Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.mft
File:                     hGiwIZf8m3cK-EBVe_QVoLYTgg0.mft (raw, json)
Hash identifier:          lWEbWERDPtnCyq/f5aVoq+LFuTvkZ62c9j7jbOSxs1I=
Subject key identifier:   28:73:56:01:77:78:D3:0E:AE:6C:1A:0F:EF:E9:EC:9E:53:22:4E:7F
Authority key identifier: 84:68:B0:21:97:FC:9B:77:0A:F8:40:55:7B:F4:15:A0:B6:13:82:0D
Certificate issuer:       /CN=A9198767/serialNumber=8468B02197FC9B770AF840557BF415A0B613820D
Certificate serial:       FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGiwIZf8m3cK-EBVe_QVoLYTgg0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.mft
Manifest number:          FD
Signing time:             Sat 29 Mar 2025 04:31:17 +0000
Manifest this update:     Sat 29 Mar 2025 04:31:16 +0000
Manifest next update:     Sat 05 Apr 2025 04:31:16 +0000
Files and hashes:         1: hGiwIZf8m3cK-EBVe_QVoLYTgg0.crl (hash: SWOmqsFXs3IfqidUN9UPdQmBhc7g8yd4EphpH/txMaI=)
                          2: 7BABB4BE884C11EE81C71A38C4F9AE02.roa (hash: ONoGfJ+gJpijxRUK1rQsHqqAlvkJVzOCgYW99Mw+yNg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 255 (0xff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198767
        Validity
            Not Before: Mar 29 04:31:16 2025 GMT
            Not After : Apr  5 04:31:16 2025 GMT
        Subject: CN=67e77795-9133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:3d:9a:13:10:3e:30:b8:6a:33:2b:cb:13:2e:
                    09:50:e4:d3:b1:06:73:a3:23:5c:43:5b:91:67:40:
                    3e:ed:54:b2:87:d0:c2:1d:b5:2d:f7:61:cf:40:a1:
                    6d:db:00:f5:66:d2:bc:69:99:b5:98:0c:57:22:6e:
                    bb:8e:3a:81:87:64:6d:6c:58:bc:e9:d5:17:0c:82:
                    6f:72:3e:bb:12:c1:82:72:af:c6:05:49:dc:21:3b:
                    42:69:69:e4:fc:f2:2e:c1:1c:50:01:9f:fc:5c:9b:
                    6f:c6:e0:6d:f4:00:68:f2:cf:e8:90:91:df:a7:01:
                    30:2b:42:0a:3a:7e:9c:74:3c:21:0f:0e:d6:f9:72:
                    23:b4:7f:6d:39:a3:4b:b8:85:7f:7c:3e:2e:09:2b:
                    96:11:4c:63:a1:4d:40:d6:41:f8:4b:7e:ce:d1:e1:
                    21:62:6c:db:ba:97:e3:09:39:f0:72:0e:12:69:86:
                    2e:42:45:f0:f2:cf:e6:d0:99:49:f2:d2:ae:22:73:
                    ca:e0:33:a4:93:63:2e:3d:88:6f:2c:ee:61:b8:e1:
                    c6:b5:3d:d2:62:c3:ac:f5:3a:27:d9:83:02:97:5b:
                    de:08:09:c7:0e:0c:32:ff:2c:86:27:49:23:32:84:
                    8d:06:95:b9:e4:24:a6:83:24:73:e7:57:87:fa:8f:
                    db:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:73:56:01:77:78:D3:0E:AE:6C:1A:0F:EF:E9:EC:9E:53:22:4E:7F
            X509v3 Authority Key Identifier:
                keyid:84:68:B0:21:97:FC:9B:77:0A:F8:40:55:7B:F4:15:A0:B6:13:82:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGiwIZf8m3cK-EBVe_QVoLYTgg0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:9b:ed:37:58:c7:82:8d:b6:32:c5:13:86:56:fa:49:52:4a:
         72:34:fe:66:d5:60:eb:82:de:29:86:6f:42:f0:fb:18:fc:59:
         f1:a8:de:c7:22:d4:97:97:14:2e:59:ad:70:d3:56:6f:d3:84:
         1c:34:26:a8:c0:a2:76:25:99:c0:dc:ef:08:5f:fc:89:ce:84:
         78:9a:e0:c1:ad:2d:68:4e:84:19:30:79:9a:d9:1a:8e:e0:b0:
         37:72:74:40:21:13:05:33:17:b6:58:e4:7a:4c:60:c2:eb:78:
         57:83:f0:a4:ad:20:b7:dc:c7:81:a8:c8:16:c8:1c:48:18:f3:
         3d:78:9e:86:d4:c2:86:e5:34:87:fb:dc:20:d5:62:fe:93:85:
         e8:ff:48:e9:26:7b:b8:04:8d:0c:3a:0a:f9:ca:db:a6:4d:f8:
         17:a2:0d:5d:fc:21:eb:e5:79:e0:63:f8:cc:87:77:5c:5f:00:
         dd:5d:57:f8:f3:42:7e:6c:75:67:e0:3e:f4:9c:73:c4:f7:95:
         22:b2:5c:6e:2f:0d:e3:ba:f4:0c:22:ac:20:80:14:83:9c:d5:
         c1:55:63:b8:9c:df:28:f4:29:a8:63:a1:8d:11:dc:fa:02:89:
         c1:18:9d:75:19:ce:b7:6c:01:0a:4d:62:77:a9:a2:9a:f7:63:
         83:92:5d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----