Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.mft
File:                     HuygOndlK5BwteEzgJoiODDInPk.mft (raw, json)
Hash identifier:          L5IUC1hdmrxSRGFG7cbZKTHo8RNOJ3adgKcm//PwZUQ=
Subject key identifier:   95:D4:2E:98:AE:54:2A:21:21:83:D3:D6:D2:1C:43:29:52:BC:CE:8F
Authority key identifier: 1E:EC:A0:3A:77:65:2B:90:70:B5:E1:33:80:9A:22:38:30:C8:9C:F9
Certificate issuer:       /CN=A91BAD56/serialNumber=1EECA03A77652B9070B5E133809A223830C89CF9
Certificate serial:       022A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HuygOndlK5BwteEzgJoiODDInPk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.mft
Manifest number:          0220
Signing time:             Fri 31 Jan 2025 02:07:52 +0000
Manifest this update:     Fri 31 Jan 2025 02:07:51 +0000
Manifest next update:     Fri 07 Feb 2025 02:07:51 +0000
Files and hashes:         1: HuygOndlK5BwteEzgJoiODDInPk.crl (hash: 3C4/8pJpGFAFGcTpGfnPc7GkTOMKPIMIbmA+vzYB0SU=)
                          2: 8BF25C3C777D11ED9F54B75EC4F9AE02.roa (hash: WzDhelPPEDQuZuvaKJRg1qx2hqnkCTlff2H/gFYAX1k=)
                          3: 2080359097F711EF91AB0436C4F9AE02.roa (hash: ayF9Bv7+wkh7jzbmvM6fDF9jk/NLjmF1YhPtsg38ygk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 554 (0x22a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BAD56/serialNumber=1EECA03A77652B9070B5E133809A223830C89CF9
        Validity
            Not Before: Jan 31 02:07:51 2025 GMT
            Not After : Feb  7 02:07:51 2025 GMT
        Subject: CN=679c3078-99f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ff:77:6f:c6:02:cc:84:86:6b:46:9b:71:97:
                    a7:a0:04:8d:b1:60:cd:51:6b:a2:9f:95:9f:24:e5:
                    af:b4:f0:80:69:ae:48:a2:96:73:77:99:b4:9e:5d:
                    a6:46:21:26:a1:c4:75:b9:86:83:67:21:65:ea:4e:
                    31:36:b3:62:12:54:f2:24:46:f2:4c:c0:96:dc:36:
                    b9:50:13:62:d5:ca:49:bf:10:e4:8f:02:21:67:02:
                    41:da:04:3f:c1:df:24:17:c5:93:26:b0:e6:ce:a9:
                    87:a9:be:e2:8e:7d:44:b1:95:22:d0:b1:46:f5:fe:
                    95:ea:ed:0f:c6:b1:bf:35:09:05:0e:a9:90:70:19:
                    36:b2:d6:64:b9:6d:4d:43:fa:ee:21:ab:29:b5:d6:
                    7b:5e:6e:0b:bd:57:0b:9a:8c:77:19:86:1e:51:84:
                    65:31:98:ba:26:90:63:da:d3:5b:e1:76:51:e7:9e:
                    ba:59:b6:72:cf:3e:4f:b4:64:47:d5:30:3f:ae:1b:
                    8c:96:ca:35:bc:fc:83:c8:72:dc:42:ad:30:98:60:
                    72:20:b2:da:6b:c3:25:c4:46:43:2c:c5:a5:df:4d:
                    b8:bc:0c:5b:2b:60:d3:e3:df:b0:ad:2d:2f:88:3b:
                    55:6b:1d:86:ac:a1:4a:67:be:b7:0e:12:e6:5b:d7:
                    3c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:D4:2E:98:AE:54:2A:21:21:83:D3:D6:D2:1C:43:29:52:BC:CE:8F
            X509v3 Authority Key Identifier:
                keyid:1E:EC:A0:3A:77:65:2B:90:70:B5:E1:33:80:9A:22:38:30:C8:9C:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HuygOndlK5BwteEzgJoiODDInPk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:d4:6c:a4:1b:e7:4d:63:b5:c6:6e:88:22:f7:37:f2:2f:cf:
         05:c9:6c:28:4d:a2:ed:69:46:4f:9a:07:e9:d4:d6:c7:80:d0:
         19:f3:98:d0:60:6a:1c:a6:3d:b4:ff:06:14:15:46:f4:76:0d:
         d6:58:1d:8e:56:42:02:53:47:ab:6c:5e:56:20:66:0b:50:84:
         81:00:3d:c4:fd:80:31:6f:eb:4b:be:1d:b7:a5:b5:81:d7:cf:
         d9:f5:98:fb:eb:7f:c3:b0:c6:ab:08:8f:17:f9:23:7e:18:83:
         d9:97:76:e3:b8:6f:f0:0c:93:ed:6e:b3:8d:4d:b0:99:7e:32:
         19:70:58:79:95:da:ec:45:11:9a:97:55:95:97:64:dc:6e:7b:
         5d:76:98:89:a2:9a:8f:fd:f8:97:a5:c1:e5:50:3d:e8:7f:8d:
         0b:08:53:6c:ec:92:5a:79:2f:c7:e3:99:5f:7c:c8:ca:38:e4:
         19:7b:6c:8f:f6:16:5c:c1:53:74:75:2c:9b:5b:6e:e0:96:83:
         88:4a:bd:ec:5b:18:95:67:91:24:21:e1:1a:07:cc:0d:7b:97:
         0b:aa:a1:67:f0:66:1f:00:cc:64:91:50:f0:af:54:aa:e0:5c:
         01:0e:08:89:87:83:ac:0b:ec:dd:08:f3:17:3b:1e:98:b8:98:
         e8:20:e8:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:37:03 2025 by rpki-client