Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1FF1/00D8F9AE5B9B11EF96AA4F42C4F9AE02/JjpVFG4xcs_Y8AprsXvLDsIJFcY.mft
File:                     JjpVFG4xcs_Y8AprsXvLDsIJFcY.mft (raw, json)
Hash identifier:          eQsYQL6fnlPPWO3iVhtGULn2srNU2udOjOj6ZuvAOfc=
Subject key identifier:   79:10:39:26:D2:43:FA:47:9F:D5:90:9B:DF:1C:C2:70:1B:FD:A1:E6
Authority key identifier: 26:3A:55:14:6E:31:72:CF:D8:F0:0A:6B:B1:7B:CB:0E:C2:09:15:C6
Certificate issuer:       /CN=A91A1FF1/serialNumber=263A55146E3172CFD8F00A6BB17BCB0EC20915C6
Certificate serial:       5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JjpVFG4xcs_Y8AprsXvLDsIJFcY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1FF1/00D8F9AE5B9B11EF96AA4F42C4F9AE02/JjpVFG4xcs_Y8AprsXvLDsIJFcY.mft
Manifest number:          5A
Signing time:             Fri 31 Jan 2025 06:11:12 +0000
Manifest this update:     Fri 31 Jan 2025 06:11:12 +0000
Manifest next update:     Fri 07 Feb 2025 06:11:11 +0000
Files and hashes:         1: JjpVFG4xcs_Y8AprsXvLDsIJFcY.crl (hash: GwmLfDgmKfSTqM1q+bqNeyhpz0CTEfskF8pxjxOaN9g=)
                          2: 369F08805B9B11EFA3A8CD42C4F9AE02.roa (hash: PHdU3YbsBVnKyiJBLqMyf65QtChsTtupcMmQjvSYsFQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1FF1/serialNumber=263A55146E3172CFD8F00A6BB17BCB0EC20915C6
        Validity
            Not Before: Jan 31 06:11:12 2025 GMT
            Not After : Feb  7 06:11:11 2025 GMT
        Subject: CN=679c6980-8d68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ab:07:a8:c9:18:b8:aa:a1:c9:8c:67:9d:84:
                    06:52:15:b5:18:52:fb:8a:74:67:78:69:be:cf:5d:
                    d6:ed:3a:2f:e0:74:b1:f0:9e:c5:1e:72:0f:b1:88:
                    7b:f5:6e:05:13:c5:b1:19:99:ff:30:96:6a:d1:85:
                    1d:4e:77:46:ed:95:82:60:be:9e:53:55:9b:b4:df:
                    f1:75:90:f4:95:c8:b5:d8:95:95:b8:83:9d:da:95:
                    96:42:70:c2:a7:20:89:d1:e9:d0:58:f2:75:e4:c5:
                    3f:01:4a:a4:29:98:79:15:91:c0:67:a7:8b:61:ad:
                    7d:fe:a2:69:dd:be:2c:97:b0:90:e2:c1:a7:2e:b4:
                    99:53:2c:cd:72:f0:78:42:7f:36:cf:f1:f0:e1:c1:
                    fa:41:f7:82:08:d8:56:84:83:38:c5:11:be:fc:b6:
                    1a:f0:f6:90:65:c1:e5:31:d5:3e:91:98:56:13:8d:
                    33:f9:84:67:31:59:57:e0:74:e7:62:50:d2:b7:d8:
                    25:79:a2:42:bd:57:72:66:27:fb:f6:c9:fc:a0:a9:
                    20:3c:40:4a:32:a4:4b:7e:4d:51:fa:19:f8:5e:78:
                    16:2d:34:33:d4:f4:34:0a:f4:fb:4a:13:23:ea:5d:
                    0b:81:01:30:e3:66:82:87:94:91:6e:5d:de:0f:27:
                    e0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:10:39:26:D2:43:FA:47:9F:D5:90:9B:DF:1C:C2:70:1B:FD:A1:E6
            X509v3 Authority Key Identifier:
                keyid:26:3A:55:14:6E:31:72:CF:D8:F0:0A:6B:B1:7B:CB:0E:C2:09:15:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1FF1/00D8F9AE5B9B11EF96AA4F42C4F9AE02/JjpVFG4xcs_Y8AprsXvLDsIJFcY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JjpVFG4xcs_Y8AprsXvLDsIJFcY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1FF1/00D8F9AE5B9B11EF96AA4F42C4F9AE02/JjpVFG4xcs_Y8AprsXvLDsIJFcY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:80:14:81:89:fa:c3:7a:0a:38:e4:fe:fc:df:8f:26:75:b5:
         4f:a3:4e:70:4d:a0:4e:25:c6:1c:57:a7:b7:a3:ea:63:64:2a:
         fb:63:f9:4c:b2:7c:7a:e3:dd:0f:ad:7c:c0:d3:52:61:da:45:
         f1:08:2d:98:62:54:e2:5e:bb:bd:f9:e8:25:a2:fb:31:dc:6d:
         11:8f:51:25:fe:57:51:29:aa:f6:44:60:ab:7f:5c:33:7e:6f:
         61:8c:4f:d1:b3:24:0c:97:8a:23:a6:ee:16:30:dd:79:01:a9:
         92:e6:98:eb:50:cc:8f:50:9e:0b:17:5d:3e:15:d6:dc:6f:81:
         ac:d3:34:5b:d8:f4:0f:39:8e:ea:2f:25:90:fd:63:42:bc:33:
         1e:ba:d0:07:53:3a:72:7d:43:a9:39:ba:dc:6d:56:8a:15:da:
         8f:47:34:da:49:b9:3c:0f:19:db:7c:8b:32:7b:b0:53:66:3f:
         83:97:59:91:07:51:4c:59:32:50:33:a7:b3:46:7c:4b:f4:9a:
         10:b1:68:2e:f7:b5:53:53:5d:95:c2:68:0c:02:77:0b:7c:83:
         74:2f:f5:eb:74:5e:72:07:0f:1b:9d:2a:f8:11:2a:a9:f9:1c:
         8f:a0:8f:fb:c8:ec:2b:09:34:63:c1:0c:d7:ac:db:d9:47:d3:
         29:82:e6:28
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
MUZGMTExMC8GA1UEBRMoMjYzQTU1MTQ2RTMxNzJDRkQ4RjAwQTZCQjE3QkNCMEVD
MjA5MTVDNjAeFw0yNTAxMzEwNjExMTJaFw0yNTAyMDcwNjExMTFaMBgxFjAUBgNV
BAMTDTY3OWM2OTgwLThkNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDKqweoyRi4qqHJjGedhAZSFbUYUvuKdGd4ab7PXdbtOi/gdLHwnsUecg+xiHv1
bgUTxbEZmf8wlmrRhR1Od0btlYJgvp5TVZu03/F1kPSVyLXYlZW4g53alZZCcMKn
IInR6dBY8nXkxT8BSqQpmHkVkcBnp4thrX3+omndviyXsJDiwacutJlTLM1y8HhC
fzbP8fDhwfpB94II2FaEgzjFEb78thrw9pBlweUx1T6RmFYTjTP5hGcxWVfgdOdi
UNK32CV5okK9V3JmJ/v2yfygqSA8QEoypEt+TVH6GfheeBYtNDPU9DQK9PtKEyPq
XQuBATDjZoKHlJFuXd4PJ+CNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUeRA5JtJD
+kef1ZCb3xzCcBv9oeYwHwYDVR0jBBgwFoAUJjpVFG4xcs/Y8AprsXvLDsIJFcYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUExRkYxLzAwRDhGOUFFNUI5
QjExRUY5NkFBNEY0MkM0RjlBRTAyL0pqcFZGRzR4Y3NfWThBcHJzWHZMRHNJSkZj
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvSmpwVkZHNHhjc19ZOEFwcnNYdkxEc0lKRmNZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEx
RkYxLzAwRDhGOUFFNUI5QjExRUY5NkFBNEY0MkM0RjlBRTAyL0pqcFZGRzR4Y3Nf
WThBcHJzWHZMRHNJSkZjWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAFOAFIGJ+sN6Cjjk/vzfjyZ1tU+jTnBNoE4lxhxXp7ej6mNkKvtj+Uyy
fHrj3Q+tfMDTUmHaRfEILZhiVOJeu7356CWi+zHcbRGPUSX+V1EpqvZEYKt/XDN+
b2GMT9GzJAyXiiOm7hYw3XkBqZLmmOtQzI9QngsXXT4V1txvgazTNFvY9A85juov
JZD9Y0K8Mx660AdTOnJ9Q6k5utxtVooV2o9HNNpJuTwPGdt8izJ7sFNmP4OXWZEH
UUxZMlAzp7NGfEv0mhCxaC73tVNTXZXCaAwCdwt8g3Qv9et0XnIHDxudKvgRKqn5
HI+gj/vI7CsJNGPBDNes29lH0ymC5ig=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:59:41 2025 by rpki-client