Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.mft
File:                     JHItMcJRPk5_h-23Df6dyU-EaLo.mft (raw, json)
Hash identifier:          JkR91qu2827sGSNx8rAdUBgKglDO108ihJMhwsANxLQ=
Subject key identifier:   FB:46:36:E1:AF:C3:E7:3F:C3:A8:3F:2E:EC:A2:47:AE:22:62:B6:41
Authority key identifier: 24:72:2D:31:C2:51:3E:4E:7F:87:ED:B7:0D:FE:9D:C9:4F:84:68:BA
Certificate issuer:       /CN=A91186C2/serialNumber=24722D31C2513E4E7F87EDB70DFE9DC94F8468BA
Certificate serial:       0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHItMcJRPk5_h-23Df6dyU-EaLo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.mft
Manifest number:          0B
Signing time:             Fri 31 Jan 2025 07:11:17 +0000
Manifest this update:     Fri 31 Jan 2025 07:11:17 +0000
Manifest next update:     Fri 07 Feb 2025 07:11:17 +0000
Files and hashes:         1: JHItMcJRPk5_h-23Df6dyU-EaLo.crl (hash: twHj1xJ54AUM6z87K4ybjee1iRIHTbTtxvIBEG6GUyg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91186C2/serialNumber=24722D31C2513E4E7F87EDB70DFE9DC94F8468BA
        Validity
            Not Before: Jan 31 07:11:17 2025 GMT
            Not After : Feb  7 07:11:17 2025 GMT
        Subject: CN=679c7795-cdf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0e:34:3d:b4:d5:3c:8c:38:53:ae:24:a9:bf:
                    89:c1:14:60:1b:49:58:68:c9:ed:41:79:c8:f2:a3:
                    8a:06:46:d8:53:62:5a:58:e7:6d:72:be:29:5e:f8:
                    45:8f:de:8e:87:8a:ed:21:f6:12:9d:2d:c4:5f:4f:
                    7b:d1:76:2d:2c:ab:10:e3:b1:44:b8:02:44:90:9b:
                    5d:fb:76:63:90:eb:4a:2a:af:1d:8a:7c:48:3f:b3:
                    f2:ca:53:bf:3f:03:2c:12:0b:07:cf:38:a3:20:8d:
                    87:46:be:16:fc:81:da:c4:35:a4:e4:ac:0f:f8:2d:
                    e2:34:e9:28:d0:73:09:2e:dc:d3:fc:c8:7d:e5:70:
                    09:00:6a:09:bb:b7:9e:dd:af:5c:8e:de:9e:36:3c:
                    53:cd:06:94:41:22:41:ff:bb:04:ad:ad:33:b5:98:
                    2c:d0:19:2f:c3:06:09:88:78:f9:2f:0e:ef:c7:fd:
                    70:2e:79:3f:29:6d:2c:a8:d8:1a:61:94:5a:79:ac:
                    1f:c3:f4:51:05:2e:e3:23:39:2f:2f:1b:be:2a:ce:
                    44:f5:b6:72:41:b9:4a:9d:e3:f9:81:67:d4:13:01:
                    c7:c8:84:51:a0:52:0a:39:4c:b6:33:15:e3:b7:da:
                    53:93:6f:ce:2b:97:d6:ee:54:ec:b0:2d:74:75:93:
                    ac:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:46:36:E1:AF:C3:E7:3F:C3:A8:3F:2E:EC:A2:47:AE:22:62:B6:41
            X509v3 Authority Key Identifier:
                keyid:24:72:2D:31:C2:51:3E:4E:7F:87:ED:B7:0D:FE:9D:C9:4F:84:68:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHItMcJRPk5_h-23Df6dyU-EaLo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:72:69:dd:e7:29:78:c0:54:43:b2:28:14:4d:af:55:2d:fb:
         14:b2:93:1d:f5:ba:52:35:94:c4:f3:a8:60:17:75:05:d8:cd:
         b8:23:f0:23:16:a5:fa:00:00:e3:60:dc:42:06:be:fd:05:43:
         fa:19:9e:29:37:58:b4:73:42:fe:7b:3b:c2:88:71:ce:f9:c5:
         4a:bb:ec:f4:dd:84:3c:b7:91:4c:55:22:9f:3d:a9:9c:e0:48:
         35:98:90:bd:1d:de:21:fa:cb:63:bf:35:c2:8f:b4:ca:fc:ee:
         dc:21:5f:1b:66:f5:b3:18:9d:b4:5e:65:ce:93:61:f0:69:0c:
         23:d5:2f:30:e9:cf:19:ae:69:03:2e:18:eb:f7:ba:f1:aa:08:
         89:1b:8f:88:16:27:38:da:f0:78:ea:da:5b:54:eb:c3:85:92:
         d4:8d:94:f5:26:81:46:12:20:fc:ca:12:34:b0:6b:bd:46:94:
         56:68:63:02:e6:61:04:1e:72:1b:d6:fc:0b:c0:31:58:d7:37:
         aa:d7:79:3a:44:fe:3d:04:5c:a8:2b:cc:f9:a8:b6:73:46:f5:
         ea:0b:a4:00:87:4b:83:2f:97:d1:37:4e:bd:e5:39:77:cf:e1:
         cf:31:d8:99:27:ab:5d:52:69:75:6c:dd:8f:9e:41:3b:73:e4:
         0b:74:98:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:38:43 2025 by rpki-client