Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft
File:                     fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft (raw, json)
Hash identifier:          +pIjHySuuX1yMMlwmAkbnG//fjtBDOVbGpNfFEYPjHw=
Subject key identifier:   1D:99:AE:79:20:DE:DC:E0:79:7D:AB:DF:F7:CE:99:5E:0E:84:2D:4C
Authority key identifier: 7E:72:D8:01:B3:8A:72:AB:4B:03:76:E1:2C:95:41:24:AA:E4:3C:6D
Certificate issuer:       /CN=A918753F/serialNumber=7E72D801B38A72AB4B0376E12C954124AAE43C6D
Certificate serial:       086A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnLYAbOKcqtLA3bhLJVBJKrkPG0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft
Manifest number:          085F
Signing time:             Thu 30 Jan 2025 20:43:53 +0000
Manifest this update:     Thu 30 Jan 2025 20:43:52 +0000
Manifest next update:     Thu 06 Feb 2025 20:43:52 +0000
Files and hashes:         1: fnLYAbOKcqtLA3bhLJVBJKrkPG0.crl (hash: IYovQIhESL7EJmRKp/UBPn8SVxokly+cFzRxMkC5A7I=)
                          2: 10A6E062B70A11EDB851464EC4F9AE02.roa (hash: FH1SU9GKJvbucv0gXmHk6Vc7dPieI2aucBrxBlxHAdE=)
                          3: 38B92F54E17D11EDBCAFC081C4F9AE02.roa (hash: KcabN84FuC1RCZKB2biZEnUyMb0N5RBlFWlu2grfP8Y=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2154 (0x86a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918753F/serialNumber=7E72D801B38A72AB4B0376E12C954124AAE43C6D
        Validity
            Not Before: Jan 30 20:43:52 2025 GMT
            Not After : Feb  6 20:43:52 2025 GMT
        Subject: CN=679be489-15c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:69:1f:57:e6:19:a1:f6:f3:a9:ac:f3:73:93:
                    af:8d:40:96:76:59:48:eb:11:64:87:98:05:a8:f0:
                    3a:6c:f1:9d:2d:28:14:73:23:9b:0b:87:58:9d:f5:
                    6c:a3:8b:d2:e2:ea:d6:41:0b:7b:3a:ee:1d:0d:0e:
                    08:b6:32:b2:35:4b:92:3b:9a:cc:5a:3d:70:ea:54:
                    8e:ad:92:10:ba:8b:29:aa:cc:f2:a5:9b:7c:86:17:
                    b4:0e:f6:b7:38:ae:81:c2:08:ae:f7:e8:c1:5a:f0:
                    ab:15:6d:0e:ee:27:88:ab:0c:46:8f:0a:1b:6b:05:
                    40:5e:06:0b:1e:42:1e:73:3f:8e:e4:c5:29:30:f0:
                    25:48:73:11:32:95:b1:e1:c7:c7:7e:74:09:50:14:
                    8b:7c:30:d4:da:79:74:10:6f:32:c5:ac:32:a0:4a:
                    da:e3:a2:7d:c9:7e:6a:95:30:22:50:47:f5:e6:e4:
                    d1:b7:05:0c:bb:25:bf:b6:87:20:6b:b7:ec:0a:ff:
                    ab:cb:bf:14:90:b4:e8:a8:1b:9f:be:0d:b1:63:6d:
                    09:cc:1d:d7:96:07:5c:a7:bd:15:ec:fe:35:f6:6a:
                    9c:ed:73:3a:54:76:ba:51:a9:4d:93:a4:a3:28:6a:
                    e7:0f:10:35:6f:57:6d:77:2d:a9:56:a9:9a:a9:e1:
                    54:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:99:AE:79:20:DE:DC:E0:79:7D:AB:DF:F7:CE:99:5E:0E:84:2D:4C
            X509v3 Authority Key Identifier:
                keyid:7E:72:D8:01:B3:8A:72:AB:4B:03:76:E1:2C:95:41:24:AA:E4:3C:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnLYAbOKcqtLA3bhLJVBJKrkPG0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:ed:77:dd:36:87:82:f3:73:e4:ab:86:be:cd:f4:75:ad:0d:
         45:6d:79:54:58:69:c2:90:6d:dd:c2:e6:07:3a:37:c6:01:3a:
         52:bc:d9:62:c0:8e:55:43:c9:71:41:77:40:5b:7b:2c:12:bf:
         b2:4d:f5:0e:af:fa:0e:c1:c6:2d:f2:5e:1c:a8:bb:c2:d9:27:
         d0:50:e5:d7:93:5a:96:e8:36:7d:5b:af:bc:86:46:7e:99:e3:
         31:c0:a3:2a:43:1e:78:96:33:19:14:22:59:51:86:92:4c:b2:
         c4:fc:62:ed:6a:40:17:76:9b:5e:d4:e4:a0:a4:37:20:f1:41:
         a6:c8:91:57:f4:6c:9e:fc:8f:21:82:b2:93:58:83:21:c1:e8:
         e6:89:e3:ec:f4:37:76:1e:9c:26:ef:10:94:c1:71:7b:75:8b:
         8b:ae:7b:aa:0c:36:40:14:f8:22:be:c1:2a:f2:07:05:1a:42:
         8e:b6:67:52:7a:e3:81:ae:59:e5:67:0c:e2:b5:7a:08:7a:a1:
         0f:31:46:eb:71:33:82:5c:30:ed:5b:10:47:a9:77:06:30:6c:
         97:1f:05:c5:f3:02:af:8d:a8:92:61:81:42:93:d6:18:19:78:
         8c:bd:f1:e6:dc:4c:c8:50:3b:12:b2:46:8f:dd:31:cd:d1:35:
         f7:80:26:1c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCGowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODc1M0YxMTAvBgNVBAUTKDdFNzJEODAxQjM4QTcyQUI0QjAzNzZFMTJDOTU0MTI0
QUFFNDNDNkQwHhcNMjUwMTMwMjA0MzUyWhcNMjUwMjA2MjA0MzUyWjAYMRYwFAYD
VQQDEw02NzliZTQ4OS0xNWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA02kfV+YZofbzqazzc5OvjUCWdllI6xFkh5gFqPA6bPGdLSgUcyObC4dYnfVs
o4vS4urWQQt7Ou4dDQ4ItjKyNUuSO5rMWj1w6lSOrZIQuospqszypZt8hhe0Dva3
OK6Bwgiu9+jBWvCrFW0O7ieIqwxGjwobawVAXgYLHkIecz+O5MUpMPAlSHMRMpWx
4cfHfnQJUBSLfDDU2nl0EG8yxawyoEra46J9yX5qlTAiUEf15uTRtwUMuyW/tocg
a7fsCv+ry78UkLToqBufvg2xY20JzB3Xlgdcp70V7P419mqc7XM6VHa6UalNk6Sj
KGrnDxA1b1dtdy2pVqmaqeFU1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB2Zrnkg
3tzgeX2r3/fOmV4OhC1MMB8GA1UdIwQYMBaAFH5y2AGzinKrSwN24SyVQSSq5Dxt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzUzRi9CREE1N0ZGRUJD
MTYxMUVBOUYyQjc0MTJDNEY5QUUwMi9mbkxZQWJPS2NxdExBM2JoTEpWQkpLcmtQ
RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZuTFlBYk9LY3F0TEEzYmhMSlZCSktya1BHMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NzUzRi9CREE1N0ZGRUJDMTYxMUVBOUYyQjc0MTJDNEY5QUUwMi9mbkxZQWJPS2Nx
dExBM2JoTEpWQkpLcmtQRzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCa7XfdNoeC83Pkq4a+zfR1rQ1FbXlUWGnCkG3dwuYHOjfGATpSvNli
wI5VQ8lxQXdAW3ssEr+yTfUOr/oOwcYt8l4cqLvC2SfQUOXXk1qW6DZ9W6+8hkZ+
meMxwKMqQx54ljMZFCJZUYaSTLLE/GLtakAXdpte1OSgpDcg8UGmyJFX9Gye/I8h
grKTWIMhwejmiePs9Dd2Hpwm7xCUwXF7dYuLrnuqDDZAFPgivsEq8gcFGkKOtmdS
euOBrlnlZwzitXoIeqEPMUbrcTOCXDDtWxBHqXcGMGyXHwXF8wKvjaiSYYFCk9YY
GXiMvfHm3EzIUDsSskaP3THN0TX3gCYc
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:38:05 2025 by rpki-client