Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.mft
File:                     hvLrtMHi6QrZAHxCA2dmJY1UhWU.mft (raw, json)
Hash identifier:          MoSE2A81cuY8uwUzAGhC188lvS9JkgztBz+R17qZXhk=
Subject key identifier:   6B:C2:21:7B:E7:19:3C:37:E2:F4:91:3A:FE:4B:FF:D6:75:6F:73:D7
Authority key identifier: 86:F2:EB:B4:C1:E2:E9:0A:D9:00:7C:42:03:67:66:25:8D:54:85:65
Certificate issuer:       /CN=A919A8BE/serialNumber=86F2EBB4C1E2E90AD9007C42036766258D548565
Certificate serial:       0F57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hvLrtMHi6QrZAHxCA2dmJY1UhWU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.mft
Manifest number:          0F43
Signing time:             Fri 31 Jan 2025 17:34:05 +0000
Manifest this update:     Fri 31 Jan 2025 17:34:05 +0000
Manifest next update:     Fri 07 Feb 2025 17:34:05 +0000
Files and hashes:         1: hvLrtMHi6QrZAHxCA2dmJY1UhWU.crl (hash: SqdMmwijN3Z2o8L95E7VfpABIVxcG1loEz6u9aI9MLE=)
                          2: 0DC698EAAEF011E99D5EFB71C4F9AE02.roa (hash: Gd1MGVjBlHDrAPvjMKgg4lOzvec6N9agUffub5BmpEc=)
                          3: 28DA447C289B11EAA1EA9B53C4F9AE02.roa (hash: VgSqSz98AwrxUV81np8oJVgRErJmYI+BzJGwTzFUnSk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3927 (0xf57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A8BE/serialNumber=86F2EBB4C1E2E90AD9007C42036766258D548565
        Validity
            Not Before: Jan 31 17:34:05 2025 GMT
            Not After : Feb  7 17:34:05 2025 GMT
        Subject: CN=679d098d-f1aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:48:dc:80:b5:11:a1:91:ef:11:ad:f5:eb:cf:
                    ce:a1:34:5c:96:f3:fe:df:1c:ac:b7:c0:fe:5b:da:
                    52:f4:5a:0d:4e:4a:24:9b:b6:68:9d:45:fe:b3:3c:
                    e4:da:d7:49:68:34:df:70:c0:ff:d1:9f:53:c1:80:
                    05:0e:7b:8d:35:78:42:bb:70:b9:b9:9b:1c:cf:86:
                    a8:08:d1:c9:bc:d3:31:93:60:8a:45:93:13:2f:b8:
                    a8:cf:87:e6:9b:d5:43:47:07:e5:ca:18:2a:ae:c5:
                    50:6c:15:3f:ff:22:17:29:fc:ab:ce:12:0a:6a:ad:
                    ba:5e:e9:e5:83:dd:ba:29:66:d9:f4:2b:97:ac:b6:
                    30:4f:57:ac:6b:a7:1f:2d:2d:cc:49:c1:bd:84:fa:
                    ae:89:29:be:21:94:2b:8a:8e:6c:18:50:b1:31:76:
                    d6:6c:92:5f:8d:1a:f4:cf:63:e1:30:04:f6:10:62:
                    d6:1c:5e:9b:57:b7:26:28:10:1d:31:06:82:60:cf:
                    ac:ee:1c:35:84:1b:4f:10:b6:0e:3a:78:6b:b4:77:
                    40:25:5b:18:a0:93:e1:68:13:04:85:46:59:da:3c:
                    68:54:0d:04:0a:4a:b3:24:1d:87:1f:4e:98:2d:95:
                    0b:9f:ed:08:b4:3f:d9:8e:bc:85:d1:1a:e0:e0:5e:
                    a7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:C2:21:7B:E7:19:3C:37:E2:F4:91:3A:FE:4B:FF:D6:75:6F:73:D7
            X509v3 Authority Key Identifier:
                keyid:86:F2:EB:B4:C1:E2:E9:0A:D9:00:7C:42:03:67:66:25:8D:54:85:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hvLrtMHi6QrZAHxCA2dmJY1UhWU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:47:37:f3:4b:a4:34:9a:b2:96:6e:0d:7c:51:b5:d2:34:64:
         1a:af:fc:98:5d:a6:b0:dd:0e:44:f3:15:87:b6:79:ce:cf:26:
         f7:52:93:ea:45:7a:dc:2f:f9:83:56:36:ac:c4:4e:07:80:0f:
         91:eb:41:8a:60:01:e9:65:6d:0e:a9:8e:8d:cb:0c:5e:11:f1:
         16:99:c3:ba:73:b1:be:30:82:45:1d:4d:45:39:38:db:3d:db:
         22:38:30:f0:fe:c1:3e:c3:4a:3d:d0:21:01:f1:94:50:bf:e6:
         17:9e:f4:c3:9f:dc:0a:a9:99:e7:2b:1c:68:cf:57:74:0c:c5:
         a2:18:11:96:48:99:7f:99:27:04:70:e8:2d:ce:05:73:39:55:
         53:02:96:4d:30:38:fc:d5:6f:e2:0f:d0:47:b6:88:70:6c:0e:
         ac:b7:e9:e1:af:fe:0a:9c:f3:65:28:bd:f6:7b:de:2d:64:04:
         23:f3:df:62:58:fe:f0:df:3e:d3:cc:ce:c7:c7:26:41:c4:0a:
         d0:d6:c5:22:36:61:86:f4:d8:87:30:c9:59:7c:c7:b3:7e:63:
         d7:cf:e3:5c:56:2f:27:08:61:0c:ba:83:18:0d:49:eb:30:49:
         7b:73:4b:85:b2:40:1d:c1:9b:6d:dd:95:98:a8:59:42:51:09:
         b3:4f:6a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:47:45 2025 by rpki-client