Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft
File:                     h57Jr836J6POe11DeHoviQOFWG4.mft (raw, json)
Hash identifier:          iTLtwpgpXtSFlPao5suaeQYlAHGjGydC+fB0A/0UI0Y=
Subject key identifier:   5A:FB:A9:55:77:76:27:D7:C5:A6:63:E2:60:AC:48:D7:17:AC:F4:A1
Authority key identifier: 87:9E:C9:AF:CD:FA:27:A3:CE:7B:5D:43:78:7A:2F:89:03:85:58:6E
Certificate issuer:       /CN=A914E556/serialNumber=879EC9AFCDFA27A3CE7B5D43787A2F890385586E
Certificate serial:       075B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h57Jr836J6POe11DeHoviQOFWG4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft
Manifest number:          0754
Signing time:             Thu 30 Jan 2025 21:29:59 +0000
Manifest this update:     Thu 30 Jan 2025 21:29:59 +0000
Manifest next update:     Thu 06 Feb 2025 21:29:59 +0000
Files and hashes:         1: h57Jr836J6POe11DeHoviQOFWG4.crl (hash: R+CXFN9B92h8APxUK6nWXOX9V+iRb2gmUyU5To0enAM=)
                          2: 375F7DAA0C3911EB828BDC25C4F9AE02.roa (hash: +IWbZ/7PgA6d6vOIX20SVgEuJVAS5imzV4sSU3cCP90=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1883 (0x75b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E556/serialNumber=879EC9AFCDFA27A3CE7B5D43787A2F890385586E
        Validity
            Not Before: Jan 30 21:29:59 2025 GMT
            Not After : Feb  6 21:29:59 2025 GMT
        Subject: CN=679bef57-efb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:46:e6:a6:e5:a1:e3:13:4d:ac:2c:96:1c:75:
                    26:cc:fb:ee:e7:ab:2a:99:14:9d:dd:ea:1d:39:45:
                    1d:35:0e:1a:93:e5:69:0b:a3:63:62:62:8d:97:d5:
                    9c:ac:6d:14:12:76:0f:20:ad:d5:e9:c1:fe:8d:03:
                    94:2a:05:d4:0f:c1:aa:7e:e7:e6:92:67:0b:f6:d8:
                    db:56:f0:c9:4e:75:5b:a1:05:03:a7:e0:30:67:40:
                    ce:77:44:db:95:4b:ce:f5:66:11:5a:24:a8:0d:58:
                    12:3c:4e:43:4e:16:99:f9:4f:b1:51:3e:ac:83:db:
                    22:0f:45:da:62:87:8d:59:21:7e:a8:b4:d2:0c:3e:
                    64:ac:77:93:ff:22:a2:83:7c:55:bb:ef:68:d6:a3:
                    aa:ec:95:10:0c:fc:3c:5b:01:6c:a1:c0:5a:3e:d3:
                    bc:4c:2c:e8:87:49:73:96:c9:b9:1f:04:86:61:44:
                    3f:cb:c8:2b:33:3e:6b:ef:d8:25:d7:fc:93:35:57:
                    e6:fb:40:d1:6c:81:ee:20:51:b1:da:11:22:44:69:
                    d9:eb:8f:44:4c:f2:fd:3f:9b:e1:e0:3d:35:79:9e:
                    f3:fb:21:47:40:c1:1a:9b:bd:17:c0:fe:4f:7f:15:
                    69:48:9c:44:0e:67:b0:1e:a5:78:6f:a7:88:b9:5c:
                    3c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:FB:A9:55:77:76:27:D7:C5:A6:63:E2:60:AC:48:D7:17:AC:F4:A1
            X509v3 Authority Key Identifier:
                keyid:87:9E:C9:AF:CD:FA:27:A3:CE:7B:5D:43:78:7A:2F:89:03:85:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h57Jr836J6POe11DeHoviQOFWG4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:e1:bb:ae:49:44:82:2b:73:8b:33:ad:6d:0d:b2:94:09:6b:
         3f:62:0c:60:d4:2c:6c:15:76:66:be:12:e2:d9:b1:41:c8:7d:
         44:d2:a3:9a:32:d1:29:48:e3:2e:f4:35:a5:5f:3c:21:cc:b7:
         9c:01:01:dc:ad:e2:20:2b:52:38:40:b1:58:ff:ac:78:c3:30:
         f0:29:74:0e:5f:0d:b8:a3:57:37:42:d0:bf:35:80:50:bf:c7:
         45:91:45:ba:fd:1d:12:9b:47:aa:03:46:20:da:6a:cb:30:06:
         80:58:39:10:d6:72:e2:f9:5f:d6:6c:5c:b2:fc:7e:20:ca:e1:
         d5:11:78:17:66:8d:a1:04:b3:88:56:9d:c7:26:8b:b8:52:4d:
         e5:f3:bf:f1:e3:1c:35:36:62:ee:0d:c2:d6:d5:bf:5c:af:e8:
         ac:cc:2c:10:5e:f9:df:58:ed:0b:82:21:e4:5b:07:3b:cb:c3:
         c9:5b:64:e6:b0:19:a1:d1:66:66:6a:40:a2:13:27:b6:93:20:
         fc:3f:23:06:e6:28:05:a7:ea:52:30:c9:f7:0a:ad:d5:a4:ec:
         c1:6e:a7:62:69:c4:e0:7c:aa:ed:78:2e:57:29:1c:c7:8c:9c:
         a1:af:98:df:b2:41:4d:bb:da:c6:4d:44:37:c9:45:3e:c4:ce:
         b3:61:2f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:11:50 2025 by rpki-client