Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft
File:                     u1uBVrA35dIiY-rH9qEcBS_fYz8.mft (raw, json)
Hash identifier:          i5hyaWWrLh8nD6vLiKAAZEw9p8agl5mTv0BVDfTfwys=
Subject key identifier:   B3:5E:78:3E:79:3E:E6:00:38:10:BC:88:4B:1C:65:3C:A7:B3:3F:76
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Certificate issuer:       /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial:       346A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft
Manifest number:          33C6
Signing time:             Fri 31 Jan 2025 15:24:42 +0000
Manifest this update:     Fri 31 Jan 2025 15:24:42 +0000
Manifest next update:     Fri 07 Feb 2025 15:24:42 +0000
Files and hashes:         1: u1uBVrA35dIiY-rH9qEcBS_fYz8.crl (hash: Sd39kDs4VbOPzKmDjnP8zuyxllN7+XUoCkBmwsuJ8c8=)
                          2: ABD794FA669A11EFAA2C7969C4F9AE02.roa (hash: N036pW0PtfBFAIVyyK5dLQ8pyR5U9JWbZRqxG+qDKMg=)
                          3: 47E1F234B45111EEA556091EC4F9AE02.roa (hash: ODd/KbyV1dKtPRXyiR/8CGUuMB8EdgFkSZIUAw8ZgVc=)
                          4: 6159E3148BEB11ED9A3CD825C4F9AE02.roa (hash: xraItLh7Qa2azf1yhEL6lYfhMGBZEGyxS0vkvcHXR/E=)
                          5: 22C2A76E854811EFA776AC73C4F9AE02.roa (hash: 6GwSaRQGnjgTRlnwH4C1KZF+EfK76a1huc0miG4Eyd4=)
                          6: 9826D5EEB45011EE829AF51CC4F9AE02.roa (hash: 5BoxLKekJFCkZTtAL7aRDOqjExsyHH7PHxs8u02byjw=)
                          7: CBB88C1EAD6911EF91FF0259C4F9AE02.roa (hash: ZpoG3g7u7SFGJuLir0fKBfED7L4wKCqbsV1EfggwmwU=)
                          8: 00E33588AD6A11EFBAD17A59C4F9AE02.roa (hash: 4GjLE8dVseK8r0H1xjELp7WmKd23AtVVBXABL/QUns4=)
                          9: F180E2B24FD011EFBC17A55DC4F9AE02.roa (hash: XPJdGMXTiNSJ2lIv20BPiYxh+vjbiml0MYgZ2GlZTM8=)
                          10: 9B6837A8AD6911EFA86BAA58C4F9AE02.roa (hash: ZxH1UR6iFoIfJ28oiWPXrvCM/P6vKSXMYEwxyWw2Kks=)
                          11: D28E7D62854811EFA29BE474C4F9AE02.roa (hash: FMY8wP7ZaKlO3KEOkEEigDCe9hhN9BbuBjfaDsZXUsM=)
                          12: 6C71053CAE2311EFAEB8B36AC4F9AE02.roa (hash: VOU2oePvPzhJHSmIOJDpu6FRgs6bt+gsBLUsoGiA/E8=)
                          13: E9E37A28AD6911EFB6E53159C4F9AE02.roa (hash: whnMzVqw/8Iomu4V/C68S/0TGADkSWRX0p00pR0VTxU=)
                          14: AA5075824F1811EFB6ECD54CC4F9AE02.roa (hash: Zt1pvdwOft/kNVYIji31PZ+Vytsn8ifr5w5B3qkwhUo=)
                          15: 0A5276E04BB611EE8F105367C4F9AE02.roa (hash: J2B62sMcnSdrJJbUQ/iV8zM2NMli09yKtWpghmuGGD8=)
                          16: D38D71F0854811EFA29BE474C4F9AE02.roa (hash: Xgtd+60aYdnuXLEAVe0xptjJAN/1QXGAUOeP3kNet1Q=)
                          17: 6B016F4EB6C911EF9370FA5AC4F9AE02.roa (hash: iTlF+uPGrIuaNuFVnIoH3tgyLnBFOM/eLVs+GcFq9rY=)
                          18: 60DB91E48BEB11ED9A3CD825C4F9AE02.roa (hash: GStxspM7rX6cVJq7TJi4F9iOLd6pT7iZHKiCRc0MCaI=)
                          19: B06C3C12AD6911EF9690E658C4F9AE02.roa (hash: vgJ6eZzT2bcSGqy9bP9XrDvUVVsbH19CAZpruScbMac=)
                          20: FFAD463CB6C811EFAE27D256C4F9AE02.roa (hash: eD0BTKyf/mmSJrLXwynUE7Mc0Lfygm9AtP8ibYi6lQw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13418 (0x346a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
        Validity
            Not Before: Jan 31 15:24:42 2025 GMT
            Not After : Feb  7 15:24:42 2025 GMT
        Subject: CN=679ceb3a-718c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2a:f2:6b:8e:86:22:47:84:39:ac:65:4a:77:
                    56:eb:d6:c3:99:45:fe:ce:d3:9c:a1:d2:41:52:f7:
                    22:d2:19:51:0c:c2:90:b2:16:d3:13:e8:bd:9f:c9:
                    99:ea:5f:cf:ce:29:1b:56:95:91:cf:0b:5e:74:ec:
                    f2:01:b4:59:9c:6b:34:3b:8e:36:3a:51:a2:50:04:
                    e2:c2:d2:d9:da:ec:24:03:c4:ff:dd:0d:8c:8d:ab:
                    04:f9:44:f1:27:f0:ec:4b:a6:a6:7f:b4:82:f7:4d:
                    52:5e:87:9a:6d:f8:2a:8f:1c:7d:1f:f4:a1:78:82:
                    11:84:65:0a:20:e8:8e:40:1e:98:89:d0:04:29:8c:
                    5d:5a:5b:b8:6a:50:0e:06:09:58:bc:87:1f:f8:a6:
                    02:4a:c5:a4:07:c0:0e:81:c4:84:d8:5d:6d:ef:16:
                    d3:0e:58:32:fd:d3:2c:38:04:2e:03:76:ab:8d:1c:
                    f5:be:aa:42:84:01:a8:fd:f0:37:e6:06:0d:dc:a5:
                    27:38:0c:4a:b5:29:ae:1e:95:11:6e:66:45:dc:f3:
                    2a:87:d2:db:ca:ed:21:a9:02:21:4b:2d:c9:35:14:
                    4f:f1:f6:ec:2a:f9:09:76:f1:2c:a5:44:ce:aa:97:
                    2a:1a:ef:92:4c:0b:d4:df:5b:f0:82:0e:5a:5e:73:
                    bf:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:5E:78:3E:79:3E:E6:00:38:10:BC:88:4B:1C:65:3C:A7:B3:3F:76
            X509v3 Authority Key Identifier:
                keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:da:5b:ae:10:21:ab:2f:ba:54:aa:ee:fc:66:47:35:85:0d:
         38:04:b8:de:6e:14:96:24:df:25:0d:e0:42:ac:25:93:ed:85:
         9c:df:55:49:73:de:92:e0:9a:53:8f:e1:f6:c7:39:97:71:f4:
         df:30:99:e6:31:f8:34:bf:15:23:c6:81:24:a6:43:87:ec:d9:
         b9:f6:c2:eb:1a:58:06:af:8c:38:2f:3b:67:58:1c:ff:36:79:
         b4:3b:82:44:f5:df:ca:a1:d2:0e:45:af:1f:76:3f:05:87:57:
         30:47:bc:a2:ce:91:4e:ed:92:c8:a1:2b:43:5c:0c:b9:2a:60:
         7e:f5:66:9a:23:76:95:4d:cc:f6:55:0f:53:63:5d:ed:a7:d0:
         f0:9d:79:96:a0:d5:61:dc:f1:8a:9f:c7:a0:75:28:03:97:6c:
         89:60:5f:27:22:4f:65:88:3f:14:3b:3f:62:1a:4b:da:fb:47:
         88:c8:61:6f:de:83:ba:6f:32:0d:ed:4c:55:1c:e0:1e:68:a6:
         8f:16:30:29:3e:e7:70:64:31:a6:ae:ef:86:56:5b:d3:59:79:
         fc:07:1a:20:1b:fa:f8:5b:bc:0d:b5:39:39:38:04:34:31:85:
         d5:c8:b3:29:ac:de:b1:17:fb:04:f9:16:45:cd:f7:0c:42:22:
         47:d4:7a:a3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNGowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTM3MEYxMTAvBgNVBAUTKEJCNUI4MTU2QjAzN0U1RDIyMjYzRUFDN0Y2QTExQzA1
MkZERjYzM0YwHhcNMjUwMTMxMTUyNDQyWhcNMjUwMjA3MTUyNDQyWjAYMRYwFAYD
VQQDEw02NzljZWIzYS03MThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0irya46GIkeEOaxlSndW69bDmUX+ztOcodJBUvci0hlRDMKQshbTE+i9n8mZ
6l/PzikbVpWRzwtedOzyAbRZnGs0O442OlGiUATiwtLZ2uwkA8T/3Q2MjasE+UTx
J/DsS6amf7SC901SXoeabfgqjxx9H/SheIIRhGUKIOiOQB6YidAEKYxdWlu4alAO
BglYvIcf+KYCSsWkB8AOgcSE2F1t7xbTDlgy/dMsOAQuA3arjRz1vqpChAGo/fA3
5gYN3KUnOAxKtSmuHpURbmZF3PMqh9Lbyu0hqQIhSy3JNRRP8fbsKvkJdvEspUTO
qpcqGu+STAvU31vwgg5aXnO/0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLNeeD55
PuYAOBC8iEscZTynsz92MB8GA1UdIwQYMBaAFLtbgVawN+XSImPqx/ahHAUv32M/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzcwRi83MzQ2RThBMjYw
NDkxMUUyQTMwNzU3OEQyOTc5QkIyMC91MXVCVnJBMzVkSWlZLXJIOXFFY0JTX2ZZ
ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3UxdUJWckEzNWRJaVktckg5cUVjQlNfZll6OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MzcwRi83MzQ2RThBMjYwNDkxMUUyQTMwNzU3OEQyOTc5QkIyMC91MXVCVnJBMzVk
SWlZLXJIOXFFY0JTX2ZZejgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAm2luuECGrL7pUqu78Zkc1hQ04BLjebhSWJN8lDeBCrCWT7YWc31VJ
c96S4JpTj+H2xzmXcfTfMJnmMfg0vxUjxoEkpkOH7Nm59sLrGlgGr4w4LztnWBz/
Nnm0O4JE9d/KodIORa8fdj8Fh1cwR7yizpFO7ZLIoStDXAy5KmB+9WaaI3aVTcz2
VQ9TY13tp9DwnXmWoNVh3PGKn8egdSgDl2yJYF8nIk9liD8UOz9iGkva+0eIyGFv
3oO6bzIN7UxVHOAeaKaPFjApPudwZDGmru+GVlvTWXn8BxogG/r4W7wNtTk5OAQ0
MYXVyLMprN6xF/sE+RZFzfcMQiJH1Hqj
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:47:52 2025 by rpki-client