Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft
File:                     JxcwkTdorwE4ujkDJNqUMcQJukQ.mft (raw, json)
Hash identifier:          80kNzle6SU6KQt79MVimTXFO17Oyr1IN9fF4TqzLmnQ=
Subject key identifier:   0A:12:6D:34:E1:29:9E:9F:CC:11:55:7D:38:05:02:A2:C6:4B:B5:93
Authority key identifier: 27:17:30:91:37:68:AF:01:38:BA:39:03:24:DA:94:31:C4:09:BA:44
Certificate issuer:       /CN=A916091A/serialNumber=271730913768AF0138BA390324DA9431C409BA44
Certificate serial:       01A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JxcwkTdorwE4ujkDJNqUMcQJukQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft
Manifest number:          019D
Signing time:             Fri 31 Jan 2025 02:35:58 +0000
Manifest this update:     Fri 31 Jan 2025 02:35:58 +0000
Manifest next update:     Fri 07 Feb 2025 02:35:58 +0000
Files and hashes:         1: JxcwkTdorwE4ujkDJNqUMcQJukQ.crl (hash: g8U48Jafwuc1ZsO466HQoYWtAje5OZWyR6ZJ8ZXuZbU=)
                          2: 7FFCAA30667111EDB5CCA77DC4F9AE02.roa (hash: HdPmwaawT5O+7w2o5NE/TwveYFSujOehIUM1n6BW8zs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 416 (0x1a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916091A/serialNumber=271730913768AF0138BA390324DA9431C409BA44
        Validity
            Not Before: Jan 31 02:35:58 2025 GMT
            Not After : Feb  7 02:35:58 2025 GMT
        Subject: CN=679c370e-e116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ea:fe:54:13:32:5b:cf:13:62:3b:5c:74:c3:
                    fd:97:1f:09:ed:9d:06:a5:56:17:dc:f3:59:d6:0c:
                    c4:64:83:49:fe:31:bd:ba:2a:77:48:d9:a9:4d:f0:
                    47:c5:e9:94:32:06:df:73:e1:a7:52:ab:b3:6b:ea:
                    c8:9a:bc:9e:2c:1b:f2:b5:1f:21:d6:ce:24:0b:6e:
                    ee:a8:b6:b1:b0:c2:8a:d9:08:6a:d1:80:14:74:d9:
                    96:90:37:e9:a5:9d:47:ea:06:d0:af:c1:af:5f:1f:
                    2d:6f:bb:69:89:b1:09:0d:ac:4c:1b:3d:dd:f1:db:
                    ec:45:90:31:64:75:a2:d5:3e:08:80:08:6f:46:ad:
                    e6:95:ea:ef:67:9b:66:5e:e7:50:27:a4:7c:d7:59:
                    00:b6:20:9b:fc:96:f2:13:5d:78:37:dc:53:b6:89:
                    25:a4:cd:78:77:0e:66:04:4a:bb:8a:98:cd:2a:ff:
                    70:4a:d0:a8:bb:c4:52:67:19:12:d5:b0:34:85:45:
                    6c:06:55:95:cd:fe:19:c3:ea:31:42:f0:94:6d:e8:
                    a1:48:56:fa:01:32:3e:cd:fb:b3:4d:20:b2:98:d0:
                    84:f7:2e:a2:63:bb:54:dc:76:8f:b4:e9:c8:b6:bb:
                    2d:9b:b8:c5:ac:7c:21:32:a2:9c:2f:f6:f2:e0:61:
                    8f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:12:6D:34:E1:29:9E:9F:CC:11:55:7D:38:05:02:A2:C6:4B:B5:93
            X509v3 Authority Key Identifier:
                keyid:27:17:30:91:37:68:AF:01:38:BA:39:03:24:DA:94:31:C4:09:BA:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JxcwkTdorwE4ujkDJNqUMcQJukQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:70:ba:76:86:05:e6:4c:5b:74:71:7d:45:03:a8:80:59:18:
         b4:c0:47:45:ce:1c:3f:58:f0:80:c4:be:f3:6f:a3:2c:45:0c:
         d5:91:ca:f4:b9:ab:c5:35:ff:10:ae:44:0b:f2:0d:96:62:b2:
         e9:00:ff:cb:8c:d8:3f:e4:7f:27:51:7b:6a:56:e4:cf:c7:ac:
         a3:42:3c:6a:68:f9:9c:9d:69:fe:2e:f1:d4:ad:9f:9f:d6:05:
         a7:7f:59:62:a4:f8:f9:03:34:ce:49:44:f0:41:bc:e4:5c:34:
         4a:84:a1:e6:cf:40:e8:08:7d:44:9f:bb:a9:06:bc:61:2a:48:
         57:a6:c6:80:80:0f:a1:9e:00:d9:da:50:a0:92:05:7a:d9:66:
         2e:a6:af:6b:e8:90:b9:4b:86:1c:1b:78:b7:88:9f:dd:d8:0e:
         54:21:c0:85:ff:16:aa:ba:09:ed:38:b5:68:bb:0b:80:a3:aa:
         d9:eb:20:b2:24:83:8c:96:58:1f:d6:04:b6:15:6e:d9:39:c3:
         20:6c:82:80:1f:96:22:27:b8:06:03:50:a8:0f:6c:d6:10:47:
         31:d7:d1:54:cd:4e:b6:7c:1a:74:12:e3:8e:3d:fe:d3:a1:11:
         aa:f4:90:e4:3d:6e:a0:46:52:20:8c:7c:f1:9c:ab:ed:e8:e0:
         21:3e:31:4b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjA5MUExMTAvBgNVBAUTKDI3MTczMDkxMzc2OEFGMDEzOEJBMzkwMzI0REE5NDMx
QzQwOUJBNDQwHhcNMjUwMTMxMDIzNTU4WhcNMjUwMjA3MDIzNTU4WjAYMRYwFAYD
VQQDEw02NzljMzcwZS1lMTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz+r+VBMyW88TYjtcdMP9lx8J7Z0GpVYX3PNZ1gzEZINJ/jG9uip3SNmpTfBH
xemUMgbfc+GnUquza+rImryeLBvytR8h1s4kC27uqLaxsMKK2Qhq0YAUdNmWkDfp
pZ1H6gbQr8GvXx8tb7tpibEJDaxMGz3d8dvsRZAxZHWi1T4IgAhvRq3mlervZ5tm
XudQJ6R811kAtiCb/JbyE114N9xTtoklpM14dw5mBEq7ipjNKv9wStCou8RSZxkS
1bA0hUVsBlWVzf4Zw+oxQvCUbeihSFb6ATI+zfuzTSCymNCE9y6iY7tU3HaPtOnI
trstm7jFrHwhMqKcL/by4GGPYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAoSbTTh
KZ6fzBFVfTgFAqLGS7WTMB8GA1UdIwQYMBaAFCcXMJE3aK8BOLo5AyTalDHECbpE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDkxQS80MjA0MDU3RTY2
NkQxMUVEQjU1NjU3NzdDNEY5QUUwMi9KeGN3a1Rkb3J3RTR1amtESk5xVU1jUUp1
a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0p4Y3drVGRvcndFNHVqa0RKTnFVTWNRSnVrUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MDkxQS80MjA0MDU3RTY2NkQxMUVEQjU1NjU3NzdDNEY5QUUwMi9KeGN3a1Rkb3J3
RTR1amtESk5xVU1jUUp1a1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAocLp2hgXmTFt0cX1FA6iAWRi0wEdFzhw/WPCAxL7zb6MsRQzVkcr0
uavFNf8QrkQL8g2WYrLpAP/LjNg/5H8nUXtqVuTPx6yjQjxqaPmcnWn+LvHUrZ+f
1gWnf1lipPj5AzTOSUTwQbzkXDRKhKHmz0DoCH1En7upBrxhKkhXpsaAgA+hngDZ
2lCgkgV62WYupq9r6JC5S4YcG3i3iJ/d2A5UIcCF/xaqugntOLVouwuAo6rZ6yCy
JIOMllgf1gS2FW7ZOcMgbIKAH5YiJ7gGA1CoD2zWEEcx19FUzU62fBp0EuOOPf7T
oRGq9JDkPW6gRlIgjHzxnKvt6OAhPjFL
-----END CERTIFICATE-----
Generated at Sun Apr 27 20:53:26 2025 by rpki-client