Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft
File:                     BHuLKVTEerFcV1ht0ATriTl3xa8.mft (raw, json)
Hash identifier:          EE0Vo643wvenbD7lI3boxyre2/HTZ8OhGUnYxsCOUIA=
Subject key identifier:   3C:25:D0:3B:C0:C7:BE:8E:5F:89:21:DB:23:04:8A:93:3D:46:55:AD
Authority key identifier: 04:7B:8B:29:54:C4:7A:B1:5C:57:58:6D:D0:04:EB:89:39:77:C5:AF
Certificate issuer:       /CN=A918E8EB/serialNumber=047B8B2954C47AB15C57586DD004EB893977C5AF
Certificate serial:       1237
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft
Manifest number:          1225
Signing time:             Fri 31 Jan 2025 17:07:57 +0000
Manifest this update:     Fri 31 Jan 2025 17:07:57 +0000
Manifest next update:     Fri 07 Feb 2025 17:07:57 +0000
Files and hashes:         1: BHuLKVTEerFcV1ht0ATriTl3xa8.crl (hash: +FDO6G6+W0CzSbn8Cj5+zoHVmKjWDm9EjSCUyS/lh6s=)
                          2: 3489528EC84511ED90A61540C4F9AE02.roa (hash: 0GBU9clR4v/kv/m8Iw+tpC8pBR8oX1ZqIKf4DgtvCco=)
                          3: 35615A30C84511ED90A61540C4F9AE02.roa (hash: CfO3CZyouhq3VXYxiVm5tnc8saneiKp2zLb93JcMMQ0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4663 (0x1237)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E8EB/serialNumber=047B8B2954C47AB15C57586DD004EB893977C5AF
        Validity
            Not Before: Jan 31 17:07:57 2025 GMT
            Not After : Feb  7 17:07:57 2025 GMT
        Subject: CN=679d036d-4cd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:74:8a:72:f0:a5:ae:dc:c5:0e:0c:6d:e4:85:
                    58:27:78:58:7d:d8:38:19:7c:b1:bc:62:c4:97:cd:
                    67:69:57:5b:b8:8d:4f:e2:07:b3:2d:ce:96:7a:62:
                    37:1e:70:ba:eb:81:65:53:29:df:ad:be:88:29:fb:
                    fd:ec:87:85:9e:e9:f0:3a:90:d8:09:b7:82:05:f6:
                    a7:cf:49:b0:ee:80:67:03:a8:e8:7c:91:f2:78:a7:
                    86:ff:07:65:bb:4b:89:fd:34:47:0e:67:59:83:38:
                    8a:3b:2e:1d:8b:a5:e3:40:67:6a:53:ff:1e:d7:2c:
                    2f:cf:02:04:4a:ee:e5:ea:4c:94:87:90:f7:a5:2b:
                    f2:13:b8:c2:f3:79:0b:d0:f7:02:60:2c:fd:fe:f0:
                    24:a2:f0:68:ac:ec:17:c2:9d:d1:a5:b6:3d:cd:3b:
                    97:e7:b7:30:3c:80:7c:ca:06:78:9b:07:f8:c8:21:
                    75:10:40:57:0b:de:a2:e4:fb:34:c8:99:16:b8:f7:
                    69:7b:97:09:55:5a:8d:38:72:72:5e:af:80:f6:5f:
                    91:60:8a:d9:25:aa:dc:a4:27:c2:e9:d0:61:de:86:
                    73:56:9d:b8:34:ad:0e:80:2c:28:60:c8:a0:2f:9b:
                    bf:83:9d:88:da:d1:bc:f7:1c:f3:9a:a4:ff:64:7d:
                    66:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:25:D0:3B:C0:C7:BE:8E:5F:89:21:DB:23:04:8A:93:3D:46:55:AD
            X509v3 Authority Key Identifier:
                keyid:04:7B:8B:29:54:C4:7A:B1:5C:57:58:6D:D0:04:EB:89:39:77:C5:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:ed:a2:1a:cc:88:ed:4b:67:d4:16:90:51:ae:43:91:b2:2b:
         b2:68:9e:2c:33:8d:af:b0:31:b7:e5:80:d2:93:79:da:d1:af:
         82:fa:5e:fa:91:1d:29:b2:d6:38:b4:9b:de:25:4f:19:b7:a8:
         19:83:01:d8:d5:85:33:bd:28:f3:de:0f:1e:d1:af:4b:fd:86:
         17:e2:7f:23:f0:95:2d:78:3c:93:54:f2:4e:a4:1b:11:3c:2f:
         93:09:dd:8c:9a:70:fd:c2:62:4f:19:bf:9f:df:72:18:aa:5b:
         bb:f7:45:44:ed:3f:f2:ad:22:03:3c:e6:f7:6c:f0:33:d2:5e:
         08:93:1b:fc:70:38:73:70:5c:d1:1a:b3:af:5f:be:b2:3d:f5:
         43:13:ec:75:c4:51:67:89:4c:9b:0d:d5:12:4c:1e:4f:ee:ef:
         6b:74:3b:30:3b:19:77:91:fa:dc:89:3d:64:64:62:ff:53:ef:
         13:2e:a5:41:f3:db:9a:10:78:63:9a:a0:92:78:96:c1:06:97:
         11:fd:cf:25:31:30:83:e6:df:df:e1:3b:dd:ca:7d:ae:d2:d0:
         73:8f:19:e4:3b:90:ad:50:01:53:9a:46:c3:99:06:4e:f2:8c:
         52:9c:e3:d9:77:f4:b8:14:75:26:1d:76:6a:2d:a1:b7:3d:5d:
         16:17:a4:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:48:45 2025 by rpki-client