Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft
File:                     EhCVgwI-GF3korKUIxWZ1jZAvJo.mft (raw, json)
Hash identifier:          mpeh/Rp1ttQl8HafPD10jDBHsbCM+OMjw5Bau3RxHZk=
Subject key identifier:   6D:7A:CA:7C:92:4E:2A:1E:0B:42:DA:54:4F:0D:26:7C:D1:CB:F5:79
Authority key identifier: 12:10:95:83:02:3E:18:5D:E4:A2:B2:94:23:15:99:D6:36:40:BC:9A
Certificate issuer:       /CN=A918B5FE/serialNumber=12109583023E185DE4A2B294231599D63640BC9A
Certificate serial:       0678
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft
Manifest number:          0665
Signing time:             Thu 30 Jan 2025 22:24:29 +0000
Manifest this update:     Thu 30 Jan 2025 22:24:29 +0000
Manifest next update:     Thu 06 Feb 2025 22:24:29 +0000
Files and hashes:         1: EhCVgwI-GF3korKUIxWZ1jZAvJo.crl (hash: JlCrm2Lf+qmHuQ39yIPiOdW33sJq7yQ7cVaiTJa4Gb8=)
                          2: E744DAB06C0D11EB89BF4725C4F9AE02.roa (hash: GwGIG8w2Paja8QeJTC/4mPTw5xBTF4eu77tf9+sFGXE=)
                          3: E649E89E6C0D11EB89BF4725C4F9AE02.roa (hash: mUNLSSwDIjdC6PSsJdAOAQiuBxAVwe81C3tB9ntlwCU=)
                          4: 4652D2C2DF3C11EBAC0C7536C4F9AE02.roa (hash: WSWSmKF2Dr04+H2IY6+uuwpQnhp2M2KysyXEj72OLxo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1656 (0x678)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B5FE/serialNumber=12109583023E185DE4A2B294231599D63640BC9A
        Validity
            Not Before: Jan 30 22:24:29 2025 GMT
            Not After : Feb  6 22:24:29 2025 GMT
        Subject: CN=679bfc1d-2e6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:b9:c9:6b:e6:10:4f:18:1a:60:0d:b3:8f:ce:
                    d6:19:1c:3e:d8:89:a9:23:77:34:b4:43:c2:1f:d8:
                    79:6d:50:3f:53:d7:ef:9a:4f:42:86:59:af:f7:5d:
                    e6:5a:0e:b8:a5:59:08:1b:11:8b:94:f8:e7:6b:cd:
                    25:c4:54:d7:d8:f1:08:e7:80:dc:24:c7:4a:e5:05:
                    a7:da:7c:55:9e:6b:53:23:e3:2b:3c:0f:8c:f0:f9:
                    56:da:12:91:20:83:5d:37:fa:eb:ce:f3:48:3e:16:
                    23:d1:99:e7:4a:16:0e:96:a0:6f:ac:97:03:cd:b9:
                    9d:60:d3:0d:16:86:1b:e0:5b:a7:27:7f:55:12:74:
                    26:61:40:1e:85:b9:de:b0:fb:f2:1b:19:43:0c:f2:
                    2c:dc:0a:14:cc:c7:e9:f7:ae:69:5a:f2:ee:35:6a:
                    a9:61:b7:0f:91:43:71:02:47:8d:96:4c:8c:9c:15:
                    28:cf:45:88:ab:2a:4d:46:a2:61:84:52:ac:89:d7:
                    0b:bf:ef:32:b1:ab:a2:b3:a6:fa:ce:74:0d:e4:b5:
                    a6:d9:de:36:73:0d:3c:a0:aa:c9:f7:7b:6c:64:ca:
                    f0:95:ea:cb:81:d9:c4:d9:2e:80:f5:f3:43:82:5a:
                    0e:43:97:71:b2:2b:c2:8f:49:0a:c0:cf:ac:ef:45:
                    2f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:7A:CA:7C:92:4E:2A:1E:0B:42:DA:54:4F:0D:26:7C:D1:CB:F5:79
            X509v3 Authority Key Identifier:
                keyid:12:10:95:83:02:3E:18:5D:E4:A2:B2:94:23:15:99:D6:36:40:BC:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:f1:60:a8:2f:e8:44:ca:c9:90:c3:1a:8e:1d:f1:c2:0c:42:
         ab:1f:a2:72:1a:9a:a1:8f:d4:ca:95:00:bb:d5:40:33:1f:5d:
         4f:e9:aa:7c:de:08:98:47:f1:4c:dd:0a:0e:78:e2:02:e0:da:
         e6:c5:a1:90:1f:04:3e:00:e0:8c:68:5a:5c:d4:49:e3:15:8f:
         cb:d6:29:e3:a4:d1:40:a8:77:82:31:3b:f2:ca:06:30:40:de:
         57:e0:09:88:4f:45:a9:08:a2:89:ac:11:18:e1:f3:b6:1d:8e:
         b6:09:f2:cb:0b:6d:0c:e8:93:14:dc:04:dd:ab:34:e8:a8:31:
         1f:f4:c6:33:9c:49:f8:b1:4a:06:62:1d:24:0d:5e:32:ea:e2:
         7a:ef:88:9a:ee:0a:a3:46:b5:cd:d2:04:88:f7:ae:b5:0d:b8:
         98:88:35:ce:a4:44:6d:e0:e1:bc:15:6d:ee:e3:a5:8e:c5:8e:
         19:bb:be:2d:7a:43:87:a5:43:b5:14:2b:fa:73:a0:ed:b6:39:
         4a:4d:f5:8d:92:32:56:f9:0a:49:a2:d7:f5:de:50:99:05:fa:
         76:07:10:d4:2b:dd:fa:53:95:2f:61:98:f0:49:ff:5c:16:c2:
         7e:20:10:ed:84:d5:35:0f:3f:99:5e:95:2f:8f:31:e1:9c:5d:
         df:28:5d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:03:51 2025 by rpki-client