Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.mft
File:                     jxv350cnod5CAcTAU1X-sX8hviA.mft (raw, json)
Hash identifier:          zAz1Oq1HAN0nyYQ80RI4IBzIdcpyMRDJbaad6bklS8k=
Subject key identifier:   AE:63:45:E6:6C:80:A4:8C:6C:79:9F:41:31:05:F6:FB:D9:AD:73:99
Authority key identifier: 8F:1B:F7:E7:47:27:A1:DE:42:01:C4:C0:53:55:FE:B1:7F:21:BE:20
Certificate issuer:       /CN=A919B7ED/serialNumber=8F1BF7E74727A1DE4201C4C05355FEB17F21BE20
Certificate serial:       0742
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxv350cnod5CAcTAU1X-sX8hviA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.mft
Manifest number:          0733
Signing time:             Thu 30 Jan 2025 21:44:15 +0000
Manifest this update:     Thu 30 Jan 2025 21:44:14 +0000
Manifest next update:     Thu 06 Feb 2025 21:44:14 +0000
Files and hashes:         1: jxv350cnod5CAcTAU1X-sX8hviA.crl (hash: d6Idyo85PZbin16YnOha+6V3oizNiDp8A6WAau3JOmQ=)
                          2: 188F1CDC1FFD11EBAB33D75FC4F9AE02.roa (hash: NO1EJh2qKLFO5ebkuXSnG9nCqgcYg/T5QnNIaPx24Xs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1858 (0x742)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B7ED/serialNumber=8F1BF7E74727A1DE4201C4C05355FEB17F21BE20
        Validity
            Not Before: Jan 30 21:44:14 2025 GMT
            Not After : Feb  6 21:44:14 2025 GMT
        Subject: CN=679bf2ae-17dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f2:88:3e:be:b4:06:07:7e:8d:07:a0:af:84:
                    5e:ad:5a:05:cc:f2:7b:53:cd:b6:52:0e:ef:93:0e:
                    c2:39:a2:76:e6:75:9e:ec:ec:db:07:2f:1f:19:10:
                    03:40:8a:bc:d7:f2:c5:14:dc:25:34:3d:ba:fa:87:
                    54:2b:6a:bb:54:5a:c0:d1:ac:00:5f:13:52:d6:8d:
                    c0:06:34:c6:3f:a6:fa:8a:14:ef:b0:b2:d6:7a:2d:
                    c5:86:c2:c5:ce:4c:14:c1:b7:bf:96:48:d0:0d:b0:
                    94:da:53:29:a6:66:a3:c7:2c:ac:ff:22:e5:3b:cf:
                    d2:1f:c3:66:ba:6f:43:f8:6b:b0:87:67:0a:d8:68:
                    6a:8a:67:1c:de:7b:4b:aa:51:e9:d1:d3:4d:a1:ce:
                    6c:21:9c:97:a5:78:6e:16:1c:7e:30:e8:cb:d7:8d:
                    c4:d7:8e:64:19:6e:28:e8:e3:40:38:84:12:30:e9:
                    fa:b7:5b:91:f6:b6:d8:c1:0f:d6:10:73:3b:d2:73:
                    d5:a2:cd:2c:71:b5:1e:b9:0a:09:e3:aa:20:9e:b2:
                    4a:b0:a9:00:98:61:d2:9a:3c:8e:fa:19:29:8e:68:
                    ce:63:5e:f8:b3:b8:7d:70:e7:dd:e9:ad:0f:78:30:
                    81:de:fb:37:3f:3e:c5:c4:f6:fa:89:f4:4d:89:b7:
                    3c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:63:45:E6:6C:80:A4:8C:6C:79:9F:41:31:05:F6:FB:D9:AD:73:99
            X509v3 Authority Key Identifier:
                keyid:8F:1B:F7:E7:47:27:A1:DE:42:01:C4:C0:53:55:FE:B1:7F:21:BE:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxv350cnod5CAcTAU1X-sX8hviA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:de:c2:e6:96:3a:cb:b0:9f:9b:74:fc:68:fe:bf:5c:23:a9:
         30:99:9e:db:e8:81:e8:be:4b:e3:93:43:4e:31:99:6b:81:ac:
         72:c9:9a:29:9d:ee:63:21:9c:88:59:aa:f3:5f:34:41:3a:35:
         f0:5f:d7:06:73:ea:ba:b5:0f:5e:df:0d:d5:85:e7:91:c0:2e:
         4b:66:5d:c5:d4:bb:80:02:ac:dd:5c:5d:d5:17:cb:1e:ec:03:
         10:fd:28:08:dc:e1:aa:da:ef:e6:e7:20:d2:84:a4:af:5d:37:
         fd:76:83:0f:1f:1e:e8:00:a7:82:71:9c:c0:3f:67:a1:9b:ad:
         cd:45:cf:77:14:90:f7:22:a1:5c:c6:1a:51:d3:b9:08:ac:72:
         8e:60:6b:3e:9a:9d:99:64:f3:cc:29:b8:ba:43:16:83:03:05:
         f4:22:d6:90:b9:c7:73:98:d4:62:ec:ea:cd:07:b7:f3:87:ab:
         ec:ef:26:11:5a:92:88:d3:86:be:4f:82:be:a2:f0:0a:3d:a4:
         61:14:2d:76:d2:b1:a8:48:05:74:34:3a:22:49:6a:0c:09:37:
         29:a2:5b:8f:cb:07:f7:46:ac:11:d6:de:39:61:99:04:ff:83:
         1b:9f:17:52:1e:20:1f:cd:69:ec:bc:19:e4:8a:44:7c:71:6b:
         97:73:2e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:22:18 2025 by rpki-client