Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917AF37/C8CC5AB40D2D11EDB2C9BB69C4F9AE02/JWZWaoTF3OdvO385CN5_MrhnZwc.mft
File:                     JWZWaoTF3OdvO385CN5_MrhnZwc.mft (raw, json)
Hash identifier:          Knaj9OG+LGLn8qwzavEBWS5enrzPnM0+zOVaOKguuS4=
Subject key identifier:   36:51:B0:CA:71:BC:27:0D:18:F8:EA:39:41:05:E4:31:B6:74:1B:C1
Authority key identifier: 25:66:56:6A:84:C5:DC:E7:6F:3B:7F:39:08:DE:7F:32:B8:67:67:07
Certificate issuer:       /CN=A917AF37/serialNumber=2566566A84C5DCE76F3B7F3908DE7F32B8676707
Certificate serial:       023E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWZWaoTF3OdvO385CN5_MrhnZwc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917AF37/C8CC5AB40D2D11EDB2C9BB69C4F9AE02/JWZWaoTF3OdvO385CN5_MrhnZwc.mft
Manifest number:          023B
Signing time:             Fri 31 Jan 2025 01:58:56 +0000
Manifest this update:     Fri 31 Jan 2025 01:58:55 +0000
Manifest next update:     Fri 07 Feb 2025 01:58:55 +0000
Files and hashes:         1: JWZWaoTF3OdvO385CN5_MrhnZwc.crl (hash: ncTthLHgrPoBmrZysryqA7n/5f5A2fCJ7ab7EHfIaFQ=)
                          2: 282282B60D3011ED8DC4D26BC4F9AE02.roa (hash: +qGeYJ79wvR0PdN91NY3rl/FLbIL0ABFLzdMSwQ0Nxs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 574 (0x23e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917AF37/serialNumber=2566566A84C5DCE76F3B7F3908DE7F32B8676707
        Validity
            Not Before: Jan 31 01:58:55 2025 GMT
            Not After : Feb  7 01:58:55 2025 GMT
        Subject: CN=679c2e60-8302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5b:71:e4:be:65:a3:39:a1:52:0c:c8:55:f1:
                    9e:5a:e5:6f:a8:e9:97:3f:37:d3:22:63:1d:bc:19:
                    45:52:81:a1:8d:0d:f6:a9:36:9d:5b:c0:58:34:c3:
                    5b:6b:a7:fb:02:c6:d4:87:c1:98:67:83:fa:28:bd:
                    cd:9b:94:cc:34:59:42:b6:ba:c6:a7:de:46:ac:cb:
                    e4:9c:9a:67:c5:37:52:db:78:b9:3b:fb:b9:35:eb:
                    c3:c3:c8:de:20:14:89:6a:b9:7e:41:9c:70:0e:2e:
                    18:d2:a9:f1:af:f6:06:29:32:1b:28:c1:44:a9:2d:
                    dd:38:91:09:e9:5c:ab:44:f0:42:15:5f:db:00:13:
                    20:16:5b:26:1f:97:d1:0b:2c:2a:9b:07:37:2c:4f:
                    48:2c:c3:6e:d1:00:b6:fe:39:7b:03:92:8f:98:be:
                    3e:f7:dd:24:10:a2:3e:55:1f:5d:3f:e3:5c:3c:73:
                    cf:31:88:c2:86:a3:e4:7f:f4:a5:6b:d4:b7:cc:20:
                    3b:b0:33:3a:3d:8b:b2:a1:ad:02:a0:a7:e5:85:21:
                    8f:02:7e:96:57:30:e0:28:3d:c2:5a:0a:8e:d4:09:
                    cc:fa:c9:83:c2:9e:25:f4:9b:4d:f9:33:b6:5a:78:
                    e9:2c:fe:6c:60:57:61:65:80:0a:83:53:9d:48:00:
                    e7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:51:B0:CA:71:BC:27:0D:18:F8:EA:39:41:05:E4:31:B6:74:1B:C1
            X509v3 Authority Key Identifier:
                keyid:25:66:56:6A:84:C5:DC:E7:6F:3B:7F:39:08:DE:7F:32:B8:67:67:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917AF37/C8CC5AB40D2D11EDB2C9BB69C4F9AE02/JWZWaoTF3OdvO385CN5_MrhnZwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWZWaoTF3OdvO385CN5_MrhnZwc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AF37/C8CC5AB40D2D11EDB2C9BB69C4F9AE02/JWZWaoTF3OdvO385CN5_MrhnZwc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:c1:b1:e9:0c:6c:d6:8e:ed:17:c1:78:71:cc:1d:c0:ec:3c:
         33:ff:8f:c7:1b:8c:26:39:a7:89:73:4d:94:c5:14:cc:c5:6b:
         a0:38:11:0f:ad:f6:33:37:05:01:d6:80:00:3b:94:f2:cd:92:
         e1:20:c7:d3:76:a8:2b:2c:1c:59:04:c5:3a:bf:ea:1b:c4:63:
         2d:cd:ca:69:f3:09:f6:17:78:b8:9b:85:f6:f2:0a:66:8a:e2:
         41:88:0a:a8:32:8c:37:32:0e:c1:d9:c9:12:2c:42:90:af:c1:
         27:f1:9d:ad:42:80:73:4d:47:2e:78:f7:2a:57:a3:ff:af:a4:
         23:8f:c0:1a:37:a3:2d:82:3c:ed:45:32:88:99:43:6e:95:dc:
         ed:8c:64:62:cd:7d:8f:5d:02:59:4c:c3:d5:23:9b:89:9e:02:
         ca:25:ee:7f:bc:48:cb:21:d6:84:e0:33:d9:4a:88:d2:ff:f5:
         2d:d3:a7:f8:59:61:ab:9c:3a:b6:7c:73:8b:01:4c:9d:f0:3d:
         fc:56:5d:5c:1d:23:bc:f1:e1:c8:f9:1a:0e:8e:89:46:59:84:
         a7:a7:7e:61:8f:11:63:49:cd:11:a9:b0:8b:ae:4e:dd:ec:2b:
         38:e8:dd:ce:b2:2a:43:f3:9f:a4:1c:56:b6:57:80:20:b7:4e:
         be:fa:1a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:31:53 2025 by rpki-client