Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft
File:                     fHyggZUNrvx8VLjERpi0jo18abg.mft (raw, json)
Hash identifier:          b7i4Z3HxTo7ymaDvSQtSmgjs0nWhBYRB8q9ISEFQVqE=
Subject key identifier:   36:8B:75:8E:E0:A0:CF:84:C2:2B:7E:0F:CE:59:7D:46:7D:36:A5:37
Authority key identifier: 7C:7C:A0:81:95:0D:AE:FC:7C:54:B8:C4:46:98:B4:8E:8D:7C:69:B8
Certificate issuer:       /CN=A9136DD6/serialNumber=7C7CA081950DAEFC7C54B8C44698B48E8D7C69B8
Certificate serial:       105C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft
Manifest number:          1034
Signing time:             Fri 31 Jan 2025 17:25:51 +0000
Manifest this update:     Fri 31 Jan 2025 17:25:50 +0000
Manifest next update:     Fri 07 Feb 2025 17:25:50 +0000
Files and hashes:         1: fHyggZUNrvx8VLjERpi0jo18abg.crl (hash: 4GT3KWxGqmuxTNFnKW5sF4fVzzrKcgyoeFRcFZfRbdo=)
                          2: 658A332E5C0311E999AF9478C4F9AE02.roa (hash: sps6OZoL5QmmM3ZpPmWyZ0iMnHwS3c4js0f2ItWVO3c=)
                          3: 5FADE68E288811EE97A1EC5CC4F9AE02.roa (hash: dVJZeCweb+XTaOi/1adyN7uBH6rIcemfVJD3fZ76wkg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4188 (0x105c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136DD6/serialNumber=7C7CA081950DAEFC7C54B8C44698B48E8D7C69B8
        Validity
            Not Before: Jan 31 17:25:50 2025 GMT
            Not After : Feb  7 17:25:50 2025 GMT
        Subject: CN=679d079f-32f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:da:b5:c5:b0:c4:41:1d:40:04:45:33:42:18:
                    3c:1c:14:2a:8c:1e:9b:a6:69:8d:e9:e2:6e:87:a0:
                    73:39:ec:53:e9:e3:76:cc:e2:55:93:16:f0:d2:9b:
                    df:2b:09:b5:87:6f:ee:3a:f7:25:13:46:10:56:49:
                    c2:89:e1:0a:b0:e0:df:91:85:bf:55:d2:97:fb:4a:
                    bb:df:a5:14:a4:12:93:24:d9:72:f8:40:18:05:61:
                    40:5f:03:41:c4:7f:e3:c7:10:f4:c9:f2:4c:00:13:
                    0c:26:f7:24:90:6c:7b:67:ec:73:80:a0:56:e8:11:
                    df:0e:40:02:c5:f0:7d:6e:fe:85:d9:b9:c1:38:66:
                    ea:52:05:31:50:75:53:1e:1d:9d:3d:a2:46:81:38:
                    43:8e:ea:78:08:08:66:59:b1:a1:db:ed:a4:44:11:
                    07:19:fc:12:8f:70:95:90:e7:0d:cd:20:98:6c:1e:
                    f8:5f:01:6f:e0:6c:31:da:b1:ff:07:b7:e1:ea:15:
                    c5:26:2e:38:33:4b:a8:a9:1d:34:d5:95:97:ab:80:
                    f9:12:1b:b8:9c:ef:87:4d:54:3d:95:8a:6d:40:6c:
                    cb:88:17:1b:95:09:42:ad:b4:f3:1b:5d:92:0d:9d:
                    8a:80:12:44:35:a0:14:bb:dc:64:98:3c:2e:74:f4:
                    1a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:8B:75:8E:E0:A0:CF:84:C2:2B:7E:0F:CE:59:7D:46:7D:36:A5:37
            X509v3 Authority Key Identifier:
                keyid:7C:7C:A0:81:95:0D:AE:FC:7C:54:B8:C4:46:98:B4:8E:8D:7C:69:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:e8:73:6c:9a:c0:07:64:88:be:b4:65:d2:c2:b0:17:ef:e7:
         95:b4:b1:62:15:e8:12:69:ad:cf:1f:96:7f:44:ee:3e:e1:9e:
         4e:70:7a:ff:2f:4d:aa:9d:5f:c1:a3:69:5d:4b:f3:90:71:79:
         ba:82:6d:46:84:5c:b0:30:af:84:42:c2:09:64:92:fa:e8:39:
         7f:71:74:e3:4f:42:61:11:d0:ba:b2:58:fd:35:3c:71:b1:34:
         77:4d:9b:2a:c3:2c:a3:16:d4:34:3c:08:32:36:23:ea:67:7f:
         5d:bf:bc:03:a6:7c:ff:17:08:d3:8f:0a:f2:f9:99:69:b9:ff:
         1d:a2:2c:52:89:3f:c7:e7:fc:bf:0c:29:59:b7:93:d3:ca:fc:
         a1:1b:66:91:ef:f8:c8:8f:a0:38:bf:12:cd:53:b0:0b:55:04:
         b6:92:92:af:ac:05:d0:34:ac:97:8f:4d:60:74:69:be:b1:c2:
         e2:1f:fb:14:aa:a8:05:30:88:31:6a:ad:9a:23:de:13:56:63:
         10:90:c6:b3:bd:0d:56:48:d8:54:ec:8a:66:d1:8b:c5:f8:81:
         45:71:e5:4e:e9:d0:76:4f:13:9c:dc:6d:50:6a:89:3c:be:6c:
         64:9d:51:1d:ac:93:76:67:e3:00:f7:c3:8b:3c:eb:21:eb:a2:
         22:7c:82:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:22:25 2025 by rpki-client