Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft
File:                     W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft (raw, json)
Hash identifier:          HC70CltkVICT/SFEkRiij0p5L8O6yJfDeZHywKACJbc=
Subject key identifier:   17:5E:52:6E:23:C6:6C:6C:19:20:6A:5A:1F:94:CA:FA:48:DF:D4:2F
Authority key identifier: 5B:5C:C4:03:09:A0:7C:03:DF:0B:63:04:FC:D8:40:F9:50:BF:B0:41
Certificate issuer:       /CN=A91E1936/serialNumber=5B5CC40309A07C03DF0B6304FCD840F950BFB041
Certificate serial:       DC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1zEAwmgfAPfC2ME_NhA-VC_sEE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft
Manifest number:          D6
Signing time:             Sat 29 Mar 2025 04:59:13 +0000
Manifest this update:     Sat 29 Mar 2025 04:59:13 +0000
Manifest next update:     Sat 05 Apr 2025 04:59:13 +0000
Files and hashes:         1: W1zEAwmgfAPfC2ME_NhA-VC_sEE.crl (hash: VHLVGycE1468zYMCK1P+uHdSjpaWLD7ng8EpEWaCQVA=)
                          2: 0423873AD9C511EEA944FA80C4F9AE02.roa (hash: q9sVPpnGHT0TBWPu4k07DgCGJ80E6prLVfQ+m+J3OXE=)
                          3: CF6BED9EC63611EEA0C70259C4F9AE02.roa (hash: EBWBEqR3i5PxLdfH1mN7syf09hARUIbnkSV4IoogUv4=)
                          4: CE88A98AC63611EEA0C70259C4F9AE02.roa (hash: QXK92fzcUKDMjTiStNYvMQ27jRd0fX97PndGvgz1laU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 220 (0xdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1936
        Validity
            Not Before: Mar 29 04:59:13 2025 GMT
            Not After : Apr  5 04:59:13 2025 GMT
        Subject: CN=67e77e21-bfd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:da:22:6c:eb:d6:61:d4:bf:99:e9:c9:a3:77:
                    69:42:04:7e:e1:8a:d2:7f:c7:5a:83:71:a2:f7:d2:
                    6d:95:75:fb:b5:f6:80:db:c1:43:64:00:d0:88:bc:
                    c6:a7:2f:f9:fb:e9:cd:57:81:1c:95:e5:b2:ef:7e:
                    84:6b:89:d8:2f:9d:68:7a:d9:ac:34:6c:70:14:5c:
                    69:3c:5c:15:a1:a1:50:dd:17:1e:9f:8e:ce:ef:a5:
                    ed:e7:55:5b:20:72:da:23:92:e0:24:8c:94:f2:ce:
                    69:40:f0:2b:70:89:65:e4:a2:24:12:35:36:b4:a5:
                    5b:a8:aa:f6:23:64:8f:3e:e4:0d:cc:9b:75:18:0c:
                    09:b8:26:52:90:5b:ef:48:82:94:d0:dc:2c:a9:ba:
                    5e:25:b0:64:64:f1:14:cf:13:17:f8:e0:c4:af:09:
                    64:de:cd:62:08:12:90:47:75:a1:ea:75:4f:03:40:
                    ab:d9:db:b5:a8:9a:94:71:9b:67:7c:af:49:c8:3e:
                    64:44:f3:71:39:27:63:36:5a:13:4e:4c:7b:99:45:
                    d5:59:c6:c4:dc:b4:eb:5b:90:2f:a5:ee:58:ff:1a:
                    7b:71:bb:b8:07:7a:ed:ef:77:98:e8:ff:9d:85:11:
                    47:b1:6d:8a:fe:39:a6:85:d2:f0:8d:5f:96:86:a9:
                    f9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:5E:52:6E:23:C6:6C:6C:19:20:6A:5A:1F:94:CA:FA:48:DF:D4:2F
            X509v3 Authority Key Identifier:
                keyid:5B:5C:C4:03:09:A0:7C:03:DF:0B:63:04:FC:D8:40:F9:50:BF:B0:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1zEAwmgfAPfC2ME_NhA-VC_sEE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:02:82:28:4e:29:31:3a:f0:05:41:b3:92:70:0f:5c:a2:f4:
         ef:7e:f0:96:93:2f:2a:81:cb:90:de:fc:57:20:e5:f9:d7:8e:
         93:97:f0:e1:e4:ba:f3:9d:b5:35:2d:0a:7f:3a:a2:25:db:95:
         0a:7a:50:23:d3:b9:e2:01:a2:82:a2:96:69:f1:94:50:49:9b:
         e8:02:3f:a0:6d:5a:67:f8:df:e1:a1:06:58:55:ca:9c:58:e9:
         b7:22:1b:73:d9:4e:3a:88:3e:97:36:90:5a:0e:99:db:80:9d:
         28:4c:74:13:bc:31:27:67:41:17:bb:9c:6e:1b:02:da:59:7e:
         64:37:4f:d3:e2:58:1c:e5:a0:88:c0:96:db:35:5d:fa:e5:6c:
         67:76:33:e6:37:79:29:aa:29:81:91:c8:0c:8a:c1:37:0d:20:
         d4:d3:68:28:ea:1c:08:53:87:78:f4:e6:05:52:a5:c0:91:57:
         26:e1:2a:e8:10:4e:79:90:3c:a9:2e:4e:fd:94:8b:e6:60:cc:
         88:10:7d:c2:52:46:24:e7:5d:96:d8:eb:38:3e:84:2c:9a:34:
         87:cb:6e:80:5e:d3:f4:d1:94:17:ec:62:36:4b:fb:59:de:4b:
         ba:e7:85:83:ae:38:f6:ac:61:ca:16:47:9c:16:c6:6b:81:71:
         2e:02:0b:da
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTE5MzYxMTAvBgNVBAUTKDVCNUNDNDAzMDlBMDdDMDNERjBCNjMwNEZDRDg0MEY5
NTBCRkIwNDEwHhcNMjUwMzI5MDQ1OTEzWhcNMjUwNDA1MDQ1OTEzWjAYMRYwFAYD
VQQDEw02N2U3N2UyMS1iZmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2doibOvWYdS/menJo3dpQgR+4YrSf8dag3Gi99JtlXX7tfaA28FDZADQiLzG
py/5++nNV4EcleWy736Ea4nYL51oetmsNGxwFFxpPFwVoaFQ3Rcen47O76Xt51Vb
IHLaI5LgJIyU8s5pQPArcIll5KIkEjU2tKVbqKr2I2SPPuQNzJt1GAwJuCZSkFvv
SIKU0NwsqbpeJbBkZPEUzxMX+ODErwlk3s1iCBKQR3Wh6nVPA0Cr2du1qJqUcZtn
fK9JyD5kRPNxOSdjNloTTkx7mUXVWcbE3LTrW5Avpe5Y/xp7cbu4B3rt73eY6P+d
hRFHsW2K/jmmhdLwjV+Whqn5SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBdeUm4j
xmxsGSBqWh+UyvpI39QvMB8GA1UdIwQYMBaAFFtcxAMJoHwD3wtjBPzYQPlQv7BB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTkzNi82RUI5QzAzRUM2
MzYxMUVFQUJDQzA0MEJDNEY5QUUwMi9XMXpFQXdtZ2ZBUGZDMk1FX05oQS1WQ19z
RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1cxekVBd21nZkFQZkMyTUVfTmhBLVZDX3NFRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MTkzNi82RUI5QzAzRUM2MzYxMUVFQUJDQzA0MEJDNEY5QUUwMi9XMXpFQXdtZ2ZB
UGZDMk1FX05oQS1WQ19zRUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBOAoIoTikxOvAFQbOScA9covTvfvCWky8qgcuQ3vxXIOX5146Tl/Dh
5LrznbU1LQp/OqIl25UKelAj07niAaKCopZp8ZRQSZvoAj+gbVpn+N/hoQZYVcqc
WOm3Ihtz2U46iD6XNpBaDpnbgJ0oTHQTvDEnZ0EXu5xuGwLaWX5kN0/T4lgc5aCI
wJbbNV365WxndjPmN3kpqimBkcgMisE3DSDU02go6hwIU4d49OYFUqXAkVcm4Sro
EE55kDypLk79lIvmYMyIEH3CUkYk512W2Os4PoQsmjSHy26AXtP00ZQX7GI2S/tZ
3ku654WDrjj2rGHKFkecFsZrgXEuAgva
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:37:50 2025 by rpki-client