Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/HUW1iuOmlSERtAmFTag5MXvugjM.mft
File:                     HUW1iuOmlSERtAmFTag5MXvugjM.mft (raw, json)
Hash identifier:          moSORaVb9e8UspW4KUKLGdoMYfabVBaK0Fwrnqxw4uk=
Subject key identifier:   89:F9:74:32:B6:E8:D4:86:42:B2:04:8F:6B:49:A7:DA:12:81:69:CA
Authority key identifier: 1D:45:B5:8A:E3:A6:95:21:11:B4:09:85:4D:A8:39:31:7B:EE:82:33
Certificate issuer:       /CN=A9120119/serialNumber=1D45B58AE3A6952111B409854DA839317BEE8233
Certificate serial:       10EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUW1iuOmlSERtAmFTag5MXvugjM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/HUW1iuOmlSERtAmFTag5MXvugjM.mft
Manifest number:          18B0
Signing time:             Fri 28 Mar 2025 17:25:12 +0000
Manifest this update:     Fri 28 Mar 2025 17:25:12 +0000
Manifest next update:     Fri 04 Apr 2025 17:25:12 +0000
Files and hashes:         1: HUW1iuOmlSERtAmFTag5MXvugjM.crl (hash: SE6l8Ss/5ppJE/sPOHlJIBpNenfyPG5Y6IzkyXVy4JA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4331 (0x10eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120119
        Validity
            Not Before: Mar 28 17:25:12 2025 GMT
            Not After : Apr  4 17:25:12 2025 GMT
        Subject: CN=67e6db78-21c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:97:33:2c:a2:25:89:a0:75:98:48:60:76:2c:
                    af:55:54:f2:39:3d:3e:79:ff:90:7a:11:fb:19:3b:
                    a4:10:3f:38:4c:d0:55:5b:17:2b:4d:e8:18:28:fb:
                    eb:3a:42:ab:82:05:cd:28:e9:93:24:be:4c:16:45:
                    af:30:87:f4:6b:25:21:eb:4e:d6:e9:21:37:b5:f4:
                    b7:4e:f9:18:a4:59:6c:b1:88:cb:90:8d:33:c9:12:
                    bc:b7:78:a3:88:ae:08:34:19:19:b9:bf:f9:b1:d5:
                    b1:8c:21:fd:2c:55:ed:66:94:4c:a1:bb:3a:9f:17:
                    08:28:5d:46:95:08:38:e2:3b:03:76:7c:bf:9a:78:
                    54:e6:ac:50:29:02:e1:86:4d:d8:75:b9:d2:b8:b6:
                    21:0a:02:e3:bc:d2:9b:4c:15:c8:1f:bd:2a:c5:70:
                    3a:fb:01:db:df:3e:e5:f3:3f:bf:52:05:0e:02:51:
                    70:f3:a4:5d:26:3d:df:bf:dc:7e:5a:20:6a:5d:a9:
                    5c:ac:f4:da:d6:20:0f:c3:56:d7:22:ce:5f:a2:8b:
                    52:36:0e:84:ac:a2:36:67:ab:13:d2:ba:55:39:12:
                    3d:40:7b:6b:73:e5:c7:74:76:a9:20:da:c3:34:b8:
                    fe:72:23:18:44:8f:15:f0:08:12:b1:d0:4d:59:10:
                    17:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F9:74:32:B6:E8:D4:86:42:B2:04:8F:6B:49:A7:DA:12:81:69:CA
            X509v3 Authority Key Identifier:
                keyid:1D:45:B5:8A:E3:A6:95:21:11:B4:09:85:4D:A8:39:31:7B:EE:82:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/HUW1iuOmlSERtAmFTag5MXvugjM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUW1iuOmlSERtAmFTag5MXvugjM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/HUW1iuOmlSERtAmFTag5MXvugjM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:76:e1:17:24:ae:45:d4:14:c8:c1:47:f6:bd:42:b5:b7:5f:
         49:83:49:52:f5:f7:c1:fa:75:d4:1a:a6:57:e8:61:40:e5:09:
         fc:e2:47:49:41:cb:36:67:9c:fc:2e:34:a0:57:cb:11:6b:db:
         8d:25:0f:bb:dc:f2:88:00:00:e8:1c:53:a3:bc:7f:48:20:ac:
         1d:1d:d8:c5:41:c5:89:8a:01:a2:29:ab:d7:0a:e2:99:31:37:
         91:25:89:bf:52:d2:71:3b:66:b5:17:de:13:6b:8a:50:3c:49:
         e2:ee:35:c9:b4:1d:f8:0b:d9:ad:2d:c1:72:b5:8b:32:05:98:
         50:51:7c:1f:33:8d:8c:a4:a7:ed:87:03:51:fb:85:bc:66:92:
         0d:e5:72:fb:cd:de:60:fd:26:59:24:37:8c:06:45:43:4d:82:
         ea:f3:ed:ae:4c:07:97:a4:cb:98:0f:24:c7:59:de:82:f6:7f:
         79:cf:47:2f:46:3f:2c:df:43:6b:44:b3:10:8a:00:e9:20:54:
         f4:34:7d:eb:08:e8:7f:6f:49:6b:a3:f9:2d:a3:d0:3c:80:23:
         96:f8:7a:3c:f4:c4:13:2b:68:8f:cb:9d:68:21:f1:5f:35:ba:
         5e:2e:06:c1:69:b6:3e:c7:3b:cd:6f:5f:1d:ca:46:85:e1:62:
         0a:f4:5c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:02:13 2025 by rpki-client