Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164F37/706D447E336F11E3AF64E98F5911EA32/C9CviCcBmOQG0urp3K7J-w67gMU.mft
File:                     C9CviCcBmOQG0urp3K7J-w67gMU.mft (raw, json)
Hash identifier:          4ohh04D+/vbm7tkArCfxPwnSFOEfjwaZHLtCTVzVrsw=
Subject key identifier:   D2:B7:87:32:62:F6:04:8C:BC:E6:D9:16:FE:19:75:23:F7:1C:A2:20
Authority key identifier: 0B:D0:AF:88:27:01:98:E4:06:D2:EA:E9:DC:AE:C9:FB:0E:BB:80:C5
Certificate issuer:       /CN=A9164F37/serialNumber=0BD0AF88270198E406D2EAE9DCAEC9FB0EBB80C5
Certificate serial:       2EE0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9CviCcBmOQG0urp3K7J-w67gMU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164F37/706D447E336F11E3AF64E98F5911EA32/C9CviCcBmOQG0urp3K7J-w67gMU.mft
Manifest number:          2ECB
Signing time:             Thu 23 Jan 2025 01:21:59 +0000
Manifest this update:     Thu 23 Jan 2025 01:21:58 +0000
Manifest next update:     Thu 30 Jan 2025 01:21:58 +0000
Files and hashes:         1: C9CviCcBmOQG0urp3K7J-w67gMU.crl (hash: a+xlKBhfAAbLx7jXegZ6uPtb75R3Ek7/hvDY3f9R+Fg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12000 (0x2ee0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164F37
        Validity
            Not Before: Jan 23 01:21:58 2025 GMT
            Not After : Jan 30 01:21:58 2025 GMT
        Subject: CN=679199b7-3805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0a:69:9c:5b:66:9f:4b:87:62:42:b8:b8:e4:
                    34:55:02:af:48:ff:35:3c:c5:c6:5f:91:bd:40:3a:
                    7b:18:a7:dd:d0:c7:35:54:2f:96:f2:8b:52:46:24:
                    8c:be:b4:57:50:24:ed:5c:05:ba:fc:89:a0:35:d2:
                    b0:5c:c9:a6:c9:d1:79:0c:dd:09:f2:cd:4c:06:46:
                    a6:cc:8e:88:da:cd:44:62:30:da:4c:ad:28:14:ad:
                    1e:04:64:f4:28:3e:85:78:7f:87:8f:d2:f3:a7:a8:
                    cb:e9:76:39:a6:2c:f6:ab:d4:67:1e:b3:84:fb:e8:
                    e5:24:cd:d6:bc:50:2d:a0:ae:d9:5c:0b:63:4a:bf:
                    7f:01:29:69:10:e2:a3:b8:7e:3e:cb:fd:b7:ae:57:
                    3d:f3:bf:44:5b:a6:84:d4:f8:04:f1:25:6f:51:15:
                    d4:72:5d:6e:3f:99:d2:a3:84:0c:e7:91:28:cd:3f:
                    b4:a8:b8:25:0a:ef:9c:96:2d:a3:f6:6e:70:4f:e6:
                    67:03:e7:a1:51:ff:e9:1d:65:48:a3:c3:45:15:ff:
                    85:ae:a5:ce:d5:1f:0c:bc:3d:c8:08:41:98:19:6b:
                    a3:49:23:a2:29:51:a8:4b:7c:e3:4e:8b:63:e8:6b:
                    e6:04:47:94:7e:49:9b:7c:d8:40:74:03:d4:7b:2e:
                    9c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:B7:87:32:62:F6:04:8C:BC:E6:D9:16:FE:19:75:23:F7:1C:A2:20
            X509v3 Authority Key Identifier:
                keyid:0B:D0:AF:88:27:01:98:E4:06:D2:EA:E9:DC:AE:C9:FB:0E:BB:80:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164F37/706D447E336F11E3AF64E98F5911EA32/C9CviCcBmOQG0urp3K7J-w67gMU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9CviCcBmOQG0urp3K7J-w67gMU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164F37/706D447E336F11E3AF64E98F5911EA32/C9CviCcBmOQG0urp3K7J-w67gMU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:ad:6f:38:f9:4f:3e:dc:37:00:83:f5:a3:b5:20:46:e3:b3:
         c9:0c:49:03:28:be:9e:d1:64:b2:a9:35:b6:69:f1:f5:90:9a:
         69:a2:5c:a7:ce:65:b9:05:38:ca:9f:4f:7c:81:fc:8f:dc:f7:
         9b:bc:0e:54:72:d0:1d:3a:78:1b:66:0a:d3:22:df:7f:72:e0:
         4d:a1:dc:22:ae:c5:42:cf:c1:92:52:a3:19:a1:8a:d6:a5:c6:
         dc:7c:7b:d0:c2:bb:72:82:8b:cf:ae:04:af:21:e9:5c:79:6f:
         b4:0a:54:81:5a:3c:87:bb:91:4f:d0:89:14:0b:af:6e:a1:2d:
         6c:45:0c:28:5e:23:9f:20:e7:b9:99:bc:02:31:5d:1e:05:81:
         38:19:a8:16:6c:a9:2e:94:34:e3:24:bb:af:f6:d8:82:b7:1f:
         69:94:ef:a1:07:1f:71:47:27:aa:0f:c4:72:59:01:55:ee:9a:
         2f:45:0f:46:9c:5c:63:02:37:25:11:42:15:8d:14:b5:a0:73:
         be:f0:0b:59:1a:79:12:2c:a3:3c:2f:13:d1:e1:2b:b0:7b:80:
         5e:9a:fc:79:c5:d3:56:ee:33:fe:3b:3d:f5:9c:68:fe:77:b9:
         a2:72:bb:af:57:a9:8b:b0:19:73:ad:cd:82:c9:0b:e6:f0:bd:
         56:55:67:47
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICLuAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjRGMzcxMTAvBgNVBAUTKDBCRDBBRjg4MjcwMTk4RTQwNkQyRUFFOURDQUVDOUZC
MEVCQjgwQzUwHhcNMjUwMTIzMDEyMTU4WhcNMjUwMTMwMDEyMTU4WjAYMRYwFAYD
VQQDEw02NzkxOTliNy0zODA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxAppnFtmn0uHYkK4uOQ0VQKvSP81PMXGX5G9QDp7GKfd0Mc1VC+W8otSRiSM
vrRXUCTtXAW6/ImgNdKwXMmmydF5DN0J8s1MBkamzI6I2s1EYjDaTK0oFK0eBGT0
KD6FeH+Hj9Lzp6jL6XY5piz2q9RnHrOE++jlJM3WvFAtoK7ZXAtjSr9/ASlpEOKj
uH4+y/23rlc9879EW6aE1PgE8SVvURXUcl1uP5nSo4QM55EozT+0qLglCu+cli2j
9m5wT+ZnA+ehUf/pHWVIo8NFFf+FrqXO1R8MvD3ICEGYGWujSSOiKVGoS3zjTotj
6GvmBEeUfkmbfNhAdAPUey6cKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNK3hzJi
9gSMvObZFv4ZdSP3HKIgMB8GA1UdIwQYMBaAFAvQr4gnAZjkBtLq6dyuyfsOu4DF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEYzNy83MDZENDQ3RTMz
NkYxMUUzQUY2NEU5OEY1OTExRUEzMi9DOUN2aUNjQm1PUUcwdXJwM0s3Si13Njdn
TVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0M5Q3ZpQ2NCbU9RRzB1cnAzSzdKLXc2N2dNVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NEYzNy83MDZENDQ3RTMzNkYxMUUzQUY2NEU5OEY1OTExRUEzMi9DOUN2aUNjQm1P
UUcwdXJwM0s3Si13NjdnTVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBarW84+U8+3DcAg/WjtSBG47PJDEkDKL6e0WSyqTW2afH1kJppolyn
zmW5BTjKn098gfyP3PebvA5UctAdOngbZgrTIt9/cuBNodwirsVCz8GSUqMZoYrW
pcbcfHvQwrtygovPrgSvIelceW+0ClSBWjyHu5FP0IkUC69uoS1sRQwoXiOfIOe5
mbwCMV0eBYE4GagWbKkulDTjJLuv9tiCtx9plO+hBx9xRyeqD8RyWQFV7povRQ9G
nFxjAjclEUIVjRS1oHO+8AtZGnkSLKM8LxPR4Suwe4Bemvx5xdNW7jP+Oz31nGj+
d7micruvV6mLsBlzrc2CyQvm8L1WVWdH
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:39:19 2025 by rpki-client