Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft
File:                     J-OLvrji2ycfz6F8E0feawaDRGA.mft (raw, json)
Hash identifier:          +wNCFjzGDSszfQI5qGovkyOuP/ByE4ZUfhoWYgwrUjw=
Subject key identifier:   73:17:B9:0D:59:23:43:A6:0D:D4:91:03:72:C5:C7:3B:D1:AF:6F:FA
Authority key identifier: 27:E3:8B:BE:B8:E2:DB:27:1F:CF:A1:7C:13:47:DE:6B:06:83:44:60
Certificate issuer:       /CN=A9151E54/serialNumber=27E38BBEB8E2DB271FCFA17C1347DE6B06834460
Certificate serial:       0507
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-OLvrji2ycfz6F8E0feawaDRGA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft
Manifest number:          0503
Signing time:             Thu 30 Jan 2025 23:39:49 +0000
Manifest this update:     Thu 30 Jan 2025 23:39:49 +0000
Manifest next update:     Thu 06 Feb 2025 23:39:49 +0000
Files and hashes:         1: J-OLvrji2ycfz6F8E0feawaDRGA.crl (hash: MhItR9md5/iID6bJFO3dj8gLbkDitIkfErLiAHaoH3o=)
                          2: 7D20FF46F3E511EBB8BBF720C4F9AE02.roa (hash: znarIi95IxbY5QtfZt5UpV1pUKWZGLwbMyxU7w7HIcg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1287 (0x507)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151E54/serialNumber=27E38BBEB8E2DB271FCFA17C1347DE6B06834460
        Validity
            Not Before: Jan 30 23:39:49 2025 GMT
            Not After : Feb  6 23:39:49 2025 GMT
        Subject: CN=679c0dc5-6489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:be:82:d3:22:d6:4a:f1:d5:1e:29:22:b4:f2:
                    ae:3e:22:78:e6:c6:a7:5a:0a:f5:64:c1:1c:bc:a1:
                    c2:c3:8c:82:2f:0c:72:9f:61:d0:6a:c5:2b:13:c0:
                    d5:db:21:36:b8:f7:b4:e9:4e:07:1d:ab:ae:fc:0a:
                    3a:00:96:f7:c9:90:30:c6:d2:f3:a6:68:46:5b:56:
                    44:f8:ec:e0:1f:53:4a:a2:d0:7e:87:e4:a9:e1:ad:
                    39:fc:78:7a:08:f3:7a:81:96:21:14:13:94:0e:88:
                    94:fe:5c:97:77:ce:9d:62:32:3f:ca:81:4b:63:f1:
                    98:5a:f3:a4:0d:77:95:36:59:c2:57:59:eb:1c:ff:
                    a3:3b:b5:a2:03:45:23:5a:c9:40:56:a2:dd:7e:70:
                    ba:86:d6:a3:7a:80:d6:91:ec:ea:ce:28:65:f0:c2:
                    62:5c:15:7c:c1:cd:7b:e6:59:73:22:7d:01:14:03:
                    9d:05:9b:ee:e6:aa:df:7b:17:1e:ef:77:8f:96:ba:
                    1d:fd:14:da:c0:30:c2:48:f7:07:f2:76:27:ee:33:
                    2c:81:b8:2e:11:29:46:88:71:e4:18:59:48:16:69:
                    aa:7e:1b:95:65:50:6a:87:1e:0b:43:b4:7b:6c:6a:
                    c5:4d:33:ac:1b:d4:74:7a:82:ee:db:f0:fa:27:d6:
                    23:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:17:B9:0D:59:23:43:A6:0D:D4:91:03:72:C5:C7:3B:D1:AF:6F:FA
            X509v3 Authority Key Identifier:
                keyid:27:E3:8B:BE:B8:E2:DB:27:1F:CF:A1:7C:13:47:DE:6B:06:83:44:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-OLvrji2ycfz6F8E0feawaDRGA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:47:1d:51:cc:2e:3d:e8:89:4c:21:ce:9d:a6:e4:af:55:e4:
         9b:63:b9:b9:ff:32:6c:fa:3f:57:c5:9d:90:d3:e0:b4:11:5b:
         37:a1:a6:1a:65:4f:ee:24:ec:4f:37:75:d3:c2:b9:da:c7:54:
         93:b2:83:07:d5:f2:97:73:4c:b9:c5:ac:47:9f:0d:3f:dd:2e:
         06:ca:82:90:da:6f:59:85:16:8f:eb:7a:a4:42:00:cb:0f:80:
         07:4f:60:8f:e2:19:6c:7d:af:51:76:c2:46:7d:ed:a8:22:3c:
         34:52:51:4d:e0:70:23:03:75:99:8f:c8:da:50:df:1e:dd:5e:
         56:4d:c2:39:b8:59:80:1f:94:6f:77:d6:44:92:71:e0:ba:fe:
         86:a0:58:19:5a:49:00:ac:88:84:ff:b2:44:89:51:82:3d:07:
         af:5b:e4:5b:5d:af:9f:ab:ab:08:4f:77:b3:7d:3a:8f:01:13:
         7a:51:ad:2c:32:85:21:37:69:d3:df:32:c7:b1:84:cc:85:16:
         6e:7a:c9:28:2b:9d:0e:73:87:cb:f8:ed:a9:0d:ad:f9:44:de:
         70:0a:ea:c0:6b:b4:1b:ce:2d:c8:55:4f:80:f3:a5:26:9a:a6:
         fc:77:73:89:58:7c:64:d4:a5:db:0d:46:2e:10:be:5f:13:74:
         f0:53:bd:38
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTFFNTQxMTAvBgNVBAUTKDI3RTM4QkJFQjhFMkRCMjcxRkNGQTE3QzEzNDdERTZC
MDY4MzQ0NjAwHhcNMjUwMTMwMjMzOTQ5WhcNMjUwMjA2MjMzOTQ5WjAYMRYwFAYD
VQQDEw02NzljMGRjNS02NDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzr6C0yLWSvHVHikitPKuPiJ45sanWgr1ZMEcvKHCw4yCLwxyn2HQasUrE8DV
2yE2uPe06U4HHauu/Ao6AJb3yZAwxtLzpmhGW1ZE+OzgH1NKotB+h+Sp4a05/Hh6
CPN6gZYhFBOUDoiU/lyXd86dYjI/yoFLY/GYWvOkDXeVNlnCV1nrHP+jO7WiA0Uj
WslAVqLdfnC6htajeoDWkezqzihl8MJiXBV8wc175llzIn0BFAOdBZvu5qrfexce
73ePlrod/RTawDDCSPcH8nYn7jMsgbguESlGiHHkGFlIFmmqfhuVZVBqhx4LQ7R7
bGrFTTOsG9R0eoLu2/D6J9YjuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHMXuQ1Z
I0OmDdSRA3LFxzvRr2/6MB8GA1UdIwQYMBaAFCfji7644tsnH8+hfBNH3msGg0Rg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MUU1NC9BRkQxN0EzNkYz
RTIxMUVCQUFDRUE3MURDNEY5QUUwMi9KLU9MdnJqaTJ5Y2Z6NkY4RTBmZWF3YURS
R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0otT0x2cmppMnljZno2RjhFMGZlYXdhRFJHQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MUU1NC9BRkQxN0EzNkYzRTIxMUVCQUFDRUE3MURDNEY5QUUwMi9KLU9MdnJqaTJ5
Y2Z6NkY4RTBmZWF3YURSR0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCCRx1RzC496IlMIc6dpuSvVeSbY7m5/zJs+j9XxZ2Q0+C0EVs3oaYa
ZU/uJOxPN3XTwrnax1STsoMH1fKXc0y5xaxHnw0/3S4GyoKQ2m9ZhRaP63qkQgDL
D4AHT2CP4hlsfa9RdsJGfe2oIjw0UlFN4HAjA3WZj8jaUN8e3V5WTcI5uFmAH5Rv
d9ZEknHguv6GoFgZWkkArIiE/7JEiVGCPQevW+RbXa+fq6sIT3ezfTqPARN6Ua0s
MoUhN2nT3zLHsYTMhRZueskoK50Oc4fL+O2pDa35RN5wCurAa7Qbzi3IVU+A86Um
mqb8d3OJWHxk1KXbDUYuEL5fE3TwU704
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:25:15 2025 by rpki-client