Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft
File:                     JLokRElCcw9q8rCctyPlyWNw-4s.mft (raw, json)
Hash identifier:          toEq5jDr6Z3akzqwu9tBjzIlgZp2oBkveC3d8Pe3usc=
Subject key identifier:   4E:46:C4:0D:DF:54:08:4F:84:A4:0A:EC:1C:68:F3:CE:6C:4A:AC:B5
Authority key identifier: 24:BA:24:44:49:42:73:0F:6A:F2:B0:9C:B7:23:E5:C9:63:70:FB:8B
Certificate issuer:       /CN=A9160DAF/serialNumber=24BA24444942730F6AF2B09CB723E5C96370FB8B
Certificate serial:       C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLokRElCcw9q8rCctyPlyWNw-4s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft
Manifest number:          C5
Signing time:             Fri 31 Jan 2025 04:56:15 +0000
Manifest this update:     Fri 31 Jan 2025 04:56:15 +0000
Manifest next update:     Fri 07 Feb 2025 04:56:15 +0000
Files and hashes:         1: JLokRElCcw9q8rCctyPlyWNw-4s.crl (hash: OIppJR2RDdB7e1n/Ymy7/px7UNYD2O5var+djG3kP28=)
                          2: BE42116AB76311EE81395B37C4F9AE02.roa (hash: 2Qp1SI969/cvH0eoHeDe0WIkcYgdHLLjQ51WxIZ/bQc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199 (0xc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160DAF/serialNumber=24BA24444942730F6AF2B09CB723E5C96370FB8B
        Validity
            Not Before: Jan 31 04:56:15 2025 GMT
            Not After : Feb  7 04:56:15 2025 GMT
        Subject: CN=679c57ef-1291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:02:79:51:de:7d:7f:55:ed:ef:28:6a:50:f8:
                    df:e6:60:7b:36:e9:28:8f:bb:08:75:d9:83:1a:95:
                    d8:18:e6:3e:f6:75:eb:1d:2c:8c:1c:ca:41:e5:1c:
                    ce:a0:d3:ef:2d:c1:69:1b:ec:5a:c3:29:47:a7:78:
                    e5:2d:42:ac:23:6a:f6:67:d8:ea:09:04:53:0f:53:
                    01:eb:f7:55:5b:d1:9e:73:af:50:1a:20:ad:b4:ed:
                    41:7d:5e:37:81:b5:06:3d:bc:b9:e6:ab:0d:bf:f8:
                    99:95:1a:b3:1b:b3:ca:f3:16:e0:65:c6:71:a2:66:
                    92:bd:c2:07:d9:8f:d0:c0:70:6f:b8:b5:b7:d8:ab:
                    dd:38:61:6e:02:04:96:a0:dc:2a:84:16:01:c7:9e:
                    99:49:58:2b:ee:64:56:f8:e2:14:ce:c3:7e:17:27:
                    fc:1d:5c:c1:fb:bd:6a:a6:a2:a3:a6:24:f1:19:68:
                    96:2d:14:79:af:97:89:b1:b5:97:3a:c4:65:99:38:
                    cd:47:86:a4:03:22:96:7b:49:d9:7c:8a:0b:e3:9a:
                    57:13:87:64:0f:04:d3:9c:a1:89:7c:f5:e7:c4:eb:
                    f8:fc:af:28:71:3e:f8:ac:b3:92:3d:68:6a:a0:2f:
                    9c:ee:65:e4:93:2b:78:b1:60:62:3b:05:0e:1b:d8:
                    71:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:46:C4:0D:DF:54:08:4F:84:A4:0A:EC:1C:68:F3:CE:6C:4A:AC:B5
            X509v3 Authority Key Identifier:
                keyid:24:BA:24:44:49:42:73:0F:6A:F2:B0:9C:B7:23:E5:C9:63:70:FB:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLokRElCcw9q8rCctyPlyWNw-4s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:13:15:fb:7d:f9:83:b2:c5:cc:7f:93:4f:88:59:f3:81:31:
         7d:13:92:e8:45:b4:84:5b:88:b3:88:87:30:ec:7c:8d:ac:e1:
         3e:a1:26:20:5f:4d:e3:41:9f:4b:db:cc:9e:3d:e6:2c:52:a1:
         a8:7f:dd:b6:ef:48:ba:a6:3e:e0:3f:ce:bd:18:48:6f:0b:cc:
         81:b8:01:e3:0a:49:bf:88:ed:8c:16:47:a0:80:89:16:4a:74:
         e0:30:e6:24:3c:b5:a0:b8:85:7d:93:7b:fb:c3:98:0d:85:1b:
         3a:d3:e5:a8:e2:67:45:6f:de:d2:a7:0f:12:b5:02:d6:2b:eb:
         f6:5c:dc:b8:09:de:3c:b8:8c:fe:a5:3d:30:9b:88:5e:5f:31:
         f5:95:b5:f0:47:e9:cd:cc:c1:a8:6d:d9:d6:49:f8:3b:ea:14:
         ac:49:68:89:35:ce:df:9a:81:99:92:f9:0e:08:0f:d4:ac:30:
         6b:53:22:25:43:03:b5:e4:09:5c:86:81:e7:8e:6a:5c:c2:2e:
         0c:c3:09:f4:08:93:99:e4:62:02:27:ca:a9:5c:3c:ac:e1:62:
         bb:38:8a:36:b3:2a:a6:be:bd:80:f1:e6:72:75:5d:fe:cb:72:
         aa:a9:54:01:25:f1:f4:05:5a:18:2f:ca:58:46:96:5a:a5:50:
         ef:f9:32:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:15:47 2025 by rpki-client