Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft
File:                     fHyggZUNrvx8VLjERpi0jo18abg.mft (raw, json)
Hash identifier:          EC8wZvGGCT8QStgYpWD4N+Wezauq74zufhOG1HITRCA=
Subject key identifier:   76:D5:7B:EB:7E:6A:B2:87:DD:70:08:DD:9C:09:9D:A4:11:07:27:B7
Authority key identifier: 7C:7C:A0:81:95:0D:AE:FC:7C:54:B8:C4:46:98:B4:8E:8D:7C:69:B8
Certificate issuer:       /CN=A9136DD6/serialNumber=7C7CA081950DAEFC7C54B8C44698B48E8D7C69B8
Certificate serial:       1078
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft
Manifest number:          1050
Signing time:             Fri 28 Mar 2025 17:32:37 +0000
Manifest this update:     Fri 28 Mar 2025 17:32:36 +0000
Manifest next update:     Fri 04 Apr 2025 17:32:36 +0000
Files and hashes:         1: fHyggZUNrvx8VLjERpi0jo18abg.crl (hash: thnVLNiAiKkIleZSxDYcR8mnZEgWq2/+jqo8eqW8Olo=)
                          2: 658A332E5C0311E999AF9478C4F9AE02.roa (hash: sps6OZoL5QmmM3ZpPmWyZ0iMnHwS3c4js0f2ItWVO3c=)
                          3: 5FADE68E288811EE97A1EC5CC4F9AE02.roa (hash: dVJZeCweb+XTaOi/1adyN7uBH6rIcemfVJD3fZ76wkg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4216 (0x1078)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136DD6
        Validity
            Not Before: Mar 28 17:32:36 2025 GMT
            Not After : Apr  4 17:32:36 2025 GMT
        Subject: CN=67e6dd35-804c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d1:3d:7c:86:9c:82:5f:00:08:87:8c:8d:d2:
                    36:0c:c6:d4:7d:3d:8e:9a:c4:71:ed:aa:ae:9c:e1:
                    37:86:32:91:28:b0:5f:46:5a:52:d9:7f:74:02:c6:
                    e3:cd:ae:82:a5:68:84:78:aa:fe:67:ce:ff:f6:61:
                    9b:5c:0a:52:30:05:99:fd:79:55:b0:b4:ca:18:13:
                    53:e7:ee:4d:7e:7a:f2:65:ef:a4:53:02:22:04:b9:
                    da:ac:2c:fe:28:48:5d:ed:a2:2d:d9:51:6f:d1:4e:
                    ee:f9:89:c8:b2:41:4d:65:0a:87:c0:55:82:16:2d:
                    01:f9:bd:53:71:ad:1c:27:33:12:97:a7:fe:8e:3a:
                    ac:75:98:b6:d3:71:b4:37:4a:6b:12:a5:f2:40:d9:
                    03:01:97:6a:50:6a:cd:85:74:b4:fa:78:14:9c:15:
                    2a:60:75:6e:df:ff:e2:92:50:d6:27:81:80:58:fb:
                    42:1e:b0:7f:12:bb:a4:20:28:1e:13:cc:d9:e6:07:
                    f8:8e:90:2a:04:35:28:6d:78:e4:05:5c:43:89:13:
                    5e:2b:4f:98:90:96:b1:a6:f1:5c:bb:de:f1:1c:39:
                    42:7f:e0:42:28:38:52:88:5c:28:d3:df:f3:9e:6b:
                    39:7c:d5:51:a7:9b:94:73:47:c9:a8:44:a3:e4:10:
                    4a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D5:7B:EB:7E:6A:B2:87:DD:70:08:DD:9C:09:9D:A4:11:07:27:B7
            X509v3 Authority Key Identifier:
                keyid:7C:7C:A0:81:95:0D:AE:FC:7C:54:B8:C4:46:98:B4:8E:8D:7C:69:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:80:ed:fd:b8:78:12:76:cc:5d:de:76:ee:fd:01:34:79:58:
         b1:6e:c2:ce:d9:da:a0:7d:25:49:9c:d6:64:f7:5c:fa:2d:9b:
         47:fc:6e:ee:a9:81:25:9f:2c:b4:01:38:66:d1:50:2d:32:a7:
         59:6d:3e:21:b2:e6:c7:c8:6c:f0:4a:fc:11:e2:b7:a6:6c:1c:
         5c:4b:9c:51:31:c2:53:1b:c1:33:e4:18:a3:d5:49:47:94:b6:
         39:d5:e3:87:5a:1b:45:39:54:c4:e1:80:c6:9a:62:d4:38:98:
         9b:89:87:83:de:c8:fb:2c:a2:5f:48:7e:6d:ea:d6:21:91:e6:
         3d:97:58:3c:66:6d:8f:3c:63:fe:26:59:e6:79:0d:81:ad:04:
         6f:76:04:5d:5f:70:5f:11:cc:4b:31:5e:bf:ac:79:96:cc:3d:
         8d:94:d5:7f:db:cf:38:47:b7:b9:96:4c:16:33:c7:37:45:e7:
         8d:50:74:07:25:89:b6:fa:d0:88:87:d5:a4:90:de:24:6b:fe:
         21:66:82:db:2f:73:8b:14:5b:86:49:72:eb:d7:26:27:5d:f6:
         b4:84:b1:3f:c3:b5:0f:26:30:9e:e8:25:51:cd:b1:bb:02:df:
         84:15:95:cd:bf:3d:40:8a:bd:e3:48:bd:de:d2:af:d2:db:39:
         39:13:dc:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:33:04 2025 by rpki-client