Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft
File:                     TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft (raw, json)
Hash identifier:          JbULFZwz2aemdoZIcwYXJnvXp27mcKqoKc9seeHaizQ=
Subject key identifier:   BA:E5:C9:B7:EC:84:68:DE:B2:C1:09:A1:47:68:34:E2:05:36:14:FB
Authority key identifier: 4E:01:F4:FC:A7:6D:BF:92:95:DE:C6:1C:1B:32:A4:EE:68:AD:FD:23
Certificate issuer:       /CN=A918D6BF/serialNumber=4E01F4FCA76DBF9295DEC61C1B32A4EE68ADFD23
Certificate serial:       1890
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft
Manifest number:          185F
Signing time:             Fri 31 Jan 2025 16:31:45 +0000
Manifest this update:     Fri 31 Jan 2025 16:31:44 +0000
Manifest next update:     Fri 07 Feb 2025 16:31:44 +0000
Files and hashes:         1: TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl (hash: N6ka0QF6LCCcYKlQKZmuSywlfs17GVV52czKwWZxdTo=)
                          2: 974F9BA0A87011EFB3944C13C4F9AE02.roa (hash: Z0OwaGSDmWf7G2/M9fK0ScdB4l7flLeNZz5L8C5FyB4=)
                          3: 9680FCD2A87011EFB3944C13C4F9AE02.roa (hash: r6znx2fC0JAEHJfy0a1EKc3aio/TbxBRX8xN9aCUppI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6288 (0x1890)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D6BF/serialNumber=4E01F4FCA76DBF9295DEC61C1B32A4EE68ADFD23
        Validity
            Not Before: Jan 31 16:31:44 2025 GMT
            Not After : Feb  7 16:31:44 2025 GMT
        Subject: CN=679cfaf0-db60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:31:92:be:85:3a:7e:52:3f:22:bf:74:6b:6c:
                    fc:63:3f:55:f7:31:41:53:24:01:d3:dc:5e:75:fa:
                    90:e3:61:88:ff:f6:7c:4e:6e:3a:14:62:94:82:5f:
                    e1:1d:27:5d:e9:ff:78:62:9f:3d:31:72:ee:11:18:
                    b6:3d:d4:be:fb:4d:cf:fe:70:a3:a2:7f:d9:58:89:
                    d1:00:5d:7d:e4:f3:de:7c:7d:4b:82:f3:7b:f2:14:
                    f9:6a:c5:12:31:91:ac:a0:d2:17:f6:1d:9e:08:f6:
                    22:9d:82:a6:ae:45:dd:1a:31:17:96:a0:6d:c4:b2:
                    9f:a5:f4:43:8d:7e:de:0b:ea:8b:c7:6f:3f:db:1f:
                    83:01:53:4a:e7:c1:79:bd:88:bd:bc:84:6f:ae:d2:
                    49:a0:5c:67:e9:43:66:10:29:d9:10:60:bb:f4:17:
                    0b:74:60:05:67:de:b3:3d:a1:4d:9d:cb:fc:26:bd:
                    fb:90:68:77:ab:ef:19:bb:8a:aa:2d:61:76:06:fc:
                    b4:95:e6:39:eb:0a:38:6c:0e:01:aa:ae:14:fc:48:
                    00:63:ce:f2:b6:e2:ba:30:4c:43:c3:c0:aa:26:d7:
                    6e:b4:4b:69:04:c8:0f:27:17:8f:0d:69:53:6c:32:
                    7b:6e:5a:84:c2:cd:f5:28:1d:3c:66:39:a1:09:8f:
                    5c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:E5:C9:B7:EC:84:68:DE:B2:C1:09:A1:47:68:34:E2:05:36:14:FB
            X509v3 Authority Key Identifier:
                keyid:4E:01:F4:FC:A7:6D:BF:92:95:DE:C6:1C:1B:32:A4:EE:68:AD:FD:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:1b:88:f5:31:85:29:b6:3e:67:95:7d:5c:e0:27:c5:f5:7e:
         d5:d3:01:f1:89:d5:dd:43:d7:fe:6f:ff:9e:69:13:42:ee:01:
         9b:fe:04:60:3c:17:77:a2:ab:f2:22:86:0e:a4:cc:9e:13:cf:
         97:bb:ac:29:1d:57:a2:f8:4c:81:93:42:c4:6e:17:dc:99:4c:
         14:4c:a6:f7:bb:97:80:d7:3d:c2:70:cb:a1:cd:ca:82:51:94:
         a3:de:91:29:6c:5d:d7:d9:13:5b:03:83:db:3a:1a:33:45:60:
         dc:19:35:fb:5d:f9:54:a7:59:b2:f3:a1:20:dc:33:da:7a:a8:
         4e:fc:49:40:a0:58:dd:02:77:8b:4a:9c:58:4a:26:b0:cf:86:
         60:67:86:8d:14:ce:16:2b:84:8d:5d:4f:6d:df:17:6c:1b:6f:
         b0:0d:8e:e5:f0:a5:e4:be:96:67:f2:ae:63:ba:db:2f:5f:64:
         e8:af:0d:35:f0:a3:64:62:0b:54:40:a2:03:07:82:9a:b4:c4:
         40:cd:be:49:99:0a:f1:71:fc:e1:6d:e6:32:d9:2a:01:24:6a:
         9d:52:81:f0:29:08:a6:d5:d2:f3:a1:0c:a8:b2:d7:47:42:fc:
         86:ab:9c:b2:6e:38:e1:ad:00:ab:0e:d2:da:b7:92:0f:2d:1d:
         28:b0:72:78
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICGJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEQ2QkYxMTAvBgNVBAUTKDRFMDFGNEZDQTc2REJGOTI5NURFQzYxQzFCMzJBNEVF
NjhBREZEMjMwHhcNMjUwMTMxMTYzMTQ0WhcNMjUwMjA3MTYzMTQ0WjAYMRYwFAYD
VQQDEw02NzljZmFmMC1kYjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxDGSvoU6flI/Ir90a2z8Yz9V9zFBUyQB09xedfqQ42GI//Z8Tm46FGKUgl/h
HSdd6f94Yp89MXLuERi2PdS++03P/nCjon/ZWInRAF195PPefH1LgvN78hT5asUS
MZGsoNIX9h2eCPYinYKmrkXdGjEXlqBtxLKfpfRDjX7eC+qLx28/2x+DAVNK58F5
vYi9vIRvrtJJoFxn6UNmECnZEGC79BcLdGAFZ96zPaFNncv8Jr37kGh3q+8Zu4qq
LWF2Bvy0leY56wo4bA4Bqq4U/EgAY87ytuK6MExDw8CqJtdutEtpBMgPJxePDWlT
bDJ7blqEws31KB08ZjmhCY9cyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLrlybfs
hGjessEJoUdoNOIFNhT7MB8GA1UdIwQYMBaAFE4B9Pynbb+Sld7GHBsypO5orf0j
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDZCRi9FMzYxQkEyMEE1
QTExMUU3QjNBMzEyN0RDNEY5QUUwMi9UZ0gwX0tkdHY1S1Yzc1ljR3pLazdtaXRf
U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RnSDBfS2R0djVLVjNzWWNHektrN21pdF9TTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RDZCRi9FMzYxQkEyMEE1QTExMUU3QjNBMzEyN0RDNEY5QUUwMi9UZ0gwX0tkdHY1
S1Yzc1ljR3pLazdtaXRfU00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQApG4j1MYUptj5nlX1c4CfF9X7V0wHxidXdQ9f+b/+eaRNC7gGb/gRg
PBd3oqvyIoYOpMyeE8+Xu6wpHVei+EyBk0LEbhfcmUwUTKb3u5eA1z3CcMuhzcqC
UZSj3pEpbF3X2RNbA4PbOhozRWDcGTX7XflUp1my86Eg3DPaeqhO/ElAoFjdAneL
SpxYSiawz4ZgZ4aNFM4WK4SNXU9t3xdsG2+wDY7l8KXkvpZn8q5jutsvX2Torw01
8KNkYgtUQKIDB4KatMRAzb5JmQrxcfzhbeYy2SoBJGqdUoHwKQim1dLzoQyostdH
QvyGq5yybjjhrQCrDtLat5IPLR0osHJ4
-----END CERTIFICATE-----
Generated at Sun Apr 27 19:20:23 2025 by rpki-client