Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft
File:                     ZDUWCO4q6gdMnv-ukIxhKufc02k.mft (raw, json)
Hash identifier:          0eJGpx4l4yLhvrz0f/lIyhAbnRMsaZk6aRVSHr+AB/A=
Subject key identifier:   EC:F5:37:05:8B:24:A0:DE:48:FD:96:5C:F6:AE:00:E8:5C:44:EF:B2
Authority key identifier: 64:35:16:08:EE:2A:EA:07:4C:9E:FF:AE:90:8C:61:2A:E7:DC:D3:69
Certificate issuer:       /CN=A917A468/serialNumber=64351608EE2AEA074C9EFFAE908C612AE7DCD369
Certificate serial:       2D3B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft
Manifest number:          2D1B
Signing time:             Fri 31 Jan 2025 15:33:08 +0000
Manifest this update:     Fri 31 Jan 2025 15:33:07 +0000
Manifest next update:     Fri 07 Feb 2025 15:33:07 +0000
Files and hashes:         1: ZDUWCO4q6gdMnv-ukIxhKufc02k.crl (hash: JK3Z6tcOmc1imIsOqOaNJ1R4B/ajSQ+tVfgUcJ4Bxwc=)
                          2: 7C48D49CFFBE11EBB443B639C4F9AE02.roa (hash: /kSK+t6Uui5gY+E46gDVyS5fJCRJ3UL5yOuwfJ+DnWw=)
                          3: 2E9087A831D811ECA3C4CE3EC4F9AE02.roa (hash: peX1Vn1tpvxKT5ffW5rW/7Y8G0QyNA6fOUj8BiUa72c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11579 (0x2d3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A468/serialNumber=64351608EE2AEA074C9EFFAE908C612AE7DCD369
        Validity
            Not Before: Jan 31 15:33:07 2025 GMT
            Not After : Feb  7 15:33:07 2025 GMT
        Subject: CN=679ced34-2a78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b6:f4:21:6e:c1:48:a7:65:cc:94:1e:39:95:
                    fe:20:00:f4:3c:57:48:45:df:da:85:76:51:6d:29:
                    40:6e:3c:f8:aa:a4:8b:db:7e:e2:e7:a9:60:3f:d4:
                    4f:04:cb:44:28:3a:43:6a:25:0e:c7:9b:8f:2b:49:
                    dc:96:5f:4d:60:05:ef:e5:01:2d:19:f2:69:31:75:
                    62:6c:07:fd:d2:e7:11:c6:e6:b6:b0:b0:a8:e2:58:
                    72:b8:cb:b7:62:a7:7f:70:2b:55:ff:b5:51:c3:bb:
                    b3:f3:b6:62:ff:c1:57:fc:02:a7:3b:7d:37:6f:0f:
                    8c:02:e8:75:fc:3c:c8:9f:78:79:bb:9f:e0:09:1e:
                    3c:07:b0:67:9b:b6:b8:c9:38:05:4b:89:4a:94:df:
                    31:0b:dc:eb:e9:b8:d7:52:87:1e:74:cd:c5:22:4a:
                    11:3e:5b:31:23:56:54:b3:9e:1e:5a:02:95:9e:de:
                    a3:7b:b5:3e:d0:e0:64:92:c1:77:9a:97:64:b9:e8:
                    f6:79:bd:e7:6a:e7:cc:e1:af:90:27:00:19:92:49:
                    2f:5d:d9:51:6a:76:cd:75:ba:bd:d0:49:99:a3:d3:
                    38:1a:e1:7e:57:a3:da:1c:b4:cf:72:6b:1d:2e:90:
                    45:1d:70:21:5e:72:5a:b7:39:ab:b1:4c:d9:a2:cf:
                    1a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:F5:37:05:8B:24:A0:DE:48:FD:96:5C:F6:AE:00:E8:5C:44:EF:B2
            X509v3 Authority Key Identifier:
                keyid:64:35:16:08:EE:2A:EA:07:4C:9E:FF:AE:90:8C:61:2A:E7:DC:D3:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:f3:6c:93:4d:7c:ff:23:77:af:0b:2e:a6:57:d0:8f:ab:4b:
         db:2b:29:de:3e:f4:22:05:58:25:06:56:8c:c6:73:09:cf:19:
         f3:a9:f1:db:c0:12:1b:d2:3d:f1:3e:57:d8:f6:ae:47:58:f0:
         6d:53:4d:6e:16:eb:41:85:20:1c:a3:8b:34:59:1f:6d:b4:86:
         20:b6:40:4c:43:77:31:e8:de:c2:46:bb:0f:55:54:9c:08:0b:
         62:b7:f9:a1:f1:3d:75:f7:7a:07:b1:8b:81:da:f1:8b:7f:75:
         81:39:b4:90:c0:e9:4f:75:21:fb:94:cf:14:6d:eb:5a:9b:70:
         44:df:f3:1e:06:21:da:db:0a:93:77:af:87:80:98:08:0d:8d:
         b2:2c:7e:ba:b0:29:9c:4d:c2:7b:e7:e5:39:24:38:10:d5:1e:
         3c:ff:d8:42:1a:6c:94:8b:d1:7e:24:b8:1f:1f:ed:64:a6:96:
         76:98:27:46:d7:fb:e4:32:85:34:6e:b0:a5:67:c0:44:09:07:
         5a:07:22:ef:89:46:92:c5:00:b4:69:e9:92:52:80:65:b8:93:
         0f:8a:d5:b8:e5:fb:b2:9b:ac:4e:41:24:eb:7d:cb:15:a8:a5:
         97:59:5e:6d:11:88:a4:ea:46:c0:e6:d2:61:3d:01:34:3c:ec:
         1e:6a:21:19
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICLTswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0E0NjgxMTAvBgNVBAUTKDY0MzUxNjA4RUUyQUVBMDc0QzlFRkZBRTkwOEM2MTJB
RTdEQ0QzNjkwHhcNMjUwMTMxMTUzMzA3WhcNMjUwMjA3MTUzMzA3WjAYMRYwFAYD
VQQDEw02NzljZWQzNC0yYTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA07b0IW7BSKdlzJQeOZX+IAD0PFdIRd/ahXZRbSlAbjz4qqSL237i56lgP9RP
BMtEKDpDaiUOx5uPK0ncll9NYAXv5QEtGfJpMXVibAf90ucRxua2sLCo4lhyuMu3
Yqd/cCtV/7VRw7uz87Zi/8FX/AKnO303bw+MAuh1/DzIn3h5u5/gCR48B7Bnm7a4
yTgFS4lKlN8xC9zr6bjXUocedM3FIkoRPlsxI1ZUs54eWgKVnt6je7U+0OBkksF3
mpdkuej2eb3naufM4a+QJwAZkkkvXdlRanbNdbq90EmZo9M4GuF+V6PaHLTPcmsd
LpBFHXAhXnJatzmrsUzZos8a1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOz1NwWL
JKDeSP2WXPauAOhcRO+yMB8GA1UdIwQYMBaAFGQ1FgjuKuoHTJ7/rpCMYSrn3NNp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTQ2OC9DRTQ5NDM3NjhD
M0ExMUUzQkEwRUFEMkM1OTExRUEzMi9aRFVXQ080cTZnZE1udi11a0l4aEt1ZmMw
MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pEVVdDTzRxNmdkTW52LXVrSXhoS3VmYzAyay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QTQ2OC9DRTQ5NDM3NjhDM0ExMUUzQkEwRUFEMkM1OTExRUEzMi9aRFVXQ080cTZn
ZE1udi11a0l4aEt1ZmMwMmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDM82yTTXz/I3evCy6mV9CPq0vbKynePvQiBVglBlaMxnMJzxnzqfHb
wBIb0j3xPlfY9q5HWPBtU01uFutBhSAco4s0WR9ttIYgtkBMQ3cx6N7CRrsPVVSc
CAtit/mh8T1193oHsYuB2vGLf3WBObSQwOlPdSH7lM8Ubetam3BE3/MeBiHa2wqT
d6+HgJgIDY2yLH66sCmcTcJ75+U5JDgQ1R48/9hCGmyUi9F+JLgfH+1kppZ2mCdG
1/vkMoU0brClZ8BECQdaByLviUaSxQC0aemSUoBluJMPitW45fuym6xOQSTrfcsV
qKWXWV5tEYik6kbA5tJhPQE0POweaiEZ
-----END CERTIFICATE-----
Generated at Sun Apr 27 13:56:56 2025 by rpki-client