Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft
File:                     HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft (raw, json)
Hash identifier:          GWV4uFkdtH1TQsp2wk7STIiMQ2Sihxp67YLRmcIip2o=
Subject key identifier:   17:B1:5A:DA:C7:27:EE:60:3B:52:13:29:25:A2:F0:58:DD:3A:D1:C5
Authority key identifier: 1C:71:D6:3E:DA:EC:B1:0F:53:14:1E:8A:30:89:43:95:9A:7C:57:5A
Certificate issuer:       /CN=A91145A9/serialNumber=1C71D63EDAECB10F53141E8A308943959A7C575A
Certificate serial:       0198
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft
Manifest number:          0192
Signing time:             Fri 31 Jan 2025 02:45:27 +0000
Manifest this update:     Fri 31 Jan 2025 02:45:26 +0000
Manifest next update:     Fri 07 Feb 2025 02:45:26 +0000
Files and hashes:         1: HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl (hash: 0n+C+J2sSV0lEdhmnC4psWNU34kvtACbL3KM66AiRJA=)
                          2: 33A0049E98E311EDBDD55016C4F9AE02.roa (hash: 1F0H2dbwEQAZ11mjRklbJAe3otm+tJQyGGpBTqSZ0C0=)
                          3: 34AB7E9098E311EDBDD55016C4F9AE02.roa (hash: yUnpz9eBONeeUf/ARcjSeazIrSPZziYwbK0ejyuueSs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 408 (0x198)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91145A9/serialNumber=1C71D63EDAECB10F53141E8A308943959A7C575A
        Validity
            Not Before: Jan 31 02:45:26 2025 GMT
            Not After : Feb  7 02:45:26 2025 GMT
        Subject: CN=679c3947-a11c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:be:90:32:5c:85:88:72:72:b6:a2:93:0b:bf:
                    ea:e4:a6:c5:de:ab:0d:78:97:0f:8b:84:44:0f:9f:
                    17:81:93:bb:37:01:6d:78:0c:1d:96:d2:9d:91:28:
                    1c:a6:57:da:a0:c9:b2:89:73:2d:2b:f9:f7:38:5b:
                    6d:20:48:37:aa:44:e7:d4:7b:5e:27:89:39:2c:72:
                    2c:35:94:1f:0a:c3:e3:c9:45:0e:29:a1:5b:f3:53:
                    f1:07:5b:96:9c:8f:32:07:c6:96:83:2c:ab:3f:19:
                    e7:00:7c:81:4e:6b:36:39:6d:58:8b:24:72:82:01:
                    18:62:98:5b:ee:cc:cc:dc:6b:27:d5:c0:3e:12:fd:
                    bf:b7:57:ed:05:cc:71:2d:13:75:c9:83:84:1d:f0:
                    99:5a:9e:d5:43:c3:24:5f:d0:19:d9:b7:f3:19:f7:
                    35:3e:d8:42:cb:f8:e4:01:a9:a8:cf:eb:78:2e:53:
                    09:69:8b:2c:e7:34:b2:fe:88:af:fc:be:ee:75:04:
                    0d:df:ac:a9:1d:5d:5e:d7:d3:7e:94:b4:0a:8a:94:
                    2a:90:79:b8:2d:05:fc:28:87:c7:92:32:43:ef:25:
                    13:76:18:80:8e:e3:c1:0c:b5:e3:88:67:bb:ac:5b:
                    6e:52:cd:7e:1d:c6:85:a8:2d:4f:a0:67:9e:a6:d7:
                    14:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:B1:5A:DA:C7:27:EE:60:3B:52:13:29:25:A2:F0:58:DD:3A:D1:C5
            X509v3 Authority Key Identifier:
                keyid:1C:71:D6:3E:DA:EC:B1:0F:53:14:1E:8A:30:89:43:95:9A:7C:57:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:35:42:e0:9a:a3:31:5b:c0:04:9c:33:39:f0:0d:23:d3:29:
         21:7e:0c:16:c8:dd:36:4c:eb:21:0d:d1:6b:da:d9:bd:85:af:
         5d:2b:21:ae:71:3b:08:28:3b:d4:4a:d5:38:e8:3a:15:2d:5c:
         4d:29:c5:e0:15:de:55:5f:db:1c:e2:0b:4b:b0:67:69:48:76:
         34:2b:bd:b5:d7:b6:64:45:2c:fa:c1:a4:4f:f3:e6:b4:00:84:
         9e:76:f1:12:36:0b:55:85:5a:3e:0d:17:f2:62:e6:ba:27:dd:
         35:b8:77:39:29:78:d3:00:37:d3:bd:8f:b4:67:db:9c:bd:97:
         82:f5:3c:da:03:ad:ad:90:f9:5e:72:7d:d5:38:44:80:da:a8:
         da:31:17:67:1b:2a:24:f2:72:ba:ad:2e:d9:7b:cd:5d:06:55:
         41:79:0a:b0:8a:f4:75:e9:5e:d0:92:04:51:34:49:40:57:56:
         f1:19:76:b7:21:57:9b:ed:f5:a1:9f:2d:56:74:c5:29:93:0f:
         cc:3c:50:48:9d:a2:8a:af:2d:50:f3:4b:f9:1b:80:8f:08:51:
         c7:ef:a9:24:b4:bc:e6:46:e8:ce:c0:0e:49:32:85:4f:55:ed:
         47:fd:e6:90:a5:f3:6e:c1:c6:1f:8b:29:27:12:99:26:72:f1:
         fc:49:bd:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:05:58 2025 by rpki-client