Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft
File:                     GRFX6ZVM7IiQxhjMBybwB06RDio.mft (raw, json)
Hash identifier:          9LNZxZ/cJ9Mj6gVyFjMtUVTDv+P0khrxHBJdSXBCiXw=
Subject key identifier:   F0:4E:0B:A4:1B:43:AD:0F:34:CF:93:52:BC:5B:E9:0F:0C:66:7B:B2
Authority key identifier: 19:11:57:E9:95:4C:EC:88:90:C6:18:CC:07:26:F0:07:4E:91:0E:2A
Certificate issuer:       /CN=A916FA49/serialNumber=191157E9954CEC8890C618CC0726F0074E910E2A
Certificate serial:       1481
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft
Manifest number:          1479
Signing time:             Fri 31 Jan 2025 16:52:37 +0000
Manifest this update:     Fri 31 Jan 2025 16:52:37 +0000
Manifest next update:     Fri 07 Feb 2025 16:52:37 +0000
Files and hashes:         1: GRFX6ZVM7IiQxhjMBybwB06RDio.crl (hash: rD+dJNdkA5dAOm+Mqnk7i1Z8tMriV8oLHlbza+fpX1o=)
                          2: 0448C04E5CC211E8AC07E63AC4F9AE02.roa (hash: P4pXm3Akk+1BNm0AErATD6yX0hSNAer5oQwcgjfFUX8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5249 (0x1481)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916FA49/serialNumber=191157E9954CEC8890C618CC0726F0074E910E2A
        Validity
            Not Before: Jan 31 16:52:37 2025 GMT
            Not After : Feb  7 16:52:37 2025 GMT
        Subject: CN=679cffd5-b2d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4f:60:6d:6d:5c:9f:bb:07:aa:61:ee:87:00:
                    79:9a:90:2a:18:48:2f:27:a4:82:83:7a:4f:b2:34:
                    78:cd:36:ce:cb:2f:85:7c:d3:14:07:97:ec:dd:b1:
                    4f:d1:90:bb:2c:24:bb:e5:c5:13:67:33:87:9a:a2:
                    08:39:32:97:df:8a:85:29:7c:e4:40:ca:c9:b4:d8:
                    26:1f:94:40:82:62:ea:e6:fe:79:68:0a:27:4f:8b:
                    bd:c7:db:91:b7:a2:d8:35:02:df:02:32:1d:70:61:
                    0d:27:2b:2e:59:ca:6c:02:44:6a:fe:ec:ac:5c:5d:
                    2b:e3:d2:c9:f9:20:5b:3e:91:ee:c3:62:ac:b6:31:
                    40:fe:5e:e2:fb:64:34:e8:2c:fb:c1:8f:54:44:0e:
                    29:60:17:c5:25:a1:e7:15:39:84:25:20:f6:a1:9f:
                    24:eb:4b:fb:e0:ad:e2:56:45:a8:43:4f:bf:94:36:
                    16:00:dd:39:10:b0:3a:19:69:46:54:9f:34:76:45:
                    4b:8f:0b:8f:ac:d5:81:2b:a0:09:a1:2b:6e:f3:dd:
                    2c:30:f3:42:ea:d5:0b:8d:88:73:dc:30:54:52:64:
                    9d:f3:ea:db:d2:b1:30:e0:9a:b5:e0:49:ea:73:4d:
                    3b:cc:40:f0:10:4c:46:7f:3f:3a:c9:e5:3d:fb:24:
                    04:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:4E:0B:A4:1B:43:AD:0F:34:CF:93:52:BC:5B:E9:0F:0C:66:7B:B2
            X509v3 Authority Key Identifier:
                keyid:19:11:57:E9:95:4C:EC:88:90:C6:18:CC:07:26:F0:07:4E:91:0E:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:dc:6a:2e:c0:c5:35:4c:ff:f7:50:dd:d1:07:90:1f:cf:9f:
         1c:69:00:0b:6e:6d:fd:33:56:77:81:dc:2d:84:f4:88:ad:b1:
         39:bb:64:71:46:d5:51:e0:3e:31:b6:67:eb:be:15:6d:a9:ea:
         ef:11:ec:d4:ee:a7:f5:f7:21:0d:35:1a:b6:37:da:0a:b6:26:
         7e:02:08:1f:dc:7c:4e:c5:73:27:35:46:d3:95:73:1b:f9:2f:
         f7:1f:e1:eb:d7:14:64:e7:34:61:ab:30:f7:82:87:e9:6d:f1:
         55:27:9d:ec:53:0b:a3:5a:d0:17:04:2b:af:91:f6:8b:60:f5:
         ec:59:24:ee:31:9d:bc:09:66:0a:1f:50:a4:62:78:05:51:eb:
         f4:12:ff:ec:ac:a8:cd:c5:cb:f7:0c:a6:97:a9:6a:49:3e:04:
         ef:0b:f4:1d:bc:6a:3a:a7:cf:a0:5c:f4:57:25:ac:3e:f8:86:
         03:06:53:85:66:da:6c:b5:d9:9a:b8:47:86:16:1a:89:b1:22:
         8e:9f:65:a3:4d:93:be:2c:ec:bc:a9:b2:1d:29:7f:63:d6:f7:
         05:84:f8:3e:61:70:46:6e:01:5a:7c:a7:3d:05:0a:04:98:41:
         92:1b:39:5e:89:c4:d2:43:f6:5f:f9:93:dc:84:ed:9b:b7:28:
         fe:82:3c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:50:42 2025 by rpki-client