Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/A6AuL12r8P85OGKLxP9fthZT8EU.mft
File:                     A6AuL12r8P85OGKLxP9fthZT8EU.mft (raw, json)
Hash identifier:          KvtHC0I2tj7zhoZCWgEZIix0NiP9yD5xbM2xBKp3tyU=
Subject key identifier:   8E:DE:E4:6D:FC:75:CE:5D:28:12:D0:34:A7:D9:2F:BA:62:A5:BB:F4
Authority key identifier: 03:A0:2E:2F:5D:AB:F0:FF:39:38:62:8B:C4:FF:5F:B6:16:53:F0:45
Certificate issuer:       /CN=A9161099/serialNumber=03A02E2F5DABF0FF3938628BC4FF5FB61653F045
Certificate serial:       AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6AuL12r8P85OGKLxP9fthZT8EU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/A6AuL12r8P85OGKLxP9fthZT8EU.mft
Manifest number:          9E
Signing time:             Fri 31 Jan 2025 05:36:14 +0000
Manifest this update:     Fri 31 Jan 2025 05:36:14 +0000
Manifest next update:     Fri 07 Feb 2025 05:36:14 +0000
Files and hashes:         1: A6AuL12r8P85OGKLxP9fthZT8EU.crl (hash: VwaAbp1lz/gRbowIUq2bt0AAZDUMZQ3eYACPQXqcUHo=)
                          2: 4335BE9C0D0611EFA3ECB057C4F9AE02.roa (hash: Pgph1w1mxcTp0uNqETbmTV9PlZdSoRllVl1EeRomNMs=)
                          3: 42D4C3BC0D0611EFA3ECB057C4F9AE02.roa (hash: WLJNmT8BOYYMNdfpRbPWhPUo9IIV/6pC4TA71i+Sw7k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174 (0xae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161099/serialNumber=03A02E2F5DABF0FF3938628BC4FF5FB61653F045
        Validity
            Not Before: Jan 31 05:36:14 2025 GMT
            Not After : Feb  7 05:36:14 2025 GMT
        Subject: CN=679c614e-f4ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5a:92:5f:b9:c1:ee:b2:07:6c:ad:77:24:d1:
                    79:25:36:7c:5e:62:e7:6d:db:1e:1c:02:4e:cf:9a:
                    0a:9e:32:16:50:e9:75:36:7a:d2:59:c3:20:4b:c0:
                    cc:7e:07:d5:12:4d:3f:53:87:dd:d1:15:56:ef:00:
                    30:4e:cf:59:29:7b:23:13:8a:fa:d8:40:8d:9b:a2:
                    44:da:ac:db:6a:be:f1:05:1d:a7:54:c2:d4:89:85:
                    54:68:e7:7d:aa:f6:1f:34:4b:17:b8:a4:82:f7:2f:
                    ed:6c:03:0a:f4:f2:b3:13:94:15:8d:c3:db:a7:8a:
                    35:89:a1:21:de:66:bc:66:3a:9e:31:d5:5c:3c:fc:
                    f7:e2:5b:eb:a9:e2:92:48:c6:20:30:70:7e:3f:03:
                    54:aa:1e:22:08:d2:f5:a6:6c:c3:8b:f8:51:12:31:
                    51:b3:7e:25:00:55:ef:d7:56:85:67:e3:1c:ac:7b:
                    da:e0:b5:39:16:22:9a:16:9f:86:13:32:5f:88:00:
                    43:6f:99:ef:aa:49:5f:71:20:c3:bf:f6:9c:02:36:
                    a4:ed:92:ca:05:66:70:d1:ac:22:f1:83:5f:8f:f2:
                    0c:0c:cd:af:8e:d2:f6:df:30:4a:12:e9:01:8d:fa:
                    c3:31:50:47:8f:5d:24:d3:66:92:2d:bf:c3:f9:a2:
                    98:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:DE:E4:6D:FC:75:CE:5D:28:12:D0:34:A7:D9:2F:BA:62:A5:BB:F4
            X509v3 Authority Key Identifier:
                keyid:03:A0:2E:2F:5D:AB:F0:FF:39:38:62:8B:C4:FF:5F:B6:16:53:F0:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/A6AuL12r8P85OGKLxP9fthZT8EU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6AuL12r8P85OGKLxP9fthZT8EU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/A6AuL12r8P85OGKLxP9fthZT8EU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:9c:d4:5d:97:8c:f2:bb:ee:ed:42:fb:dd:cf:85:dc:57:22:
         33:22:3d:b5:0c:1c:98:01:06:83:90:1c:84:f8:1f:46:a7:d7:
         f3:e1:c8:b4:3f:bf:50:1d:7a:72:d8:95:29:46:99:06:68:91:
         0a:81:15:7b:6d:42:b3:c9:3a:bf:dc:c3:01:2e:91:9d:95:36:
         be:c7:51:a6:71:a6:22:b7:af:9a:fd:77:93:e2:cf:fd:16:40:
         65:47:85:aa:f0:0c:1e:50:d2:3a:bf:29:98:38:87:dc:9e:ea:
         d2:a5:a7:13:bf:c9:d3:a3:d2:36:10:83:df:f5:70:46:d6:5e:
         4c:6a:5a:b3:79:b8:cc:e7:2d:31:91:62:57:09:50:95:23:68:
         a8:0a:b7:3a:95:23:7a:e5:c4:1e:0e:d9:b4:a5:5e:1c:82:d9:
         6f:90:72:94:e7:cb:62:73:fe:05:bb:84:1f:d0:50:38:78:4c:
         9d:1d:ed:80:45:6b:4b:0d:c3:68:ba:26:09:28:1d:d4:c3:a0:
         9a:48:3e:a0:c1:2f:bd:82:37:e7:9a:bb:74:b7:73:25:09:09:
         6e:b8:8b:9f:16:15:20:a2:1c:1c:3d:65:17:31:22:7a:3e:8e:
         c4:ec:69:11:6f:5b:67:55:f4:7c:13:af:05:0c:91:b3:a1:d1:
         72:22:c8:60
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjEwOTkxMTAvBgNVBAUTKDAzQTAyRTJGNURBQkYwRkYzOTM4NjI4QkM0RkY1RkI2
MTY1M0YwNDUwHhcNMjUwMTMxMDUzNjE0WhcNMjUwMjA3MDUzNjE0WjAYMRYwFAYD
VQQDEw02NzljNjE0ZS1mNGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0FqSX7nB7rIHbK13JNF5JTZ8XmLnbdseHAJOz5oKnjIWUOl1NnrSWcMgS8DM
fgfVEk0/U4fd0RVW7wAwTs9ZKXsjE4r62ECNm6JE2qzbar7xBR2nVMLUiYVUaOd9
qvYfNEsXuKSC9y/tbAMK9PKzE5QVjcPbp4o1iaEh3ma8ZjqeMdVcPPz34lvrqeKS
SMYgMHB+PwNUqh4iCNL1pmzDi/hREjFRs34lAFXv11aFZ+McrHva4LU5FiKaFp+G
EzJfiABDb5nvqklfcSDDv/acAjak7ZLKBWZw0awi8YNfj/IMDM2vjtL23zBKEukB
jfrDMVBHj10k02aSLb/D+aKYdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI7e5G38
dc5dKBLQNKfZL7pipbv0MB8GA1UdIwQYMBaAFAOgLi9dq/D/OThii8T/X7YWU/BF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTA5OS9GRDM2N0M3MDBE
MDQxMUVGODVFNDZGNTVDNEY5QUUwMi9BNkF1TDEycjhQODVPR0tMeFA5ZnRoWlQ4
RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0E2QXVMMTJyOFA4NU9HS0x4UDlmdGhaVDhFVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MTA5OS9GRDM2N0M3MDBEMDQxMUVGODVFNDZGNTVDNEY5QUUwMi9BNkF1TDEycjhQ
ODVPR0tMeFA5ZnRoWlQ4RVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBInNRdl4zyu+7tQvvdz4XcVyIzIj21DByYAQaDkByE+B9Gp9fz4ci0
P79QHXpy2JUpRpkGaJEKgRV7bUKzyTq/3MMBLpGdlTa+x1GmcaYit6+a/XeT4s/9
FkBlR4Wq8AweUNI6vymYOIfcnurSpacTv8nTo9I2EIPf9XBG1l5MalqzebjM5y0x
kWJXCVCVI2ioCrc6lSN65cQeDtm0pV4cgtlvkHKU58tic/4Fu4Qf0FA4eEydHe2A
RWtLDcNouiYJKB3Uw6CaSD6gwS+9gjfnmrt0t3MlCQluuIufFhUgohwcPWUXMSJ6
Po7E7GkRb1tnVfR8E68FDJGzodFyIshg
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:05:39 2025 by rpki-client