Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C4E2/9879242612A911EBB0B65F7AC4F9AE02/jJlooJQA8yL0lZjidRH84bj4i_U.mft
File:                     jJlooJQA8yL0lZjidRH84bj4i_U.mft (raw, json)
Hash identifier:          IagpzyXnerZX05uP5JbobpS1cFNQxTsSU4GB+i6Lv0s=
Subject key identifier:   2B:FE:24:88:D6:6B:8F:0A:51:96:F0:F4:0D:E7:C3:AE:4E:FC:62:77
Authority key identifier: 8C:99:68:A0:94:00:F3:22:F4:95:98:E2:75:11:FC:E1:B8:F8:8B:F5
Certificate issuer:       /CN=A917C4E2/serialNumber=8C9968A09400F322F49598E27511FCE1B8F88BF5
Certificate serial:       0745
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJlooJQA8yL0lZjidRH84bj4i_U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C4E2/9879242612A911EBB0B65F7AC4F9AE02/jJlooJQA8yL0lZjidRH84bj4i_U.mft
Manifest number:          0740
Signing time:             Thu 30 Jan 2025 21:34:55 +0000
Manifest this update:     Thu 30 Jan 2025 21:34:54 +0000
Manifest next update:     Thu 06 Feb 2025 21:34:54 +0000
Files and hashes:         1: jJlooJQA8yL0lZjidRH84bj4i_U.crl (hash: Q8/FmOgkxQgayUQ+JGwOMbGlbcZn4kYWwAa2Vsy1GCQ=)
                          2: AB9A3F46135211EB83A5A869C4F9AE02.roa (hash: 1TJJ9TxJWi7wnEGMOxXiwcAZ23eOY7mFMgZfaQA6EKg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1861 (0x745)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C4E2/serialNumber=8C9968A09400F322F49598E27511FCE1B8F88BF5
        Validity
            Not Before: Jan 30 21:34:54 2025 GMT
            Not After : Feb  6 21:34:54 2025 GMT
        Subject: CN=679bf07f-5b4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:be:68:3b:f6:bf:e2:c5:f7:a6:23:ab:c8:92:
                    3f:a4:2c:80:6a:25:a2:f0:18:77:c9:a1:db:4d:eb:
                    88:21:54:b5:8e:51:48:2d:d7:3d:2a:91:bc:8c:66:
                    58:ea:b0:f1:7a:41:5b:f7:fc:4d:1c:a8:f5:86:3d:
                    02:42:94:bf:05:72:80:c2:fc:1a:ce:63:2c:e3:32:
                    79:76:8a:2e:f4:d1:52:be:5d:11:35:35:fd:9e:15:
                    ce:86:57:05:9c:12:f2:ac:fd:ed:34:1c:0c:d7:fe:
                    b0:84:f0:10:53:6c:f9:76:ae:22:ec:69:e7:90:77:
                    5c:4a:ec:d8:0c:c8:5a:8c:55:01:0f:eb:a7:a4:b5:
                    0c:65:2a:04:70:69:dd:e7:3d:54:42:e5:13:91:82:
                    88:74:1e:72:9e:0c:f3:98:ac:a5:c2:f9:de:39:0c:
                    63:84:f1:82:df:f9:92:b9:6e:be:84:0c:03:d8:5d:
                    b7:1d:a2:45:af:04:d6:eb:f4:62:5d:64:7b:29:3e:
                    2a:28:9b:c1:b7:18:c4:82:89:50:e2:dd:bf:a3:b7:
                    43:fc:9f:42:6d:57:05:8d:21:01:79:10:41:f2:bf:
                    dd:25:8c:cf:44:03:9a:95:0c:ad:a3:c8:41:c8:e0:
                    47:77:58:b7:80:73:80:40:ce:fb:4c:bf:dd:0a:6e:
                    53:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:FE:24:88:D6:6B:8F:0A:51:96:F0:F4:0D:E7:C3:AE:4E:FC:62:77
            X509v3 Authority Key Identifier:
                keyid:8C:99:68:A0:94:00:F3:22:F4:95:98:E2:75:11:FC:E1:B8:F8:8B:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C4E2/9879242612A911EBB0B65F7AC4F9AE02/jJlooJQA8yL0lZjidRH84bj4i_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJlooJQA8yL0lZjidRH84bj4i_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C4E2/9879242612A911EBB0B65F7AC4F9AE02/jJlooJQA8yL0lZjidRH84bj4i_U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:d3:80:68:e0:67:30:4b:d8:03:b3:75:c7:23:e1:7d:68:b5:
         be:06:30:4a:c7:4c:1a:b0:72:3a:20:cb:60:1b:9c:2f:1e:c0:
         0c:6d:db:d2:06:e9:aa:e9:a9:72:81:50:64:47:59:f3:fd:b3:
         1e:f3:5e:03:a6:1e:5e:4d:c8:9a:7b:06:2c:92:ac:fb:01:78:
         29:bf:dc:45:6f:f2:ca:4c:76:16:9c:f4:b2:1c:e1:93:fc:bf:
         9f:50:05:48:07:cd:7c:85:0c:04:d0:3a:72:ac:a6:c0:84:73:
         3d:e7:97:cb:4b:76:17:ff:47:f6:36:7d:a7:db:a4:b7:78:82:
         74:8e:b0:a4:9c:4c:f6:26:d0:c3:e3:bc:2c:0a:57:b6:d4:0c:
         0f:10:70:80:b3:99:1a:4c:84:f8:21:68:48:95:9b:b0:81:fb:
         f0:31:5f:3b:08:a2:62:fb:81:2d:58:b2:b8:3d:e6:cb:e5:5d:
         81:04:1c:68:06:71:cf:6d:17:c3:82:4e:a5:44:5a:b9:9b:a9:
         b2:a8:97:22:9c:1e:bd:25:f6:8a:c3:58:61:99:f8:8e:bf:2b:
         fb:cc:66:7b:fb:e3:7b:9e:b5:60:a7:6f:d1:46:31:69:81:40:
         78:c0:7a:96:59:01:f0:73:99:10:42:9a:f1:38:9c:24:78:a8:
         68:d7:2a:56
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB0UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0M0RTIxMTAvBgNVBAUTKDhDOTk2OEEwOTQwMEYzMjJGNDk1OThFMjc1MTFGQ0Ux
QjhGODhCRjUwHhcNMjUwMTMwMjEzNDU0WhcNMjUwMjA2MjEzNDU0WjAYMRYwFAYD
VQQDEw02NzliZjA3Zi01YjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt75oO/a/4sX3piOryJI/pCyAaiWi8Bh3yaHbTeuIIVS1jlFILdc9KpG8jGZY
6rDxekFb9/xNHKj1hj0CQpS/BXKAwvwazmMs4zJ5doou9NFSvl0RNTX9nhXOhlcF
nBLyrP3tNBwM1/6whPAQU2z5dq4i7GnnkHdcSuzYDMhajFUBD+unpLUMZSoEcGnd
5z1UQuUTkYKIdB5yngzzmKylwvneOQxjhPGC3/mSuW6+hAwD2F23HaJFrwTW6/Ri
XWR7KT4qKJvBtxjEgolQ4t2/o7dD/J9CbVcFjSEBeRBB8r/dJYzPRAOalQyto8hB
yOBHd1i3gHOAQM77TL/dCm5TmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCv+JIjW
a48KUZbw9A3nw65O/GJ3MB8GA1UdIwQYMBaAFIyZaKCUAPMi9JWY4nUR/OG4+Iv1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzRFMi85ODc5MjQyNjEy
QTkxMUVCQjBCNjVGN0FDNEY5QUUwMi9qSmxvb0pRQTh5TDBsWmppZFJIODRiajRp
X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pKbG9vSlFBOHlMMGxaamlkUkg4NGJqNGlfVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QzRFMi85ODc5MjQyNjEyQTkxMUVCQjBCNjVGN0FDNEY5QUUwMi9qSmxvb0pRQTh5
TDBsWmppZFJIODRiajRpX1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBO04Bo4GcwS9gDs3XHI+F9aLW+BjBKx0wasHI6IMtgG5wvHsAMbdvS
Bumq6alygVBkR1nz/bMe814Dph5eTciaewYskqz7AXgpv9xFb/LKTHYWnPSyHOGT
/L+fUAVIB818hQwE0DpyrKbAhHM955fLS3YX/0f2Nn2n26S3eIJ0jrCknEz2JtDD
47wsCle21AwPEHCAs5kaTIT4IWhIlZuwgfvwMV87CKJi+4EtWLK4PebL5V2BBBxo
BnHPbRfDgk6lRFq5m6myqJcinB69JfaKw1hhmfiOvyv7zGZ7++N7nrVgp2/RRjFp
gUB4wHqWWQHwc5kQQprxOJwkeKho1ypW
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:41:52 2025 by rpki-client