Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.mft
File:                     hpk8iGXMBr2Yu5T0pukGEieCgAA.mft (raw, json)
Hash identifier:          UaC4Yj2Bwn62L3hcyKFzYBa3jzfXMNf1CU9WCWVVBFc=
Subject key identifier:   51:1E:A7:35:EB:BD:6C:E3:E8:1B:64:48:CB:55:B6:A6:AA:4D:B7:9C
Authority key identifier: 86:99:3C:88:65:CC:06:BD:98:BB:94:F4:A6:E9:06:12:27:82:80:00
Certificate issuer:       /CN=A91DC6AD/serialNumber=86993C8865CC06BD98BB94F4A6E9061227828000
Certificate serial:       0101
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hpk8iGXMBr2Yu5T0pukGEieCgAA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.mft
Manifest number:          FE
Signing time:             Fri 31 Jan 2025 04:17:04 +0000
Manifest this update:     Fri 31 Jan 2025 04:17:04 +0000
Manifest next update:     Fri 07 Feb 2025 04:17:04 +0000
Files and hashes:         1: hpk8iGXMBr2Yu5T0pukGEieCgAA.crl (hash: 1UWAwNsStjrB0q1fnPinAeHBqhwraCLPrzQuWqaMpiE=)
                          2: E2ECBFC65DF211EEB46BCB27C4F9AE02.roa (hash: VLTTYVtZCZ689N9IR847Wk29ehkfdaAv1fIzpOf8NmM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 257 (0x101)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC6AD/serialNumber=86993C8865CC06BD98BB94F4A6E9061227828000
        Validity
            Not Before: Jan 31 04:17:04 2025 GMT
            Not After : Feb  7 04:17:04 2025 GMT
        Subject: CN=679c4ec0-66f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1a:10:65:bd:44:26:72:da:38:51:f4:37:e5:
                    af:34:08:61:5b:40:ff:97:46:bb:a3:f3:ca:0b:8e:
                    33:91:df:4c:6a:04:f8:4b:30:4b:46:72:1c:c8:dc:
                    9b:40:34:e2:5f:3c:01:db:0e:35:a7:63:3c:a2:af:
                    95:29:41:81:61:6a:b1:b6:44:e7:c6:3b:35:ed:a3:
                    ce:cc:12:1d:e3:26:48:89:80:d6:61:bf:5b:71:ea:
                    f9:9a:88:e3:1c:4e:95:2d:4d:28:23:af:e0:29:5a:
                    27:e7:f2:10:df:1c:45:2a:65:02:bf:6a:b6:ce:c1:
                    09:a4:26:66:b1:f2:72:67:b8:36:ab:7e:56:ac:01:
                    b9:11:61:83:76:a8:6e:52:cf:ca:34:89:b2:80:9f:
                    d7:99:a8:93:6c:81:eb:b3:33:50:47:da:6b:9b:28:
                    68:17:5a:45:5c:e9:95:2b:6e:01:6c:75:f3:5d:cf:
                    41:67:d2:dc:a1:93:99:64:eb:55:b9:aa:03:e0:88:
                    82:fe:1f:27:da:04:ff:f2:b5:c0:7f:9d:1c:3b:fe:
                    9b:16:8b:87:ef:dc:42:98:bf:80:9e:7a:7f:55:9c:
                    bf:ea:62:76:d1:9b:58:7a:c5:4f:53:4b:24:8e:01:
                    2a:1b:77:03:1b:91:b5:4d:6e:bf:0b:76:eb:52:15:
                    2b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:1E:A7:35:EB:BD:6C:E3:E8:1B:64:48:CB:55:B6:A6:AA:4D:B7:9C
            X509v3 Authority Key Identifier:
                keyid:86:99:3C:88:65:CC:06:BD:98:BB:94:F4:A6:E9:06:12:27:82:80:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hpk8iGXMBr2Yu5T0pukGEieCgAA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:7f:38:79:1a:32:ec:9e:7d:11:bc:6e:a9:5e:03:b3:bf:ae:
         e9:07:48:12:88:0c:56:99:ef:51:c9:b2:ab:52:f7:e8:6e:e9:
         9e:55:91:99:07:45:56:db:10:bd:8b:4a:0a:0c:66:ce:d7:bc:
         6f:63:80:c6:e0:06:99:54:fb:39:b6:88:ed:8f:8a:5f:db:53:
         63:8a:46:01:97:e8:0c:e8:ea:f2:70:d3:92:86:db:6b:55:41:
         2d:79:0c:9d:9e:a4:76:a8:95:04:93:87:d2:76:c6:8f:04:2d:
         cb:c3:1b:83:35:af:c0:25:af:2e:4a:1d:f1:a6:74:c4:d3:a6:
         5b:7c:92:ba:8e:41:69:0a:8c:a6:7e:9e:19:9b:32:cd:68:9b:
         42:a2:82:9e:87:12:6f:5e:a0:24:e9:77:85:3e:c3:f4:da:4c:
         d2:61:80:b4:4d:09:36:f6:f6:da:49:f8:98:16:57:d1:86:27:
         76:6d:13:cc:51:80:16:d0:e9:3f:01:11:4b:dc:91:f9:98:7b:
         b0:43:0a:88:64:28:b7:03:ec:48:53:ea:cc:9a:a4:0b:5f:a5:
         ee:0e:35:43:59:a9:1e:f5:be:52:54:d1:16:82:61:65:47:54:
         0f:1e:a8:b0:4f:30:47:7c:27:4e:54:32:98:e6:9d:c1:7d:5b:
         3f:33:ba:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:31:20 2025 by rpki-client