Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.mft
File:                     js-frkP30c1uEgKDTA9BrMG-HDg.mft (raw, json)
Hash identifier:          LUfaNSsRwRPQ3eIIjh9mwwWCxsIQgFdcxDERkBJSFvg=
Subject key identifier:   AE:88:61:89:F2:3A:B9:88:20:6A:FD:95:FC:B3:CF:B8:8A:88:A0:CA
Authority key identifier: 8E:CF:9F:AE:43:F7:D1:CD:6E:12:02:83:4C:0F:41:AC:C1:BE:1C:38
Certificate issuer:       /CN=A9136592/serialNumber=8ECF9FAE43F7D1CD6E1202834C0F41ACC1BE1C38
Certificate serial:       0274
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/js-frkP30c1uEgKDTA9BrMG-HDg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.mft
Manifest number:          0267
Signing time:             Fri 31 Jan 2025 01:48:05 +0000
Manifest this update:     Fri 31 Jan 2025 01:48:05 +0000
Manifest next update:     Fri 07 Feb 2025 01:48:05 +0000
Files and hashes:         1: js-frkP30c1uEgKDTA9BrMG-HDg.crl (hash: 8PcvL/JZQYI4nEgL4KVlLOHtEXN0Q9TNQ1Id6S7+c/M=)
                          2: 30FD2F34717711ED807F3C30C4F9AE02.roa (hash: zUVl5DeV2betZU5hQ4iQSvT6ZzKQrdzXjnE3qS2LJSk=)
                          3: 31A9E86E717711ED807F3C30C4F9AE02.roa (hash: I6dVpGCM55P59sT81mzHGHdXEzFaqKidoCFix5oxTTs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 628 (0x274)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136592/serialNumber=8ECF9FAE43F7D1CD6E1202834C0F41ACC1BE1C38
        Validity
            Not Before: Jan 31 01:48:05 2025 GMT
            Not After : Feb  7 01:48:05 2025 GMT
        Subject: CN=679c2bd5-ae21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:88:1e:a8:24:c9:1b:7a:5b:b3:c1:5a:3e:43:
                    5c:64:7c:a8:df:b6:b7:e6:89:ef:fa:fd:e9:4e:49:
                    f3:6f:2b:f5:c3:38:b1:c1:ea:1d:30:27:c6:ce:c6:
                    88:64:d6:23:fe:8d:6f:b6:87:3d:41:3e:01:e0:d7:
                    e5:09:46:da:88:61:6e:db:59:71:b2:ea:d5:b9:88:
                    47:d1:72:14:a6:20:53:c2:83:3d:9e:5a:65:cc:f6:
                    bb:80:f6:a6:19:ab:3c:98:6c:ad:40:03:b8:4e:51:
                    53:b4:a0:3e:ef:eb:fe:57:ba:27:2f:f9:0f:13:68:
                    96:49:58:c2:29:ef:5a:0f:df:e9:5c:8b:93:4e:e8:
                    8c:02:04:53:0e:f7:b3:9d:c3:8c:39:c7:e5:72:64:
                    84:89:0a:5d:e8:5b:0b:b8:a2:67:5a:7e:67:ea:41:
                    b4:2e:e3:ee:46:84:0e:40:78:b8:bf:79:5c:e8:3e:
                    39:8e:48:b7:f9:c6:91:63:e7:81:fe:30:a5:f7:9f:
                    8e:fa:b5:98:42:99:78:a4:e8:7e:d6:cf:25:bc:ef:
                    b0:fc:bf:df:5f:d1:23:5d:db:15:0d:94:9c:29:fd:
                    3c:e4:14:29:d1:02:56:f2:2f:68:ca:07:97:47:0f:
                    81:b0:0e:8d:a8:55:8c:77:97:7e:b0:05:63:8a:01:
                    2e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:88:61:89:F2:3A:B9:88:20:6A:FD:95:FC:B3:CF:B8:8A:88:A0:CA
            X509v3 Authority Key Identifier:
                keyid:8E:CF:9F:AE:43:F7:D1:CD:6E:12:02:83:4C:0F:41:AC:C1:BE:1C:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/js-frkP30c1uEgKDTA9BrMG-HDg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:af:f2:65:71:a1:99:e9:73:88:f0:0b:1e:0e:bd:ac:8c:64:
         9e:81:3d:3d:0c:bb:1a:5f:73:c8:56:f9:ce:94:0e:80:16:f5:
         5f:52:93:cb:3b:1e:bd:bc:3e:a0:69:8f:ef:6f:0c:0b:9d:96:
         ea:e9:1a:7e:6b:03:9c:46:f0:d4:e2:f3:fa:f7:d6:e3:b6:eb:
         33:98:90:9f:70:8b:8f:db:38:e6:9e:50:27:85:b1:8c:35:d7:
         b9:08:85:c5:c5:8a:50:15:c4:f6:ea:cf:08:82:3b:1b:4c:0e:
         f0:5d:a3:97:e9:aa:9e:84:fe:4d:a0:0e:d0:e9:07:8f:3f:43:
         5e:22:93:bc:51:b4:cb:c9:a9:b9:aa:25:92:3d:bf:db:06:ca:
         8c:8c:68:53:bf:1c:a1:25:4c:4d:ec:76:ce:ff:fe:02:5e:30:
         d1:88:d5:ac:66:5f:09:55:02:ce:da:2f:75:f7:fc:a8:b8:76:
         c5:2f:2c:d8:61:58:47:7d:c9:73:92:92:4f:97:73:60:00:8f:
         61:ba:b3:6d:3a:06:93:b9:f6:4a:32:b9:31:be:b8:23:90:bb:
         46:25:ee:ff:a2:f8:55:04:35:c6:0b:23:4e:57:34:bc:f1:3f:
         84:2e:a2:75:4b:73:e7:6f:4d:8a:6f:1c:74:13:87:89:9e:99:
         fc:2a:11:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:52:10 2025 by rpki-client