Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.mft
File:                     7LIDs03q4KEdAVCjDvK0opkdepg.mft (raw, json)
Hash identifier:          cQevNFuB1b9SkZgnHfMXmRxpREz2jolwT18SEIuK+xU=
Subject key identifier:   67:89:F7:17:CE:CF:6E:E1:A1:85:66:8C:8E:21:F5:42:24:5A:27:62
Authority key identifier: EC:B2:03:B3:4D:EA:E0:A1:1D:01:50:A3:0E:F2:B4:A2:99:1D:7A:98
Certificate issuer:       /CN=A9189529/serialNumber=ECB203B34DEAE0A11D0150A30EF2B4A2991D7A98
Certificate serial:       198B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LIDs03q4KEdAVCjDvK0opkdepg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.mft
Manifest number:          198B
Signing time:             Fri 31 Jan 2025 16:25:02 +0000
Manifest this update:     Fri 31 Jan 2025 16:25:01 +0000
Manifest next update:     Fri 07 Feb 2025 16:25:01 +0000
Files and hashes:         1: 7LIDs03q4KEdAVCjDvK0opkdepg.crl (hash: G3ungfNn3ovcguuQ9uYDtPxnKbwwLiWdDirniAGpdFQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6539 (0x198b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189529/serialNumber=ECB203B34DEAE0A11D0150A30EF2B4A2991D7A98
        Validity
            Not Before: Jan 31 16:25:01 2025 GMT
            Not After : Feb  7 16:25:01 2025 GMT
        Subject: CN=679cf95e-3733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e4:84:0b:a3:43:49:b0:b3:97:b5:b0:2d:6c:
                    79:60:35:b5:65:09:f2:5b:c0:35:37:68:4f:35:86:
                    56:fd:70:e9:b8:79:1c:de:12:17:61:23:5e:f0:a7:
                    16:09:96:70:a8:7f:74:ee:ad:eb:12:c7:d5:c4:76:
                    82:6a:4c:61:ce:ee:d4:2c:a7:6b:b8:e3:76:8c:99:
                    0a:22:3c:19:ee:2b:0d:a4:39:26:07:b4:6a:66:99:
                    12:6d:b5:78:7c:08:11:26:3e:e2:9c:83:38:e4:78:
                    db:b8:35:25:ef:a5:b6:86:c8:11:8e:1e:d1:e5:2b:
                    66:1d:a7:46:c2:6a:ad:a2:5d:ec:4a:34:33:58:27:
                    8b:1a:2b:61:e7:68:41:67:42:48:e6:7b:4d:8c:2c:
                    75:42:a1:9c:54:a6:71:3c:1b:18:3d:05:e7:eb:11:
                    f2:85:0a:08:57:43:37:b4:a8:5f:2c:1a:b9:2f:eb:
                    c6:44:f1:87:2b:6a:61:0d:1c:f3:20:92:23:66:6b:
                    b0:a6:4c:0e:a3:99:c7:ac:82:e1:78:cb:0f:31:8c:
                    a4:18:90:5f:b9:47:d1:bc:d4:74:29:60:63:d5:1d:
                    88:8e:0a:4a:cd:77:63:b7:55:75:b5:f2:6a:50:9f:
                    3e:c9:f6:6f:c1:c5:cd:f7:38:68:0c:9d:29:97:cd:
                    48:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:89:F7:17:CE:CF:6E:E1:A1:85:66:8C:8E:21:F5:42:24:5A:27:62
            X509v3 Authority Key Identifier:
                keyid:EC:B2:03:B3:4D:EA:E0:A1:1D:01:50:A3:0E:F2:B4:A2:99:1D:7A:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LIDs03q4KEdAVCjDvK0opkdepg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:0e:df:ea:35:52:fb:02:29:56:ce:72:5a:ea:78:07:6c:6a:
         f3:bc:c3:67:95:bb:cd:d4:93:08:ef:5e:63:0f:89:1f:ad:ce:
         e0:48:2f:e8:a8:2f:61:7b:d5:74:78:77:e8:df:db:f4:0f:65:
         41:97:eb:44:0b:7c:d7:84:f1:2c:20:a5:24:e5:9d:01:07:69:
         2d:95:5b:21:b1:72:e3:0a:b4:9d:93:90:7d:a3:8a:a4:7c:0b:
         0e:02:88:40:2a:d4:b1:4c:43:ae:c8:fe:7c:c3:ad:6c:0d:e1:
         e1:e8:91:ed:9d:ff:d3:62:46:66:19:c4:6c:05:2d:65:4d:3f:
         a9:a4:2b:93:5d:71:9b:21:41:36:87:77:b9:9d:09:24:77:6f:
         4d:82:53:8f:c1:fa:88:56:f2:d7:4d:a8:74:95:9a:a6:4a:77:
         46:f8:64:b4:03:0d:5d:5e:6c:98:8c:0e:97:1b:a5:ab:88:8f:
         5c:39:85:42:d5:0b:f1:f1:85:fa:c3:2a:d1:eb:9b:1e:2d:62:
         ce:a0:53:e0:a2:26:06:c3:36:65:5d:36:e9:9d:0b:c0:ee:03:
         3a:b3:0c:2a:d1:21:a1:df:db:b3:e9:05:1c:1b:71:c9:37:26:
         4d:7b:66:0f:d0:8c:37:e6:e3:a5:fb:45:f6:fa:97:ab:4a:34:
         91:a7:1b:56
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICGYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODk1MjkxMTAvBgNVBAUTKEVDQjIwM0IzNERFQUUwQTExRDAxNTBBMzBFRjJCNEEy
OTkxRDdBOTgwHhcNMjUwMTMxMTYyNTAxWhcNMjUwMjA3MTYyNTAxWjAYMRYwFAYD
VQQDEw02NzljZjk1ZS0zNzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6eSEC6NDSbCzl7WwLWx5YDW1ZQnyW8A1N2hPNYZW/XDpuHkc3hIXYSNe8KcW
CZZwqH907q3rEsfVxHaCakxhzu7ULKdruON2jJkKIjwZ7isNpDkmB7RqZpkSbbV4
fAgRJj7inIM45HjbuDUl76W2hsgRjh7R5StmHadGwmqtol3sSjQzWCeLGith52hB
Z0JI5ntNjCx1QqGcVKZxPBsYPQXn6xHyhQoIV0M3tKhfLBq5L+vGRPGHK2phDRzz
IJIjZmuwpkwOo5nHrILheMsPMYykGJBfuUfRvNR0KWBj1R2IjgpKzXdjt1V1tfJq
UJ8+yfZvwcXN9zhoDJ0pl81IPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGeJ9xfO
z27hoYVmjI4h9UIkWidiMB8GA1UdIwQYMBaAFOyyA7NN6uChHQFQow7ytKKZHXqY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTUyOS82OTI5RjJDMjVC
QkUxMUU3ODk3N0UwMjNDNEY5QUUwMi83TElEczAzcTRLRWRBVkNqRHZLMG9wa2Rl
cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdMSURzMDNxNEtFZEFWQ2pEdkswb3BrZGVwZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OTUyOS82OTI5RjJDMjVCQkUxMUU3ODk3N0UwMjNDNEY5QUUwMi83TElEczAzcTRL
RWRBVkNqRHZLMG9wa2RlcGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBADt/qNVL7AilWznJa6ngHbGrzvMNnlbvN1JMI715jD4kfrc7gSC/o
qC9he9V0eHfo39v0D2VBl+tEC3zXhPEsIKUk5Z0BB2ktlVshsXLjCrSdk5B9o4qk
fAsOAohAKtSxTEOuyP58w61sDeHh6JHtnf/TYkZmGcRsBS1lTT+ppCuTXXGbIUE2
h3e5nQkkd29NglOPwfqIVvLXTah0lZqmSndG+GS0Aw1dXmyYjA6XG6WriI9cOYVC
1Qvx8YX6wyrR65seLWLOoFPgoiYGwzZlXTbpnQvA7gM6swwq0SGh39uz6QUcG3HJ
NyZNe2YP0Iw35uOl+0X2+perSjSRpxtW
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:16:27 2025 by rpki-client