Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9141796/E743523CC94711ED8ACC653DC4F9AE02/55zSCOlN6VC-Pqn6pu-Ae06QWXM.mft
File:                     55zSCOlN6VC-Pqn6pu-Ae06QWXM.mft (raw, json)
Hash identifier:          VyDFd/p23/2GXtvrSkg4p5n5bt8O6I96eb1MJeKRqIo=
Subject key identifier:   64:58:72:04:44:64:A2:D8:D8:53:88:07:C8:2E:AB:2D:E3:43:11:6F
Authority key identifier: E7:9C:D2:08:E9:4D:E9:50:BE:3E:A9:FA:A6:EF:80:7B:4E:90:59:73
Certificate issuer:       /CN=A9141796/serialNumber=E79CD208E94DE950BE3EA9FAA6EF807B4E905973
Certificate serial:       018D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/55zSCOlN6VC-Pqn6pu-Ae06QWXM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9141796/E743523CC94711ED8ACC653DC4F9AE02/55zSCOlN6VC-Pqn6pu-Ae06QWXM.mft
Manifest number:          0186
Signing time:             Sat 29 Mar 2025 03:13:36 +0000
Manifest this update:     Sat 29 Mar 2025 03:13:35 +0000
Manifest next update:     Sat 05 Apr 2025 03:13:35 +0000
Files and hashes:         1: 55zSCOlN6VC-Pqn6pu-Ae06QWXM.crl (hash: o8U9IyJICcsfqcQWAPmGDtMTzM/GjgKmXMKauOapaE4=)
                          2: F1AA5BA0BC4111EF8F383127C4F9AE02.roa (hash: B4KKChCq7Wygssn//W+mZxc/2wrDege1Zzk77kjf5Q0=)
                          3: 0B361848BC4211EF86E55A27C4F9AE02.roa (hash: kqrqTgjCnmkmICmu7K8Wc2eU+c57wqkaJtw0hvE/04o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 397 (0x18d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9141796
        Validity
            Not Before: Mar 29 03:13:35 2025 GMT
            Not After : Apr  5 03:13:35 2025 GMT
        Subject: CN=67e76560-7fd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:49:cf:99:c1:d3:9a:d3:44:56:59:7f:9e:79:
                    4c:9c:1b:13:6e:bf:cb:b2:f1:34:8b:fe:62:76:53:
                    01:5c:6e:89:c5:31:da:41:9e:c2:8b:1e:c9:a6:4b:
                    7b:66:4c:22:fa:9f:33:0e:5f:74:3f:29:ba:55:0c:
                    b6:b2:4b:8e:d3:e7:61:3c:18:97:7b:9b:8e:41:75:
                    a3:1e:8d:42:31:d5:fc:07:c8:0a:2a:ab:9c:81:d9:
                    d4:b2:4f:d7:f2:36:07:a2:d4:6a:28:2e:b5:7d:be:
                    af:95:74:fd:e2:86:43:ce:55:79:3c:18:ff:5f:ca:
                    52:41:eb:3f:6f:2f:30:22:07:24:1f:70:a6:ad:dd:
                    ce:f6:f3:d9:42:6d:f3:c4:ae:a2:04:89:81:e8:03:
                    e8:a5:a9:4c:0b:1a:d8:52:e4:30:89:6c:58:55:22:
                    c2:31:fa:b8:78:0c:48:04:d1:84:ee:b0:96:be:47:
                    24:1e:e4:0e:a8:3a:19:8e:c2:e5:16:e4:20:96:f2:
                    75:59:3b:30:36:c8:5a:10:f5:66:a1:35:37:2d:dd:
                    b5:f7:7d:09:5e:b7:a1:8c:29:3a:ce:0a:38:0c:34:
                    ff:f8:1e:6b:40:c0:0e:ff:5c:b5:bc:6c:e9:5a:db:
                    c4:ae:75:06:9b:04:f6:fe:15:38:80:c8:be:9d:49:
                    2a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:58:72:04:44:64:A2:D8:D8:53:88:07:C8:2E:AB:2D:E3:43:11:6F
            X509v3 Authority Key Identifier:
                keyid:E7:9C:D2:08:E9:4D:E9:50:BE:3E:A9:FA:A6:EF:80:7B:4E:90:59:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9141796/E743523CC94711ED8ACC653DC4F9AE02/55zSCOlN6VC-Pqn6pu-Ae06QWXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/55zSCOlN6VC-Pqn6pu-Ae06QWXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141796/E743523CC94711ED8ACC653DC4F9AE02/55zSCOlN6VC-Pqn6pu-Ae06QWXM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:1c:0c:f9:33:7c:80:9f:b7:33:7d:45:1b:90:57:e6:b1:a0:
         1b:7b:a6:41:a4:2f:d4:8d:2c:6b:ed:72:00:18:b9:82:06:9f:
         97:53:f5:6f:aa:0e:29:be:9e:26:7c:d2:2c:ea:f5:9e:fd:4d:
         d4:e4:bf:23:8d:14:fc:8c:80:32:c7:59:e3:dc:79:e2:68:2b:
         5d:01:08:11:3b:f3:29:8d:d5:93:55:ae:26:e0:3e:00:3a:e7:
         e9:ae:ba:9a:08:9f:59:ec:bc:fa:66:64:6a:c3:88:fe:79:83:
         75:3c:6a:c3:16:1f:fc:1b:26:1c:5d:ed:a6:47:7c:4c:9a:88:
         46:4d:0c:5e:c6:44:4e:c2:5d:d6:c3:b2:75:ad:93:2a:62:ff:
         c5:b6:f4:c1:75:21:fa:8c:c8:36:1a:49:fd:df:ef:8d:7b:27:
         2c:7f:3a:37:8f:25:4b:f7:3d:f2:d3:b6:a2:93:e0:7a:8d:3e:
         b5:fa:d9:42:4d:e5:ca:f0:85:24:3a:f0:31:ed:b0:37:55:9d:
         bd:44:a7:ce:98:82:8a:94:45:fe:94:8b:5e:b6:d7:bb:54:3b:
         5b:26:21:35:24:9b:88:55:ec:d7:a1:18:66:a9:6c:99:8b:a3:
         54:9a:38:9b:95:0e:cf:2f:17:fc:70:d0:30:7e:96:d6:4e:a1:
         59:af:ae:7f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDE3OTYxMTAvBgNVBAUTKEU3OUNEMjA4RTk0REU5NTBCRTNFQTlGQUE2RUY4MDdC
NEU5MDU5NzMwHhcNMjUwMzI5MDMxMzM1WhcNMjUwNDA1MDMxMzM1WjAYMRYwFAYD
VQQDEw02N2U3NjU2MC03ZmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqEnPmcHTmtNEVll/nnlMnBsTbr/LsvE0i/5idlMBXG6JxTHaQZ7Cix7Jpkt7
Zkwi+p8zDl90Pym6VQy2skuO0+dhPBiXe5uOQXWjHo1CMdX8B8gKKqucgdnUsk/X
8jYHotRqKC61fb6vlXT94oZDzlV5PBj/X8pSQes/by8wIgckH3Cmrd3O9vPZQm3z
xK6iBImB6APopalMCxrYUuQwiWxYVSLCMfq4eAxIBNGE7rCWvkckHuQOqDoZjsLl
FuQglvJ1WTswNshaEPVmoTU3Ld21930JXrehjCk6zgo4DDT/+B5rQMAO/1y1vGzp
WtvErnUGmwT2/hU4gMi+nUkqAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGRYcgRE
ZKLY2FOIB8guqy3jQxFvMB8GA1UdIwQYMBaAFOec0gjpTelQvj6p+qbvgHtOkFlz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTc5Ni9FNzQzNTIzQ0M5
NDcxMUVEOEFDQzY1M0RDNEY5QUUwMi81NXpTQ09sTjZWQy1QcW42cHUtQWUwNlFX
WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzU1elNDT2xONlZDLVBxbjZwdS1BZTA2UVdYTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MTc5Ni9FNzQzNTIzQ0M5NDcxMUVEOEFDQzY1M0RDNEY5QUUwMi81NXpTQ09sTjZW
Qy1QcW42cHUtQWUwNlFXWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC6HAz5M3yAn7czfUUbkFfmsaAbe6ZBpC/UjSxr7XIAGLmCBp+XU/Vv
qg4pvp4mfNIs6vWe/U3U5L8jjRT8jIAyx1nj3HniaCtdAQgRO/MpjdWTVa4m4D4A
OufprrqaCJ9Z7Lz6ZmRqw4j+eYN1PGrDFh/8GyYcXe2mR3xMmohGTQxexkROwl3W
w7J1rZMqYv/FtvTBdSH6jMg2Gkn93++Neycsfzo3jyVL9z3y07aik+B6jT61+tlC
TeXK8IUkOvAx7bA3VZ29RKfOmIKKlEX+lItette7VDtbJiE1JJuIVezXoRhmqWyZ
i6NUmjiblQ7PLxf8cNAwfpbWTqFZr65/
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:24:50 2025 by rpki-client