Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft
File:                     h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft (raw, json)
Hash identifier:          ayMlH3T4HiUGcfOCgGIrBRTGhIY2XH3xZvZMXrbGJbg=
Subject key identifier:   D6:81:19:06:7B:93:B1:48:F7:9B:75:C3:4C:AD:8E:D3:DA:32:3B:8D
Authority key identifier: 87:8B:86:86:95:FC:45:C9:C6:3B:6F:BC:54:CC:B3:50:9C:4B:9F:4B
Certificate issuer:       /CN=A918A35C/serialNumber=878B868695FC45C9C63B6FBC54CCB3509C4B9F4B
Certificate serial:       0B7D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft
Manifest number:          0B77
Signing time:             Fri 28 Mar 2025 19:13:20 +0000
Manifest this update:     Fri 28 Mar 2025 19:13:20 +0000
Manifest next update:     Fri 04 Apr 2025 19:13:20 +0000
Files and hashes:         1: h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl (hash: lM8+nxiGF3ntftIBjK7WsmGX+xtDvugKZZjR/PV1Wh0=)
                          2: 0D22F748261A11EA83CE8D17C4F9AE02.roa (hash: QngpTkCC8JSyoEjRCbNY7hFfX4Je7JGO3cicNA6+xBU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2941 (0xb7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A35C
        Validity
            Not Before: Mar 28 19:13:20 2025 GMT
            Not After : Apr  4 19:13:20 2025 GMT
        Subject: CN=67e6f4d0-45ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:95:90:a8:df:0e:01:72:c8:3f:9f:de:b0:25:
                    37:d8:f4:33:f1:02:ca:0e:7c:df:d4:2e:b6:a1:ee:
                    43:b4:c3:24:10:c4:04:2e:9f:ef:e1:5c:29:a6:d5:
                    90:04:95:26:f7:54:aa:c5:38:f5:1f:8f:e8:bc:1a:
                    0e:fe:d7:74:c8:f1:6a:1a:37:77:bb:c1:60:f3:6f:
                    18:4d:73:5c:a5:56:5c:06:c6:4d:7c:6e:ad:3f:68:
                    45:bb:ae:c7:7b:d0:0c:f6:11:27:23:83:2a:57:3b:
                    46:99:be:20:90:49:c8:bb:bd:01:e3:1f:e5:c6:34:
                    13:fa:2c:c2:7b:76:7f:75:90:8d:8c:cb:08:51:c1:
                    a3:73:a8:a8:f1:06:d3:5b:7b:d2:cd:e8:e3:b6:88:
                    23:a9:4d:b6:5b:8a:5b:9b:a6:ee:cc:2b:6b:c2:41:
                    94:98:98:39:18:1b:f5:81:06:59:b6:0b:a8:e9:b6:
                    de:ba:08:7e:49:00:e6:ec:da:69:51:a0:ce:02:24:
                    21:91:84:a6:bd:3a:4b:ca:aa:45:78:7e:7b:22:81:
                    95:2a:c8:6a:4b:ce:aa:3f:dc:a7:9b:6a:0b:94:52:
                    fe:ea:00:35:9a:a4:9a:21:de:3c:7a:51:15:14:e8:
                    35:cb:7b:b3:9b:61:43:69:72:8e:e8:8d:49:0b:1c:
                    22:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:81:19:06:7B:93:B1:48:F7:9B:75:C3:4C:AD:8E:D3:DA:32:3B:8D
            X509v3 Authority Key Identifier:
                keyid:87:8B:86:86:95:FC:45:C9:C6:3B:6F:BC:54:CC:B3:50:9C:4B:9F:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:2d:25:e0:76:d8:ce:fc:77:26:b1:44:35:3b:03:50:e9:5d:
         d0:7b:6c:38:6a:0d:aa:69:02:d0:f6:6a:cd:40:1d:99:69:e6:
         94:62:60:e2:8c:b1:79:ef:6d:bb:4d:75:20:f5:48:87:f2:53:
         8d:d9:0e:7d:71:3f:6d:55:de:54:ec:6d:b7:58:c4:7f:fd:52:
         81:c5:4f:aa:28:f1:ee:c4:68:bd:6a:0a:ae:c9:5a:bc:8f:ca:
         9e:c7:40:e8:f4:34:8a:5b:17:df:24:58:a1:cb:e6:e9:e1:d7:
         4e:dc:9e:02:ec:b3:73:ce:e2:6d:fb:5d:ed:59:46:5e:b2:ce:
         fc:7f:7d:42:c2:e4:8f:07:cb:50:98:0d:e9:4d:93:55:6c:f8:
         30:9a:fb:38:4d:42:85:72:16:28:07:42:8e:3e:92:83:17:a8:
         94:be:d9:55:16:0a:81:13:f8:c6:4e:45:e4:17:97:d7:27:1f:
         71:c8:4c:7a:5e:c1:be:a5:81:4b:0c:25:00:6c:20:07:56:c8:
         00:cf:70:2e:b0:e5:08:c3:c2:cb:4d:b4:7b:84:ae:c4:be:33:
         1d:b7:b5:1e:95:12:bd:b0:2c:43:26:aa:58:42:a1:ad:78:bc:
         f6:f9:23:60:af:8a:fd:8b:93:16:9e:55:3c:1c:6a:f3:0d:c6:
         1d:7b:a0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----