Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/JqjITCDQKn_Eru3hVcCzGwjue2c.mft
File:                     JqjITCDQKn_Eru3hVcCzGwjue2c.mft (raw, json)
Hash identifier:          PhKU5UeMv3aYDDI65HYjdChBIybknyrRAkAZvz6cu1M=
Subject key identifier:   12:D9:42:21:EB:1A:43:F9:F9:73:AA:31:2F:5D:13:00:DA:41:1A:6D
Authority key identifier: 26:A8:C8:4C:20:D0:2A:7F:C4:AE:ED:E1:55:C0:B3:1B:08:EE:7B:67
Certificate issuer:       /CN=A917E00E/serialNumber=26A8C84C20D02A7FC4AEEDE155C0B31B08EE7B67
Certificate serial:       0614
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JqjITCDQKn_Eru3hVcCzGwjue2c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/JqjITCDQKn_Eru3hVcCzGwjue2c.mft
Manifest number:          060D
Signing time:             Thu 30 Jan 2025 22:47:17 +0000
Manifest this update:     Thu 30 Jan 2025 22:47:17 +0000
Manifest next update:     Thu 06 Feb 2025 22:47:17 +0000
Files and hashes:         1: JqjITCDQKn_Eru3hVcCzGwjue2c.crl (hash: ygq9X9UfmA7LjqYcafk/DBgezjuT96kbokvvEBCXlrE=)
                          2: E562A356702F11EF9806F81FC4F9AE02.roa (hash: /aaQDKulw/fABnAamA7jEF65J1LvCjkHfFV15p+zWsI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1556 (0x614)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E00E/serialNumber=26A8C84C20D02A7FC4AEEDE155C0B31B08EE7B67
        Validity
            Not Before: Jan 30 22:47:17 2025 GMT
            Not After : Feb  6 22:47:17 2025 GMT
        Subject: CN=679c0175-018a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4a:0c:eb:6e:80:f2:58:bd:c7:5c:42:a0:45:
                    9e:c1:12:73:85:42:cb:08:08:a7:ac:e1:52:a8:f0:
                    18:54:02:e9:18:fc:96:67:cd:f3:18:be:96:8c:ea:
                    21:23:69:1b:8c:b2:fd:54:c3:cc:e7:0f:a5:cc:9a:
                    83:ef:7b:75:c7:96:3c:9a:6b:b4:5c:19:94:6a:d5:
                    20:a0:7d:71:0e:1e:0a:cf:0c:ac:82:02:d6:34:61:
                    32:64:6a:78:32:b5:6f:9e:b6:01:a4:31:d7:65:97:
                    5e:17:e7:64:0b:57:89:a1:e7:2f:25:fa:b6:27:7f:
                    92:57:b9:38:14:db:b5:a4:6f:83:8b:00:f2:cc:09:
                    04:ad:aa:54:a0:e6:6d:b7:03:3b:9c:77:c5:14:8b:
                    b5:b6:ab:30:8e:95:80:17:e9:27:93:30:d9:95:4a:
                    61:a5:8f:3a:cb:7c:8a:52:43:c7:6a:be:a4:b3:f4:
                    9b:57:25:6a:97:9b:5b:53:51:dd:f7:16:f0:2f:82:
                    88:eb:fa:5f:7b:f9:a9:33:0e:e0:18:a5:52:c9:75:
                    09:76:c4:4a:1a:47:ce:93:e2:10:86:0c:77:6f:cf:
                    03:f7:8b:6a:a2:cf:e5:6e:05:df:92:d3:df:34:f1:
                    8b:75:73:57:36:bf:8d:3b:d4:3f:bd:24:7c:b1:75:
                    9f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D9:42:21:EB:1A:43:F9:F9:73:AA:31:2F:5D:13:00:DA:41:1A:6D
            X509v3 Authority Key Identifier:
                keyid:26:A8:C8:4C:20:D0:2A:7F:C4:AE:ED:E1:55:C0:B3:1B:08:EE:7B:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/JqjITCDQKn_Eru3hVcCzGwjue2c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JqjITCDQKn_Eru3hVcCzGwjue2c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/JqjITCDQKn_Eru3hVcCzGwjue2c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:3f:a1:e5:6b:05:7b:05:61:1f:b1:2d:0b:d5:f3:18:31:e3:
         a0:f9:bf:58:39:24:be:90:79:49:f6:93:ef:c0:9a:09:1b:2d:
         aa:5f:81:e9:f4:e6:d3:51:5a:9c:d5:0e:00:53:36:86:b4:1d:
         69:10:72:f1:a3:86:16:f2:91:2b:60:85:0f:5e:09:ef:9a:19:
         3b:55:21:a0:8b:5e:c8:68:5e:8f:d4:17:0f:f9:16:37:3f:d0:
         a7:79:76:fe:c3:d2:17:94:e0:28:f5:ac:18:3a:7c:bc:e9:15:
         9a:b4:06:a6:c6:f0:fe:fc:f9:c7:b1:45:a8:3d:70:04:e2:fd:
         9f:e9:19:ab:88:18:ef:7d:9e:20:ac:39:d8:13:6e:5e:51:30:
         6c:f5:c5:89:f7:9e:cb:87:98:e3:25:62:d6:73:52:7f:ea:44:
         43:f4:c6:db:72:e3:af:4f:74:dd:a8:e0:6d:8d:fa:ad:62:0c:
         a4:27:ac:d3:57:c7:d4:4f:9f:8e:2f:5b:74:b5:68:16:67:7e:
         c4:41:ed:28:1c:79:c5:92:74:da:0f:52:53:c1:fd:25:37:3d:
         b8:f4:e9:79:19:6a:d2:85:b3:98:21:a8:08:55:93:4f:e6:f4:
         e8:c4:a4:83:d7:78:c4:fa:3f:e8:82:94:3f:3b:07:40:fa:18:
         c4:bb:b4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:17:28 2025 by rpki-client