Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft
File:                     SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft (raw, json)
Hash identifier:          v7FNB2W0q6umpnyWkCE35d/fRPSe0y5GmGjNL9BM0BI=
Subject key identifier:   E5:B2:DB:E8:EA:BD:F0:47:DF:35:22:61:45:37:CF:5C:DA:AD:8C:5E
Authority key identifier: 4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB
Certificate issuer:       /CN=A91896D4/serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB
Certificate serial:       01CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft
Manifest number:          01BA
Signing time:             Sat 29 Mar 2025 02:46:08 +0000
Manifest this update:     Sat 29 Mar 2025 02:46:08 +0000
Manifest next update:     Sat 05 Apr 2025 02:46:08 +0000
Files and hashes:         1: SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl (hash: L24SAbmTBKrpIddQsgwM+pN0GlMC9SanRNZk1RapFiU=)
                          2: C93A47F63ABB11EE8A78BE4CC4F9AE02.roa (hash: v/jaXAzZ3zqjA/FFCsb5LG3XmHkZ6SrkiodSFMHoHXI=)
                          3: CD23AE8C403011EEA773CE47C4F9AE02.roa (hash: AeibaNJLpaTPWil7j4GEFIcO329YJiVNQhWzIDubw3g=)
                          4: 6985BF0062D611EEB5C5721CC4F9AE02.roa (hash: v8Ohi2heIavbMrsxkeCZxN8LxhYk0piFR46tFcvgr/o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 461 (0x1cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91896D4
        Validity
            Not Before: Mar 29 02:46:08 2025 GMT
            Not After : Apr  5 02:46:08 2025 GMT
        Subject: CN=67e75ef0-0ed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bc:6b:7f:20:36:65:31:8c:a2:be:49:a9:45:
                    cc:b4:cd:8b:61:72:b9:a4:95:0a:b1:0e:33:85:bf:
                    98:7c:d2:52:bc:1e:cf:58:68:21:e3:86:48:6f:2f:
                    f7:28:f2:37:d4:b5:d7:65:17:f9:a8:b2:fb:b0:18:
                    30:6d:02:16:29:1f:e9:85:48:36:4e:5b:2f:7b:f3:
                    19:39:f5:cb:27:a9:fa:76:73:0c:a4:00:ea:66:a7:
                    ab:f1:91:64:28:65:9b:9b:03:78:fc:4d:f4:88:72:
                    e9:1f:ac:99:12:72:a6:69:64:0d:2d:7f:79:4f:d3:
                    b9:18:a5:4d:5a:f3:78:29:54:d3:1b:05:80:9b:5f:
                    9e:85:0c:53:36:4c:e4:6a:79:d2:9a:35:35:5f:e9:
                    68:29:64:b5:f4:2f:8c:12:3e:39:c2:d5:6c:10:50:
                    db:9f:23:fc:8a:a6:31:39:4f:5e:98:5b:e1:87:21:
                    e2:d9:a6:b3:39:f5:24:54:87:2f:dc:21:b6:d8:89:
                    1d:17:e0:2e:fb:57:82:9e:ab:d6:ec:e3:2c:40:d4:
                    22:ff:e7:d3:c6:67:c7:79:e5:bc:9d:ca:b3:82:7e:
                    92:01:29:c5:88:b1:b7:4c:8e:e4:0b:41:80:2e:08:
                    5b:a1:59:e1:b2:63:81:0f:f4:b1:fb:0c:3f:96:2e:
                    5b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:B2:DB:E8:EA:BD:F0:47:DF:35:22:61:45:37:CF:5C:DA:AD:8C:5E
            X509v3 Authority Key Identifier:
                keyid:4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:69:9b:56:ac:72:a9:d1:70:0c:d9:b8:ba:0a:55:cc:50:50:
         6d:c6:b8:f6:28:3e:0d:00:19:7a:54:b0:49:e4:11:1d:a9:bc:
         03:a2:84:1d:bf:a5:52:7e:23:8f:fd:b7:54:e5:e3:33:2d:f9:
         9b:fe:48:02:9a:88:e0:03:d8:fa:a8:41:5a:49:47:73:f3:41:
         f0:51:8e:b0:7e:51:4f:1e:5d:8f:23:84:21:c8:d0:31:03:d5:
         de:a4:96:3e:1e:00:a4:06:09:41:b9:a8:8c:5e:e0:ec:4c:0d:
         24:e2:c3:9c:ca:8d:00:6a:35:4d:1b:06:54:c8:d3:bd:14:3e:
         dd:9d:c6:bb:ea:15:2c:2f:d2:6a:c1:a0:04:a2:23:11:9d:28:
         3a:1d:e1:f5:23:a7:a7:e3:01:2a:69:be:21:e3:c5:ea:c2:18:
         d5:c9:59:16:77:ac:0c:71:71:e4:a7:6d:c7:88:11:e7:a0:74:
         7c:22:de:71:6e:55:74:46:52:8b:f2:44:e1:d6:0b:d3:64:41:
         c4:85:51:5d:bc:44:5d:df:bc:11:9c:08:9c:74:46:16:84:de:
         63:cd:a9:88:6c:85:04:b7:fc:80:f7:a7:81:31:d3:bf:c1:5a:
         83:ca:2d:0b:14:84:dc:9e:18:cf:26:39:74:69:a8:07:b2:84:
         85:b8:db:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:44:13 2025 by rpki-client