Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917EFA9/ED68B5F031A511EEBEF8BD2AC4F9AE02/e5GosBHWGcQnHUUgOg4z2Rhe94E.mft
File:                     e5GosBHWGcQnHUUgOg4z2Rhe94E.mft (raw, json)
Hash identifier:          sxPQT69kIiKdf6wmB/ekt9N8q/H4g5RZvpFd+f95JGI=
Subject key identifier:   32:75:FC:16:EB:D7:4C:85:F6:9A:5B:60:6E:CF:6C:F0:96:BB:BC:37
Authority key identifier: 7B:91:A8:B0:11:D6:19:C4:27:1D:45:20:3A:0E:33:D9:18:5E:F7:81
Certificate issuer:       /CN=A917EFA9/serialNumber=7B91A8B011D619C4271D45203A0E33D9185EF781
Certificate serial:       0132
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5GosBHWGcQnHUUgOg4z2Rhe94E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917EFA9/ED68B5F031A511EEBEF8BD2AC4F9AE02/e5GosBHWGcQnHUUgOg4z2Rhe94E.mft
Manifest number:          0125
Signing time:             Fri 31 Jan 2025 03:55:35 +0000
Manifest this update:     Fri 31 Jan 2025 03:55:35 +0000
Manifest next update:     Fri 07 Feb 2025 03:55:35 +0000
Files and hashes:         1: e5GosBHWGcQnHUUgOg4z2Rhe94E.crl (hash: Vc0Mb8kYeXjpXsMFIiR8NWpR2mC91LYcS4JFmasq/rk=)
                          2: 1468305C31A811EE939F1D33C4F9AE02.roa (hash: A0nJe/MkW8TSZdk/E2Vu0knizTlyVLUt37DSyW+bHLE=)
                          3: 113D35904DD611EE8F798349C4F9AE02.roa (hash: /egOGavRQgmetbzvLfczJLgMzHXL9RZQguM8QCgkO14=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 306 (0x132)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917EFA9/serialNumber=7B91A8B011D619C4271D45203A0E33D9185EF781
        Validity
            Not Before: Jan 31 03:55:35 2025 GMT
            Not After : Feb  7 03:55:35 2025 GMT
        Subject: CN=679c49b7-9e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:77:cd:d6:69:96:85:16:91:8a:cf:2d:d7:a4:
                    65:37:e9:5d:f6:f4:68:51:9f:fe:64:6f:ef:4e:9a:
                    36:3f:bb:80:45:8e:00:3b:a1:69:19:47:31:7b:ac:
                    ae:71:1b:c9:63:a8:4a:47:31:36:0f:bf:52:91:0b:
                    83:6a:a5:40:88:d7:d4:07:01:c1:17:0e:78:32:ac:
                    22:ad:eb:04:10:70:85:1b:aa:82:b9:1f:81:e7:9a:
                    94:5b:d4:95:05:07:8d:da:53:7d:4d:d3:82:3c:1a:
                    bb:1b:ba:dc:67:5d:e3:8f:ec:21:cb:ff:13:a0:8b:
                    15:24:dd:5f:9d:c7:ea:13:8c:41:6b:7b:0d:00:48:
                    cd:ea:f8:c1:7a:fe:3e:4d:6a:20:ea:fe:be:9d:df:
                    26:47:12:0d:d1:a4:a0:b2:bd:9e:d5:93:6b:65:bb:
                    82:e9:d2:db:72:95:db:ea:da:81:8c:2a:c5:63:11:
                    59:c9:7f:77:41:b4:9c:9d:bc:a8:78:1b:59:3d:77:
                    d5:51:e6:39:cb:bf:52:9f:e5:b1:29:82:1c:11:e9:
                    0f:b4:82:d3:0a:49:86:f8:5f:4c:d7:7c:1a:5e:d0:
                    6c:ba:2c:a3:02:36:45:d1:bc:41:c8:88:82:d0:53:
                    5d:a2:46:e6:65:9f:87:7d:82:13:7b:ba:3f:b6:40:
                    f8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:75:FC:16:EB:D7:4C:85:F6:9A:5B:60:6E:CF:6C:F0:96:BB:BC:37
            X509v3 Authority Key Identifier:
                keyid:7B:91:A8:B0:11:D6:19:C4:27:1D:45:20:3A:0E:33:D9:18:5E:F7:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917EFA9/ED68B5F031A511EEBEF8BD2AC4F9AE02/e5GosBHWGcQnHUUgOg4z2Rhe94E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5GosBHWGcQnHUUgOg4z2Rhe94E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EFA9/ED68B5F031A511EEBEF8BD2AC4F9AE02/e5GosBHWGcQnHUUgOg4z2Rhe94E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:76:df:08:71:f1:88:ef:5e:0b:a3:22:b0:fd:94:be:54:24:
         1a:ba:2e:db:6a:d7:da:30:81:12:f3:dc:5c:29:82:30:46:62:
         b7:0e:ad:fe:6b:13:4d:58:d0:f2:e4:8e:dd:ce:f5:3a:21:6e:
         12:a2:25:19:54:2b:2a:38:6d:3e:65:04:60:41:a1:8b:bc:6c:
         40:09:57:d6:ce:48:77:b6:8d:d4:6c:d2:14:97:63:38:e0:ee:
         cd:12:33:b5:24:a3:f3:97:01:29:78:4d:09:e5:e3:f8:3a:f0:
         2c:b2:66:74:c7:20:09:4e:04:1f:36:e1:ea:41:6f:ac:ee:e5:
         bd:17:e6:7e:1c:5a:df:71:fa:91:20:4d:f0:33:cd:1a:46:9f:
         a3:f7:78:c5:f3:eb:b3:5f:85:7d:0d:2e:a0:c0:2b:60:2d:20:
         e9:54:0d:13:05:ce:c0:aa:0e:0b:b4:8d:81:76:e5:de:94:14:
         af:35:70:2b:39:5d:54:30:d5:cb:f1:ec:d7:6b:8f:58:02:65:
         72:20:94:a1:e0:50:aa:26:e4:32:14:a5:07:13:50:45:9f:85:
         bf:ce:66:0b:c8:e9:1e:9b:e1:62:05:3a:44:39:2a:e6:fd:1d:
         aa:8f:0f:8f:64:e1:43:f8:d2:a6:83:37:ae:de:26:dc:95:1d:
         59:4e:51:ba
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VGQTkxMTAvBgNVBAUTKDdCOTFBOEIwMTFENjE5QzQyNzFENDUyMDNBMEUzM0Q5
MTg1RUY3ODEwHhcNMjUwMTMxMDM1NTM1WhcNMjUwMjA3MDM1NTM1WjAYMRYwFAYD
VQQDEw02NzljNDliNy05ZTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7HfN1mmWhRaRis8t16RlN+ld9vRoUZ/+ZG/vTpo2P7uARY4AO6FpGUcxe6yu
cRvJY6hKRzE2D79SkQuDaqVAiNfUBwHBFw54MqwiresEEHCFG6qCuR+B55qUW9SV
BQeN2lN9TdOCPBq7G7rcZ13jj+why/8ToIsVJN1fncfqE4xBa3sNAEjN6vjBev4+
TWog6v6+nd8mRxIN0aSgsr2e1ZNrZbuC6dLbcpXb6tqBjCrFYxFZyX93QbScnbyo
eBtZPXfVUeY5y79Sn+WxKYIcEekPtILTCkmG+F9M13waXtBsuiyjAjZF0bxByIiC
0FNdokbmZZ+HfYITe7o/tkD4wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDJ1/Bbr
10yF9ppbYG7PbPCWu7w3MB8GA1UdIwQYMBaAFHuRqLAR1hnEJx1FIDoOM9kYXveB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUZBOS9FRDY4QjVGMDMx
QTUxMUVFQkVGOEJEMkFDNEY5QUUwMi9lNUdvc0JIV0djUW5IVVVnT2c0ejJSaGU5
NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2U1R29zQkhXR2NRbkhVVWdPZzR6MlJoZTk0RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RUZBOS9FRDY4QjVGMDMxQTUxMUVFQkVGOEJEMkFDNEY5QUUwMi9lNUdvc0JIV0dj
UW5IVVVnT2c0ejJSaGU5NEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBQdt8IcfGI714LoyKw/ZS+VCQaui7batfaMIES89xcKYIwRmK3Dq3+
axNNWNDy5I7dzvU6IW4SoiUZVCsqOG0+ZQRgQaGLvGxACVfWzkh3to3UbNIUl2M4
4O7NEjO1JKPzlwEpeE0J5eP4OvAssmZ0xyAJTgQfNuHqQW+s7uW9F+Z+HFrfcfqR
IE3wM80aRp+j93jF8+uzX4V9DS6gwCtgLSDpVA0TBc7Aqg4LtI2BduXelBSvNXAr
OV1UMNXL8ezXa49YAmVyIJSh4FCqJuQyFKUHE1BFn4W/zmYLyOkem+FiBTpEOSrm
/R2qjw+PZOFD+NKmgzeu3ibclR1ZTlG6
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:35:20 2025 by rpki-client