Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/iNavzrjz-JAnRNYaYmhLlFnbwfY.mft
File:                     iNavzrjz-JAnRNYaYmhLlFnbwfY.mft (raw, json)
Hash identifier:          +AMs2EDC975ade9HSIWI4Doq8tcsoYmauaZOonJm/9c=
Subject key identifier:   C6:91:4B:1D:6A:25:D7:D8:DC:0C:18:D2:1F:7F:A6:8C:72:F9:31:DD
Authority key identifier: 88:D6:AF:CE:B8:F3:F8:90:27:44:D6:1A:62:68:4B:94:59:DB:C1:F6
Certificate issuer:       /CN=A914A550/serialNumber=88D6AFCEB8F3F8902744D61A62684B9459DBC1F6
Certificate serial:       0400
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNavzrjz-JAnRNYaYmhLlFnbwfY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/iNavzrjz-JAnRNYaYmhLlFnbwfY.mft
Manifest number:          03FB
Signing time:             Fri 31 Jan 2025 00:33:11 +0000
Manifest this update:     Fri 31 Jan 2025 00:33:10 +0000
Manifest next update:     Fri 07 Feb 2025 00:33:10 +0000
Files and hashes:         1: iNavzrjz-JAnRNYaYmhLlFnbwfY.crl (hash: tgYySRF0xtmUsh6IEt2uSoDbDiUqrbR6NcmwgJg/f4A=)
                          2: 66D714485D6F11EC9A00E41DC4F9AE02.roa (hash: Zv2OqRWOOIraCVGgHs0pDMOMrHeeVent3h8K/ky95JI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1024 (0x400)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A550/serialNumber=88D6AFCEB8F3F8902744D61A62684B9459DBC1F6
        Validity
            Not Before: Jan 31 00:33:10 2025 GMT
            Not After : Feb  7 00:33:10 2025 GMT
        Subject: CN=679c1a47-6435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:94:d0:06:65:fc:f2:19:ef:c6:81:a3:c9:68:
                    ae:2f:e3:20:7e:98:3d:24:8b:b3:3b:69:f8:6a:57:
                    88:65:69:05:b6:d6:9e:7d:f1:07:09:a8:8a:63:b4:
                    30:8b:48:b4:96:f8:e7:cd:55:de:53:17:92:63:00:
                    d7:53:89:2f:11:5e:25:09:fa:5d:bb:42:34:d1:ba:
                    c2:71:e5:1d:a6:19:f7:09:80:aa:f4:7b:e6:36:9b:
                    8e:2e:8d:7a:e4:94:70:13:fb:10:7b:30:9b:e7:57:
                    28:dc:cb:ad:e6:23:7b:1b:a5:46:28:72:2a:aa:44:
                    d2:49:f2:3f:df:0a:6b:b3:c7:fa:e2:4f:94:ef:bf:
                    71:f5:c7:f8:61:56:52:29:21:28:91:93:28:19:79:
                    fd:4b:21:74:60:0f:35:db:ad:22:83:8e:d8:d9:6b:
                    4c:8e:b9:f9:3c:1d:73:51:f4:69:88:7e:5a:5b:6c:
                    29:53:46:9f:2e:59:7c:aa:44:7c:80:29:5e:42:5d:
                    dd:e8:e4:05:22:2c:04:66:46:d3:18:df:eb:41:fa:
                    62:c9:81:7b:f9:93:cf:12:6c:7c:d3:65:50:52:6b:
                    ec:52:de:79:b6:4b:d5:ae:47:1e:0e:99:1e:78:dd:
                    62:07:26:f6:d5:58:11:d1:5c:a2:51:70:a0:d1:0f:
                    8c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:91:4B:1D:6A:25:D7:D8:DC:0C:18:D2:1F:7F:A6:8C:72:F9:31:DD
            X509v3 Authority Key Identifier:
                keyid:88:D6:AF:CE:B8:F3:F8:90:27:44:D6:1A:62:68:4B:94:59:DB:C1:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/iNavzrjz-JAnRNYaYmhLlFnbwfY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNavzrjz-JAnRNYaYmhLlFnbwfY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/iNavzrjz-JAnRNYaYmhLlFnbwfY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:17:fb:ed:8b:b1:97:62:31:5c:b7:a9:5e:fe:fd:73:d0:f8:
         8a:2d:12:6f:82:23:77:a2:ef:d6:fd:6d:cf:26:61:2f:55:b4:
         b2:e3:4f:11:33:47:6a:f7:5a:5a:ef:de:b2:8b:c9:39:11:f0:
         26:50:f9:6b:cb:62:8b:48:b9:f3:61:7f:bd:a3:e0:cb:2e:71:
         49:8c:c6:03:a8:4d:40:37:50:0d:3c:5f:e6:5d:73:91:88:42:
         5d:0f:4e:1b:93:f3:5f:3c:76:fa:fa:16:30:38:9f:b2:b0:9f:
         c9:ef:7b:b1:48:a6:70:c6:a5:9a:94:6a:29:03:6c:e4:7a:c5:
         c7:9a:db:c6:3b:4c:33:5e:b3:38:f0:5e:1f:cb:e8:0a:53:58:
         88:5a:c6:a0:ed:ed:b1:00:66:e6:ad:c4:ac:b7:c8:4f:56:95:
         39:73:e4:37:45:1f:e0:01:da:2d:42:20:c3:b9:fa:d1:5d:d1:
         81:ae:33:7b:e4:9c:17:2a:8a:5c:00:33:ef:83:01:11:7a:05:
         8e:c9:ea:dd:db:ba:56:6a:45:ff:b2:b8:0e:b3:e8:c9:48:01:
         a6:04:cd:d5:e7:fe:d0:a2:57:01:74:4c:81:c2:c0:33:fa:f4:
         79:74:f7:63:8a:56:3b:ce:75:1e:3b:a8:40:49:a3:7a:b5:76:
         03:4f:43:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:13:38 2025 by rpki-client