Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.mft
File:                     jcnPJvnU_dwRFF0zw70Hli1ie7g.mft (raw, json)
Hash identifier:          z5zj5BPFPu9fEzbxaox1dF+hwP60DVWrV786ZmLOjLo=
Subject key identifier:   69:5F:A8:7C:87:05:D0:49:A5:2D:85:AF:5F:B3:52:C5:80:97:18:FA
Authority key identifier: 8D:C9:CF:26:F9:D4:FD:DC:11:14:5D:33:C3:BD:07:96:2D:62:7B:B8
Certificate issuer:       /CN=A9113C02/serialNumber=8DC9CF26F9D4FDDC11145D33C3BD07962D627BB8
Certificate serial:       3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcnPJvnU_dwRFF0zw70Hli1ie7g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.mft
Manifest number:          23A1
Signing time:             Fri 31 Jan 2025 16:22:23 +0000
Manifest this update:     Fri 31 Jan 2025 16:22:23 +0000
Manifest next update:     Fri 07 Feb 2025 16:22:23 +0000
Files and hashes:         1: jcnPJvnU_dwRFF0zw70Hli1ie7g.crl (hash: 3g9PyQhLleEEl/rbvQl94YA6Ge3KBAr+yKz7iVi8gOc=)
                          2: BD55046A86A711EFAAEE7030C4F9AE02.roa (hash: YZRf5ygqs6yZScbkx1VpIvx3DqExks4rVOBFuDw10NM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113C02/serialNumber=8DC9CF26F9D4FDDC11145D33C3BD07962D627BB8
        Validity
            Not Before: Jan 31 16:22:23 2025 GMT
            Not After : Feb  7 16:22:23 2025 GMT
        Subject: CN=679cf8bf-7509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:51:18:91:49:ef:21:f4:57:74:84:2e:72:74:
                    96:bc:66:c8:e8:4d:49:5c:ed:e3:a4:8a:16:ed:05:
                    ed:93:75:47:5c:4c:c2:91:32:a2:a8:a7:40:a6:30:
                    b6:83:fc:05:33:4c:dd:31:fc:70:63:cf:11:bd:e3:
                    14:bc:2a:d2:48:77:26:0e:e4:93:16:32:1e:cb:8c:
                    ca:ae:1f:da:5c:8f:85:1a:76:7d:90:4f:09:80:8d:
                    bc:60:fc:94:a1:44:4d:94:95:95:49:0b:b1:e2:ae:
                    61:4b:9b:7a:8b:73:c6:26:a7:f4:14:58:f7:a7:d2:
                    59:24:a2:b2:6b:a9:f2:0c:10:35:03:55:0b:3b:d6:
                    ad:5b:99:5b:f9:fc:e8:6a:b8:8a:1f:67:86:42:21:
                    96:e3:44:93:1f:f6:ed:38:4a:c8:65:b1:e8:9d:b5:
                    dd:a6:74:9e:e5:e9:76:84:11:56:9f:d2:5d:15:c7:
                    0f:b0:7c:dc:06:d2:ca:11:85:37:d2:a9:23:c1:f0:
                    ff:43:33:25:09:c2:85:a3:a2:ef:59:6c:b3:d9:37:
                    c6:aa:b5:6f:40:79:23:2a:0c:91:9c:c0:55:e7:86:
                    7f:64:ba:d2:73:97:22:59:b3:b4:84:88:6c:2a:5e:
                    4a:7a:ea:ea:3c:9e:ae:8d:c8:73:54:cc:79:09:70:
                    0f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:5F:A8:7C:87:05:D0:49:A5:2D:85:AF:5F:B3:52:C5:80:97:18:FA
            X509v3 Authority Key Identifier:
                keyid:8D:C9:CF:26:F9:D4:FD:DC:11:14:5D:33:C3:BD:07:96:2D:62:7B:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcnPJvnU_dwRFF0zw70Hli1ie7g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:49:49:e8:60:56:a2:b3:e4:29:2e:b2:a0:90:3d:9d:5c:8e:
         89:70:ae:2a:75:7b:bd:ec:c4:b5:48:ad:19:84:b1:14:64:7b:
         2b:5c:22:44:d8:2b:cf:93:d8:d6:fe:41:a5:d5:28:cf:c3:27:
         c2:df:b4:eb:79:dc:f3:9d:fb:f6:f7:97:56:6c:11:41:0f:2b:
         4a:1f:a7:9c:aa:e8:28:66:bb:2e:f3:db:80:24:ca:0a:73:95:
         05:d6:1e:1b:05:ff:e8:1f:5b:0a:d1:de:ae:e0:03:80:59:0e:
         cf:d5:ec:78:ba:37:3b:4f:c6:8a:e8:25:56:00:90:7a:05:c1:
         a3:2b:26:0c:34:6d:8c:dd:c3:c4:82:20:9f:79:8f:0f:d4:ab:
         fb:e2:1a:51:15:29:9a:fd:57:ce:84:55:42:cf:c1:9e:37:5e:
         bd:6a:ae:84:89:15:56:ac:b9:62:e4:b5:ed:34:30:c2:c8:36:
         3b:10:81:42:ea:78:34:92:e9:8d:c6:f1:9c:ef:0b:51:b4:1b:
         00:03:d0:53:a1:74:ec:8c:3d:e0:5a:6b:14:01:60:ac:ea:d2:
         a7:c8:ac:5c:94:2c:0d:73:67:05:c0:50:18:9f:ba:7b:c3:56:
         17:a7:6b:c1:2a:d2:cc:6a:22:23:c8:90:a9:0e:9d:80:f5:b8:
         90:e7:0c:e2
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
M0MwMjExMC8GA1UEBRMoOERDOUNGMjZGOUQ0RkREQzExMTQ1RDMzQzNCRDA3OTYy
RDYyN0JCODAeFw0yNTAxMzExNjIyMjNaFw0yNTAyMDcxNjIyMjNaMBgxFjAUBgNV
BAMTDTY3OWNmOGJmLTc1MDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDzURiRSe8h9Fd0hC5ydJa8ZsjoTUlc7eOkihbtBe2TdUdcTMKRMqKop0CmMLaD
/AUzTN0x/HBjzxG94xS8KtJIdyYO5JMWMh7LjMquH9pcj4Uadn2QTwmAjbxg/JSh
RE2UlZVJC7HirmFLm3qLc8Ymp/QUWPen0lkkorJrqfIMEDUDVQs71q1bmVv5/Ohq
uIofZ4ZCIZbjRJMf9u04Sshlseidtd2mdJ7l6XaEEVaf0l0Vxw+wfNwG0soRhTfS
qSPB8P9DMyUJwoWjou9ZbLPZN8aqtW9AeSMqDJGcwFXnhn9kutJzlyJZs7SEiGwq
Xkp66uo8nq6NyHNUzHkJcA9bAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaV+ofIcF
0EmlLYWvX7NSxYCXGPowHwYDVR0jBBgwFoAUjcnPJvnU/dwRFF0zw70Hli1ie7gw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEzQzAyLzRDNDA2RkI2NDA1
NjExRTdBRjA0MUEzNUM0RjlBRTAyL2pjblBKdm5VX2R3UkZGMHp3NzBIbGkxaWU3
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvamNuUEp2blVfZHdSRkYwenc3MEhsaTFpZTdnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEz
QzAyLzRDNDA2RkI2NDA1NjExRTdBRjA0MUEzNUM0RjlBRTAyL2pjblBKdm5VX2R3
UkZGMHp3NzBIbGkxaWU3Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBADBJSehgVqKz5CkusqCQPZ1cjolwrip1e73sxLVIrRmEsRRkeytcIkTY
K8+T2Nb+QaXVKM/DJ8LftOt53POd+/b3l1ZsEUEPK0ofp5yq6Chmuy7z24Akygpz
lQXWHhsF/+gfWwrR3q7gA4BZDs/V7Hi6NztPxoroJVYAkHoFwaMrJgw0bYzdw8SC
IJ95jw/Uq/viGlEVKZr9V86EVULPwZ43Xr1qroSJFVasuWLkte00MMLINjsQgULq
eDSS6Y3G8ZzvC1G0GwAD0FOhdOyMPeBaaxQBYKzq0qfIrFyULA1zZwXAUBifunvD
Vhena8Eq0sxqIiPIkKkOnYD1uJDnDOI=
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:18:10 2025 by rpki-client