Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
File:                     JDIOr_moILjtpZ4D5AVVxfNP78w.mft (raw, json)
Hash identifier:          HiBzRS5INqvYTrx0NyHEOf2i8B0JiHgfuvbZepGf3+E=
Subject key identifier:   4A:74:B2:7C:6B:FF:CA:07:76:58:40:99:31:B9:2D:2A:F8:65:1C:42
Authority key identifier: 24:32:0E:AF:F9:A8:20:B8:ED:A5:9E:03:E4:05:55:C5:F3:4F:EF:CC
Certificate issuer:       /CN=A9164F45/serialNumber=24320EAFF9A820B8EDA59E03E40555C5F34FEFCC
Certificate serial:       0125
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
Manifest number:          0117
Signing time:             Fri 31 Jan 2025 04:02:45 +0000
Manifest this update:     Fri 31 Jan 2025 04:02:45 +0000
Manifest next update:     Fri 07 Feb 2025 04:02:45 +0000
Files and hashes:         1: JDIOr_moILjtpZ4D5AVVxfNP78w.crl (hash: WtCURx2jn4t5sdd24uSZREtIrmAUmq3C9W1Jxg8GhUg=)
                          2: 7599519C42F811EEBCBA9981C4F9AE02.roa (hash: O1ci8odveyWb16dTISMFL4I0B+THdeEK/wQxVlAXoG4=)
                          3: 32B9FB9C42FD11EEBC3A6810C4F9AE02.roa (hash: yvOv4NBbOpEJJw0XLmATyCqTdZVqT5gv8LENR7a7yr8=)
                          4: AC1FAF84432211EEB1984F73C4F9AE02.roa (hash: amW3fnguTxFthTpVPQH+OMqY24uLNJt0XaaUMVwv2r0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 293 (0x125)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164F45/serialNumber=24320EAFF9A820B8EDA59E03E40555C5F34FEFCC
        Validity
            Not Before: Jan 31 04:02:45 2025 GMT
            Not After : Feb  7 04:02:45 2025 GMT
        Subject: CN=679c4b65-fd7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:85:2a:86:c1:43:c3:6b:e8:88:68:f6:67:37:
                    e1:a1:38:47:ce:58:f6:1b:15:83:2b:f8:a7:24:f0:
                    4d:31:7d:69:a6:44:12:2b:d3:82:69:62:63:81:d2:
                    21:49:7d:0a:13:c2:93:56:dd:6f:26:95:37:eb:c9:
                    87:2a:e3:7b:5b:a9:13:7e:b2:cd:b5:ef:e4:59:08:
                    7a:25:ef:22:da:f3:f6:9f:b8:29:bf:96:99:8b:1a:
                    42:d8:bb:e6:cc:54:8b:57:3e:76:56:da:ad:a8:7c:
                    0a:d0:6d:86:df:eb:e7:7c:3c:fc:3f:f7:b3:01:44:
                    61:d6:dd:5d:04:fe:bb:9a:91:6f:44:8b:42:1c:d6:
                    04:bb:51:05:75:d2:af:bc:51:81:1f:83:29:24:ab:
                    62:96:91:76:b3:7c:1a:6f:7b:6f:9b:e6:3a:1b:78:
                    42:d3:bd:76:64:0c:ef:fe:39:b7:1c:11:e9:9e:df:
                    f6:e5:b2:d3:d8:67:ed:9f:aa:f1:84:5a:de:1a:4b:
                    f5:26:62:80:cd:c3:52:6e:11:ff:ec:cb:e0:9b:ec:
                    cd:c4:04:3a:f1:e4:14:32:ec:44:5e:c8:87:95:86:
                    f4:06:ca:54:44:de:6e:54:c4:0d:97:85:db:f1:5f:
                    de:b9:4c:a8:92:fa:c0:27:5a:6b:36:b6:64:82:1d:
                    b7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:74:B2:7C:6B:FF:CA:07:76:58:40:99:31:B9:2D:2A:F8:65:1C:42
            X509v3 Authority Key Identifier:
                keyid:24:32:0E:AF:F9:A8:20:B8:ED:A5:9E:03:E4:05:55:C5:F3:4F:EF:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:71:aa:7c:b3:27:09:26:ca:cc:e3:8d:27:a3:bc:1a:dd:40:
         7c:29:e1:69:81:df:46:e6:7f:29:f4:25:f9:ea:8f:5e:61:af:
         c8:20:dc:a9:2c:37:e6:67:91:87:57:e9:a0:6e:bf:40:7c:3f:
         6a:70:1a:81:41:ca:89:62:5a:76:8e:b2:8f:b5:72:c7:04:0b:
         23:34:b6:dd:59:fb:8b:e0:59:f9:a9:00:4d:0c:3d:e2:05:4f:
         51:7b:a6:7a:b7:d1:6b:3d:f5:15:35:17:23:d5:2a:5f:19:fe:
         c8:a1:f4:3c:98:50:3d:03:b5:24:21:fa:41:2e:65:07:6c:b5:
         56:2e:da:b0:fe:98:bf:b1:c9:bd:48:83:5b:75:e9:0b:ea:01:
         bb:c4:d3:7e:77:02:57:bd:26:38:3a:69:05:97:b7:42:cb:d4:
         aa:10:49:af:10:d6:5a:0a:63:04:3a:50:c4:2d:80:96:10:fc:
         36:86:be:1c:6c:ad:34:33:b5:23:8b:d7:dd:6f:52:f5:35:79:
         da:db:d0:0c:2c:03:70:69:71:fd:9d:fd:6f:c1:18:c1:f1:a9:
         52:37:ed:76:f3:dd:5a:9d:cb:49:99:4a:54:af:ed:0c:06:56:
         bf:4c:f3:9a:e0:15:f0:51:4d:94:e7:17:6a:ba:79:68:42:78:
         d6:ed:99:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:07:40 2025 by rpki-client