Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.mft
File:                     JlnO0VJ9LKvYssUwdezNlO1x_pg.mft (raw, json)
Hash identifier:          a0y79AebIDEX2rnGyJ79BsucR+6kRJ2pcWFX138/YgA=
Subject key identifier:   70:4B:FC:32:D2:BC:25:59:78:CA:4C:8F:51:63:7A:4D:02:BD:BF:6D
Authority key identifier: 26:59:CE:D1:52:7D:2C:AB:D8:B2:C5:30:75:EC:CD:94:ED:71:FE:98
Certificate issuer:       /CN=A9197227/serialNumber=2659CED1527D2CABD8B2C53075ECCD94ED71FE98
Certificate serial:       0666
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlnO0VJ9LKvYssUwdezNlO1x_pg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.mft
Manifest number:          064E
Signing time:             Thu 30 Jan 2025 22:31:57 +0000
Manifest this update:     Thu 30 Jan 2025 22:31:56 +0000
Manifest next update:     Thu 06 Feb 2025 22:31:56 +0000
Files and hashes:         1: JlnO0VJ9LKvYssUwdezNlO1x_pg.crl (hash: 8Umb2jWbzYLB8896+LJ4ETbfHTQD+UpeN/hADFMzFVQ=)
                          2: AE2B714A72E911EEA3EFD34AC4F9AE02.roa (hash: qqj7UCGnWQlkIFv4nnOfekkdwebohncfHRfjEEZBUBI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1638 (0x666)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197227/serialNumber=2659CED1527D2CABD8B2C53075ECCD94ED71FE98
        Validity
            Not Before: Jan 30 22:31:56 2025 GMT
            Not After : Feb  6 22:31:56 2025 GMT
        Subject: CN=679bfddc-d21a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:11:7a:d7:7f:76:33:34:a1:31:81:51:e9:35:
                    dd:09:9b:80:83:d7:d5:30:89:02:11:94:5f:f1:f5:
                    8b:bc:30:68:af:86:70:aa:dc:f2:fe:a0:94:6d:78:
                    62:36:05:9e:3d:52:55:9a:36:74:34:ea:51:69:d3:
                    c2:ab:2f:87:2c:a5:66:e3:a4:ac:d2:d7:0a:6a:10:
                    da:75:3b:25:76:df:0a:a1:8c:0c:7d:c6:89:08:0a:
                    a8:b5:31:70:5b:8d:fd:4d:a6:7f:f1:1b:ee:2d:f8:
                    ed:79:ae:4b:41:7a:e0:de:10:78:0e:23:f9:f1:c1:
                    cb:4b:49:33:72:d7:1f:09:33:a4:7b:f7:7a:b7:eb:
                    f2:7a:28:5c:04:54:e1:fb:75:70:90:87:1b:27:34:
                    8a:11:1e:b6:69:fa:bb:00:b2:12:d7:f0:23:4e:4d:
                    33:1b:db:88:ef:26:7a:bf:96:66:b5:d8:27:8a:56:
                    12:42:ff:3a:13:70:57:e1:30:4a:59:c3:ea:3e:d6:
                    03:b6:2b:8c:23:05:13:24:8f:3d:11:d1:cc:67:e2:
                    90:ca:a1:ff:2f:5f:ab:17:ed:4a:f3:44:01:70:dd:
                    ea:1e:24:5e:d1:6e:bf:67:8e:d2:a6:ed:12:73:c9:
                    22:26:d3:4e:21:a1:b7:08:c4:e9:fa:9a:da:ea:1f:
                    dd:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:4B:FC:32:D2:BC:25:59:78:CA:4C:8F:51:63:7A:4D:02:BD:BF:6D
            X509v3 Authority Key Identifier:
                keyid:26:59:CE:D1:52:7D:2C:AB:D8:B2:C5:30:75:EC:CD:94:ED:71:FE:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlnO0VJ9LKvYssUwdezNlO1x_pg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:6f:5b:41:96:3d:5c:d8:95:27:69:9f:3c:ca:3b:8f:8c:6e:
         bf:44:ea:c5:4e:33:1f:58:5d:18:62:0a:b0:1f:07:f4:5e:16:
         e5:09:59:42:74:7e:ad:e3:f7:b1:15:d4:4f:da:1a:dd:3d:de:
         15:13:d9:74:e5:c2:ca:d2:34:03:a1:b3:c5:22:2f:42:06:be:
         ad:cf:a2:a5:7b:b7:25:d8:2f:1a:d9:41:46:3a:b0:a1:fd:44:
         aa:dd:2f:fc:ae:36:c6:a8:47:51:8d:46:87:bc:7e:cd:8c:ab:
         e9:dc:0b:c4:6a:8d:59:9d:9a:fb:e9:e6:b8:a4:4c:86:c5:1c:
         6f:fc:61:62:6f:46:c9:d1:94:1d:10:ed:78:89:0a:8b:ae:fe:
         0a:3f:e3:b2:c9:f6:ff:52:fb:0d:ac:40:e2:c2:60:fc:3e:64:
         27:29:39:b7:30:d8:90:f9:20:03:0e:21:e0:37:32:1c:92:c6:
         6b:e3:b4:a7:ce:96:13:1c:6a:51:26:5d:33:70:90:20:a8:ce:
         f5:78:ea:31:a0:97:2e:ad:b7:1f:19:3b:18:18:c4:96:f5:c5:
         cc:fd:85:bc:e4:f4:61:eb:d2:2b:84:56:17:ec:c0:cb:b6:ee:
         94:44:ab:11:98:20:48:e5:a8:f1:06:ed:bc:6f:2d:6c:7e:ce:
         19:fc:b7:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:43:23 2025 by rpki-client