Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft
File:                     ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft (raw, json)
Hash identifier:          X0p6ZbLIztD5WKhvupQqXc5MXBW3vjV39VpKrKBhwRU=
Subject key identifier:   1D:46:87:28:25:F7:54:7D:EE:9E:A7:B7:CF:FB:A2:73:35:64:F9:F3
Authority key identifier: 64:7B:14:9E:F0:16:CC:53:56:A7:ED:73:0F:13:3E:00:2C:0E:7F:AA
Certificate issuer:       /CN=A91E2364/serialNumber=647B149EF016CC5356A7ED730F133E002C0E7FAA
Certificate serial:       0C60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft
Manifest number:          0C44
Signing time:             Fri 31 Jan 2025 18:18:00 +0000
Manifest this update:     Fri 31 Jan 2025 18:18:00 +0000
Manifest next update:     Fri 07 Feb 2025 18:18:00 +0000
Files and hashes:         1: ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl (hash: TU/0MCnVtE+oszqDCmSedFjhauONy8cCwgwqDy2lD8A=)
                          2: FED80F56E19811EC860C6F38C4F9AE02.roa (hash: p6SITTbljN0hlBU7f4+8nDHZna6GzHkYBhTzSZbqV7g=)
                          3: 5A69D6D4824811EC9AAB122AC4F9AE02.roa (hash: T1RqJEwWa4e5cck4Fvi+ljWkhCWo2TGOlG7qRsjHOHs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3168 (0xc60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2364/serialNumber=647B149EF016CC5356A7ED730F133E002C0E7FAA
        Validity
            Not Before: Jan 31 18:18:00 2025 GMT
            Not After : Feb  7 18:18:00 2025 GMT
        Subject: CN=679d13d8-8290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:79:7d:47:70:c9:58:d0:1d:b3:b2:a5:44:db:
                    31:bb:a6:b4:36:35:09:93:19:fa:01:11:b7:28:3d:
                    bf:e6:77:d7:fc:02:76:e7:6d:5c:36:0d:9e:82:ed:
                    19:69:05:9c:f6:d4:c6:56:07:ba:2d:94:c2:fc:27:
                    dd:b4:c4:5a:1d:51:84:f9:21:d5:0f:69:67:07:14:
                    7c:40:9a:16:3c:88:73:0a:3d:79:fc:50:4d:63:c4:
                    5a:e8:e0:56:8b:5f:69:0d:86:27:92:a0:41:90:39:
                    4a:36:49:28:30:57:79:53:4f:df:31:f0:47:d1:00:
                    06:5b:a7:c5:50:32:fd:e0:bc:d7:d8:53:27:93:23:
                    24:4c:c5:36:e3:72:56:ba:c2:ee:df:64:91:34:36:
                    b9:25:49:bc:91:22:0a:63:7d:57:8f:5c:5f:ee:9c:
                    6f:13:26:5d:e2:e6:c4:a6:4e:0e:ce:ff:c8:87:68:
                    bb:f7:5a:cc:43:0c:3c:63:08:68:73:f7:6f:8d:18:
                    fd:98:f8:56:2a:af:02:37:55:40:34:3f:cc:bc:ef:
                    81:33:49:aa:37:18:62:77:5f:3e:2b:b2:f7:7e:64:
                    0a:bd:bd:de:60:c3:e6:2e:06:32:cc:03:61:a2:01:
                    18:0b:b3:c8:d0:95:5f:08:42:72:d7:b1:b6:2a:7a:
                    a9:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:46:87:28:25:F7:54:7D:EE:9E:A7:B7:CF:FB:A2:73:35:64:F9:F3
            X509v3 Authority Key Identifier:
                keyid:64:7B:14:9E:F0:16:CC:53:56:A7:ED:73:0F:13:3E:00:2C:0E:7F:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:23:d7:d6:b6:c0:60:53:a8:44:fc:0b:c5:98:4c:98:50:22:
         04:93:b6:0b:77:38:3f:4e:ec:7f:cf:76:78:ba:1c:fc:5e:0b:
         d1:97:4a:39:25:df:a1:e4:6e:80:63:75:03:87:04:6c:b4:64:
         77:9f:dd:51:6c:7f:f4:3b:ed:72:4d:a4:20:59:8a:7d:6f:87:
         07:46:55:d1:78:b8:fb:21:01:a7:5c:03:59:0a:ef:34:50:51:
         df:93:a7:88:36:b0:00:f0:c3:53:4a:97:31:a3:85:ea:a6:8f:
         15:3f:b5:44:bf:0b:69:e9:ec:d1:2c:6e:7f:75:b8:f1:c2:83:
         bd:40:e1:b6:67:69:bd:50:d1:ae:6f:07:01:b8:a4:c1:fb:43:
         e5:e5:4c:80:48:6d:17:88:a4:b5:0c:44:b5:d6:a5:b6:97:6e:
         5d:43:85:24:6e:5c:a3:1b:41:bf:11:8f:5e:38:58:d0:79:af:
         a6:f1:db:db:bb:81:9d:72:fb:c6:fb:5a:dc:2f:da:f4:cd:94:
         32:40:70:f1:fb:bf:eb:7a:1b:f2:34:b7:4e:1d:f2:1f:cb:74:
         6b:6d:99:ec:ac:22:e3:ab:1b:ac:1f:a3:d3:57:5d:0a:cf:6a:
         e8:53:e0:6e:39:6e:10:a4:42:11:9a:b8:d1:3c:0e:e8:2a:63:
         eb:c1:6d:32
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDGAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTIzNjQxMTAvBgNVBAUTKDY0N0IxNDlFRjAxNkNDNTM1NkE3RUQ3MzBGMTMzRTAw
MkMwRTdGQUEwHhcNMjUwMTMxMTgxODAwWhcNMjUwMjA3MTgxODAwWjAYMRYwFAYD
VQQDEw02NzlkMTNkOC04MjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyXl9R3DJWNAds7KlRNsxu6a0NjUJkxn6ARG3KD2/5nfX/AJ2521cNg2egu0Z
aQWc9tTGVge6LZTC/CfdtMRaHVGE+SHVD2lnBxR8QJoWPIhzCj15/FBNY8Ra6OBW
i19pDYYnkqBBkDlKNkkoMFd5U0/fMfBH0QAGW6fFUDL94LzX2FMnkyMkTMU243JW
usLu32SRNDa5JUm8kSIKY31Xj1xf7pxvEyZd4ubEpk4Ozv/Ih2i791rMQww8Ywho
c/dvjRj9mPhWKq8CN1VAND/MvO+BM0mqNxhid18+K7L3fmQKvb3eYMPmLgYyzANh
ogEYC7PI0JVfCEJy17G2KnqprQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB1Ghygl
91R97p6nt8/7onM1ZPnzMB8GA1UdIwQYMBaAFGR7FJ7wFsxTVqftcw8TPgAsDn+q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjM2NC84RkU3MTc4NkZG
OUIxMUU5QjdGNEE3NzJDNEY5QUUwMi9aSHNVbnZBV3pGTldwLTF6RHhNLUFDd09m
Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pIc1VudkFXekZOV3AtMXpEeE0tQUN3T2Y2by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MjM2NC84RkU3MTc4NkZGOUIxMUU5QjdGNEE3NzJDNEY5QUUwMi9aSHNVbnZBV3pG
TldwLTF6RHhNLUFDd09mNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCUI9fWtsBgU6hE/AvFmEyYUCIEk7YLdzg/Tux/z3Z4uhz8XgvRl0o5
Jd+h5G6AY3UDhwRstGR3n91RbH/0O+1yTaQgWYp9b4cHRlXReLj7IQGnXANZCu80
UFHfk6eINrAA8MNTSpcxo4Xqpo8VP7VEvwtp6ezRLG5/dbjxwoO9QOG2Z2m9UNGu
bwcBuKTB+0Pl5UyASG0XiKS1DES11qW2l25dQ4UkblyjG0G/EY9eOFjQea+m8dvb
u4GdcvvG+1rcL9r0zZQyQHDx+7/rehvyNLdOHfIfy3RrbZnsrCLjqxusH6PTV10K
z2roU+BuOW4QpEIRmrjRPA7oKmPrwW0y
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:15:52 2025 by rpki-client