Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft
File:                     jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft (raw, json)
Hash identifier:          C8gGzXGID6kbnTLMzXC36TO4/tP6+ETnt2fsjbp8afg=
Subject key identifier:   25:76:16:9C:BC:E7:D1:0B:27:4B:9B:1A:C6:A2:5B:E2:54:2E:45:C9
Authority key identifier: 8D:CD:E5:2B:9B:8B:05:22:BE:26:71:3A:41:86:56:70:A6:1E:E8:6D
Certificate issuer:       /CN=A9181375/serialNumber=8DCDE52B9B8B0522BE26713A41865670A61EE86D
Certificate serial:       86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft
Manifest number:          84
Signing time:             Fri 31 Jan 2025 05:43:47 +0000
Manifest this update:     Fri 31 Jan 2025 05:43:46 +0000
Manifest next update:     Fri 07 Feb 2025 05:43:46 +0000
Files and hashes:         1: jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl (hash: Glc99ZHwWlLuBrLR8S1iqYvOR6+DvyvQD1M8nOJf1l8=)
                          2: A51B73A01F0711EFB7C30655C4F9AE02.roa (hash: fXMxp55GhgjiLTAtD9inNemzkpyTVSNb7IqL37YYltM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134 (0x86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181375/serialNumber=8DCDE52B9B8B0522BE26713A41865670A61EE86D
        Validity
            Not Before: Jan 31 05:43:46 2025 GMT
            Not After : Feb  7 05:43:46 2025 GMT
        Subject: CN=679c6313-f598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ff:20:7f:16:73:a2:2a:7b:6e:93:95:d1:b7:
                    35:99:33:e2:80:ef:a0:8e:4a:f3:43:0a:6c:3e:02:
                    16:e1:eb:e8:bc:7d:b3:1c:94:36:f6:8f:89:e3:4c:
                    56:f9:10:12:8b:f1:30:2b:9a:1a:22:da:36:f7:f5:
                    73:c7:86:63:ec:ab:8b:38:ac:fb:d5:52:45:0b:1d:
                    f1:02:d8:99:40:6e:3a:7a:9b:73:d0:2c:05:5f:e8:
                    ae:72:81:12:63:d7:95:49:ad:22:34:e3:2e:6e:b3:
                    43:6e:e5:3a:93:4b:6c:d4:9d:83:a6:c4:12:fc:7f:
                    90:fc:7f:e8:3c:23:fe:df:49:3b:35:31:a8:2c:cd:
                    bb:21:0a:04:98:64:18:93:f6:94:fc:71:d8:ae:73:
                    45:10:ce:f8:e2:7e:5b:bf:1c:16:45:a8:8c:6d:eb:
                    7e:24:4f:7c:6d:e7:86:d2:28:bc:51:c3:e5:b8:da:
                    8f:2b:e5:a6:42:16:8e:c6:22:13:6c:0e:3a:b6:44:
                    1c:ec:f9:49:6d:a1:cc:b3:ec:e9:42:08:29:26:cc:
                    26:f3:95:37:cb:75:ef:ae:ae:d9:f2:fb:8a:38:6d:
                    eb:6a:c9:02:86:2b:dc:25:35:d8:e9:07:e4:bb:c6:
                    f1:73:f4:ee:fe:ba:13:77:e0:15:b9:4c:fa:1e:a4:
                    7e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:76:16:9C:BC:E7:D1:0B:27:4B:9B:1A:C6:A2:5B:E2:54:2E:45:C9
            X509v3 Authority Key Identifier:
                keyid:8D:CD:E5:2B:9B:8B:05:22:BE:26:71:3A:41:86:56:70:A6:1E:E8:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:8c:b7:97:83:42:30:32:d1:d0:96:56:41:c9:02:56:18:68:
         17:84:69:f9:47:1b:4d:37:95:dd:20:67:4d:91:36:be:84:dd:
         4e:2c:bf:a5:73:f4:51:74:03:c6:bb:9a:29:91:4d:58:33:d8:
         17:3c:60:ea:32:9a:e4:7b:5e:91:4f:bf:60:71:d6:84:03:cc:
         71:6c:90:09:d2:ca:74:7a:97:4c:ff:ba:44:ca:e1:66:9f:81:
         b8:b9:cc:78:1f:a6:2b:a2:c0:71:3a:56:a9:ae:0c:a8:55:ab:
         fa:ee:b0:0d:fa:97:db:34:36:ca:37:b8:dd:82:7b:cc:70:2d:
         4a:fb:6c:29:7e:f0:c3:f6:46:b6:88:7c:3a:ad:10:e6:4c:f4:
         8c:20:ca:2a:62:e4:23:97:a9:bb:a2:40:a5:e3:a2:ec:10:70:
         5f:41:7d:7b:a3:a7:4e:d2:d0:8b:dd:b1:4c:53:94:c6:72:82:
         d3:f7:88:ba:46:10:da:db:0c:6d:1b:76:d2:92:25:b7:fb:d4:
         a8:6a:2e:66:eb:87:78:bd:c9:ef:f6:17:78:cb:1e:28:53:32:
         a3:f9:23:ed:ee:33:d9:5e:2d:5e:c3:fe:db:08:18:8a:80:0f:
         da:c3:11:51:23:e1:e0:31:39:84:40:46:eb:11:4a:5f:b0:39:
         58:22:87:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----