Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.mft
File:                     JhOQ197eXRxAsfPigPOKCNqv3N4.mft (raw, json)
Hash identifier:          0whSu15YrxXShw6e79WSU+VehCYzr9p42ykz2Vc8CwE=
Subject key identifier:   3D:99:3A:A8:BF:50:14:2C:54:D5:F2:F5:AE:F0:20:94:40:3D:B5:D0
Authority key identifier: 26:13:90:D7:DE:DE:5D:1C:40:B1:F3:E2:80:F3:8A:08:DA:AF:DC:DE
Certificate issuer:       /CN=A912E367/serialNumber=261390D7DEDE5D1C40B1F3E280F38A08DAAFDCDE
Certificate serial:       0172
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhOQ197eXRxAsfPigPOKCNqv3N4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.mft
Manifest number:          016F
Signing time:             Fri 31 Jan 2025 03:05:40 +0000
Manifest this update:     Fri 31 Jan 2025 03:05:39 +0000
Manifest next update:     Fri 07 Feb 2025 03:05:39 +0000
Files and hashes:         1: JhOQ197eXRxAsfPigPOKCNqv3N4.crl (hash: 60wh3MwOLmkhkmg+8nx/jI8L34YUnnfJdLqhN31BH1Q=)
                          2: 738195EEB11811ED997EA457C4F9AE02.roa (hash: Y3uWvVWc5h8AjMOh0rbq998afPQd3Tj5ztFh5AezKOE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 370 (0x172)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E367/serialNumber=261390D7DEDE5D1C40B1F3E280F38A08DAAFDCDE
        Validity
            Not Before: Jan 31 03:05:39 2025 GMT
            Not After : Feb  7 03:05:39 2025 GMT
        Subject: CN=679c3e04-2044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c0:e6:98:fe:96:45:f5:d8:c6:55:fb:df:b2:
                    de:a8:fc:eb:25:08:15:6e:c2:df:5f:63:70:91:7e:
                    4d:9d:ba:76:79:9b:01:bd:f6:40:c0:47:a4:51:44:
                    51:fc:2a:8c:89:ea:ba:e7:13:c6:32:08:ce:4e:47:
                    9e:ee:70:6b:d3:92:26:57:22:87:82:90:77:b9:09:
                    a9:31:f6:7d:f7:64:33:f9:3f:f3:73:e3:f7:9e:c6:
                    65:5b:07:63:90:99:e7:59:e0:0e:eb:55:51:e3:bd:
                    3d:9b:04:c3:b6:8e:2b:8e:53:a7:54:e3:5a:e2:33:
                    6e:fa:40:fe:f0:05:5d:ea:9e:18:1c:6e:8e:b4:ca:
                    c4:e7:5d:23:0f:e2:86:6a:71:79:e2:53:78:50:9c:
                    46:49:e6:21:64:89:2f:78:10:b3:26:77:a4:56:61:
                    9c:90:f0:9a:72:86:15:fe:af:5c:a3:a4:72:2a:49:
                    6c:bb:91:09:43:3f:af:aa:b9:8b:1f:b5:b1:a7:e6:
                    df:ce:04:60:21:4a:64:bf:f5:5d:24:f8:e5:3d:e7:
                    a4:4d:64:56:18:4e:e5:96:30:b6:d9:53:f6:f4:e2:
                    e4:1b:4e:b7:7c:d1:77:30:b1:6c:13:1e:c8:c1:27:
                    09:0b:5f:9b:54:7c:a9:be:e2:6c:fb:7e:ef:95:aa:
                    0f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:99:3A:A8:BF:50:14:2C:54:D5:F2:F5:AE:F0:20:94:40:3D:B5:D0
            X509v3 Authority Key Identifier:
                keyid:26:13:90:D7:DE:DE:5D:1C:40:B1:F3:E2:80:F3:8A:08:DA:AF:DC:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhOQ197eXRxAsfPigPOKCNqv3N4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:8c:99:f1:6f:a2:d1:52:92:36:a8:7f:f3:00:d2:5f:0b:1f:
         8f:24:06:3c:d7:59:ad:6f:cc:63:59:90:8e:dc:d4:a7:58:6e:
         e0:e1:fb:4e:6b:5f:65:5b:55:73:80:d3:56:0c:db:f8:1c:67:
         84:f1:97:66:81:87:20:ca:a3:ed:fa:dd:76:ae:75:6f:6c:c0:
         8f:0f:b0:f0:f0:d4:46:d6:f7:8f:71:84:dc:cf:3c:4d:5b:b1:
         db:de:7d:65:cf:26:41:85:74:f3:bd:48:36:aa:b5:bf:7e:52:
         8c:46:b1:09:26:57:73:2b:ca:cf:b5:c0:39:cc:a1:ed:97:14:
         30:53:6d:68:0d:61:be:a9:4b:ac:ad:e2:da:86:02:31:5a:35:
         ff:81:c8:76:8d:fd:45:73:18:6b:58:b2:eb:ec:ba:93:7a:4a:
         c3:17:62:36:3a:64:da:4e:c7:86:b7:bf:5e:b7:af:18:7e:57:
         c1:7b:76:9c:8c:19:b2:bc:f2:e6:27:d1:c9:53:cf:e9:3e:d3:
         ce:e6:14:06:0e:da:ea:c7:61:e4:ea:e9:c3:b6:95:ec:d2:20:
         cb:17:d5:85:06:b0:af:9d:13:1a:94:77:6e:e3:43:53:fa:37:
         37:4d:62:3b:f3:4a:dc:11:35:4e:cf:62:40:29:a3:ff:6b:50:
         b3:59:5e:32
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkUzNjcxMTAvBgNVBAUTKDI2MTM5MEQ3REVERTVEMUM0MEIxRjNFMjgwRjM4QTA4
REFBRkRDREUwHhcNMjUwMTMxMDMwNTM5WhcNMjUwMjA3MDMwNTM5WjAYMRYwFAYD
VQQDEw02NzljM2UwNC0yMDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAosDmmP6WRfXYxlX737LeqPzrJQgVbsLfX2NwkX5Nnbp2eZsBvfZAwEekUURR
/CqMieq65xPGMgjOTkee7nBr05ImVyKHgpB3uQmpMfZ992Qz+T/zc+P3nsZlWwdj
kJnnWeAO61VR4709mwTDto4rjlOnVONa4jNu+kD+8AVd6p4YHG6OtMrE510jD+KG
anF54lN4UJxGSeYhZIkveBCzJnekVmGckPCacoYV/q9co6RyKklsu5EJQz+vqrmL
H7Wxp+bfzgRgIUpkv/VdJPjlPeekTWRWGE7lljC22VP29OLkG063fNF3MLFsEx7I
wScJC1+bVHypvuJs+37vlaoPgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD2ZOqi/
UBQsVNXy9a7wIJRAPbXQMB8GA1UdIwQYMBaAFCYTkNfe3l0cQLHz4oDzigjar9ze
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTM2Ny82QkNFQ0UwQUFE
RjAxMUVEOTVEMkI5NzhDNEY5QUUwMi9KaE9RMTk3ZVhSeEFzZlBpZ1BPS0NOcXYz
TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0poT1ExOTdlWFJ4QXNmUGlnUE9LQ05xdjNONC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RTM2Ny82QkNFQ0UwQUFERjAxMUVEOTVEMkI5NzhDNEY5QUUwMi9KaE9RMTk3ZVhS
eEFzZlBpZ1BPS0NOcXYzTjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA9jJnxb6LRUpI2qH/zANJfCx+PJAY811mtb8xjWZCO3NSnWG7g4ftO
a19lW1VzgNNWDNv4HGeE8ZdmgYcgyqPt+t12rnVvbMCPD7Dw8NRG1vePcYTczzxN
W7Hb3n1lzyZBhXTzvUg2qrW/flKMRrEJJldzK8rPtcA5zKHtlxQwU21oDWG+qUus
reLahgIxWjX/gch2jf1FcxhrWLLr7LqTekrDF2I2OmTaTseGt79et68YflfBe3ac
jBmyvPLmJ9HJU8/pPtPO5hQGDtrqx2Hk6unDtpXs0iDLF9WFBrCvnRMalHdu40NT
+jc3TWI780rcETVOz2JAKaP/a1CzWV4y
-----END CERTIFICATE-----