Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft
File:                     jwvqPZb8ji7R6MaDcEdpRWnu484.mft (raw, json)
Hash identifier:          //hIuWZ7Cpe86HLm+3H94YvCAiiYVV7IQt0Ae98nSkQ=
Subject key identifier:   CD:92:6F:EE:F2:A8:13:C3:20:6A:57:5E:2A:41:69:F0:5F:30:47:A1
Authority key identifier: 8F:0B:EA:3D:96:FC:8E:2E:D1:E8:C6:83:70:47:69:45:69:EE:E3:CE
Certificate issuer:       /CN=A919DC74/serialNumber=8F0BEA3D96FC8E2ED1E8C6837047694569EEE3CE
Certificate serial:       01EE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jwvqPZb8ji7R6MaDcEdpRWnu484.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft
Manifest number:          01E0
Signing time:             Sat 29 Mar 2025 02:25:03 +0000
Manifest this update:     Sat 29 Mar 2025 02:25:02 +0000
Manifest next update:     Sat 05 Apr 2025 02:25:02 +0000
Files and hashes:         1: jwvqPZb8ji7R6MaDcEdpRWnu484.crl (hash: 5tlP1gVudZHdVRSVpbi/F0X8tjk49DN/NixDhSdRixI=)
                          2: 99E52804462E11ED90035452C4F9AE02.roa (hash: mhhqfIxRoBjhuINkZ3XIMhFtJRPA+gdmIPhSIee7DFc=)
                          3: 094ECC9A9DB311EEA5CE2852C4F9AE02.roa (hash: gcq2OURWYuZ9mt7r/ew2O7bw4Is8Oj5yrAJBkVF7NPc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 494 (0x1ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DC74
        Validity
            Not Before: Mar 29 02:25:02 2025 GMT
            Not After : Apr  5 02:25:02 2025 GMT
        Subject: CN=67e759fe-ccd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e8:98:ac:74:ca:18:7c:4e:77:30:0f:f0:2d:
                    d0:fa:18:e3:8a:df:27:4d:b6:d8:98:34:7f:26:80:
                    08:9c:a2:01:b3:b1:81:29:d8:aa:c4:75:20:00:c7:
                    dc:9d:d0:f8:2b:96:47:d8:1d:43:20:15:a0:f4:68:
                    db:e7:7a:08:e2:c2:9b:8a:e9:f8:61:24:00:d4:f4:
                    55:a9:15:39:2d:32:96:33:b1:17:35:49:a7:7a:85:
                    46:b5:69:f2:40:c0:36:e9:3c:ec:55:66:ee:9c:96:
                    34:83:c0:7a:b0:71:81:ce:47:6e:6d:c6:4c:d8:6b:
                    d4:d3:df:be:c4:78:27:fa:3d:68:bf:44:b5:d8:32:
                    34:23:65:b2:3d:c9:f7:6d:35:49:9d:ca:a8:51:62:
                    aa:3b:ca:00:20:70:85:6b:0f:55:28:ae:5b:b6:95:
                    52:b0:26:8f:02:ba:02:0e:51:20:82:0f:b7:13:56:
                    b6:d4:94:ce:55:33:a4:5d:08:94:82:d7:71:c6:13:
                    48:2f:f8:82:3e:6d:24:98:2a:e4:a7:d0:bb:e0:85:
                    5c:0f:8a:5d:98:87:f7:42:5b:49:1e:5a:a7:67:9f:
                    03:b5:2a:4c:81:ea:3c:fc:30:b5:fc:e2:da:d3:e5:
                    6d:cc:97:ad:85:da:30:c7:87:e5:74:2b:b4:fa:29:
                    4e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:92:6F:EE:F2:A8:13:C3:20:6A:57:5E:2A:41:69:F0:5F:30:47:A1
            X509v3 Authority Key Identifier:
                keyid:8F:0B:EA:3D:96:FC:8E:2E:D1:E8:C6:83:70:47:69:45:69:EE:E3:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jwvqPZb8ji7R6MaDcEdpRWnu484.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:e0:52:2a:06:9c:f0:db:d6:04:ee:bf:8f:77:0a:f1:19:52:
         4d:d3:a0:98:c8:fe:03:28:18:38:96:fe:4e:46:d9:74:a7:e2:
         23:02:9f:04:ed:8b:a0:85:3b:5b:70:09:5c:b8:8b:b1:f4:c3:
         6b:bd:ff:9e:aa:96:04:73:84:4e:f8:37:d3:81:41:37:33:ff:
         23:15:22:03:ad:d3:ac:19:ab:fb:76:1e:18:d1:cf:9e:c1:fe:
         55:8b:89:d8:8d:7b:05:d9:eb:48:8c:3e:37:65:75:ff:d3:23:
         f3:34:06:55:13:4b:7b:d0:a6:36:e8:2c:39:55:4b:36:9f:62:
         26:d3:9e:3a:d5:e2:74:7f:8c:13:94:5c:d7:d1:f4:fe:2d:78:
         71:22:69:50:67:65:e0:92:90:6f:d9:51:81:52:e9:4a:51:75:
         46:11:2f:58:e3:08:d5:c9:ea:46:a0:5a:ec:3d:78:81:42:00:
         dd:1a:4a:8d:0f:c0:da:5e:61:9b:14:f9:da:a0:e2:d9:07:3b:
         fc:27:ce:bf:2c:99:cc:ea:99:7f:f5:1f:f0:8e:ed:45:33:98:
         10:db:bc:c2:8f:65:64:44:5c:c9:b6:b2:57:d2:4c:3a:4b:c3:
         1c:94:1f:9b:1b:f9:9d:ab:6c:ff:a9:be:37:d6:1f:c7:1a:47:
         9f:38:6d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:51:55 2025 by rpki-client