Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918DF0C/5B190E30184311EBB3AA713AC4F9AE02/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.mft
File:                     jhtxhoZBeEjZ0-YiY8bg0wS9N-w.mft (raw, json)
Hash identifier:          See8PkhTZbRI5S0jBtema1OYH1Em8Kq2y+kPoGmigiw=
Subject key identifier:   37:31:FC:BF:68:8E:14:D7:28:F0:A8:E3:A9:F6:77:D6:F6:71:D6:A8
Authority key identifier: 8E:1B:71:86:86:41:78:48:D9:D3:E6:22:63:C6:E0:D3:04:BD:37:EC
Certificate issuer:       /CN=A918DF0C/serialNumber=8E1B718686417848D9D3E62263C6E0D304BD37EC
Certificate serial:       0738
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918DF0C/5B190E30184311EBB3AA713AC4F9AE02/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.mft
Manifest number:          0733
Signing time:             Thu 30 Jan 2025 21:39:18 +0000
Manifest this update:     Thu 30 Jan 2025 21:39:17 +0000
Manifest next update:     Thu 06 Feb 2025 21:39:17 +0000
Files and hashes:         1: jhtxhoZBeEjZ0-YiY8bg0wS9N-w.crl (hash: 6btwH7N3BIP6kZb+SpKmLMnmy+Re683zVxUXedwg1G8=)
                          2: 181D7270184711EBAD14343FC4F9AE02.roa (hash: gqCE02CBOTTrdLIogzJpaYzWvwCHcIiO+EC46ysOtw0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1848 (0x738)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918DF0C/serialNumber=8E1B718686417848D9D3E62263C6E0D304BD37EC
        Validity
            Not Before: Jan 30 21:39:17 2025 GMT
            Not After : Feb  6 21:39:17 2025 GMT
        Subject: CN=679bf186-f3f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a6:7f:59:f4:6b:2e:c8:1a:20:65:87:f9:ee:
                    1b:af:23:55:d5:ce:5e:1f:df:fe:06:06:69:e6:e2:
                    92:65:27:e9:72:73:9e:bf:af:76:c1:4d:5a:5f:36:
                    6e:36:73:7a:58:f9:18:16:96:5a:47:28:28:70:7a:
                    d4:e4:e4:f3:95:ba:86:64:b2:be:1f:9d:65:76:73:
                    61:1b:18:84:f2:f3:e9:db:e7:d6:0c:94:42:42:0f:
                    bc:a0:46:e9:4f:e8:06:bf:e2:c6:54:9b:42:5e:04:
                    9e:06:c1:a5:2d:3e:da:c1:52:d5:6b:d6:27:e8:c3:
                    36:5f:f0:e3:ff:df:37:07:89:a3:e1:e9:73:88:f7:
                    0e:76:b4:11:fa:c6:85:0d:f6:58:be:43:74:74:bd:
                    5a:a5:a3:b1:95:2c:33:85:6b:a1:c6:0e:26:da:19:
                    e7:69:00:1c:f5:3d:0e:7a:56:71:b0:42:8e:c6:cc:
                    9b:15:09:b3:a3:a8:c5:a9:78:be:70:88:c4:eb:69:
                    5f:c6:fb:4b:d7:0e:cf:b2:94:bf:5b:53:51:f1:b2:
                    ac:d5:ad:07:f8:32:0f:14:22:a6:05:ae:bf:d4:4d:
                    34:c9:41:44:12:22:bd:05:5a:7b:d0:ca:40:06:1e:
                    e6:ba:2b:77:15:ef:c9:27:30:cf:e2:05:ea:84:e3:
                    c3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:31:FC:BF:68:8E:14:D7:28:F0:A8:E3:A9:F6:77:D6:F6:71:D6:A8
            X509v3 Authority Key Identifier:
                keyid:8E:1B:71:86:86:41:78:48:D9:D3:E6:22:63:C6:E0:D3:04:BD:37:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918DF0C/5B190E30184311EBB3AA713AC4F9AE02/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DF0C/5B190E30184311EBB3AA713AC4F9AE02/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:88:08:3e:58:08:a2:a9:7a:1b:c2:c9:a3:4d:b9:01:33:43:
         8e:a5:7b:cb:d6:35:24:50:cb:b9:af:30:81:ad:a4:1e:c9:bf:
         21:6d:84:30:3e:9f:88:a7:01:e8:27:21:50:4e:2c:5b:6d:e4:
         e4:37:88:14:c3:6b:51:b0:64:f4:36:c1:a1:3b:58:6a:2b:4c:
         92:08:cf:26:ba:e0:90:44:4f:01:46:f0:a4:fa:93:50:bd:38:
         ab:d8:e7:30:7d:d0:9c:f1:1d:83:dd:6d:d3:02:60:21:b4:9c:
         12:cf:71:ec:e0:c3:96:b2:10:35:64:2f:78:d5:8a:94:0d:5b:
         98:d5:39:95:ec:21:8a:9d:e1:b3:f0:db:15:f5:c2:f8:6a:0a:
         c8:5a:ea:bf:b4:6f:85:0c:08:0e:00:08:84:bb:f5:9e:64:84:
         45:5c:fc:fe:27:9c:47:62:6b:2c:93:39:0e:61:64:d9:44:49:
         90:17:01:25:87:e6:5f:3d:51:b9:0e:ae:f8:a1:7a:e2:7b:dc:
         b0:b6:eb:36:ac:40:6d:a5:df:cb:c3:1f:6d:f8:44:24:6f:b5:
         d7:ef:75:0c:d1:8f:7b:27:ab:1f:66:90:f1:33:0a:fe:5a:0d:
         e6:d2:c2:87:cd:d2:88:74:85:22:d7:68:5b:64:32:c9:6c:9c:
         39:ca:ee:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:43:56 2025 by rpki-client