Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.mft
File:                     jNzleKI55Yzn_naDu0dp-dxVIro.mft (raw, json)
Hash identifier:          aBf/+kcPoCVmTtBLqKa5xt5/YmVx5S1H+FPeVBY6/LM=
Subject key identifier:   AC:9B:DC:BF:A4:B4:56:EE:F5:07:E4:9D:3F:22:E4:30:CC:1C:A8:19
Authority key identifier: 8C:DC:E5:78:A2:39:E5:8C:E7:FE:76:83:BB:47:69:F9:DC:55:22:BA
Certificate issuer:       /CN=A918E2A5/serialNumber=8CDCE578A239E58CE7FE7683BB4769F9DC5522BA
Certificate serial:       EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNzleKI55Yzn_naDu0dp-dxVIro.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.mft
Manifest number:          EC
Signing time:             Fri 31 Jan 2025 04:28:26 +0000
Manifest this update:     Fri 31 Jan 2025 04:28:26 +0000
Manifest next update:     Fri 07 Feb 2025 04:28:26 +0000
Files and hashes:         1: jNzleKI55Yzn_naDu0dp-dxVIro.crl (hash: yUxj636u7+Ausll3HsD1GZnuoxm7TdJfmhKAcRIJLa0=)
                          2: DB6928E4635411EF8B6D364BC4F9AE02.roa (hash: v+Dp0K1hdXxl3OPWO8uxhWsiC5bQl5Ff5tXnCdcq4MU=)
                          3: DB0532B2635411EF8B6D364BC4F9AE02.roa (hash: aBvIA0eeQ14OUWSBauC6xUgN/Yota75Po8HtX8rLsaQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 238 (0xee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E2A5/serialNumber=8CDCE578A239E58CE7FE7683BB4769F9DC5522BA
        Validity
            Not Before: Jan 31 04:28:26 2025 GMT
            Not After : Feb  7 04:28:26 2025 GMT
        Subject: CN=679c516a-85ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fb:46:00:19:7d:1b:7c:2c:0a:59:f1:d2:b9:
                    b8:80:de:13:ff:e3:3d:2e:07:e0:d9:c9:f1:97:1f:
                    12:75:a3:b4:16:a4:3e:ca:be:84:cc:70:a8:62:5f:
                    98:6c:88:b3:ec:84:ab:f5:ca:bd:e2:07:1f:26:76:
                    78:68:8f:0b:b8:42:16:1e:50:40:b5:ac:dd:d8:16:
                    bb:dd:88:a4:a8:60:98:83:5c:54:1d:a9:79:57:e8:
                    d3:e3:12:b7:64:c6:0f:f6:03:12:17:16:85:73:20:
                    34:c5:5b:a1:5c:fd:eb:bc:ed:24:36:bd:33:d4:9d:
                    1e:4b:1c:d8:7c:3c:14:71:e8:3c:07:0f:3e:e1:6e:
                    fc:62:0d:43:ad:5e:cc:33:81:61:22:60:3f:46:9e:
                    1e:8c:29:21:d7:13:a4:bc:25:18:71:5c:de:fd:ba:
                    f4:42:66:e7:08:1b:47:0f:5a:f1:5a:f3:2c:bb:25:
                    41:5f:d1:a4:d5:5b:f5:da:eb:8e:f5:92:89:e7:fe:
                    80:b6:48:62:8b:2a:26:a6:85:78:22:04:49:e8:9f:
                    6a:ea:d4:13:9b:01:34:be:28:1c:54:3a:ca:ad:05:
                    1f:66:c0:72:27:1d:0c:4c:01:a3:96:07:34:4c:d4:
                    44:60:e7:87:8a:f6:3e:a3:e0:31:3d:2c:02:ed:ce:
                    21:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:9B:DC:BF:A4:B4:56:EE:F5:07:E4:9D:3F:22:E4:30:CC:1C:A8:19
            X509v3 Authority Key Identifier:
                keyid:8C:DC:E5:78:A2:39:E5:8C:E7:FE:76:83:BB:47:69:F9:DC:55:22:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNzleKI55Yzn_naDu0dp-dxVIro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:13:fb:01:d9:3a:b2:9c:b6:bf:8a:97:10:a7:bc:9c:f9:75:
         19:46:71:8f:5b:df:ef:52:20:33:3a:fa:7e:b8:15:73:f3:28:
         6e:d3:e8:2a:be:6b:47:39:3a:c5:49:cb:4f:cb:b6:6e:ce:e9:
         ad:12:93:c3:55:d7:61:8b:42:f8:d2:fa:ba:59:26:c9:3e:e8:
         0f:62:52:ae:c3:38:b8:97:29:f9:91:58:e5:c6:28:f4:a1:20:
         95:7e:72:4e:21:29:f4:78:a7:90:e3:3a:91:c4:62:e8:eb:65:
         82:48:e2:0e:15:a5:99:a2:f2:85:91:0b:09:11:ab:00:6d:a6:
         b3:fb:8b:2a:c5:e3:ae:a2:f4:0f:55:7c:a3:8b:a3:fe:2e:e8:
         f6:11:91:9f:02:b3:c4:5c:94:5c:56:d6:b3:f6:c5:84:ce:33:
         51:bf:c6:45:fb:15:00:2f:d4:04:51:50:aa:dc:bf:31:45:90:
         5d:7b:8e:13:c6:b1:38:ba:0a:5c:7f:75:36:dc:3c:91:26:ce:
         29:41:45:50:c1:c7:49:69:3a:f8:75:00:cb:82:8f:bc:7a:b5:
         ce:a9:2e:11:43:20:44:d2:e0:4e:47:ce:a9:61:7b:b7:4f:ad:
         a1:5b:9c:89:65:9a:5f:0f:fe:5f:41:13:39:84:7e:bd:54:87:
         23:a9:cf:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:46:08 2025 by rpki-client