Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft
File:                     hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft (raw, json)
Hash identifier:          yaRzdZ0agveGBLWsOC7u30cq7L26keQdhA75PmD+CSk=
Subject key identifier:   9F:3C:0A:8B:83:7F:89:CC:85:AD:3C:31:D8:E9:DB:C8:92:5C:87:4D
Authority key identifier: 87:28:B8:28:F3:18:60:3E:44:71:10:70:C2:4E:CC:08:8A:19:00:60
Certificate issuer:       /CN=A919AC9A/serialNumber=8728B828F318603E44711070C24ECC088A190060
Certificate serial:       D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft
Manifest number:          D6
Signing time:             Fri 31 Jan 2025 04:45:38 +0000
Manifest this update:     Fri 31 Jan 2025 04:45:38 +0000
Manifest next update:     Fri 07 Feb 2025 04:45:38 +0000
Files and hashes:         1: hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl (hash: n7c44P+dg4PC7zzPBka2PpIvQjbmHq8uUi1QvoOXnrw=)
                          2: F0D7EB5097FA11EE90066875C4F9AE02.roa (hash: vxxrjf6mh6He/Qk48r/ND4XKn6+HAksWQduimGVP494=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 216 (0xd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919AC9A/serialNumber=8728B828F318603E44711070C24ECC088A190060
        Validity
            Not Before: Jan 31 04:45:38 2025 GMT
            Not After : Feb  7 04:45:38 2025 GMT
        Subject: CN=679c5572-d9dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3a:3e:13:f4:c2:86:a5:ed:bb:10:00:b5:02:
                    65:30:fe:9f:aa:11:b2:2c:9f:56:86:1c:d4:d5:51:
                    2b:5d:94:63:ed:0c:c6:6a:ac:73:2c:35:0e:83:c0:
                    28:d4:d3:ea:99:a2:c3:8f:f9:22:1b:a0:95:9a:88:
                    bc:fe:ca:35:71:53:d7:3e:1d:f5:5d:92:de:ca:89:
                    5f:ed:c8:94:37:81:15:7e:cd:21:90:42:05:8b:33:
                    21:46:98:e8:20:f5:ea:16:0b:f8:12:29:42:5c:ea:
                    75:07:ef:37:2c:c6:46:a5:46:90:62:e4:bd:6c:26:
                    8b:ed:1b:7f:77:a9:16:91:ff:bb:3d:f7:23:d2:73:
                    08:30:f4:9e:0c:74:ca:c1:d1:6e:ad:d4:6c:26:17:
                    76:18:07:8c:68:9f:e9:5c:0c:f5:c5:d2:5e:f4:9d:
                    c6:22:3c:33:3e:00:15:f0:2c:68:da:c2:8f:bc:8f:
                    f0:43:d2:6f:f7:ba:92:06:92:3f:a0:e1:2b:0f:ea:
                    e0:05:61:ae:9a:2f:04:c0:be:86:cc:1c:08:45:d4:
                    85:3b:3f:cc:7a:ad:83:4c:46:ec:d2:7d:0a:4c:e1:
                    20:14:43:e4:fa:13:db:af:53:23:69:b0:26:49:7a:
                    97:d1:a6:94:2c:92:d8:cd:f1:da:b7:7d:65:15:bc:
                    03:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:3C:0A:8B:83:7F:89:CC:85:AD:3C:31:D8:E9:DB:C8:92:5C:87:4D
            X509v3 Authority Key Identifier:
                keyid:87:28:B8:28:F3:18:60:3E:44:71:10:70:C2:4E:CC:08:8A:19:00:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:92:99:9b:a6:39:7c:11:3a:15:bc:df:a5:92:bb:0e:c9:61:
         4e:00:90:cd:b8:22:10:ef:b4:07:32:2f:18:e0:bd:43:80:7d:
         b7:c3:b3:9c:dd:24:d0:16:bc:e2:7e:1a:a0:47:53:96:f9:87:
         7f:60:47:46:c7:a8:16:0c:b8:aa:5d:55:eb:3b:64:2e:c9:b5:
         a2:de:a0:13:a3:03:88:c2:cf:c1:f1:ec:6f:fb:91:2e:4d:d1:
         50:c0:00:7b:4e:74:fc:17:9d:65:59:6f:3b:f7:a9:01:23:24:
         eb:83:83:6b:ef:b3:dc:5d:3f:0c:b1:34:cf:ae:b3:51:3c:12:
         35:b4:c2:90:17:31:f0:c0:bc:b9:17:5d:26:27:28:89:bf:c3:
         b5:cf:96:29:e5:c8:87:cd:9a:08:a7:82:e9:ae:0a:ff:fe:fd:
         bf:db:bd:42:dd:cf:8f:0b:62:a8:09:4a:a7:4b:31:35:b2:80:
         c9:4f:7c:90:6c:7a:ea:e8:45:47:7a:02:06:f4:cb:b8:89:7d:
         01:64:e9:74:e3:d9:4e:1f:1e:7d:ca:03:13:9b:0d:c9:46:b2:
         e8:81:71:f6:12:da:a0:ae:88:a1:a2:6d:73:8a:9c:0e:0e:8a:
         d1:9e:4d:c3:f6:4b:c5:3d:0f:7b:8e:96:a5:2a:f7:d8:d5:f0:
         c8:bf:04:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:40:04 2025 by rpki-client