Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164BA0/DBA4F336C79E11E8A3621C4BC4F9AE02/II1GFNCXXVXjphjK5xdsVlfLvVc.mft
File:                     II1GFNCXXVXjphjK5xdsVlfLvVc.mft (raw, json)
Hash identifier:          vW8aa9iPzNV9vcORQuo3pry6UNpoO4KLK5m2mw1hsBU=
Subject key identifier:   A4:55:8D:57:82:8F:14:11:99:67:8F:FA:51:C3:FD:1D:97:D6:F1:46
Authority key identifier: 20:8D:46:14:D0:97:5D:55:E3:A6:18:CA:E7:17:6C:56:57:CB:BD:57
Certificate issuer:       /CN=A9164BA0/serialNumber=208D4614D0975D55E3A618CAE7176C5657CBBD57
Certificate serial:       1265
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/II1GFNCXXVXjphjK5xdsVlfLvVc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164BA0/DBA4F336C79E11E8A3621C4BC4F9AE02/II1GFNCXXVXjphjK5xdsVlfLvVc.mft
Manifest number:          1259
Signing time:             Thu 16 Jan 2025 01:21:54 +0000
Manifest this update:     Thu 16 Jan 2025 01:21:53 +0000
Manifest next update:     Thu 23 Jan 2025 01:21:53 +0000
Files and hashes:         1: II1GFNCXXVXjphjK5xdsVlfLvVc.crl (hash: fd2ugK3DC1PMZtGI4lL/I2R/IXU1Fge+dmBmpvd6J+8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4709 (0x1265)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164BA0
        Validity
            Not Before: Jan 16 01:21:53 2025 GMT
            Not After : Jan 23 01:21:53 2025 GMT
        Subject: CN=67885f32-8190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f0:c9:39:91:33:92:0e:74:c1:b6:3d:93:9a:
                    dc:68:03:62:08:9e:6d:58:a9:b0:7b:ec:34:01:3e:
                    3d:d0:1a:4a:f8:79:7f:f3:f7:74:4a:5f:02:91:b8:
                    49:4f:55:9d:53:fc:f4:b1:b1:b1:3c:72:f7:cb:ac:
                    91:05:29:ac:9d:77:93:33:64:37:d0:db:11:4c:22:
                    62:b7:f9:5c:c7:33:86:dc:f7:43:bf:4d:35:b5:72:
                    39:45:50:b7:4a:c4:b9:81:11:95:fe:c2:7e:47:07:
                    25:a8:72:d7:a4:e1:1e:9c:da:7e:a7:c5:64:cd:ed:
                    40:69:02:30:bc:6f:76:13:3e:e6:48:3c:1c:6d:b2:
                    d3:f5:54:ec:b2:72:f0:f8:60:fe:2b:48:55:cc:94:
                    c2:3f:c8:0c:da:85:c6:27:96:b4:c3:d2:1f:07:f3:
                    da:3d:ec:7e:4b:00:7e:42:05:b9:6c:a9:4c:3a:e0:
                    8b:db:b9:54:84:45:de:ad:8e:da:a9:65:7e:97:cf:
                    28:9f:09:04:03:7f:53:5e:88:d3:38:7d:0a:c4:94:
                    de:b3:e3:35:99:8a:29:7f:f1:0a:e4:e9:31:7e:7d:
                    37:58:dd:59:44:9d:6d:3e:ce:d8:ed:35:88:cd:04:
                    10:b6:43:f2:f8:bb:cc:ee:6e:06:03:34:2e:71:e2:
                    b4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:55:8D:57:82:8F:14:11:99:67:8F:FA:51:C3:FD:1D:97:D6:F1:46
            X509v3 Authority Key Identifier:
                keyid:20:8D:46:14:D0:97:5D:55:E3:A6:18:CA:E7:17:6C:56:57:CB:BD:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164BA0/DBA4F336C79E11E8A3621C4BC4F9AE02/II1GFNCXXVXjphjK5xdsVlfLvVc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/II1GFNCXXVXjphjK5xdsVlfLvVc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164BA0/DBA4F336C79E11E8A3621C4BC4F9AE02/II1GFNCXXVXjphjK5xdsVlfLvVc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:dc:81:f7:ba:8c:ef:59:5e:80:a5:f9:81:2f:73:ac:b8:ae:
         e1:e2:07:61:62:5d:29:b5:25:f2:ba:2e:0e:7f:18:c6:9d:30:
         d4:33:01:11:ca:8c:cb:c9:00:19:17:af:e5:7d:3b:af:df:3b:
         ca:11:2c:5e:6b:62:e8:4b:d7:2c:63:87:f5:bf:45:e8:1f:0f:
         18:92:c1:10:db:f1:c4:4c:f2:32:69:c6:31:ec:aa:39:24:3b:
         d5:06:a5:a7:70:00:17:fe:96:28:21:e1:43:56:a2:a0:5e:86:
         0e:74:45:5f:51:f0:36:2d:f1:a7:30:27:03:0b:42:4a:41:98:
         be:c0:a1:17:ce:62:bd:75:42:e0:3f:69:ba:27:ce:e1:db:91:
         be:d8:fa:54:2f:78:44:6a:ff:1c:e6:13:12:d7:6a:c0:d8:6a:
         fe:9d:e0:0f:6e:99:44:99:7a:1e:16:f9:fe:b5:c4:67:1c:05:
         e5:70:7e:d1:93:be:1c:a9:f3:e6:68:fd:c7:97:11:46:1b:8c:
         35:bc:da:0b:27:8e:f6:f3:c1:99:67:59:75:25:52:f8:7f:96:
         01:5c:af:38:ab:08:76:3c:d3:87:33:78:40:30:95:67:60:c2:
         2b:93:bd:d8:c6:ae:94:cf:92:43:d5:ba:85:a2:30:a5:ed:25:
         a2:6d:37:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:11:03 2025 by rpki-client