Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B232/94D4C7403F0D11EBAF1FCE22C4F9AE02/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.mft
File:                     bhhL4UYS1aK1PEmHaERQhQ2wLHQ.mft (raw, json)
Hash identifier:          TDiRs1eYxMwXM/r9yFCJBzXzP3+zb28Encuh8hFgyr0=
Subject key identifier:   CF:1F:95:D2:92:71:FC:38:51:0C:E3:91:57:05:09:DF:7C:6F:AC:32
Authority key identifier: 6E:18:4B:E1:46:12:D5:A2:B5:3C:49:87:68:44:50:85:0D:B0:2C:74
Certificate issuer:       /CN=A916B232/serialNumber=6E184BE14612D5A2B53C4987684450850DB02C74
Certificate serial:       06D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B232/94D4C7403F0D11EBAF1FCE22C4F9AE02/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.mft
Manifest number:          06D0
Signing time:             Thu 30 Jan 2025 22:14:13 +0000
Manifest this update:     Thu 30 Jan 2025 22:14:13 +0000
Manifest next update:     Thu 06 Feb 2025 22:14:13 +0000
Files and hashes:         1: bhhL4UYS1aK1PEmHaERQhQ2wLHQ.crl (hash: yuWAvQoZ4n6YbhMW4E3CKBqMOb4PCBpB0rOvnUvyOMU=)
                          2: A2C94D9C3F0F11EB80256B25C4F9AE02.roa (hash: 86l4f+cm101fvXxoRGl/WXh8XBf1B4iUK22+JkpAYks=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1751 (0x6d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B232/serialNumber=6E184BE14612D5A2B53C4987684450850DB02C74
        Validity
            Not Before: Jan 30 22:14:13 2025 GMT
            Not After : Feb  6 22:14:13 2025 GMT
        Subject: CN=679bf9b5-125b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:53:6c:55:42:1f:21:26:f2:ab:3c:48:33:25:
                    57:49:1c:da:bd:81:da:26:14:9e:cb:da:f1:16:50:
                    60:10:dc:d6:ed:dc:f1:b6:da:54:0c:34:d7:d2:57:
                    4e:25:ed:c8:d4:6f:f4:12:c1:ae:f2:ff:bb:64:15:
                    25:8e:93:91:04:55:6e:e9:7f:e1:22:b9:a8:88:a7:
                    bf:29:05:34:f7:c1:a7:22:9f:04:c8:c0:fc:53:42:
                    b4:75:93:e0:e5:21:dd:49:8c:60:15:ca:e6:dc:66:
                    d5:8a:5e:a9:85:31:de:26:c8:eb:89:e3:7f:c6:10:
                    b1:8f:06:c1:b1:19:33:62:35:21:29:8a:f4:fd:c0:
                    49:d7:a1:31:b2:fe:d6:04:2a:2b:72:88:bb:94:c1:
                    78:38:64:58:c2:43:6a:23:56:30:44:dc:9c:12:4a:
                    ee:ce:23:ff:db:36:d8:0e:4b:95:f1:ff:c8:9e:c1:
                    2a:72:9e:52:45:65:5c:eb:b6:2a:64:a9:33:c7:03:
                    c3:73:7c:2c:48:48:50:db:25:5e:36:16:d4:96:53:
                    44:e8:e8:c2:4f:c7:8f:6b:23:9a:02:4a:a2:3a:3e:
                    96:34:83:29:23:4a:26:4a:b8:8b:62:21:20:fb:1d:
                    bc:af:b3:1e:27:9f:c8:2b:3d:b0:61:2b:7e:2b:07:
                    76:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:1F:95:D2:92:71:FC:38:51:0C:E3:91:57:05:09:DF:7C:6F:AC:32
            X509v3 Authority Key Identifier:
                keyid:6E:18:4B:E1:46:12:D5:A2:B5:3C:49:87:68:44:50:85:0D:B0:2C:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B232/94D4C7403F0D11EBAF1FCE22C4F9AE02/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B232/94D4C7403F0D11EBAF1FCE22C4F9AE02/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:6f:6b:92:4e:c0:89:fc:6a:ff:e2:d6:84:aa:07:9c:c9:61:
         8b:19:a1:5c:d8:c1:c0:f4:c2:a7:f9:19:bc:26:27:16:42:0a:
         d5:2c:b9:da:dc:6c:81:f3:23:d7:e2:7f:9b:f3:50:15:68:04:
         30:91:29:25:20:b2:f2:0c:84:0d:c3:56:f3:1a:3c:4e:01:b6:
         47:e2:ff:ce:95:26:f8:13:d8:22:ad:47:68:4a:f3:25:fe:78:
         12:34:21:59:a1:1b:ac:d1:59:eb:af:8e:b3:51:3d:74:11:f8:
         c7:92:52:5f:d6:d1:e5:b2:fb:d7:2c:8a:35:12:b3:74:f9:11:
         ed:7a:b5:5c:e8:f5:38:59:42:9b:b6:5a:b3:6d:bb:25:25:00:
         8f:f3:32:e7:6d:75:98:a4:8b:1e:ae:20:40:16:33:88:5c:83:
         63:c5:7b:e9:f1:fc:c6:1e:66:e2:02:66:e9:09:3e:39:26:81:
         3e:4b:2e:8f:20:d6:01:60:47:1a:6c:cb:0e:86:9e:96:eb:51:
         0e:ad:67:8d:ac:75:3a:5d:77:bf:9d:94:d9:40:1e:8a:93:2b:
         3c:f0:61:8a:c5:d0:90:96:9b:38:62:33:47:8d:02:55:b0:ff:
         8e:77:34:9d:fb:23:f3:2e:e6:7c:59:82:bb:f6:38:4f:b7:28:
         6b:e0:b1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----