Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/uHMcMIhjyygE4HbVjowHFZtOXxk.mft
File:                     uHMcMIhjyygE4HbVjowHFZtOXxk.mft (raw, json)
Hash identifier:          3rop07cg4zBfCB9nzVuozpOzsUhCDNw3veN2VltJGsM=
Subject key identifier:   C2:28:2E:FA:C5:07:03:80:58:C6:F9:E1:E4:9C:70:44:73:47:40:53
Authority key identifier: B8:73:1C:30:88:63:CB:28:04:E0:76:D5:8E:8C:07:15:9B:4E:5F:19
Certificate issuer:       /CN=A9164663/serialNumber=B8731C308863CB2804E076D58E8C07159B4E5F19
Certificate serial:       07CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHMcMIhjyygE4HbVjowHFZtOXxk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/uHMcMIhjyygE4HbVjowHFZtOXxk.mft
Manifest number:          19AB
Signing time:             Fri 31 Jan 2025 17:09:29 +0000
Manifest this update:     Fri 31 Jan 2025 17:09:28 +0000
Manifest next update:     Fri 07 Feb 2025 17:09:28 +0000
Files and hashes:         1: uHMcMIhjyygE4HbVjowHFZtOXxk.crl (hash: Hg+nJ1vb+pgDcXU7DIdkX/PaEN7s1nPdbCTSsjGVRGQ=)
                          2: 7B3168769FFA11ECA13C2839C4F9AE02.roa (hash: McWtCLWLyy4gpy5kkWmhWDdG1QOrFllStGFgrcs/aTU=)
                          3: E809B94E5E6911ECAC202539C4F9AE02.roa (hash: JpjKyDNTHzK43ZA8L5YBoWC1zM0GFuEdm21WKhF8Et4=)
                          4: 7BB2BC009FFA11ECA13C2839C4F9AE02.roa (hash: e3B5aOk6ZU2Shpa8iFZBUYRW5M7P355Lep/QJjRb6u0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1994 (0x7ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164663/serialNumber=B8731C308863CB2804E076D58E8C07159B4E5F19
        Validity
            Not Before: Jan 31 17:09:28 2025 GMT
            Not After : Feb  7 17:09:28 2025 GMT
        Subject: CN=679d03c9-004a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0f:62:90:b7:51:53:e5:ff:5f:65:71:7d:2e:
                    9f:e1:f8:67:e0:2e:a5:7b:86:ba:b9:cf:c5:0a:aa:
                    62:89:1e:26:37:9e:b5:dc:04:91:27:4e:14:74:5e:
                    e8:e6:f9:a0:6b:d5:70:1f:cc:d7:0f:70:93:8b:d5:
                    99:fa:64:6b:37:94:49:4e:70:9f:d1:df:14:bf:73:
                    2b:9a:d8:3c:6e:ee:76:b0:72:d3:3b:c4:18:85:da:
                    8d:18:ac:92:ba:9b:41:09:76:73:95:4d:41:32:ae:
                    05:1f:52:f7:19:52:56:86:5f:f6:9a:37:3c:4a:36:
                    ca:a8:e1:d0:e9:76:28:fb:41:6c:e2:3a:f2:ae:9a:
                    f8:de:0e:63:43:73:9f:17:09:35:e0:b4:8f:4f:28:
                    ae:46:07:63:26:7f:be:09:ec:73:33:f3:a1:05:5c:
                    b5:cc:76:fa:4b:a3:b1:b5:16:e3:81:16:1e:9b:ed:
                    4d:81:d2:d7:4b:8c:74:b3:dd:64:8d:78:d0:80:7d:
                    55:67:1f:3f:3b:64:e4:5a:d7:d6:e4:50:dd:4c:38:
                    4a:85:11:ea:85:2c:e7:34:6d:8e:6e:00:65:36:32:
                    21:f8:2f:23:29:8e:66:3f:b3:c6:2a:7e:4a:ab:b3:
                    eb:de:6b:ca:00:4b:da:9d:2a:90:3c:df:f9:09:35:
                    bd:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:28:2E:FA:C5:07:03:80:58:C6:F9:E1:E4:9C:70:44:73:47:40:53
            X509v3 Authority Key Identifier:
                keyid:B8:73:1C:30:88:63:CB:28:04:E0:76:D5:8E:8C:07:15:9B:4E:5F:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/uHMcMIhjyygE4HbVjowHFZtOXxk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHMcMIhjyygE4HbVjowHFZtOXxk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/uHMcMIhjyygE4HbVjowHFZtOXxk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:6b:07:83:0c:ad:6d:71:ad:a4:ef:70:51:f4:e5:ef:49:00:
         8e:52:ee:42:6c:4a:4b:37:ce:43:b0:42:44:30:6c:57:d1:28:
         9f:4d:9b:5d:8e:64:44:42:db:da:b8:94:41:a8:8b:0a:9a:f5:
         00:fb:69:f6:17:b3:fd:c0:ae:e0:31:35:c4:54:04:06:f3:0f:
         72:32:57:fe:17:4e:6e:a4:47:f4:08:ea:d4:75:5e:7f:26:f5:
         9e:b9:fb:f5:df:c8:6d:69:0d:e8:6f:fb:02:e7:74:8e:b6:a7:
         2d:ea:0e:f6:8b:2d:b2:0e:2d:c2:0d:c9:4b:0d:b1:c3:a1:7c:
         65:f6:39:4e:db:90:58:a5:92:b8:3e:ba:fb:c7:6a:0f:37:19:
         7f:a9:0b:97:9d:62:3b:4a:34:ff:9f:ca:49:75:d7:a9:4f:32:
         dc:bb:85:e8:f8:33:1d:89:de:0f:d2:6f:03:73:d1:d7:95:82:
         15:9b:55:5b:b6:4b:57:0b:85:f4:37:19:34:d4:19:fe:49:8e:
         6d:ad:0c:6c:2c:70:6e:b4:f9:11:22:05:09:b4:7e:56:3b:39:
         40:aa:4e:cb:0a:b8:a6:1d:2b:49:bf:b6:34:ac:46:fe:3f:a3:
         18:ce:17:63:6a:1e:ba:29:12:7e:cb:0b:24:e2:c9:0c:6a:b0:
         10:a7:9e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:54:48 2025 by rpki-client