Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A489D/200D3E6A6FC011E9A07D1B12C4F9AE02/Hyge-kBci7s9nfjVgdjFgxqhmuQ.mft
File:                     Hyge-kBci7s9nfjVgdjFgxqhmuQ.mft (raw, json)
Hash identifier:          1H6p2HVevZJlBEjADlpqxlb2Dt2ZXAmefJlHKMqHaEU=
Subject key identifier:   06:65:6F:89:4F:86:DA:A8:44:B5:FB:9B:B3:56:40:C2:79:3A:F0:11
Authority key identifier: 1F:28:1E:FA:40:5C:8B:BB:3D:9D:F8:D5:81:D8:C5:83:1A:A1:9A:E4
Certificate issuer:       /CN=A91A489D/serialNumber=1F281EFA405C8BBB3D9DF8D581D8C5831AA19AE4
Certificate serial:       0F0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hyge-kBci7s9nfjVgdjFgxqhmuQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A489D/200D3E6A6FC011E9A07D1B12C4F9AE02/Hyge-kBci7s9nfjVgdjFgxqhmuQ.mft
Manifest number:          0EFF
Signing time:             Fri 31 Jan 2025 17:36:21 +0000
Manifest this update:     Fri 31 Jan 2025 17:36:20 +0000
Manifest next update:     Fri 07 Feb 2025 17:36:20 +0000
Files and hashes:         1: Hyge-kBci7s9nfjVgdjFgxqhmuQ.crl (hash: +goGVnndOfEYmtBcEHyV6vUD41wHlcjCe4Fq1KvgCUQ=)
                          2: AD8C3CF46FC111E9B6D55F15C4F9AE02.roa (hash: UGdrD+Fj3OGme/NPTMZlIOifFIHxe9Nr5mv/WePp33Q=)
                          3: AECBAA0A6FC111E9B6D55F15C4F9AE02.roa (hash: qsfSEM2m12MNzg/uNS2BvF/NYbvImYpNnU3WWBBzmTI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3853 (0xf0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A489D/serialNumber=1F281EFA405C8BBB3D9DF8D581D8C5831AA19AE4
        Validity
            Not Before: Jan 31 17:36:20 2025 GMT
            Not After : Feb  7 17:36:20 2025 GMT
        Subject: CN=679d0a14-a3a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:98:84:3a:a8:fd:bc:42:89:d8:af:9a:b7:45:
                    c1:49:4d:7d:22:63:53:61:14:ed:4a:35:eb:95:36:
                    bb:9e:36:0e:9c:21:95:60:45:46:ff:73:0f:30:e6:
                    7c:3c:a8:ba:48:ff:c2:a1:8c:66:b7:2a:75:65:bd:
                    78:9d:87:48:93:73:cb:8e:19:c1:39:13:aa:2e:a3:
                    5b:47:1c:d9:7d:c5:a9:31:cd:82:45:a7:e9:eb:cf:
                    cd:5b:1a:79:68:d1:ce:f3:84:05:00:29:a7:1d:fa:
                    4a:86:ee:07:c4:91:40:0c:ac:bb:31:38:f2:af:c6:
                    dc:7a:26:cd:78:92:0f:fc:de:b1:e0:0c:41:36:80:
                    64:96:cb:b7:d4:c6:ad:3d:dd:b5:1a:43:83:89:fc:
                    52:dc:15:c8:c7:d1:ff:78:f1:14:31:36:f3:b1:da:
                    fa:5d:9e:82:62:ee:45:20:bb:a2:82:94:2c:c5:8e:
                    ff:2c:f4:d8:c0:df:ca:c2:81:0a:29:b4:b9:d8:f8:
                    81:fc:89:36:c2:f2:73:b5:69:d0:6c:4b:aa:67:1c:
                    f8:9f:4a:9f:e4:20:70:d3:58:0a:b0:63:0b:d2:75:
                    5a:7d:e6:10:06:f0:84:c5:1c:8a:88:f6:3b:a0:12:
                    d2:b4:be:25:ba:36:51:ec:a0:6e:d3:42:da:fd:fa:
                    35:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:65:6F:89:4F:86:DA:A8:44:B5:FB:9B:B3:56:40:C2:79:3A:F0:11
            X509v3 Authority Key Identifier:
                keyid:1F:28:1E:FA:40:5C:8B:BB:3D:9D:F8:D5:81:D8:C5:83:1A:A1:9A:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A489D/200D3E6A6FC011E9A07D1B12C4F9AE02/Hyge-kBci7s9nfjVgdjFgxqhmuQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hyge-kBci7s9nfjVgdjFgxqhmuQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A489D/200D3E6A6FC011E9A07D1B12C4F9AE02/Hyge-kBci7s9nfjVgdjFgxqhmuQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:8e:3e:d5:66:a0:6e:49:30:6f:30:9e:e3:cf:6d:24:cc:bc:
         83:ef:b7:2b:74:0d:02:9f:ca:45:48:4b:60:f9:08:83:15:6c:
         e5:15:d5:4f:93:4f:3f:14:2f:46:cb:40:19:2d:12:32:a9:b8:
         61:4c:8c:d2:6f:14:4d:cf:dd:74:90:7e:05:f4:9d:26:79:39:
         af:68:e7:1f:43:1d:5f:82:9e:90:5c:32:6c:ac:07:09:65:11:
         01:e0:f3:ee:b1:34:63:c2:c8:b1:d4:13:7c:48:d3:d4:30:4e:
         c6:95:20:b4:fc:b8:98:51:2d:a3:0c:7f:c0:60:39:89:f1:82:
         ce:f6:8f:3d:ed:e7:a8:ad:1d:69:8f:28:fd:a1:d1:6b:91:48:
         b9:df:cd:38:c5:0d:90:a2:be:83:60:67:1a:dc:97:30:da:0d:
         54:86:0c:a6:fe:18:a8:3c:73:95:d0:12:64:fa:66:13:f0:f1:
         59:db:82:e1:0d:0f:b9:0a:9c:6a:db:75:05:fb:dd:17:09:af:
         f2:dd:ff:01:97:6d:1d:50:bc:aa:06:d5:f1:ec:12:f8:8e:53:
         75:ff:15:6b:b0:97:9c:7d:3f:37:3f:ac:a4:d0:3b:84:44:c9:
         72:7d:e3:53:a6:78:87:6c:82:ab:20:83:f9:49:73:a8:84:20:
         1a:6f:73:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:55:30 2025 by rpki-client