Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft
File:                     bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft (raw, json)
Hash identifier:          T9DS90IuTOImYe6vBz0C75HbMlk6Kcn+MoGAtFF79WU=
Subject key identifier:   F9:FD:60:77:20:9E:9F:3F:3F:42:AA:2B:FD:7F:B0:EB:D6:BE:EF:54
Authority key identifier: 6C:3A:7E:02:AC:BB:73:A6:63:5B:DA:FE:02:2D:78:5D:00:C4:47:DB
Certificate issuer:       /CN=A9196172/serialNumber=6C3A7E02ACBB73A6635BDAFE022D785D00C447DB
Certificate serial:       10F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft
Manifest number:          10E7
Signing time:             Fri 31 Jan 2025 17:17:36 +0000
Manifest this update:     Fri 31 Jan 2025 17:17:36 +0000
Manifest next update:     Fri 07 Feb 2025 17:17:36 +0000
Files and hashes:         1: bDp-Aqy7c6ZjW9r-Ai14XQDER9s.crl (hash: 8L/uVmET0WswYboI+10LBPuKEJxJcet10gTTm1ieZL4=)
                          2: 2D9B5B380F1D11E991F4271EC4F9AE02.roa (hash: lVFhX+AzAAaq4+3r9pTtYs5veVCzyIhE2Z58rfUjlok=)
                          3: 2CE73CF20F1D11E991F4271EC4F9AE02.roa (hash: fQktckL4j853d4MwLLoNQKlM58tMG0SvJli0T1FCa8U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4341 (0x10f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196172/serialNumber=6C3A7E02ACBB73A6635BDAFE022D785D00C447DB
        Validity
            Not Before: Jan 31 17:17:36 2025 GMT
            Not After : Feb  7 17:17:36 2025 GMT
        Subject: CN=679d05b0-8b7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ba:0a:d0:80:2e:fa:42:05:c4:c2:9a:11:02:
                    f1:7d:42:86:f9:98:77:d4:a7:59:7f:c4:c9:b0:8b:
                    c1:da:83:6c:da:3d:5a:a3:30:75:02:e8:ce:9c:10:
                    df:0f:6c:2a:fd:39:bb:28:a6:e2:f9:33:9e:a7:e8:
                    07:36:02:20:36:83:35:cf:05:8d:bc:aa:03:a7:b1:
                    b0:69:f9:71:bc:1a:b3:d3:2c:6f:e6:1c:b6:54:37:
                    17:76:a1:35:73:8d:e3:4b:34:f0:ab:6f:e7:b0:5c:
                    02:86:bc:fc:c6:45:a7:98:d4:e2:6e:96:e5:f4:80:
                    99:5c:4f:8c:2b:c5:f0:b9:4d:11:f4:84:2d:1e:7e:
                    63:39:2b:09:c6:22:de:e5:54:7a:6a:7f:81:59:9e:
                    4a:9b:97:38:a2:00:c9:a6:68:9f:f1:b1:36:da:eb:
                    2c:f5:7b:42:d2:4f:73:e0:39:05:85:b3:d5:10:42:
                    08:76:b7:32:27:10:82:d1:0f:e2:38:35:9b:66:b6:
                    85:f7:25:7f:35:97:88:d8:5f:c2:5c:68:99:e9:7e:
                    78:2a:9e:68:96:dd:bd:6a:f7:d6:e1:09:a3:9a:94:
                    56:9e:81:8c:07:a2:a1:cf:94:45:4a:1f:cb:bc:08:
                    bd:75:48:b0:ca:a7:71:d6:1f:f0:78:8a:8d:2c:a3:
                    27:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:FD:60:77:20:9E:9F:3F:3F:42:AA:2B:FD:7F:B0:EB:D6:BE:EF:54
            X509v3 Authority Key Identifier:
                keyid:6C:3A:7E:02:AC:BB:73:A6:63:5B:DA:FE:02:2D:78:5D:00:C4:47:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:73:3f:d3:b3:d2:c4:93:b7:61:e8:be:a1:dc:08:3d:f8:06:
         9f:16:01:71:25:0c:3e:42:13:c4:8e:d0:ba:21:7f:87:59:6f:
         59:51:0d:79:7a:cb:1e:5a:00:bd:7b:b2:86:8b:2f:8b:0f:7c:
         05:62:a0:dd:ef:38:f5:5e:bc:4e:4b:d4:4d:1a:1e:19:d4:9c:
         df:bb:c5:ae:b4:3d:3a:9f:a2:d4:85:d0:75:30:3e:8f:de:79:
         56:31:88:4f:c2:7f:85:55:c4:be:03:a0:be:53:b6:7a:db:4e:
         ad:85:ec:7a:9d:46:0b:5c:f9:2b:99:98:6e:0d:60:39:6b:ea:
         ce:cb:46:78:e2:c7:19:26:bf:6c:9b:23:f5:6d:b2:97:27:b9:
         52:30:c5:8e:ef:c6:40:b6:fd:4d:65:b9:09:43:77:27:49:bd:
         d6:85:17:20:3e:dc:8b:a0:98:f8:f0:b0:2b:15:b2:5d:ec:83:
         6a:ad:4f:58:6a:56:e2:e9:85:e3:2c:3c:87:2e:a5:d9:05:5d:
         0b:ce:98:bb:86:77:da:09:34:81:c0:75:5c:63:58:3f:ef:0a:
         ac:b9:f9:cb:3e:a9:77:28:78:39:ff:61:d9:45:b1:92:a7:3e:
         bf:ba:8b:94:48:5c:d2:57:83:df:4d:4b:75:a8:35:45:6a:f0:
         39:77:28:9a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTYxNzIxMTAvBgNVBAUTKDZDM0E3RTAyQUNCQjczQTY2MzVCREFGRTAyMkQ3ODVE
MDBDNDQ3REIwHhcNMjUwMTMxMTcxNzM2WhcNMjUwMjA3MTcxNzM2WjAYMRYwFAYD
VQQDEw02NzlkMDViMC04YjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0LoK0IAu+kIFxMKaEQLxfUKG+Zh31KdZf8TJsIvB2oNs2j1aozB1AujOnBDf
D2wq/Tm7KKbi+TOep+gHNgIgNoM1zwWNvKoDp7GwaflxvBqz0yxv5hy2VDcXdqE1
c43jSzTwq2/nsFwChrz8xkWnmNTibpbl9ICZXE+MK8XwuU0R9IQtHn5jOSsJxiLe
5VR6an+BWZ5Km5c4ogDJpmif8bE22uss9XtC0k9z4DkFhbPVEEIIdrcyJxCC0Q/i
ODWbZraF9yV/NZeI2F/CXGiZ6X54Kp5olt29avfW4QmjmpRWnoGMB6Khz5RFSh/L
vAi9dUiwyqdx1h/weIqNLKMnFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPn9YHcg
np8/P0KqK/1/sOvWvu9UMB8GA1UdIwQYMBaAFGw6fgKsu3OmY1va/gIteF0AxEfb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjE3Mi9FODY3Q0IxMDBG
MUIxMUU5QTVEQkRCMUJDNEY5QUUwMi9iRHAtQXF5N2M2WmpXOXItQWkxNFhRREVS
OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JEcC1BcXk3YzZaalc5ci1BaTE0WFFERVI5cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NjE3Mi9FODY3Q0IxMDBGMUIxMUU5QTVEQkRCMUJDNEY5QUUwMi9iRHAtQXF5N2M2
WmpXOXItQWkxNFhRREVSOXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAycz/Ts9LEk7dh6L6h3Ag9+AafFgFxJQw+QhPEjtC6IX+HWW9ZUQ15
esseWgC9e7KGiy+LD3wFYqDd7zj1XrxOS9RNGh4Z1Jzfu8WutD06n6LUhdB1MD6P
3nlWMYhPwn+FVcS+A6C+U7Z6206thex6nUYLXPkrmZhuDWA5a+rOy0Z44scZJr9s
myP1bbKXJ7lSMMWO78ZAtv1NZbkJQ3cnSb3WhRcgPtyLoJj48LArFbJd7INqrU9Y
albi6YXjLDyHLqXZBV0Lzpi7hnfaCTSBwHVcY1g/7wqsufnLPql3KHg5/2HZRbGS
pz6/uouUSFzSV4PfTUt1qDVFavA5dyia
-----END CERTIFICATE-----
Generated at Sat Apr 26 07:36:39 2025 by rpki-client