Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft
File:                     y7RecR9QOMR1deb07gwOjFZ744g.mft (raw, json)
Hash identifier:          4gHGqSlJJwVzucLrob8qYW/XY61gmEdJIVk7X13dXSA=
Subject key identifier:   E3:76:2D:C0:1C:9A:2C:BC:9B:33:6F:9F:F9:C4:2E:EC:97:65:5B:A4
Authority key identifier: CB:B4:5E:71:1F:50:38:C4:75:75:E6:F4:EE:0C:0E:8C:56:7B:E3:88
Certificate issuer:       /CN=A9186CDF/serialNumber=CBB45E711F5038C47575E6F4EE0C0E8C567BE388
Certificate serial:       0742
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7RecR9QOMR1deb07gwOjFZ744g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft
Manifest number:          0E8B
Signing time:             Thu 30 Jan 2025 21:34:01 +0000
Manifest this update:     Thu 30 Jan 2025 21:34:01 +0000
Manifest next update:     Thu 06 Feb 2025 21:34:01 +0000
Files and hashes:         1: y7RecR9QOMR1deb07gwOjFZ744g.crl (hash: T7xe2YwE1U/+OxZjXiAwkryUghbdtE1aG7RpZDnCBhI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1858 (0x742)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186CDF/serialNumber=CBB45E711F5038C47575E6F4EE0C0E8C567BE388
        Validity
            Not Before: Jan 30 21:34:01 2025 GMT
            Not After : Feb  6 21:34:01 2025 GMT
        Subject: CN=679bf049-05a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c3:7c:80:ae:d4:ca:38:52:8b:27:9b:7e:24:
                    fa:64:d5:af:a0:9a:a8:fc:ab:f0:a1:b8:74:0f:b4:
                    90:c2:50:6b:20:4d:2f:ea:70:32:9c:82:d0:36:b2:
                    f5:e3:d4:ba:4a:51:48:88:54:7b:04:64:c1:69:40:
                    28:99:2e:ee:08:ed:18:2b:ea:d2:37:30:b4:f2:7f:
                    9a:db:61:c8:26:cd:69:cb:8e:ed:cd:c2:7b:3e:18:
                    14:d4:01:93:01:90:68:d7:5c:17:45:99:82:ef:0f:
                    03:c5:9d:c5:2b:52:b9:96:09:39:d6:11:64:b0:5e:
                    1b:29:0e:c7:fb:ee:b4:f9:ba:ac:f4:ba:84:9b:2f:
                    a6:9a:ca:75:ce:4f:4e:95:5f:49:bb:8d:69:f0:dd:
                    61:af:92:c6:d1:41:52:05:7a:c4:42:cf:67:50:de:
                    7f:8c:77:76:d1:cf:a2:d3:b8:af:c3:d8:f3:7f:53:
                    5c:4a:2d:aa:ad:1b:82:4d:ec:49:00:03:9f:e6:34:
                    92:5e:82:20:ac:67:a0:7f:57:21:5e:82:47:9b:ca:
                    6e:f8:ea:32:ca:b8:c2:25:7b:ed:d2:d2:1b:69:01:
                    b3:49:3f:e1:05:e1:03:df:db:ae:43:42:be:b7:54:
                    59:5d:af:07:3b:3d:98:ab:6a:76:0d:e8:ca:69:e1:
                    18:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:76:2D:C0:1C:9A:2C:BC:9B:33:6F:9F:F9:C4:2E:EC:97:65:5B:A4
            X509v3 Authority Key Identifier:
                keyid:CB:B4:5E:71:1F:50:38:C4:75:75:E6:F4:EE:0C:0E:8C:56:7B:E3:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7RecR9QOMR1deb07gwOjFZ744g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:4c:e9:6a:d5:b1:33:a6:09:ab:5e:3a:46:df:5e:70:5d:f2:
         a9:6b:bd:91:b4:e4:b1:b1:19:5c:be:c3:de:ee:f3:58:6c:97:
         cd:15:13:82:77:8a:1a:93:e1:1f:ae:5d:02:91:59:b4:52:a9:
         79:e4:fb:60:06:7d:c8:62:b7:8d:a8:3f:a8:1a:b3:51:5c:69:
         2c:7f:e0:3e:9e:6a:0a:46:32:9f:1b:63:73:78:cb:d4:6b:b2:
         71:c8:7b:1b:4f:99:e2:3c:90:c9:7d:61:78:15:f5:fb:1a:32:
         5d:1e:91:cc:9d:88:a8:af:b1:83:bd:fa:c3:c6:de:c6:5b:97:
         0a:66:98:f7:25:c7:9f:54:6e:fc:3a:f6:3d:38:2d:2d:0a:23:
         57:b4:e6:cc:88:c9:3f:ca:24:fb:7d:91:6a:5d:7f:db:58:89:
         95:e2:74:4e:e5:eb:41:77:81:52:65:ca:a5:02:65:4e:7d:52:
         5a:59:6f:6f:87:0a:73:2b:e8:02:dc:69:d0:ef:9b:bd:e4:5c:
         10:ba:1f:ad:69:91:51:c9:be:9c:33:29:7e:c1:3c:9f:49:64:
         f6:e4:4d:44:50:b6:f7:0a:39:a7:22:3d:8e:e6:f5:94:05:29:
         0d:5f:1d:fd:fd:12:42:a9:b1:d9:3c:5d:21:1e:f9:45:db:75:
         24:04:00:e4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB0IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODZDREYxMTAvBgNVBAUTKENCQjQ1RTcxMUY1MDM4QzQ3NTc1RTZGNEVFMEMwRThD
NTY3QkUzODgwHhcNMjUwMTMwMjEzNDAxWhcNMjUwMjA2MjEzNDAxWjAYMRYwFAYD
VQQDEw02NzliZjA0OS0wNWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxMN8gK7UyjhSiyebfiT6ZNWvoJqo/Kvwobh0D7SQwlBrIE0v6nAynILQNrL1
49S6SlFIiFR7BGTBaUAomS7uCO0YK+rSNzC08n+a22HIJs1py47tzcJ7PhgU1AGT
AZBo11wXRZmC7w8DxZ3FK1K5lgk51hFksF4bKQ7H++60+bqs9LqEmy+mmsp1zk9O
lV9Ju41p8N1hr5LG0UFSBXrEQs9nUN5/jHd20c+i07ivw9jzf1NcSi2qrRuCTexJ
AAOf5jSSXoIgrGegf1chXoJHm8pu+OoyyrjCJXvt0tIbaQGzST/hBeED39uuQ0K+
t1RZXa8HOz2Yq2p2DejKaeEYxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFON2LcAc
miy8mzNvn/nELuyXZVukMB8GA1UdIwQYMBaAFMu0XnEfUDjEdXXm9O4MDoxWe+OI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkNERi80NDgxRjBBODEx
REUxMUVCQjlGOUY3NzdDNEY5QUUwMi95N1JlY1I5UU9NUjFkZWIwN2d3T2pGWjc0
NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3k3UmVjUjlRT01SMWRlYjA3Z3dPakZaNzQ0Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NkNERi80NDgxRjBBODExREUxMUVCQjlGOUY3NzdDNEY5QUUwMi95N1JlY1I5UU9N
UjFkZWIwN2d3T2pGWjc0NGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAYTOlq1bEzpgmrXjpG315wXfKpa72RtOSxsRlcvsPe7vNYbJfNFROC
d4oak+Efrl0CkVm0Uql55PtgBn3IYreNqD+oGrNRXGksf+A+nmoKRjKfG2NzeMvU
a7JxyHsbT5niPJDJfWF4FfX7GjJdHpHMnYior7GDvfrDxt7GW5cKZpj3JcefVG78
OvY9OC0tCiNXtObMiMk/yiT7fZFqXX/bWImV4nRO5etBd4FSZcqlAmVOfVJaWW9v
hwpzK+gC3GnQ75u95FwQuh+taZFRyb6cMyl+wTyfSWT25E1EULb3CjmnIj2O5vWU
BSkNXx39/RJCqbHZPF0hHvlF23UkBADk
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:40:49 2025 by rpki-client