Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.mft
File:                     GKIzbZyhDwibn8urmxszkqIdId4.mft (raw, json)
Hash identifier:          EhESiUq9kKZG/kRfk8ujopYajKivNhRiai2Ul71i/K4=
Subject key identifier:   AA:BE:EA:EB:41:3F:6A:A6:A2:74:10:35:DB:9A:D0:D0:C8:39:5D:43
Authority key identifier: 18:A2:33:6D:9C:A1:0F:08:9B:9F:CB:AB:9B:1B:33:92:A2:1D:21:DE
Certificate issuer:       /CN=A9199885/serialNumber=18A2336D9CA10F089B9FCBAB9B1B3392A21D21DE
Certificate serial:       3442
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GKIzbZyhDwibn8urmxszkqIdId4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.mft
Manifest number:          54AE
Signing time:             Fri 31 Jan 2025 14:57:27 +0000
Manifest this update:     Fri 31 Jan 2025 14:57:26 +0000
Manifest next update:     Fri 07 Feb 2025 14:57:26 +0000
Files and hashes:         1: GKIzbZyhDwibn8urmxszkqIdId4.crl (hash: BbNBC2zFJfOnDjira9w9FqEH2Q2BgXYB2OYD19/cyFw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13378 (0x3442)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199885/serialNumber=18A2336D9CA10F089B9FCBAB9B1B3392A21D21DE
        Validity
            Not Before: Jan 31 14:57:26 2025 GMT
            Not After : Feb  7 14:57:26 2025 GMT
        Subject: CN=679ce4d6-13ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ad:da:31:45:a7:01:0f:bc:4f:f8:18:5f:79:
                    08:2f:35:8f:70:f4:e6:0f:f5:ab:01:75:8d:cc:61:
                    38:32:7b:24:bf:88:c5:e4:55:7c:8a:ac:d7:f2:37:
                    92:9e:ae:be:fc:a6:2e:fe:c3:a2:a4:05:45:00:05:
                    f5:e6:f0:5f:a3:7c:44:4c:43:eb:b6:26:2b:fe:4f:
                    3b:f0:d6:dc:14:0d:c3:57:66:84:d3:69:4e:4b:d0:
                    51:65:fd:6d:30:a7:3d:68:4d:0c:5c:e1:77:1a:68:
                    f1:95:b4:2d:d7:76:5e:a3:32:c7:f9:6e:c2:a1:9b:
                    51:a6:ae:c1:d0:a3:57:08:65:15:5f:b6:d2:fd:b2:
                    ff:d4:63:bb:39:1c:f5:8a:70:31:2e:9f:99:40:c5:
                    63:f6:13:a6:d6:d6:f1:3b:05:7a:2f:23:24:71:69:
                    53:40:58:62:a8:04:e6:bf:1e:af:e0:d2:76:45:22:
                    4c:59:e6:66:82:2e:93:a7:43:dd:c9:1b:c0:4c:67:
                    5e:ff:bf:57:ff:44:c9:74:64:15:15:fe:e5:62:c4:
                    f7:aa:71:1f:f9:be:61:49:c8:7a:71:1c:5e:7f:62:
                    89:82:60:ee:80:03:95:c6:44:6c:d9:93:b1:f6:da:
                    31:61:e2:fd:c8:7d:8d:ae:3a:85:e8:27:f7:17:89:
                    c1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:BE:EA:EB:41:3F:6A:A6:A2:74:10:35:DB:9A:D0:D0:C8:39:5D:43
            X509v3 Authority Key Identifier:
                keyid:18:A2:33:6D:9C:A1:0F:08:9B:9F:CB:AB:9B:1B:33:92:A2:1D:21:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GKIzbZyhDwibn8urmxszkqIdId4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ef:11:b4:86:22:01:12:8f:24:9e:29:8f:94:6c:b1:d3:01:a0:
         0a:b6:8f:42:a7:a1:87:d2:d3:95:5f:68:65:e5:c4:9d:88:2d:
         ac:dd:14:ef:41:e0:79:d1:94:5a:da:78:28:e1:ad:e5:ba:d4:
         84:bc:79:15:23:92:fb:16:59:7c:92:d7:b2:f9:4f:cc:b8:66:
         ee:2b:ff:55:f0:72:ab:f9:a7:b0:c9:30:66:f5:7e:7d:24:d5:
         d6:f6:7c:5f:77:af:d7:9a:55:16:a7:69:12:2a:31:f2:e9:bd:
         b7:35:95:97:8f:d1:c2:12:db:82:2d:ca:17:58:66:44:25:26:
         c2:37:77:02:9c:73:18:0d:c2:95:07:18:e8:b2:10:80:69:9f:
         e7:00:98:73:5d:22:7e:fc:62:6f:e7:73:3f:6c:50:fd:64:ab:
         6d:c0:11:41:3a:b3:70:fb:0f:20:9f:0e:07:e8:39:0a:ce:59:
         ac:15:06:53:f0:21:4b:12:76:d4:cf:37:38:c9:a8:f2:f6:ed:
         17:a5:cc:70:81:1c:a3:67:eb:9d:67:d9:9b:e7:76:e7:46:c7:
         b4:f1:62:ef:72:16:b3:5e:28:54:b1:d4:c0:ea:0a:e8:83:cf:
         b2:c8:d9:dc:82:81:48:f6:8a:b7:29:ad:6f:0a:ba:73:87:70:
         99:8c:ae:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:15:22 2025 by rpki-client