Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131589/4158463A0CCC11EDB0993C15C4F9AE02/Bats53QFyQRH8nu2EgCypDHeStw.mft
File:                     Bats53QFyQRH8nu2EgCypDHeStw.mft (raw, json)
Hash identifier:          fqsNBjATg8Dk8kp5pMvS2VG3e52JakqNdZpb7Sr0AH4=
Subject key identifier:   D5:18:D5:4F:F4:A7:BF:AF:27:E8:94:4B:D4:A0:36:BF:A5:BF:1E:47
Authority key identifier: 05:AB:6C:E7:74:05:C9:04:47:F2:7B:B6:12:00:B2:A4:31:DE:4A:DC
Certificate issuer:       /CN=A9131589/serialNumber=05AB6CE77405C90447F27BB61200B2A431DE4ADC
Certificate serial:       0258
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bats53QFyQRH8nu2EgCypDHeStw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131589/4158463A0CCC11EDB0993C15C4F9AE02/Bats53QFyQRH8nu2EgCypDHeStw.mft
Manifest number:          0258
Signing time:             Sat 29 Mar 2025 02:02:01 +0000
Manifest this update:     Sat 29 Mar 2025 02:02:00 +0000
Manifest next update:     Sat 05 Apr 2025 02:02:00 +0000
Files and hashes:         1: Bats53QFyQRH8nu2EgCypDHeStw.crl (hash: 6Q0IdfTDgOqYCZzDt9u7XuuZ9TZYWKRU2YNyH0T9Sn4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 600 (0x258)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131589
        Validity
            Not Before: Mar 29 02:02:00 2025 GMT
            Not After : Apr  5 02:02:00 2025 GMT
        Subject: CN=67e75498-a2d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d0:57:c5:3b:2e:69:cb:bf:88:1c:53:70:78:
                    66:eb:b9:35:38:55:62:db:ce:37:2b:33:cb:17:19:
                    ad:e7:c9:d8:96:8c:ae:76:5e:dc:8b:34:03:b5:43:
                    4e:11:a7:16:1d:be:14:98:c5:bc:03:db:a0:3a:ab:
                    a9:9e:df:90:cd:b4:f9:d2:cf:ff:ee:8f:3b:23:d0:
                    b9:9a:a9:b1:fd:de:02:96:a3:a3:12:6c:a2:28:6f:
                    54:14:e8:d4:d8:c8:bf:2c:94:20:c8:30:58:9b:bc:
                    0d:e9:63:6b:49:80:0a:00:5d:cc:ab:bb:8d:2a:31:
                    ff:ef:7a:10:81:72:9f:9d:44:91:d9:12:e7:b7:c7:
                    01:00:d8:35:a5:b4:cd:0d:41:1f:1b:af:19:e9:9e:
                    d1:10:50:0a:63:ea:06:ab:3f:bb:92:f6:35:aa:a0:
                    e2:a2:df:00:36:88:02:3a:52:a8:1e:f2:c0:00:03:
                    94:10:39:d2:8f:a8:47:14:74:84:f5:5e:b6:c6:58:
                    67:9d:07:d0:16:6b:6a:ab:21:20:e1:ec:97:75:14:
                    32:97:60:54:db:7e:ee:8a:9f:35:d0:55:bf:b6:35:
                    21:45:e3:c8:d1:72:a6:9b:3a:39:bb:9c:25:97:86:
                    0a:b6:6a:a1:79:47:e1:c0:9b:bc:f8:70:8f:41:82:
                    1a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:18:D5:4F:F4:A7:BF:AF:27:E8:94:4B:D4:A0:36:BF:A5:BF:1E:47
            X509v3 Authority Key Identifier:
                keyid:05:AB:6C:E7:74:05:C9:04:47:F2:7B:B6:12:00:B2:A4:31:DE:4A:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131589/4158463A0CCC11EDB0993C15C4F9AE02/Bats53QFyQRH8nu2EgCypDHeStw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bats53QFyQRH8nu2EgCypDHeStw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131589/4158463A0CCC11EDB0993C15C4F9AE02/Bats53QFyQRH8nu2EgCypDHeStw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:0d:d6:78:44:16:fd:a6:4d:bc:81:bd:36:02:4d:07:db:d2:
         fe:98:02:d7:4b:f3:cf:97:89:01:a1:c0:9c:c8:76:b7:b6:44:
         5f:f9:e5:95:3c:78:5c:d0:3a:31:0b:00:b9:11:6a:ab:5f:e6:
         01:15:64:1d:26:b1:3b:3e:00:d4:08:2c:4c:f0:2e:ac:30:7a:
         a2:67:dc:bd:ba:e2:7a:27:fa:e2:f5:b7:e5:0f:2a:79:52:a5:
         05:f2:fe:e4:c0:46:a5:6d:8b:39:ce:45:c9:54:4f:1b:46:1b:
         33:f4:81:5b:c6:96:22:8c:d1:8d:c9:0f:61:ce:f6:97:5d:46:
         78:5e:18:cf:75:e1:28:92:c4:cd:17:6f:46:4a:95:c6:31:5e:
         26:66:60:5d:fd:a3:16:8f:b8:08:4c:77:58:f4:fe:d1:4a:b2:
         6b:49:5e:49:c8:6f:df:d6:8d:b7:3e:7f:4f:35:f1:e9:f1:b8:
         81:b5:c8:07:f7:09:27:7c:98:d9:f7:ae:ac:a6:f7:1f:2b:93:
         9a:d7:b6:4d:b2:1e:30:33:55:da:83:f0:b7:26:3d:33:f6:47:
         ae:fc:d7:b8:a2:6b:bd:9a:a4:61:14:36:17:f2:58:a5:6c:9f:
         91:e7:bd:8b:0d:63:83:2b:25:a8:e0:b0:02:12:00:12:32:a6:
         19:74:de:90
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzE1ODkxMTAvBgNVBAUTKDA1QUI2Q0U3NzQwNUM5MDQ0N0YyN0JCNjEyMDBCMkE0
MzFERTRBREMwHhcNMjUwMzI5MDIwMjAwWhcNMjUwNDA1MDIwMjAwWjAYMRYwFAYD
VQQDEw02N2U3NTQ5OC1hMmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwNBXxTsuacu/iBxTcHhm67k1OFVi2843KzPLFxmt58nYloyudl7cizQDtUNO
EacWHb4UmMW8A9ugOqupnt+QzbT50s//7o87I9C5mqmx/d4ClqOjEmyiKG9UFOjU
2Mi/LJQgyDBYm7wN6WNrSYAKAF3Mq7uNKjH/73oQgXKfnUSR2RLnt8cBANg1pbTN
DUEfG68Z6Z7REFAKY+oGqz+7kvY1qqDiot8ANogCOlKoHvLAAAOUEDnSj6hHFHSE
9V62xlhnnQfQFmtqqyEg4eyXdRQyl2BU237uip810FW/tjUhRePI0XKmmzo5u5wl
l4YKtmqheUfhwJu8+HCPQYIatQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNUY1U/0
p7+vJ+iUS9SgNr+lvx5HMB8GA1UdIwQYMBaAFAWrbOd0BckER/J7thIAsqQx3krc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTU4OS80MTU4NDYzQTBD
Q0MxMUVEQjA5OTNDMTVDNEY5QUUwMi9CYXRzNTNRRnlRUkg4bnUyRWdDeXBESGVT
dHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JhdHM1M1FGeVFSSDhudTJFZ0N5cERIZVN0dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MTU4OS80MTU4NDYzQTBDQ0MxMUVEQjA5OTNDMTVDNEY5QUUwMi9CYXRzNTNRRnlR
Ukg4bnUyRWdDeXBESGVTdHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAgDdZ4RBb9pk28gb02Ak0H29L+mALXS/PPl4kBocCcyHa3tkRf+eWV
PHhc0DoxCwC5EWqrX+YBFWQdJrE7PgDUCCxM8C6sMHqiZ9y9uuJ6J/ri9bflDyp5
UqUF8v7kwEalbYs5zkXJVE8bRhsz9IFbxpYijNGNyQ9hzvaXXUZ4XhjPdeEoksTN
F29GSpXGMV4mZmBd/aMWj7gITHdY9P7RSrJrSV5JyG/f1o23Pn9PNfHp8biBtcgH
9wknfJjZ966spvcfK5Oa17ZNsh4wM1Xag/C3Jj0z9keu/Ne4omu9mqRhFDYX8lil
bJ+R572LDWODKyWo4LACEgASMqYZdN6Q
-----END CERTIFICATE-----
Generated at Fri Apr 11 15:50:53 2025 by rpki-client