Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft
File:                     h57Jr836J6POe11DeHoviQOFWG4.mft (raw, json)
Hash identifier:          7cUprJDFLsfLJEzL8NcKsN8Nr/eTD+WLfwEpoGFHsTo=
Subject key identifier:   81:17:5E:4B:D6:92:42:98:8C:08:1D:29:57:0F:92:65:9E:64:AF:82
Authority key identifier: 87:9E:C9:AF:CD:FA:27:A3:CE:7B:5D:43:78:7A:2F:89:03:85:58:6E
Certificate issuer:       /CN=A914E556/serialNumber=879EC9AFCDFA27A3CE7B5D43787A2F890385586E
Certificate serial:       0778
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h57Jr836J6POe11DeHoviQOFWG4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft
Manifest number:          0771
Signing time:             Fri 28 Mar 2025 21:43:04 +0000
Manifest this update:     Fri 28 Mar 2025 21:43:03 +0000
Manifest next update:     Fri 04 Apr 2025 21:43:03 +0000
Files and hashes:         1: h57Jr836J6POe11DeHoviQOFWG4.crl (hash: 1M71PjfxHfrsl4YdBYc9J7iXd7Kv8/N3UQml1ktNzQA=)
                          2: 375F7DAA0C3911EB828BDC25C4F9AE02.roa (hash: +IWbZ/7PgA6d6vOIX20SVgEuJVAS5imzV4sSU3cCP90=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1912 (0x778)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E556
        Validity
            Not Before: Mar 28 21:43:03 2025 GMT
            Not After : Apr  4 21:43:03 2025 GMT
        Subject: CN=67e717e7-1726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:05:e9:4a:0b:b0:c1:68:98:f8:b0:d8:af:51:
                    56:0d:ea:bf:16:0c:b2:9b:31:21:60:40:11:80:94:
                    3e:e5:4f:92:96:38:2f:28:12:ff:be:85:5e:32:21:
                    26:53:a2:b5:1f:62:c0:3b:c0:d1:0a:37:74:5b:fd:
                    7a:e2:44:ca:d9:a0:0c:dc:04:7b:8a:e3:be:eb:44:
                    21:e7:70:1c:08:1e:4e:0a:65:51:57:28:02:24:e6:
                    04:4d:9e:7f:f1:61:fe:44:2e:63:93:56:96:5e:7a:
                    cd:82:e7:02:b5:c8:bf:a3:63:69:e5:cf:30:e0:39:
                    e4:5b:83:dc:83:d0:dd:4e:e0:42:d0:7e:3f:a0:26:
                    9c:be:13:8f:5a:2d:89:87:3b:c9:5d:c6:b5:69:1b:
                    86:9f:db:01:b9:56:f4:e6:84:03:4d:df:d6:96:f7:
                    ef:95:52:e5:fc:a1:05:75:71:6f:e5:56:bc:a7:61:
                    b9:07:52:ef:65:bd:5b:2d:a7:82:37:85:db:e0:cb:
                    17:4b:9b:df:e9:6f:97:f7:4d:4b:17:2c:49:33:82:
                    ea:fb:69:b8:96:5a:c5:0f:52:c0:41:bd:55:a1:22:
                    fd:e4:74:4c:a7:66:3f:e3:d7:cf:da:da:bf:58:cc:
                    d6:88:90:99:5c:40:66:d6:63:9c:75:57:2e:73:9b:
                    9b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:17:5E:4B:D6:92:42:98:8C:08:1D:29:57:0F:92:65:9E:64:AF:82
            X509v3 Authority Key Identifier:
                keyid:87:9E:C9:AF:CD:FA:27:A3:CE:7B:5D:43:78:7A:2F:89:03:85:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h57Jr836J6POe11DeHoviQOFWG4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:c8:4c:10:9f:42:39:60:b7:39:51:de:00:b7:9c:49:5c:bf:
         7c:5b:6d:31:67:9e:b4:88:30:eb:de:72:93:ee:9f:4b:a0:12:
         01:ba:5b:98:28:3e:a0:81:8f:a9:29:27:fe:d6:40:c6:18:ad:
         b7:37:0f:b2:14:67:04:c6:df:62:f6:e7:f1:f9:7e:1d:1b:09:
         67:c4:82:25:53:cb:b7:40:89:16:53:4d:eb:b6:28:27:e6:11:
         de:05:cb:fe:59:f4:88:3d:d3:4f:8f:4a:ba:8b:c9:bb:90:fa:
         a5:a7:e6:f8:db:c0:51:b1:73:18:56:7e:80:27:7f:cf:11:58:
         ab:c5:57:08:6f:3b:6d:f1:1a:98:6d:54:c5:c8:c1:c7:d1:f6:
         f5:86:af:4f:79:ff:5b:b4:9a:0a:a6:e4:99:aa:66:9e:84:78:
         c4:79:2c:5e:d0:6d:a8:69:61:9e:3c:b1:7f:cf:fe:84:c0:9e:
         a6:ed:9a:2f:4e:ce:eb:c6:fa:c7:13:97:74:8f:07:60:01:66:
         69:39:09:fc:43:4b:81:da:fd:e7:55:60:28:0d:d6:48:0b:18:
         54:b5:69:b2:fc:49:ec:c7:2b:57:f6:43:30:66:5b:50:d4:4d:
         aa:fe:77:a9:17:f6:e4:01:7e:68:5d:2b:cc:a2:1d:a2:90:25:
         1c:89:75:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 15:59:45 2025 by rpki-client