Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.mft
File:                     dt6sBgRg9vilvVgpnFOryvmx01g.mft (raw, json)
Hash identifier:          Qex981nUloNIB0NSjFKQCZ4lulsw6kIz0tFWgJnQyB4=
Subject key identifier:   DC:6E:34:90:E3:67:4E:E7:66:66:9C:FC:B3:00:FD:8A:23:FB:F2:98
Authority key identifier: 76:DE:AC:06:04:60:F6:F8:A5:BD:58:29:9C:53:AB:CA:F9:B1:D3:58
Certificate issuer:       /CN=A9171172/serialNumber=76DEAC060460F6F8A5BD58299C53ABCAF9B1D358
Certificate serial:       0740
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dt6sBgRg9vilvVgpnFOryvmx01g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.mft
Manifest number:          0734
Signing time:             Thu 30 Jan 2025 21:39:57 +0000
Manifest this update:     Thu 30 Jan 2025 21:39:56 +0000
Manifest next update:     Thu 06 Feb 2025 21:39:56 +0000
Files and hashes:         1: dt6sBgRg9vilvVgpnFOryvmx01g.crl (hash: 7OJmV+S7O3ucvCFqsN3Y9M7VXh7O41rwxkRGutzXBK0=)
                          2: 0A94FC36198711EB80EAEF4CC4F9AE02.roa (hash: pSgSIQQUaLX2o2nTmQmGl/Qpmc9pAZuJpTvLRIL92IA=)
                          3: 6DEC60FC198811EBAD4C384FC4F9AE02.roa (hash: 00f5UezOFyyqRBMxbkiUS7o0hS0GGG4xnKYK/4mdm8c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1856 (0x740)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171172/serialNumber=76DEAC060460F6F8A5BD58299C53ABCAF9B1D358
        Validity
            Not Before: Jan 30 21:39:56 2025 GMT
            Not After : Feb  6 21:39:56 2025 GMT
        Subject: CN=679bf1ad-d9f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2f:8c:1c:04:ab:6a:17:c8:23:9b:71:3b:e8:
                    ad:29:f2:79:8d:a0:69:77:96:6d:68:c6:60:bd:c1:
                    c1:79:0e:b2:6f:08:3b:68:66:60:15:fb:28:20:6e:
                    77:c4:e9:84:2c:e4:d0:6c:1e:15:89:6d:ac:ff:88:
                    79:f5:9e:d3:5d:4b:57:5c:73:d5:39:41:35:6d:7d:
                    08:70:e2:fb:47:99:49:f5:d8:31:9e:a1:ac:bf:25:
                    63:ad:e7:00:54:ce:11:97:08:7a:89:1f:e7:97:5a:
                    65:41:55:e4:bc:8a:ea:9a:6c:cd:6b:32:7e:00:5b:
                    e0:47:8a:ce:07:74:fd:82:48:bf:cd:54:9f:0f:9a:
                    f0:e8:fb:1d:09:aa:3f:c3:91:7c:f9:ff:d4:97:34:
                    2d:7c:11:dc:9f:c2:7a:c8:a2:c2:f6:92:e2:5c:dc:
                    92:57:60:9e:49:f4:9f:0c:93:7b:a7:89:57:49:79:
                    1a:61:41:6b:b3:ee:4a:9a:02:b3:25:0c:fd:43:cd:
                    57:66:b4:d0:72:a2:22:b1:4c:b4:b3:b3:df:e5:61:
                    9f:e4:91:a1:0b:83:28:cc:40:2e:14:9a:24:73:34:
                    d9:cd:ae:ef:06:4a:a2:3d:6a:ae:8b:18:5d:05:23:
                    c4:8c:5f:45:f0:37:a6:99:dc:a8:80:25:da:be:22:
                    19:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:6E:34:90:E3:67:4E:E7:66:66:9C:FC:B3:00:FD:8A:23:FB:F2:98
            X509v3 Authority Key Identifier:
                keyid:76:DE:AC:06:04:60:F6:F8:A5:BD:58:29:9C:53:AB:CA:F9:B1:D3:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dt6sBgRg9vilvVgpnFOryvmx01g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:35:04:f9:68:57:ea:4e:b6:b2:d6:29:e8:d2:c5:6d:8a:de:
         aa:0d:a0:00:36:76:7c:f5:3f:51:7a:2f:99:b6:90:47:bd:e0:
         01:b1:ec:98:29:b0:2b:e3:40:3e:65:31:3a:1c:4b:42:2f:1f:
         01:30:e4:24:b2:7d:8e:32:3a:97:d2:89:55:9c:3f:be:e2:3a:
         32:c0:d2:3c:d3:34:6e:62:73:43:cc:8d:09:a0:23:28:26:fb:
         e3:1b:4c:44:bb:a9:b6:d7:3c:a9:fb:37:3b:2b:25:2b:97:d5:
         19:33:42:b9:67:83:e5:17:6c:a8:ad:4b:c3:d9:c5:49:42:4a:
         a0:f2:4d:2c:c0:8f:2d:2a:9c:47:a6:e7:dd:17:d0:4c:b0:bd:
         06:9c:aa:57:14:1a:2c:79:64:33:ff:a7:2b:e4:f5:9a:ad:cd:
         b4:a4:ce:40:17:fe:18:4d:fa:b5:5a:9c:d8:c9:2a:41:1d:d7:
         b2:51:ee:0a:e3:9c:3b:1e:7e:54:55:c3:e1:96:c4:0e:f2:a5:
         41:df:10:f2:5e:b8:df:97:0a:e8:61:dd:89:0d:1a:b0:be:9b:
         7d:0d:c6:31:ed:5f:8b:56:a6:53:d7:2e:9f:b6:5a:d2:b3:5a:
         bb:c1:84:ae:3c:3b:ec:fc:98:1f:0e:ef:d0:9f:24:cd:b6:0d:
         ec:d3:59:91
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB0AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzExNzIxMTAvBgNVBAUTKDc2REVBQzA2MDQ2MEY2RjhBNUJENTgyOTlDNTNBQkNB
RjlCMUQzNTgwHhcNMjUwMTMwMjEzOTU2WhcNMjUwMjA2MjEzOTU2WjAYMRYwFAYD
VQQDEw02NzliZjFhZC1kOWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvy+MHASrahfII5txO+itKfJ5jaBpd5ZtaMZgvcHBeQ6ybwg7aGZgFfsoIG53
xOmELOTQbB4ViW2s/4h59Z7TXUtXXHPVOUE1bX0IcOL7R5lJ9dgxnqGsvyVjrecA
VM4Rlwh6iR/nl1plQVXkvIrqmmzNazJ+AFvgR4rOB3T9gki/zVSfD5rw6PsdCao/
w5F8+f/UlzQtfBHcn8J6yKLC9pLiXNySV2CeSfSfDJN7p4lXSXkaYUFrs+5KmgKz
JQz9Q81XZrTQcqIisUy0s7Pf5WGf5JGhC4MozEAuFJokczTZza7vBkqiPWquixhd
BSPEjF9F8DemmdyogCXaviIZFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNxuNJDj
Z07nZmac/LMA/Yoj+/KYMB8GA1UdIwQYMBaAFHberAYEYPb4pb1YKZxTq8r5sdNY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTE3Mi84MTU4M0FCRTE4
QkUxMUVCQUMxMERFNDZDNEY5QUUwMi9kdDZzQmdSZzl2aWx2VmdwbkZPcnl2bXgw
MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2R0NnNCZ1JnOXZpbHZWZ3BuRk9yeXZteDAxZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MTE3Mi84MTU4M0FCRTE4QkUxMUVCQUMxMERFNDZDNEY5QUUwMi9kdDZzQmdSZzl2
aWx2VmdwbkZPcnl2bXgwMWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQADNQT5aFfqTray1ino0sVtit6qDaAANnZ89T9Rei+ZtpBHveABseyY
KbAr40A+ZTE6HEtCLx8BMOQksn2OMjqX0olVnD++4joywNI80zRuYnNDzI0JoCMo
JvvjG0xEu6m21zyp+zc7KyUrl9UZM0K5Z4PlF2yorUvD2cVJQkqg8k0swI8tKpxH
pufdF9BMsL0GnKpXFBoseWQz/6cr5PWarc20pM5AF/4YTfq1WpzYySpBHdeyUe4K
45w7Hn5UVcPhlsQO8qVB3xDyXrjflwroYd2JDRqwvpt9DcYx7V+LVqZT1y6ftlrS
s1q7wYSuPDvs/JgfDu/QnyTNtg3s01mR
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:32:08 2025 by rpki-client