Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A31F5/AFDEFE54D6EC11EFA2799C69C4F9AE02/mHokA1wVORcCC2UduY8JHwqqMic.mft
File:                     mHokA1wVORcCC2UduY8JHwqqMic.mft (raw, json)
Hash identifier:          2xPDRJAIAxIachHWdGr7gKEWs8oRsdMropleXMpOCds=
Subject key identifier:   5E:8B:95:C9:A4:90:71:18:C4:D5:B4:46:86:76:25:5B:B8:FE:61:03
Authority key identifier: 98:7A:24:03:5C:15:39:17:02:0B:65:1D:B9:8F:09:1F:0A:AA:32:27
Certificate issuer:       /CN=A91A31F5/serialNumber=987A24035C153917020B651DB98F091F0AAA3227
Certificate serial:       08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mHokA1wVORcCC2UduY8JHwqqMic.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A31F5/AFDEFE54D6EC11EFA2799C69C4F9AE02/mHokA1wVORcCC2UduY8JHwqqMic.mft
Manifest number:          08
Signing time:             Fri 31 Jan 2025 07:14:13 +0000
Manifest this update:     Fri 31 Jan 2025 07:14:12 +0000
Manifest next update:     Fri 07 Feb 2025 07:14:12 +0000
Files and hashes:         1: mHokA1wVORcCC2UduY8JHwqqMic.crl (hash: tyWGwZJyeuXg139joYhsKL8GYDvn04+bbcGti72/xA4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A31F5/serialNumber=987A24035C153917020B651DB98F091F0AAA3227
        Validity
            Not Before: Jan 31 07:14:12 2025 GMT
            Not After : Feb  7 07:14:12 2025 GMT
        Subject: CN=679c7845-1989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a9:10:00:bc:d8:5e:67:b0:1c:ab:a9:6b:9d:
                    10:b9:3f:fb:39:de:2f:be:44:58:9f:5e:63:0b:6f:
                    f5:15:37:fe:05:57:91:32:bd:a2:3d:3e:5e:67:e5:
                    cd:2e:78:34:10:db:88:56:8c:57:61:4c:3f:5b:8e:
                    ed:c5:29:52:bf:65:e8:34:27:02:64:e8:9d:01:58:
                    94:ca:4b:0a:ef:50:70:62:a8:4c:ed:7d:4c:d7:c0:
                    ef:72:94:b7:45:61:4c:11:61:4d:e7:31:7b:5f:67:
                    64:ff:39:ed:81:e3:7d:68:21:bf:80:30:b1:72:13:
                    5d:b7:06:8c:04:29:ef:5b:45:ae:60:83:bf:ac:95:
                    c8:91:71:35:ea:d2:a9:13:e1:2f:54:72:9d:32:64:
                    04:50:f1:aa:71:17:fa:35:62:01:d3:a5:aa:54:6f:
                    45:f8:b0:5d:4b:83:7e:71:13:06:a0:8e:19:af:20:
                    2b:3a:d2:0f:7b:d1:cf:bf:b3:1c:c9:1a:38:82:61:
                    65:63:56:53:df:08:f1:8f:ae:ba:e2:ac:01:7e:07:
                    65:47:dd:e4:fd:3c:ce:d4:82:46:d8:12:42:33:55:
                    83:e9:a8:3b:79:e5:9e:de:00:01:36:0a:4d:48:56:
                    f5:ad:6d:88:01:b9:ac:69:2b:26:c0:10:d6:c6:73:
                    7b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:8B:95:C9:A4:90:71:18:C4:D5:B4:46:86:76:25:5B:B8:FE:61:03
            X509v3 Authority Key Identifier:
                keyid:98:7A:24:03:5C:15:39:17:02:0B:65:1D:B9:8F:09:1F:0A:AA:32:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A31F5/AFDEFE54D6EC11EFA2799C69C4F9AE02/mHokA1wVORcCC2UduY8JHwqqMic.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mHokA1wVORcCC2UduY8JHwqqMic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A31F5/AFDEFE54D6EC11EFA2799C69C4F9AE02/mHokA1wVORcCC2UduY8JHwqqMic.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:9b:3c:b3:a0:7f:07:c7:58:27:87:d0:18:73:73:9a:91:d6:
         fa:a2:b6:e6:46:3b:49:7a:14:bc:f0:2f:9c:80:dd:9b:7c:0b:
         4e:3a:cc:d1:fa:0f:17:9b:de:f0:9e:70:b9:23:73:74:03:bf:
         3d:14:47:89:21:51:0f:0f:ea:47:e1:f3:f5:ad:58:f7:73:f1:
         b7:7d:8d:00:49:37:2d:97:0b:08:ac:8d:53:f5:b7:8a:33:04:
         57:f7:a2:10:d5:76:4c:bf:cd:81:ec:3d:03:2e:28:8f:a1:56:
         7a:de:a8:a0:64:5b:02:5e:a4:4a:ac:46:78:91:77:2d:5e:03:
         0c:5c:0c:29:8f:d1:be:29:71:45:8b:58:ce:e0:e9:76:3e:26:
         3c:e8:6a:e0:18:1a:51:c0:69:2b:17:1e:2d:56:30:98:b8:6a:
         71:ad:26:94:d9:fe:25:b2:33:eb:cc:14:34:e7:16:50:31:8e:
         cb:75:1c:7b:45:15:43:ab:82:28:0d:2d:61:ad:11:9d:10:80:
         92:aa:e4:63:c2:73:38:05:89:24:d6:89:1d:1d:60:98:4e:1b:
         f1:08:04:d6:26:89:64:d1:18:4a:f3:ac:82:e3:8a:db:d5:50:
         1d:f1:66:58:b9:38:79:38:9f:38:0f:74:87:b6:f1:3c:21:f3:
         f0:20:2d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:53:13 2025 by rpki-client