Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.mft
File:                     hHItvUIme93Vm4hBUpklNTHgY2Q.mft (raw, json)
Hash identifier:          JvS0MyXM65jnk+oagB+M6kUZfOAvdYt8+Dz8Pmi3gUQ=
Subject key identifier:   02:B0:DD:63:18:F3:2F:4E:09:94:29:06:1D:2C:01:D6:06:1E:B3:64
Authority key identifier: 84:72:2D:BD:42:26:7B:DD:D5:9B:88:41:52:99:25:35:31:E0:63:64
Certificate issuer:       /CN=A918FEF3/serialNumber=84722DBD42267BDDD59B88415299253531E06364
Certificate serial:       179B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHItvUIme93Vm4hBUpklNTHgY2Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.mft
Manifest number:          179B
Signing time:             Fri 31 Jan 2025 16:34:32 +0000
Manifest this update:     Fri 31 Jan 2025 16:34:31 +0000
Manifest next update:     Fri 07 Feb 2025 16:34:31 +0000
Files and hashes:         1: hHItvUIme93Vm4hBUpklNTHgY2Q.crl (hash: a63QA5lXQQ5rq4zXta/fh7IBYnWYVkxM7KXAyttDyx4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6043 (0x179b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FEF3/serialNumber=84722DBD42267BDDD59B88415299253531E06364
        Validity
            Not Before: Jan 31 16:34:31 2025 GMT
            Not After : Feb  7 16:34:31 2025 GMT
        Subject: CN=679cfb98-16e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:81:13:5b:5f:f0:a0:0b:7b:59:f2:cd:4d:c8:
                    e2:d8:51:db:e1:a3:34:0c:b4:f8:b4:c3:63:72:f5:
                    f9:9c:2b:b1:94:47:e5:63:98:66:6e:05:31:b7:f7:
                    36:56:94:98:03:3b:e1:96:ec:ca:98:a5:4c:7a:4e:
                    cb:f9:2c:ac:49:67:0d:57:e6:f0:36:28:cc:86:07:
                    36:37:f7:79:56:7a:b7:b3:79:01:90:e8:a1:0a:3e:
                    e7:7d:94:66:fe:a0:e1:c0:5e:aa:72:e5:58:09:ae:
                    89:04:26:92:6d:da:27:41:7a:cc:6a:e3:e5:e6:59:
                    e2:ac:bc:3c:6a:70:5c:e8:cc:02:29:3b:d3:e1:1d:
                    66:3c:f9:9a:99:35:c6:6d:44:ff:4f:f5:cf:df:fd:
                    89:4e:04:8a:de:3e:f8:74:4e:a7:14:07:82:e1:c6:
                    0e:9b:9f:cd:5a:0e:cb:20:7d:2e:9b:2a:8a:36:c4:
                    ff:ee:22:70:f5:cb:ab:6c:0f:c7:16:e0:ea:ec:36:
                    f4:89:08:cc:20:0e:80:c5:0d:9f:bd:eb:27:8b:ed:
                    cd:6f:2f:c7:1a:fe:95:30:37:31:34:40:1f:b6:c6:
                    58:a8:bd:ff:c9:26:95:fe:e8:65:87:86:02:ee:c0:
                    9c:46:07:a2:66:55:27:01:25:ab:37:49:75:73:8d:
                    ed:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:B0:DD:63:18:F3:2F:4E:09:94:29:06:1D:2C:01:D6:06:1E:B3:64
            X509v3 Authority Key Identifier:
                keyid:84:72:2D:BD:42:26:7B:DD:D5:9B:88:41:52:99:25:35:31:E0:63:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHItvUIme93Vm4hBUpklNTHgY2Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:ce:df:59:cd:c2:19:34:8c:74:d1:ae:36:ab:9c:33:f5:24:
         ce:23:36:b6:81:be:e6:1a:ac:34:ca:64:95:98:99:1b:4c:f7:
         26:e2:3d:a6:85:68:80:69:91:ff:23:1b:d6:8c:0a:4d:c8:81:
         03:de:06:06:8c:82:2b:d2:eb:9f:7f:f9:26:37:51:72:81:b0:
         0d:8a:a3:bc:50:f5:9f:81:38:90:73:82:6c:ad:47:c5:03:3a:
         75:04:5f:32:23:27:ae:e9:5f:84:b0:33:27:9e:4a:98:92:6b:
         30:e6:6f:3f:e4:4f:bc:da:fa:28:09:1f:c2:aa:bd:53:e8:7c:
         ab:47:97:34:0e:ac:68:61:64:ad:9f:80:bc:da:be:3f:25:39:
         04:6a:5c:4f:d8:64:8e:1a:62:5e:7f:32:c9:aa:7c:97:83:b6:
         35:4b:49:f3:16:c2:79:03:f3:2a:fa:50:dd:d0:e0:0b:99:58:
         7f:5b:0f:8b:fb:3a:0c:87:31:dd:33:8a:b6:fa:70:2d:57:46:
         27:48:a7:60:cb:4d:c6:b5:ed:b7:73:99:4c:38:22:32:2a:4a:
         2d:12:d2:5c:2f:70:14:40:d1:f2:8f:5c:07:23:74:0f:63:91:
         f6:e3:af:bd:a7:f0:ce:15:cf:c9:5b:9f:a6:c7:fd:ae:27:c4:
         de:5f:f9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:09:17 2025 by rpki-client