQx07f1IV/uM8E7QFx/ZL8sQ1AXxfUq5XzzJ9VrdXmV75tu6DuLS
IZ5f4AswkJym9khkVQUdi90ACs3r7Del0xeIGWWjjrYBVJPDFzKaZkE/l+pwJYlF
JFWqWbeA1EflDmgRhs+0oqR2PhLTvQnJ
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:10:19 2025 by rpki-client