Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.mft
File:                     nPcUeL9ZsAixtUL6k6fBDvt_TWI.mft (raw, json)
Hash identifier:          eMDuXm96u5pJc1gg/7dWR+zqdevvEGLST79Qe4oKq6M=
Subject key identifier:   D0:ED:9E:2C:C0:F9:69:81:50:05:BA:5C:44:6F:7C:DA:B7:6F:3B:D1
Authority key identifier: 9C:F7:14:78:BF:59:B0:08:B1:B5:42:FA:93:A7:C1:0E:FB:7F:4D:62
Certificate issuer:       /CN=A9154840/serialNumber=9CF71478BF59B008B1B542FA93A7C10EFB7F4D62
Certificate serial:       2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPcUeL9ZsAixtUL6k6fBDvt_TWI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.mft
Manifest number:          2D
Signing time:             Fri 31 Jan 2025 06:46:19 +0000
Manifest this update:     Fri 31 Jan 2025 06:46:18 +0000
Manifest next update:     Fri 07 Feb 2025 06:46:18 +0000
Files and hashes:         1: nPcUeL9ZsAixtUL6k6fBDvt_TWI.crl (hash: e+bxHDsI9VodzsJS9NqkDleHcndqAlUJMDiNgP/xSTs=)
                          2: 9950A304A55011EFA7FFA969C4F9AE02.roa (hash: 7w0AxBMbVoZTjF5sqspQh7z8UimR5szml+niNPnLbps=)
                          3: 98D7330CA55011EFA7FFA969C4F9AE02.roa (hash: 5T5IW/urFKGSR1rD4ZpAxg1/U5kVp7QebPXagPruk4U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154840/serialNumber=9CF71478BF59B008B1B542FA93A7C10EFB7F4D62
        Validity
            Not Before: Jan 31 06:46:18 2025 GMT
            Not After : Feb  7 06:46:18 2025 GMT
        Subject: CN=679c71ba-44f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:51:30:89:ab:ab:c3:f5:3f:7a:0a:f6:7b:da:
                    42:9b:61:09:fa:fa:bf:66:6a:03:58:fa:44:15:73:
                    8f:71:2a:c2:26:dd:8e:91:38:e8:48:0b:84:22:05:
                    7f:41:76:ff:69:f1:61:fb:e2:8e:b6:ae:e8:33:b5:
                    fe:ff:94:8c:b6:f4:80:7f:37:42:4f:2a:93:4e:b3:
                    69:c3:04:fc:3d:3b:a6:f5:77:81:d2:33:24:ea:da:
                    01:c5:66:95:e3:73:74:04:58:47:6b:8e:3b:71:60:
                    d9:43:13:61:42:17:f6:ef:2b:c0:26:85:56:99:1c:
                    b9:fb:35:48:58:e5:a3:81:0f:be:fb:b8:7b:c9:c5:
                    98:4a:f2:0e:ad:b2:ab:43:69:2e:3b:cd:fe:a4:81:
                    82:b8:71:8e:a7:e5:a6:54:43:58:ef:c1:e8:8c:5e:
                    82:1e:4d:7b:dd:c5:05:5f:26:99:8b:e3:cc:4b:29:
                    f4:a4:df:16:5b:c2:b9:7b:c1:71:d8:d8:2e:e5:68:
                    c0:5a:42:e2:0d:40:9d:f8:94:f4:14:5f:61:f8:c5:
                    b8:73:17:1c:f5:ef:5e:69:68:1e:39:bf:ce:31:8c:
                    63:ea:55:3b:2d:bd:77:d7:ff:97:32:f3:ad:9d:fb:
                    97:e0:8f:75:d0:43:36:78:2d:c8:15:c7:f5:3e:14:
                    d0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:ED:9E:2C:C0:F9:69:81:50:05:BA:5C:44:6F:7C:DA:B7:6F:3B:D1
            X509v3 Authority Key Identifier:
                keyid:9C:F7:14:78:BF:59:B0:08:B1:B5:42:FA:93:A7:C1:0E:FB:7F:4D:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPcUeL9ZsAixtUL6k6fBDvt_TWI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:a9:82:5b:46:1c:97:5a:79:fd:ba:e2:7a:4f:3e:c7:24:b2:
         5e:6d:db:b4:80:6a:d7:94:15:a9:78:8b:9b:c1:94:6a:98:89:
         c9:dc:a4:d3:2b:ee:af:02:24:96:69:75:54:91:55:d0:b6:7f:
         44:d0:43:3c:f3:f8:05:39:1a:c6:52:78:29:5b:7c:e8:cb:34:
         cb:3f:49:5e:b8:be:be:0f:ae:6e:c9:dc:58:e1:ea:3e:c3:a5:
         31:69:49:0f:f4:34:0a:fc:53:5f:c3:ce:22:f8:37:63:88:36:
         95:a9:db:e8:42:0e:54:cb:24:7e:11:68:ba:0a:86:4f:f2:d7:
         6e:93:19:ee:04:6b:bc:72:15:b7:41:ce:82:43:2f:aa:69:c8:
         e8:84:1e:50:fc:71:62:c7:59:71:86:d3:a2:7d:36:0f:b7:84:
         72:f6:5d:f7:13:44:44:f8:59:74:4e:4f:44:4e:3e:91:27:aa:
         71:7c:dc:40:fe:f1:2d:45:79:ae:4b:0b:c0:9b:e9:d0:d7:68:
         5e:7c:29:76:90:e2:d9:f9:d8:37:e2:9c:85:42:b2:fa:44:af:
         e7:e1:ae:90:24:ed:5b:19:3e:bb:d6:eb:4e:18:71:f1:27:af:
         db:d9:9a:bf:01:11:e6:b7:0d:ab:32:3f:de:38:dc:94:ec:64:
         2d:c4:a6:2a
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
NDg0MDExMC8GA1UEBRMoOUNGNzE0NzhCRjU5QjAwOEIxQjU0MkZBOTNBN0MxMEVG
QjdGNEQ2MjAeFw0yNTAxMzEwNjQ2MThaFw0yNTAyMDcwNjQ2MThaMBgxFjAUBgNV
BAMTDTY3OWM3MWJhLTQ0ZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC3UTCJq6vD9T96CvZ72kKbYQn6+r9magNY+kQVc49xKsIm3Y6ROOhIC4QiBX9B
dv9p8WH74o62rugztf7/lIy29IB/N0JPKpNOs2nDBPw9O6b1d4HSMyTq2gHFZpXj
c3QEWEdrjjtxYNlDE2FCF/bvK8AmhVaZHLn7NUhY5aOBD777uHvJxZhK8g6tsqtD
aS47zf6kgYK4cY6n5aZUQ1jvweiMXoIeTXvdxQVfJpmL48xLKfSk3xZbwrl7wXHY
2C7laMBaQuINQJ34lPQUX2H4xbhzFxz1715paB45v84xjGPqVTstvXfX/5cy862d
+5fgj3XQQzZ4LcgVx/U+FNB1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0O2eLMD5
aYFQBbpcRG982rdvO9EwHwYDVR0jBBgwFoAUnPcUeL9ZsAixtUL6k6fBDvt/TWIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0ODQwLzM0MkY4MEQwOUZD
NDExRUY5NjMxRjgzNkM0RjlBRTAyL25QY1VlTDlac0FpeHRVTDZrNmZCRHZ0X1RX
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvblBjVWVMOVpzQWl4dFVMNms2ZkJEdnRfVFdJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0
ODQwLzM0MkY4MEQwOUZDNDExRUY5NjMxRjgzNkM0RjlBRTAyL25QY1VlTDlac0Fp
eHRVTDZrNmZCRHZ0X1RXSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAHKpgltGHJdaef264npPPscksl5t27SAateUFal4i5vBlGqYicncpNMr
7q8CJJZpdVSRVdC2f0TQQzzz+AU5GsZSeClbfOjLNMs/SV64vr4Prm7J3Fjh6j7D
pTFpSQ/0NAr8U1/DziL4N2OINpWp2+hCDlTLJH4RaLoKhk/y126TGe4Ea7xyFbdB
zoJDL6ppyOiEHlD8cWLHWXGG06J9Ng+3hHL2XfcTRET4WXROT0ROPpEnqnF83ED+
8S1Fea5LC8Cb6dDXaF58KXaQ4tn52DfinIVCsvpEr+fhrpAk7VsZPrvW604YcfEn
r9vZmr8BEea3DasyP9443JTsZC3Epio=
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:10:24 2025 by rpki-client