Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft
File:                     MtNTdDyP4vCOl7IuW2CavBTM_js.mft (raw, json)
Hash identifier:          p5B3gHnwMvXgJ2/iwlrptJ2/WzQr4SynChV1swNaOcI=
Subject key identifier:   9B:6D:F8:2E:50:79:6F:D9:2C:B3:9B:2A:49:91:09:03:F8:ED:CF:93
Authority key identifier: 32:D3:53:74:3C:8F:E2:F0:8E:97:B2:2E:5B:60:9A:BC:14:CC:FE:3B
Certificate issuer:       /CN=A9179F64/serialNumber=32D353743C8FE2F08E97B22E5B609ABC14CCFE3B
Certificate serial:       68
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft
Manifest number:          5F
Signing time:             Fri 31 Jan 2025 06:16:12 +0000
Manifest this update:     Fri 31 Jan 2025 06:16:12 +0000
Manifest next update:     Fri 07 Feb 2025 06:16:12 +0000
Files and hashes:         1: MtNTdDyP4vCOl7IuW2CavBTM_js.crl (hash: YBlT5Qa1qPpKCZzN6/VMtn9uPrqMJgW/UIoizvpgKOU=)
                          2: DB9E3242C8E811EF86365B2AC4F9AE02.roa (hash: v6pTRro113en+h2WsmtXqk2rxE6NwkgghVA0fGJU70E=)
                          3: 506CA7ACC8E911EFB3652D2BC4F9AE02.roa (hash: UAYmTHhr6w42YJmO9WBmk4jfWAcHk48/qIr8BYwFh8M=)
                          4: 4FE43908C8E911EFB3652D2BC4F9AE02.roa (hash: QdK0vZDOgHppgm4z7Swu7bgDMn2RNghYcIQnlABGWx8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104 (0x68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179F64/serialNumber=32D353743C8FE2F08E97B22E5B609ABC14CCFE3B
        Validity
            Not Before: Jan 31 06:16:12 2025 GMT
            Not After : Feb  7 06:16:12 2025 GMT
        Subject: CN=679c6aac-5fa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:26:e0:90:bb:55:a3:0a:17:74:f9:56:63:21:
                    a7:0e:54:c9:e4:90:f3:5a:d7:db:4f:af:36:1c:11:
                    33:b6:42:10:cf:e4:b5:1e:f9:1d:e6:39:b9:48:98:
                    cd:0e:61:cd:62:c6:0f:17:82:b7:d8:66:d7:f6:f2:
                    98:c2:d4:36:09:a5:27:cf:2e:2e:74:60:6f:ae:cb:
                    c6:79:66:b8:6d:4b:e1:1d:c2:ec:9d:8e:0e:3f:4e:
                    66:f7:d1:6b:d6:5a:57:e6:52:b1:ff:f4:32:c9:3c:
                    be:1f:a3:0b:3c:16:fc:70:63:f8:42:56:c4:e9:03:
                    3b:27:09:ce:61:2b:4b:41:73:93:49:47:3f:e7:b5:
                    d9:37:47:a5:3e:c8:1e:a0:68:4d:aa:ae:0b:93:2c:
                    85:79:ad:d2:77:8e:6d:a7:93:91:99:cf:a2:2d:83:
                    e0:15:a9:b0:da:08:6e:e5:54:fa:c4:58:e1:52:6e:
                    46:04:8c:8d:75:d3:9e:0a:c8:df:c4:c1:4f:83:e4:
                    ec:11:c3:0e:e8:3a:7f:7a:20:07:11:1a:b1:4c:55:
                    43:47:2c:e0:fe:6b:9c:5f:fb:be:8f:df:b6:8d:88:
                    9b:2e:2b:28:b8:e0:84:08:8c:8c:af:e1:4f:85:d0:
                    56:ab:fb:3b:2c:35:55:36:c6:e2:0a:cb:54:50:1f:
                    1e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:6D:F8:2E:50:79:6F:D9:2C:B3:9B:2A:49:91:09:03:F8:ED:CF:93
            X509v3 Authority Key Identifier:
                keyid:32:D3:53:74:3C:8F:E2:F0:8E:97:B2:2E:5B:60:9A:BC:14:CC:FE:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:8c:df:35:02:6a:0f:01:24:36:34:9c:86:90:90:2b:ca:7c:
         46:b9:c2:91:a6:01:12:ee:0f:cd:2e:07:8a:64:05:dd:49:a5:
         c2:4e:03:aa:af:d6:6f:92:68:8f:60:35:1f:0c:3e:cf:b0:ac:
         c4:48:14:b1:57:95:f9:8d:0b:24:24:ec:49:c9:95:fc:c4:98:
         b3:03:30:76:8b:b4:39:d3:a1:41:f0:fa:46:f3:51:de:ea:9a:
         76:f8:74:e7:a4:53:59:55:80:69:6d:47:5f:6c:45:3b:a6:58:
         13:fd:f4:00:b8:d6:a9:5c:a8:58:d5:4f:38:f3:7b:3f:e1:2a:
         5b:47:22:5a:dd:3c:84:3e:aa:fb:82:e1:81:f9:ce:f9:71:be:
         5d:e3:22:a9:29:bc:a9:b0:c8:ac:72:26:70:6a:1b:18:8e:4d:
         41:25:03:b6:d1:10:44:6d:32:99:e8:04:83:f5:a2:e1:ed:07:
         fe:a7:89:a0:92:d9:81:93:66:07:b5:4f:64:3f:9c:c4:49:64:
         00:f9:46:b3:29:5c:63:fa:88:a5:2f:92:25:59:69:06:b7:89:
         f7:23:9e:46:15:73:e6:1f:a1:d4:81:66:15:03:6c:d3:c8:42:
         93:d1:d3:85:9c:3a:ec:61:87:11:90:39:82:3e:21:71:4e:fe:
         79:5c:9c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----