Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/JQN3X6w6b0cjTLgypjf8EIKkfEQ.mft
File:                     JQN3X6w6b0cjTLgypjf8EIKkfEQ.mft (raw, json)
Hash identifier:          Cpm/fkgSJf0u/fTD1WGfTAB/XDG3SyArrRbVgFjVDTI=
Subject key identifier:   6D:61:25:A5:47:1B:BB:94:E0:B2:4F:D3:40:47:41:80:99:3C:82:D0
Authority key identifier: 25:03:77:5F:AC:3A:6F:47:23:4C:B8:32:A6:37:FC:10:82:A4:7C:44
Certificate issuer:       /CN=A9128918/serialNumber=2503775FAC3A6F47234CB832A637FC1082A47C44
Certificate serial:       0C79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQN3X6w6b0cjTLgypjf8EIKkfEQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/JQN3X6w6b0cjTLgypjf8EIKkfEQ.mft
Manifest number:          0C62
Signing time:             Fri 31 Jan 2025 18:13:26 +0000
Manifest this update:     Fri 31 Jan 2025 18:13:25 +0000
Manifest next update:     Fri 07 Feb 2025 18:13:25 +0000
Files and hashes:         1: JQN3X6w6b0cjTLgypjf8EIKkfEQ.crl (hash: +j3uYyCskLeHATHgprKxS3womtvrDw4c5G2kePQoF58=)
                          2: DA0A5C9280BE11EB88ED2418C4F9AE02.roa (hash: Jp6mQKHaK0RPPkzdEgb8fiAdpAI92DoBqq2sE6ZQo2g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3193 (0xc79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9128918/serialNumber=2503775FAC3A6F47234CB832A637FC1082A47C44
        Validity
            Not Before: Jan 31 18:13:25 2025 GMT
            Not After : Feb  7 18:13:25 2025 GMT
        Subject: CN=679d12c6-f185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:76:5d:1a:0a:3e:aa:e2:58:b4:4d:3e:b1:f8:
                    47:fc:2c:0a:c1:cb:21:6c:0c:b3:65:59:13:65:fe:
                    5b:b1:8e:96:ae:1f:7f:a2:e9:51:d2:c5:89:ad:84:
                    7f:46:ec:0e:15:7a:77:f4:e2:54:1d:15:14:0d:21:
                    95:c8:55:40:5e:fb:9a:01:e8:20:35:75:66:d1:1a:
                    5e:13:44:b5:8c:2f:49:5a:ae:4e:a4:07:43:aa:91:
                    ae:38:b2:ad:ca:07:da:84:50:97:4d:53:3e:e1:54:
                    2e:0d:e0:30:3d:15:5a:56:f8:34:66:2b:95:6b:54:
                    36:a8:3b:89:bc:4f:80:68:9f:22:95:f7:0b:c3:dc:
                    64:18:c3:b9:ac:02:fa:d4:45:44:f6:dd:83:bb:fe:
                    b6:e0:05:4c:4c:3e:ac:9a:18:0f:8f:78:75:3a:9c:
                    60:95:10:a5:f6:07:01:0f:91:81:dc:ce:89:0d:54:
                    f8:ee:db:f2:90:54:e5:26:6c:76:78:1a:19:3d:2c:
                    ab:c5:37:58:00:73:10:39:17:a5:fb:7f:47:60:09:
                    ab:4c:d9:a7:64:dc:37:34:47:83:cd:7c:b2:b6:dd:
                    ce:73:b5:7e:cb:3f:99:c8:27:44:e2:83:dd:d7:bb:
                    41:e8:0f:42:0f:59:0d:6a:b6:e8:34:70:43:34:4f:
                    24:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:61:25:A5:47:1B:BB:94:E0:B2:4F:D3:40:47:41:80:99:3C:82:D0
            X509v3 Authority Key Identifier:
                keyid:25:03:77:5F:AC:3A:6F:47:23:4C:B8:32:A6:37:FC:10:82:A4:7C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/JQN3X6w6b0cjTLgypjf8EIKkfEQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQN3X6w6b0cjTLgypjf8EIKkfEQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/JQN3X6w6b0cjTLgypjf8EIKkfEQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:f7:b1:e8:21:8c:6d:80:fd:d6:3b:81:2e:20:c1:94:e4:47:
         64:fc:5f:04:0d:d0:9c:0b:2a:8b:7c:c4:19:0c:ef:5c:f9:54:
         ad:f4:2c:2a:7c:04:60:7f:7f:30:96:a3:63:96:dd:6f:75:9e:
         a3:cd:52:26:d4:15:d7:f7:7f:d1:4e:72:60:e7:4f:91:92:07:
         9b:26:28:a8:08:9a:da:79:ad:72:81:0d:b9:cf:6f:65:56:32:
         36:61:b3:f0:85:9f:c1:29:19:08:96:aa:45:dc:a6:ff:6f:da:
         09:be:0c:cf:a8:0a:ae:6f:75:1d:8b:3c:52:75:92:fb:ba:54:
         5d:6e:f2:8f:4d:b1:22:f0:ca:0f:d8:78:a1:e7:8f:21:08:98:
         6a:47:55:0c:8d:45:53:cd:f1:a5:32:d9:e1:a7:fe:d2:e8:98:
         1a:2b:b9:8f:40:9b:e3:12:75:64:53:59:6c:d4:cb:ad:f2:6e:
         01:df:11:21:68:54:fb:10:0b:0c:cb:da:f9:ad:63:e3:d4:88:
         f2:ef:b4:89:6f:52:6c:50:e8:84:0d:c2:d6:85:b3:98:1c:a3:
         57:59:b0:69:54:52:e1:a6:8a:2f:83:eb:14:bd:0e:18:13:40:
         66:a4:b7:e3:12:c8:65:80:29:6b:87:f9:fa:a4:a9:ed:c0:a1:
         98:0f:7a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:22:55 2025 by rpki-client