Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.mft
File:                     GAVt61gONXTxSD5mnFqkLlhOzrs.mft (raw, json)
Hash identifier:          1gRQC0F8QtmEm8cQbnqZwm41ycMxPd6V2YDuotPOqHc=
Subject key identifier:   1B:50:46:88:9F:C5:11:D6:D5:CF:31:6F:F4:CD:E1:F8:D9:E1:32:66
Authority key identifier: 18:05:6D:EB:58:0E:35:74:F1:48:3E:66:9C:5A:A4:2E:58:4E:CE:BB
Certificate issuer:       /CN=A914A0CB/serialNumber=18056DEB580E3574F1483E669C5AA42E584ECEBB
Certificate serial:       1ED9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAVt61gONXTxSD5mnFqkLlhOzrs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.mft
Manifest number:          1EC5
Signing time:             Fri 31 Jan 2025 16:03:00 +0000
Manifest this update:     Fri 31 Jan 2025 16:03:00 +0000
Manifest next update:     Fri 07 Feb 2025 16:03:00 +0000
Files and hashes:         1: GAVt61gONXTxSD5mnFqkLlhOzrs.crl (hash: jH3sjYy9WAi8PcYXeQiEq/jlRHjbTeyCJwtnHBOSkUI=)
                          2: 764D8698EA9111EAA035205FC4F9AE02.roa (hash: N8CiTad7+YCKPe2opBHwCiq7VtSImphL9JYd7EN47KQ=)
                          3: 7CB48FB0EA9411EAB77B1C69C4F9AE02.roa (hash: Sa6ldNBoTeND2ToHXPhf3nbtng663wb8wohGeUYEVNI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7897 (0x1ed9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A0CB/serialNumber=18056DEB580E3574F1483E669C5AA42E584ECEBB
        Validity
            Not Before: Jan 31 16:03:00 2025 GMT
            Not After : Feb  7 16:03:00 2025 GMT
        Subject: CN=679cf434-b72d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e9:5d:17:33:1e:19:79:e2:d8:da:5e:d5:27:
                    08:a6:95:7f:b7:dd:74:22:cc:5f:3b:db:b7:c1:c6:
                    17:d9:f5:11:52:ce:1d:f1:0b:f7:42:80:b5:82:c8:
                    6e:30:15:ee:1e:3b:72:3b:6f:dd:3f:04:bc:82:75:
                    42:f2:ef:0f:c3:5c:6f:69:39:23:fd:94:a8:aa:e5:
                    54:a6:f3:72:e1:05:e3:44:09:38:ab:82:5a:ff:0a:
                    e7:7a:ce:c1:d5:5a:ac:60:bd:1e:63:77:e6:83:23:
                    91:1d:b5:41:d3:3f:ff:6f:59:50:c3:ec:83:72:7e:
                    8b:e3:65:b3:10:ef:6d:1d:7c:14:40:16:e5:2e:40:
                    38:ca:ba:93:2d:75:69:8c:25:66:f3:b8:2b:ac:1f:
                    fc:ea:ac:65:d9:df:cb:b0:8c:ac:f3:56:15:23:c6:
                    a0:11:c6:a6:4b:1d:69:c4:7e:5e:91:de:e5:7a:e0:
                    cb:83:b4:61:a0:80:a4:8b:fc:2c:cb:d4:c3:bc:32:
                    9b:4c:a7:9d:70:36:f7:a8:1f:e4:50:10:72:9b:8d:
                    39:f3:f4:22:f3:a8:a9:3a:99:30:9b:0c:1f:d9:83:
                    ff:0a:e7:96:a2:8a:0c:35:49:3d:a9:33:87:06:91:
                    ee:b6:b5:84:b9:c2:e4:10:76:80:9a:6f:04:1e:d9:
                    bc:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:50:46:88:9F:C5:11:D6:D5:CF:31:6F:F4:CD:E1:F8:D9:E1:32:66
            X509v3 Authority Key Identifier:
                keyid:18:05:6D:EB:58:0E:35:74:F1:48:3E:66:9C:5A:A4:2E:58:4E:CE:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAVt61gONXTxSD5mnFqkLlhOzrs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:85:89:8d:d7:f5:a8:08:e3:e8:fb:7e:97:2a:89:d3:0f:18:
         61:ed:ee:9c:66:bb:92:85:67:e5:d3:a9:af:f7:e9:c1:22:70:
         9f:12:fe:40:49:23:6b:f5:1e:2a:84:56:ae:db:b9:b9:48:83:
         bb:0a:f2:9d:c9:8f:04:ff:55:24:8f:c9:e3:4d:90:40:1b:bf:
         7b:02:5f:2a:17:c9:60:48:c7:93:ff:7f:df:ad:11:58:e9:25:
         c1:e4:6c:5e:5d:11:48:a9:f3:81:30:92:22:6a:c2:e2:3f:fb:
         20:18:b3:1d:b1:c5:24:71:f2:2b:03:73:37:86:7d:3b:36:c3:
         16:35:8a:34:0a:ae:41:7b:2c:94:36:cd:34:b3:5e:5b:16:9b:
         1f:a6:9d:7a:b8:bc:9d:d5:53:93:c0:72:f3:fb:4e:d1:86:59:
         c8:20:7e:57:ed:be:73:77:d6:65:a7:f2:a9:ac:3c:c6:8d:51:
         0f:99:4c:4c:bd:6f:1b:0c:4a:17:44:f2:57:06:59:3e:55:9e:
         57:cd:5c:e5:0a:54:7f:bb:e8:65:19:45:5c:d9:4b:de:d0:ff:
         0d:e3:68:a8:53:86:22:38:c3:a8:45:15:f0:44:c4:d4:93:4a:
         b0:bb:25:4c:26:7f:f6:e2:b3:a2:5f:8c:19:ee:6c:b2:77:c5:
         ea:b4:51:d9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICHtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEEwQ0IxMTAvBgNVBAUTKDE4MDU2REVCNTgwRTM1NzRGMTQ4M0U2NjlDNUFBNDJF
NTg0RUNFQkIwHhcNMjUwMTMxMTYwMzAwWhcNMjUwMjA3MTYwMzAwWjAYMRYwFAYD
VQQDEw02NzljZjQzNC1iNzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo+ldFzMeGXni2Npe1ScIppV/t910IsxfO9u3wcYX2fURUs4d8Qv3QoC1gshu
MBXuHjtyO2/dPwS8gnVC8u8Pw1xvaTkj/ZSoquVUpvNy4QXjRAk4q4Ja/wrnes7B
1VqsYL0eY3fmgyORHbVB0z//b1lQw+yDcn6L42WzEO9tHXwUQBblLkA4yrqTLXVp
jCVm87grrB/86qxl2d/LsIys81YVI8agEcamSx1pxH5ekd7leuDLg7RhoICki/ws
y9TDvDKbTKedcDb3qB/kUBBym4058/Qi86ipOpkwmwwf2YP/CueWoooMNUk9qTOH
BpHutrWEucLkEHaAmm8EHtm87wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBtQRoif
xRHW1c8xb/TN4fjZ4TJmMB8GA1UdIwQYMBaAFBgFbetYDjV08Ug+ZpxapC5YTs67
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTBDQi9FNUMzQUU5QzVB
MTkxMUU2ODFCOEMxMEZDNEY5QUUwMi9HQVZ0NjFnT05YVHhTRDVtbkZxa0xsaE96
cnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dBVnQ2MWdPTlhUeFNENW1uRnFrTGxoT3pycy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QTBDQi9FNUMzQUU5QzVBMTkxMUU2ODFCOEMxMEZDNEY5QUUwMi9HQVZ0NjFnT05Y
VHhTRDVtbkZxa0xsaE96cnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCjhYmN1/WoCOPo+36XKonTDxhh7e6cZruShWfl06mv9+nBInCfEv5A
SSNr9R4qhFau27m5SIO7CvKdyY8E/1Ukj8njTZBAG797Al8qF8lgSMeT/3/frRFY
6SXB5GxeXRFIqfOBMJIiasLiP/sgGLMdscUkcfIrA3M3hn07NsMWNYo0Cq5BeyyU
Ns00s15bFpsfpp16uLyd1VOTwHLz+07RhlnIIH5X7b5zd9Zlp/KprDzGjVEPmUxM
vW8bDEoXRPJXBlk+VZ5XzVzlClR/u+hlGUVc2Uve0P8N42ioU4YiOMOoRRXwRMTU
k0qwuyVMJn/24rOiX4wZ7myyd8XqtFHZ
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:24:05 2025 by rpki-client