Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E868/746AF0B28D9C11EDB3E3CA1FC4F9AE02/wmQzcLfNsbYVmr0tfWdyxvbS-2U.mft
File:                     wmQzcLfNsbYVmr0tfWdyxvbS-2U.mft (raw, json)
Hash identifier:          5JmhnWF8OEG0++nNtTLrfGFgBZrRpgaV5pn/AAfYfok=
Subject key identifier:   94:99:8D:CB:F1:C7:66:77:A9:EC:C7:3B:11:28:26:E4:BC:EC:37:EC
Authority key identifier: C2:64:33:70:B7:CD:B1:B6:15:9A:BD:2D:7D:67:72:C6:F6:D2:FB:65
Certificate issuer:       /CN=A917E868/serialNumber=C2643370B7CDB1B6159ABD2D7D6772C6F6D2FB65
Certificate serial:       0186
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wmQzcLfNsbYVmr0tfWdyxvbS-2U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E868/746AF0B28D9C11EDB3E3CA1FC4F9AE02/wmQzcLfNsbYVmr0tfWdyxvbS-2U.mft
Manifest number:          0183
Signing time:             Fri 31 Jan 2025 02:55:21 +0000
Manifest this update:     Fri 31 Jan 2025 02:55:21 +0000
Manifest next update:     Fri 07 Feb 2025 02:55:21 +0000
Files and hashes:         1: wmQzcLfNsbYVmr0tfWdyxvbS-2U.crl (hash: 4ITx8T66nULshbUFrXcCUcRLkzywaYfpKDyIbk5kUUc=)
                          2: 34FF021A8DA111EDBDB7DC23C4F9AE02.roa (hash: n1asAh/kYK96PocnYNBrmITqyGqCFenAeW5UTm2vba0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 390 (0x186)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E868/serialNumber=C2643370B7CDB1B6159ABD2D7D6772C6F6D2FB65
        Validity
            Not Before: Jan 31 02:55:21 2025 GMT
            Not After : Feb  7 02:55:21 2025 GMT
        Subject: CN=679c3b99-a8bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:a4:5e:25:ab:f2:af:06:b7:d4:64:5c:94:a0:
                    64:0b:96:65:62:cd:37:89:fd:9b:4e:ca:c5:46:bf:
                    9c:e4:76:85:90:45:33:0a:4f:f1:6c:72:4c:48:9e:
                    dc:79:29:a9:f3:cc:cf:5c:5d:6e:9b:8b:8b:f4:62:
                    a8:cb:54:de:86:26:e8:55:11:93:c5:6a:a0:06:1c:
                    65:70:ff:83:89:ae:ee:93:3a:b3:35:a6:e4:bd:61:
                    f3:79:79:34:30:23:fb:21:ca:7c:b7:56:cf:de:80:
                    30:70:81:81:b6:74:37:2b:75:d4:43:b3:e1:1a:d5:
                    91:94:a8:e7:c2:0c:2e:72:df:96:2f:3f:e7:5d:7e:
                    54:b8:58:a4:ea:9c:44:66:dc:6c:9b:05:1b:f6:77:
                    a5:51:19:f2:f5:a7:1c:fa:97:08:ad:d7:5d:ee:d8:
                    1a:b6:90:f8:b0:01:22:1d:fb:11:9d:3b:ab:84:e8:
                    32:b4:32:2d:c0:a5:47:70:d3:25:7b:95:19:25:ee:
                    20:39:60:64:4e:bb:c9:10:06:10:2f:69:f8:81:97:
                    c2:39:ec:5e:d5:31:a3:aa:bf:65:31:48:e5:fa:6d:
                    21:a8:f0:a5:a0:cd:5b:e3:c3:6b:54:3c:54:9e:8f:
                    cf:f6:dd:aa:75:06:ad:12:8b:49:8d:f0:43:be:f3:
                    40:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:99:8D:CB:F1:C7:66:77:A9:EC:C7:3B:11:28:26:E4:BC:EC:37:EC
            X509v3 Authority Key Identifier:
                keyid:C2:64:33:70:B7:CD:B1:B6:15:9A:BD:2D:7D:67:72:C6:F6:D2:FB:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E868/746AF0B28D9C11EDB3E3CA1FC4F9AE02/wmQzcLfNsbYVmr0tfWdyxvbS-2U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wmQzcLfNsbYVmr0tfWdyxvbS-2U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E868/746AF0B28D9C11EDB3E3CA1FC4F9AE02/wmQzcLfNsbYVmr0tfWdyxvbS-2U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:38:f8:f6:e7:52:77:38:77:53:d8:b4:0e:73:0a:5c:7c:8f:
         ce:aa:9d:97:62:bc:05:b7:2a:46:a1:2f:0b:7a:e8:01:20:1c:
         3f:77:37:6b:e6:43:03:54:1a:32:7a:4a:d1:93:ef:1a:b0:00:
         f9:33:27:0d:8b:97:ad:34:89:d6:cf:61:94:0d:15:52:a9:f0:
         09:a1:9a:54:43:46:e0:f8:e7:c6:e5:d6:70:d9:33:f2:fb:7e:
         c6:ae:d7:c8:25:2f:52:cd:c4:46:9a:98:5e:3a:12:b9:39:d1:
         58:c1:2f:49:1d:b0:2d:57:a7:dd:5e:da:b8:46:0d:9d:55:6e:
         10:f7:bf:f7:0e:cd:73:78:41:9e:77:53:85:a2:b5:cd:86:f7:
         15:8a:17:1a:84:af:52:ea:e0:a7:15:2c:49:ad:b8:40:e1:e2:
         e4:9d:15:fa:4a:7a:88:b6:95:2c:d2:3a:45:de:03:9b:38:e0:
         df:d4:72:af:fa:a7:0d:10:fc:f0:21:09:2b:9c:b1:f2:81:e9:
         73:75:0c:71:30:76:09:54:e4:ba:73:2c:cf:c2:e3:f9:a0:bd:
         32:af:72:75:e8:25:ba:22:74:75:d7:3c:dd:dd:06:31:dc:aa:
         13:37:48:4e:d6:75:3a:c5:71:a0:e7:71:af:1d:36:4c:01:c8:
         9b:94:d0:1f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0U4NjgxMTAvBgNVBAUTKEMyNjQzMzcwQjdDREIxQjYxNTlBQkQyRDdENjc3MkM2
RjZEMkZCNjUwHhcNMjUwMTMxMDI1NTIxWhcNMjUwMjA3MDI1NTIxWjAYMRYwFAYD
VQQDEw02NzljM2I5OS1hOGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8KReJavyrwa31GRclKBkC5ZlYs03if2bTsrFRr+c5HaFkEUzCk/xbHJMSJ7c
eSmp88zPXF1um4uL9GKoy1TehiboVRGTxWqgBhxlcP+Dia7ukzqzNabkvWHzeXk0
MCP7Icp8t1bP3oAwcIGBtnQ3K3XUQ7PhGtWRlKjnwgwuct+WLz/nXX5UuFik6pxE
ZtxsmwUb9nelURny9acc+pcIrddd7tgatpD4sAEiHfsRnTurhOgytDItwKVHcNMl
e5UZJe4gOWBkTrvJEAYQL2n4gZfCOexe1TGjqr9lMUjl+m0hqPCloM1b48NrVDxU
no/P9t2qdQatEotJjfBDvvNASQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJSZjcvx
x2Z3qezHOxEoJuS87DfsMB8GA1UdIwQYMBaAFMJkM3C3zbG2FZq9LX1ncsb20vtl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTg2OC83NDZBRjBCMjhE
OUMxMUVEQjNFM0NBMUZDNEY5QUUwMi93bVF6Y0xmTnNiWVZtcjB0ZldkeXh2YlMt
MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dtUXpjTGZOc2JZVm1yMHRmV2R5eHZiUy0yVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RTg2OC83NDZBRjBCMjhEOUMxMUVEQjNFM0NBMUZDNEY5QUUwMi93bVF6Y0xmTnNi
WVZtcjB0ZldkeXh2YlMtMlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCoOPj251J3OHdT2LQOcwpcfI/Oqp2XYrwFtypGoS8LeugBIBw/dzdr
5kMDVBoyekrRk+8asAD5MycNi5etNInWz2GUDRVSqfAJoZpUQ0bg+OfG5dZw2TPy
+37GrtfIJS9SzcRGmpheOhK5OdFYwS9JHbAtV6fdXtq4Rg2dVW4Q97/3Ds1zeEGe
d1OForXNhvcVihcahK9S6uCnFSxJrbhA4eLknRX6SnqItpUs0jpF3gObOODf1HKv
+qcNEPzwIQkrnLHygelzdQxxMHYJVOS6cyzPwuP5oL0yr3J16CW6InR11zzd3QYx
3KoTN0hO1nU6xXGg53GvHTZMAciblNAf
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:17:35 2025 by rpki-client