Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.mft
File:                     gaDPnOmqqZDtGv6KgwpweHT5qr4.mft (raw, json)
Hash identifier:          a4a3YvT/hQ2BTjdmmOP0iUTGtM94PAVGAA785jlc3r0=
Subject key identifier:   FC:04:88:1D:10:01:45:55:BF:6D:AF:30:7D:43:12:D0:60:8C:A5:EA
Authority key identifier: 81:A0:CF:9C:E9:AA:A9:90:ED:1A:FE:8A:83:0A:70:78:74:F9:AA:BE
Certificate issuer:       /CN=A9157450/serialNumber=81A0CF9CE9AAA990ED1AFE8A830A707874F9AABE
Certificate serial:       7B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaDPnOmqqZDtGv6KgwpweHT5qr4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.mft
Manifest number:          7A
Signing time:             Fri 31 Jan 2025 05:46:44 +0000
Manifest this update:     Fri 31 Jan 2025 05:46:43 +0000
Manifest next update:     Fri 07 Feb 2025 05:46:43 +0000
Files and hashes:         1: gaDPnOmqqZDtGv6KgwpweHT5qr4.crl (hash: X/RNvYj9GSjfAqkOxCNim9xCwzJ/4jIH+XqLeXukiw8=)
                          2: B71C4F80253711EFA1D2A943C4F9AE02.roa (hash: s2si+C+JZXQAr64DJhXNsm5gwkwO01DlVqtCowccWVI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123 (0x7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157450/serialNumber=81A0CF9CE9AAA990ED1AFE8A830A707874F9AABE
        Validity
            Not Before: Jan 31 05:46:43 2025 GMT
            Not After : Feb  7 05:46:43 2025 GMT
        Subject: CN=679c63c3-1d8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:c2:2c:39:cd:c8:de:54:06:3d:64:14:00:f5:
                    69:e1:38:92:78:79:d0:d2:05:c7:97:36:62:89:a0:
                    58:da:13:5e:9d:c6:38:92:1e:f7:7b:b3:d5:cd:65:
                    6e:85:fe:5c:69:02:51:7e:d7:22:c3:c0:67:ef:ac:
                    79:8e:f6:e9:b6:e2:ef:c4:ff:e1:17:f6:70:e6:f7:
                    62:3d:77:37:c7:be:04:ec:5d:f7:2d:e1:0e:53:97:
                    40:b7:d1:44:91:ec:c6:24:9f:12:61:9e:0e:25:78:
                    81:76:35:cf:aa:69:76:a5:0d:aa:ca:1d:dc:0e:56:
                    a2:61:43:73:9b:91:31:70:63:b0:8b:46:cc:5b:fa:
                    fc:d3:74:07:f0:50:c6:6e:63:5f:d0:a3:68:26:8c:
                    68:6a:c0:54:6f:e6:6d:ad:b9:f9:36:0a:99:ff:fa:
                    53:e6:55:38:ad:3a:e7:96:ad:0b:32:75:8f:d1:b3:
                    1a:15:cc:d8:75:ee:c5:d1:ea:35:86:05:fd:0b:e9:
                    1f:ea:ce:5d:d5:46:fb:b1:33:f9:e8:85:40:4e:16:
                    18:53:bf:da:0c:78:af:9a:e8:7f:8a:e9:6b:90:36:
                    57:1d:1b:a1:9b:a9:44:6c:3c:e2:9c:73:e1:da:9d:
                    10:55:ec:8b:99:7a:e9:b1:43:8e:2f:e8:6c:04:1d:
                    04:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:04:88:1D:10:01:45:55:BF:6D:AF:30:7D:43:12:D0:60:8C:A5:EA
            X509v3 Authority Key Identifier:
                keyid:81:A0:CF:9C:E9:AA:A9:90:ED:1A:FE:8A:83:0A:70:78:74:F9:AA:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaDPnOmqqZDtGv6KgwpweHT5qr4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:26:72:57:18:89:3d:60:2b:d8:42:2f:21:81:dd:23:f4:57:
         49:a5:82:c0:00:86:a4:39:3d:cb:84:d9:96:fe:57:65:40:89:
         46:a9:fb:5c:cb:1d:fd:d0:7f:c1:2c:3e:f7:32:fc:2a:fe:bb:
         dd:da:29:04:95:b6:d5:31:8b:38:4a:58:0a:50:83:61:a1:5d:
         75:e4:99:a2:cd:0a:32:17:c8:72:4a:34:0c:28:08:b0:23:6c:
         27:6c:f7:05:41:65:04:17:d4:a3:b9:63:6b:17:68:3a:ea:c4:
         2b:68:af:29:a1:5b:37:46:1d:fb:a6:84:a2:69:a6:44:20:e6:
         ac:a9:b7:70:4c:04:6c:f2:53:c2:5a:76:04:aa:0d:e5:7f:23:
         e9:cd:44:fe:b0:cb:ad:60:4a:6f:bc:93:98:33:4c:8c:30:49:
         84:c8:3b:01:d9:7b:77:6b:a0:35:bd:9b:c2:79:52:14:e2:a7:
         e7:fd:3c:a5:5d:60:cd:93:31:a6:65:4e:a1:86:21:25:5e:17:
         96:2a:b9:50:8b:5b:2f:1c:52:bb:0b:6c:de:05:7e:7c:4c:95:
         25:0a:a1:d7:12:f1:26:b8:ee:21:a8:fb:f6:3a:e5:d3:d8:ec:
         80:3f:c1:a8:f5:1a:f0:23:89:fb:6a:ac:d6:7a:b8:48:f9:80:
         28:69:a9:91
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
NzQ1MDExMC8GA1UEBRMoODFBMENGOUNFOUFBQTk5MEVEMUFGRThBODMwQTcwNzg3
NEY5QUFCRTAeFw0yNTAxMzEwNTQ2NDNaFw0yNTAyMDcwNTQ2NDNaMBgxFjAUBgNV
BAMTDTY3OWM2M2MzLTFkOGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDswiw5zcjeVAY9ZBQA9WnhOJJ4edDSBceXNmKJoFjaE16dxjiSHvd7s9XNZW6F
/lxpAlF+1yLDwGfvrHmO9um24u/E/+EX9nDm92I9dzfHvgTsXfct4Q5Tl0C30USR
7MYknxJhng4leIF2Nc+qaXalDarKHdwOVqJhQ3ObkTFwY7CLRsxb+vzTdAfwUMZu
Y1/Qo2gmjGhqwFRv5m2tufk2Cpn/+lPmVTitOueWrQsydY/RsxoVzNh17sXR6jWG
Bf0L6R/qzl3VRvuxM/nohUBOFhhTv9oMeK+a6H+K6WuQNlcdG6GbqURsPOKcc+Ha
nRBV7IuZeumxQ44v6GwEHQT7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/ASIHRAB
RVW/ba8wfUMS0GCMpeowHwYDVR0jBBgwFoAUgaDPnOmqqZDtGv6KgwpweHT5qr4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3NDUwLzgyRDlCQTA2MjUz
NjExRUY5QTFDRUYyM0M0RjlBRTAyL2dhRFBuT21xcVpEdEd2Nktnd3B3ZUhUNXFy
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZ2FEUG5PbXFxWkR0R3Y2S2d3cHdlSFQ1cXI0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3
NDUwLzgyRDlCQTA2MjUzNjExRUY5QTFDRUYyM0M0RjlBRTAyL2dhRFBuT21xcVpE
dEd2Nktnd3B3ZUhUNXFyNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAFMmclcYiT1gK9hCLyGB3SP0V0mlgsAAhqQ5PcuE2Zb+V2VAiUap+1zL
Hf3Qf8EsPvcy/Cr+u93aKQSVttUxizhKWApQg2GhXXXkmaLNCjIXyHJKNAwoCLAj
bCds9wVBZQQX1KO5Y2sXaDrqxCtorymhWzdGHfumhKJppkQg5qypt3BMBGzyU8Ja
dgSqDeV/I+nNRP6wy61gSm+8k5gzTIwwSYTIOwHZe3droDW9m8J5UhTip+f9PKVd
YM2TMaZlTqGGISVeF5YquVCLWy8cUrsLbN4FfnxMlSUKodcS8Sa47iGo+/Y65dPY
7IA/waj1GvAjiftqrNZ6uEj5gChpqZE=
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:48:06 2025 by rpki-client