Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft
File:                     hypmcnatRHCKRH_b6IHxYueQ3WM.mft (raw, json)
Hash identifier:          1yTI6d9US2Lj6nFGEczECYAOTH4n6hsLKrhOSUiEz5Y=
Subject key identifier:   C1:9E:6F:70:7C:8E:3E:3D:F6:FF:66:71:55:A8:82:01:2E:FD:45:A4
Authority key identifier: 87:2A:66:72:76:AD:44:70:8A:44:7F:DB:E8:81:F1:62:E7:90:DD:63
Certificate issuer:       /CN=A91C5153/serialNumber=872A667276AD44708A447FDBE881F162E790DD63
Certificate serial:       060D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hypmcnatRHCKRH_b6IHxYueQ3WM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft
Manifest number:          0606
Signing time:             Thu 30 Jan 2025 22:49:47 +0000
Manifest this update:     Thu 30 Jan 2025 22:49:46 +0000
Manifest next update:     Thu 06 Feb 2025 22:49:46 +0000
Files and hashes:         1: hypmcnatRHCKRH_b6IHxYueQ3WM.crl (hash: /r9C+nqiRM0utAmSWLvikgJ8Sza71lSKHCwDCFzlfuk=)
                          2: 5B194E5EDFF311EBBC814169C4F9AE02.roa (hash: KhL2UpD4+JEk2XkKaHze+InIObaOwuuu6V/1R5qYpXw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1549 (0x60d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5153/serialNumber=872A667276AD44708A447FDBE881F162E790DD63
        Validity
            Not Before: Jan 30 22:49:46 2025 GMT
            Not After : Feb  6 22:49:46 2025 GMT
        Subject: CN=679c020a-38f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:19:29:eb:9f:76:c3:3f:02:28:57:87:a0:f1:
                    28:8e:42:82:7d:7f:38:47:be:62:05:5c:7e:78:c3:
                    80:5e:1d:cb:b7:e5:49:cc:6d:51:0c:2c:82:e9:de:
                    49:84:1d:ea:fd:7a:26:4b:36:98:f9:a4:f1:d1:61:
                    0c:57:cf:84:45:65:e1:f8:2e:9d:c8:32:dd:3e:c8:
                    c5:e6:2d:f5:12:cd:65:36:d6:8f:29:65:df:c9:24:
                    2a:e9:ab:8d:63:91:53:4d:c6:d4:a5:24:b9:df:d0:
                    d6:53:ca:0b:bd:0c:ee:3a:6b:e9:3a:70:64:7d:a8:
                    15:b7:be:4c:8a:ca:21:18:e0:41:92:5e:fa:e3:bc:
                    8c:81:0b:5e:69:e3:07:99:b6:42:37:a8:e5:95:69:
                    32:1b:89:ee:8b:c0:9d:f3:b6:12:41:70:c9:01:85:
                    8f:c4:e4:7b:85:cf:1c:b3:67:23:87:b1:38:d7:45:
                    d3:8e:d0:20:e3:12:0f:26:1f:a8:7e:72:f8:3d:2e:
                    81:e2:71:3c:6b:56:48:06:7a:20:bf:09:11:32:6c:
                    1b:1c:5d:58:78:de:eb:c8:fe:47:8b:d1:b0:ed:73:
                    57:e8:7b:ae:98:30:60:b8:a5:f3:cf:3e:a8:0e:c6:
                    61:7c:12:d4:99:5a:1b:27:06:4b:c0:35:1f:5b:21:
                    ed:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:9E:6F:70:7C:8E:3E:3D:F6:FF:66:71:55:A8:82:01:2E:FD:45:A4
            X509v3 Authority Key Identifier:
                keyid:87:2A:66:72:76:AD:44:70:8A:44:7F:DB:E8:81:F1:62:E7:90:DD:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hypmcnatRHCKRH_b6IHxYueQ3WM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:a2:ef:60:8b:1d:98:ec:3a:a8:3b:03:11:7a:1d:2c:fd:61:
         1e:e0:db:4f:4c:42:57:68:ab:c5:7a:fb:45:5e:6d:bf:fe:37:
         b1:56:f7:b9:ab:7e:ce:35:61:1e:3b:ad:d7:fa:e9:09:19:74:
         01:6d:da:f3:50:aa:25:b4:88:3b:b2:a6:d0:37:d8:41:a3:b5:
         25:dc:2f:9f:06:ad:f1:87:64:37:7f:2f:35:99:11:3e:8c:35:
         67:ae:48:76:15:55:0f:51:75:73:01:f6:38:e7:fc:5e:f4:fc:
         8a:59:18:78:d0:47:25:a9:88:af:4f:e7:80:bd:4b:4b:f8:64:
         11:6c:64:60:1f:f6:f1:55:7d:ae:e4:0a:92:19:2a:6a:69:72:
         75:93:a4:0c:a2:59:2c:43:e3:1c:cf:52:5e:94:63:aa:bf:5b:
         09:c4:d2:2d:71:ee:73:2c:5c:37:cb:5f:f3:a8:f4:df:a0:72:
         2e:dc:8c:eb:15:90:24:80:a7:56:71:76:36:ec:a7:28:d3:9b:
         2c:cc:b2:15:b3:bd:05:1e:a7:59:c9:1f:13:4f:e3:2f:a1:df:
         0d:db:7a:c7:98:4c:f8:fd:c4:0c:77:9f:3c:50:a0:5d:c1:46:
         ab:1e:e5:f5:6c:7b:01:a9:a1:07:03:5b:d3:d8:07:91:08:e9:
         96:52:d3:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:34:05 2025 by rpki-client