Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.mft
File:                     JPDB2OP0opb9zesjWmxIO2styXo.mft (raw, json)
Hash identifier:          pwt6r1YPhOnqcwU9k7R01Yvrh11R5H042H+M1DlYsgI=
Subject key identifier:   F3:57:64:DC:0E:FE:14:D0:7E:DA:85:20:CC:91:83:95:F1:D6:97:33
Authority key identifier: 24:F0:C1:D8:E3:F4:A2:96:FD:CD:EB:23:5A:6C:48:3B:6B:2D:C9:7A
Certificate issuer:       /CN=A911BC62/serialNumber=24F0C1D8E3F4A296FDCDEB235A6C483B6B2DC97A
Certificate serial:       27B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPDB2OP0opb9zesjWmxIO2styXo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.mft
Manifest number:          2797
Signing time:             Fri 31 Jan 2025 15:39:27 +0000
Manifest this update:     Fri 31 Jan 2025 15:39:27 +0000
Manifest next update:     Fri 07 Feb 2025 15:39:27 +0000
Files and hashes:         1: JPDB2OP0opb9zesjWmxIO2styXo.crl (hash: 2X9MBTYwA75fLAPSi8k9iCWrlylLJWjRtAi0tLlsZNk=)
                          2: 8BD42F1CDEB111EA971A1721C4F9AE02.roa (hash: zYzRPHKgSeX768eROJRNf9tX7Mow08v94Ny1/BRKK1Q=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10164 (0x27b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BC62/serialNumber=24F0C1D8E3F4A296FDCDEB235A6C483B6B2DC97A
        Validity
            Not Before: Jan 31 15:39:27 2025 GMT
            Not After : Feb  7 15:39:27 2025 GMT
        Subject: CN=679ceeaf-ba05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d6:01:87:16:da:ff:6a:ed:e0:b3:2d:d5:9d:
                    57:59:b2:78:26:20:b5:16:2a:0e:70:a7:5f:eb:7a:
                    a1:21:38:7c:e0:05:d2:4a:be:8a:23:7a:0d:e8:5a:
                    1b:32:b9:2c:a3:57:f0:c3:b8:9f:43:b1:1b:0e:2c:
                    bc:57:1d:27:62:c9:60:2e:91:f1:be:90:1c:3e:b9:
                    62:f0:86:00:56:10:d9:3a:26:d9:e3:7e:b0:12:68:
                    c0:d8:79:aa:11:d3:f7:3b:3c:b2:b6:db:b0:12:bc:
                    74:bb:a7:ee:9d:d5:a3:2a:7b:b0:a3:08:e8:34:e1:
                    c5:e0:b2:6d:7c:b6:4b:49:37:47:c5:13:a5:bf:b8:
                    c8:2e:dc:76:c5:10:8f:11:2d:9c:d4:2d:1f:f1:d1:
                    0d:96:c8:34:cd:1b:96:77:73:da:af:ca:12:f6:ca:
                    a0:66:c3:4a:4c:7d:e2:50:57:90:f1:41:a2:6f:d8:
                    92:8c:f4:cb:21:a6:4d:6a:ef:8e:77:fb:ff:f4:25:
                    46:cd:bd:f6:63:a1:7a:e4:af:89:e8:c1:1b:15:b5:
                    56:36:1c:dd:db:82:19:71:42:4a:d4:58:a2:c1:c0:
                    05:b7:a3:c4:9e:eb:f1:a6:5f:59:56:8f:1b:f3:ab:
                    c8:a6:19:56:5b:d6:5f:76:f5:36:54:7e:32:0f:a1:
                    fa:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:57:64:DC:0E:FE:14:D0:7E:DA:85:20:CC:91:83:95:F1:D6:97:33
            X509v3 Authority Key Identifier:
                keyid:24:F0:C1:D8:E3:F4:A2:96:FD:CD:EB:23:5A:6C:48:3B:6B:2D:C9:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPDB2OP0opb9zesjWmxIO2styXo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:7a:c7:c3:7b:3f:e6:8f:66:16:2a:aa:f3:a7:42:3c:f2:f3:
         59:28:a4:32:bc:66:14:21:6b:da:7c:10:35:ea:2d:cd:9c:22:
         4a:30:eb:90:ea:5e:85:91:ec:c9:7c:fa:0b:01:c3:09:22:fd:
         e9:b2:d1:4d:0e:93:09:d3:26:c2:26:9b:be:ea:a6:51:d4:74:
         bc:f2:a4:c6:fb:84:8f:17:d5:7b:65:4c:8b:e7:4a:09:bb:6e:
         b7:06:51:5b:f8:47:05:38:7d:cc:11:c3:76:a3:83:8b:9c:ab:
         a0:6c:1a:4f:b0:41:58:f9:1d:24:68:5a:bc:1f:2e:7f:ac:2f:
         d4:8d:4b:c2:a6:61:9b:35:f5:f7:03:df:5d:70:a3:94:c5:01:
         71:f9:1f:c7:72:e8:7d:8a:5a:d1:5b:82:4a:69:c6:39:e5:c0:
         a7:a2:71:d2:af:3d:0a:7c:b3:27:6c:44:b6:ea:0c:94:7b:7a:
         88:a9:8a:d7:57:de:5c:df:45:5d:da:20:21:fc:69:97:35:b1:
         f5:07:4a:c6:eb:24:70:96:c1:69:a7:af:85:78:b8:f4:ee:08:
         13:6c:49:78:ab:df:d9:35:8f:71:a7:72:c8:1f:ba:7d:dd:33:
         8a:5c:f8:ce:90:c8:40:22:f8:d6:b3:71:7b:22:60:08:1f:fa:
         19:9d:ae:14
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICJ7QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUJDNjIxMTAvBgNVBAUTKDI0RjBDMUQ4RTNGNEEyOTZGRENERUIyMzVBNkM0ODNC
NkIyREM5N0EwHhcNMjUwMTMxMTUzOTI3WhcNMjUwMjA3MTUzOTI3WjAYMRYwFAYD
VQQDEw02NzljZWVhZi1iYTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx9YBhxba/2rt4LMt1Z1XWbJ4JiC1FioOcKdf63qhITh84AXSSr6KI3oN6Fob
Mrkso1fww7ifQ7EbDiy8Vx0nYslgLpHxvpAcPrli8IYAVhDZOibZ436wEmjA2Hmq
EdP3OzyyttuwErx0u6fundWjKnuwowjoNOHF4LJtfLZLSTdHxROlv7jILtx2xRCP
ES2c1C0f8dENlsg0zRuWd3Par8oS9sqgZsNKTH3iUFeQ8UGib9iSjPTLIaZNau+O
d/v/9CVGzb32Y6F65K+J6MEbFbVWNhzd24IZcUJK1FiiwcAFt6PEnuvxpl9ZVo8b
86vIphlWW9ZfdvU2VH4yD6H6zQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPNXZNwO
/hTQftqFIMyRg5Xx1pczMB8GA1UdIwQYMBaAFCTwwdjj9KKW/c3rI1psSDtrLcl6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkM2Mi8zMjg4QzMxMkEy
RTYxMUU0QTA4MUM0NkRDNEY5QUUwMi9KUERCMk9QMG9wYjl6ZXNqV214SU8yc3R5
WG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pQREIyT1Awb3BiOXplc2pXbXhJTzJzdHlYby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QkM2Mi8zMjg4QzMxMkEyRTYxMUU0QTA4MUM0NkRDNEY5QUUwMi9KUERCMk9QMG9w
Yjl6ZXNqV214SU8yc3R5WG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCSesfDez/mj2YWKqrzp0I88vNZKKQyvGYUIWvafBA16i3NnCJKMOuQ
6l6FkezJfPoLAcMJIv3pstFNDpMJ0ybCJpu+6qZR1HS88qTG+4SPF9V7ZUyL50oJ
u263BlFb+EcFOH3MEcN2o4OLnKugbBpPsEFY+R0kaFq8Hy5/rC/UjUvCpmGbNfX3
A99dcKOUxQFx+R/Hcuh9ilrRW4JKacY55cCnonHSrz0KfLMnbES26gyUe3qIqYrX
V95c30Vd2iAh/GmXNbH1B0rG6yRwlsFpp6+FeLj07ggTbEl4q9/ZNY9xp3LIH7p9
3TOKXPjOkMhAIvjWs3F7ImAIH/oZna4U
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:08:23 2025 by rpki-client