Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/JhWWtVbpLBLS68jdiyXPuHWOB4w.mft
File:                     JhWWtVbpLBLS68jdiyXPuHWOB4w.mft (raw, json)
Hash identifier:          xiAeHTscOzQJ8/1RY285ntnm1nr4EBoHN5JorderlUc=
Subject key identifier:   B4:FB:61:58:44:95:F0:26:F5:D3:6B:BB:A0:9E:A9:53:90:0D:4D:AC
Authority key identifier: 26:15:96:B5:56:E9:2C:12:D2:EB:C8:DD:8B:25:CF:B8:75:8E:07:8C
Certificate issuer:       /CN=A91AFC48/serialNumber=261596B556E92C12D2EBC8DD8B25CFB8758E078C
Certificate serial:       F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhWWtVbpLBLS68jdiyXPuHWOB4w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/JhWWtVbpLBLS68jdiyXPuHWOB4w.mft
Manifest number:          F4
Signing time:             Fri 31 Jan 2025 04:28:04 +0000
Manifest this update:     Fri 31 Jan 2025 04:28:04 +0000
Manifest next update:     Fri 07 Feb 2025 04:28:04 +0000
Files and hashes:         1: JhWWtVbpLBLS68jdiyXPuHWOB4w.crl (hash: EZiX5N7mLgGI1IVSx6kLvx/q7QJouQOtJSKToOrEx2Q=)
                          2: 259AE280753B11EEBF306F35C4F9AE02.roa (hash: 0uSx3t0sR7mDLL0tE9/KLBX+RXK70BKf32W+7mKLwxY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 248 (0xf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AFC48/serialNumber=261596B556E92C12D2EBC8DD8B25CFB8758E078C
        Validity
            Not Before: Jan 31 04:28:04 2025 GMT
            Not After : Feb  7 04:28:04 2025 GMT
        Subject: CN=679c5154-7206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:85:a1:75:9a:33:34:e8:b8:bb:08:b3:cc:b2:
                    a5:c3:45:23:01:ec:15:5d:70:a4:eb:1c:4a:74:6e:
                    82:6b:08:f7:35:cd:7f:cb:93:8e:84:f5:12:cc:6c:
                    12:61:a9:35:e2:81:eb:50:55:c2:ee:06:8b:2f:ad:
                    b3:c9:5d:dc:a8:d5:bd:9a:8c:02:f0:33:14:ee:7b:
                    5f:45:36:17:27:29:9b:38:61:13:d8:b4:6f:bc:11:
                    be:0d:ea:3f:1f:5e:d9:7d:68:23:87:8d:2c:67:38:
                    01:b9:0e:5a:97:53:be:69:d5:bd:a3:f9:35:4e:32:
                    2c:07:50:3b:8e:17:74:32:19:15:a5:69:1e:97:90:
                    b9:23:3a:5a:87:a0:e2:0b:c8:57:b6:64:9a:2c:ad:
                    5b:70:05:dd:b6:63:4b:0f:53:e9:07:83:e0:f3:ac:
                    fa:f2:25:5a:ef:50:dd:88:8d:79:a6:40:36:19:0e:
                    9e:b2:e9:41:80:d1:0c:e3:2c:6c:5e:a3:99:19:f8:
                    d4:7f:fb:13:a2:80:81:19:fb:cf:06:c7:84:01:31:
                    ea:76:46:25:13:56:fb:86:f8:ab:8f:55:43:48:e3:
                    60:b0:2f:87:d6:e0:71:ca:bb:fd:54:45:6b:81:88:
                    6d:0b:b4:72:bb:a3:66:d0:d5:d1:1f:2b:6f:ef:c2:
                    ec:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:FB:61:58:44:95:F0:26:F5:D3:6B:BB:A0:9E:A9:53:90:0D:4D:AC
            X509v3 Authority Key Identifier:
                keyid:26:15:96:B5:56:E9:2C:12:D2:EB:C8:DD:8B:25:CF:B8:75:8E:07:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/JhWWtVbpLBLS68jdiyXPuHWOB4w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhWWtVbpLBLS68jdiyXPuHWOB4w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/JhWWtVbpLBLS68jdiyXPuHWOB4w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:c9:4e:31:9b:39:4e:c9:9b:f7:95:72:fe:be:7e:37:1c:bf:
         48:0f:38:0f:95:e8:56:df:30:70:b1:8b:9a:20:76:10:73:70:
         15:68:bb:32:f7:9c:92:54:e6:20:bb:b9:2c:66:d7:6b:ab:ff:
         52:32:b1:60:34:25:00:dd:65:46:d5:89:51:84:b0:8e:12:6f:
         e8:00:7c:c8:90:4a:58:3e:15:5a:98:32:27:e9:46:9f:4a:e5:
         92:ea:0c:9b:6d:ea:79:ae:ad:11:84:6d:35:bb:cb:f6:d2:13:
         8e:89:f8:5d:9b:88:f3:ed:a0:d5:ce:a0:7e:92:a8:7d:c0:19:
         50:46:b3:50:26:3c:55:a7:66:b1:22:f6:a6:12:12:f3:12:d6:
         30:08:db:80:18:95:5e:f5:02:96:03:ef:51:bd:ae:7d:a5:3d:
         a7:76:60:d4:e6:29:f5:5b:0e:9c:ae:5d:b6:87:ab:e1:a3:d5:
         13:5a:d7:32:2f:28:5c:86:9d:ca:9b:aa:a2:dd:16:2d:26:3a:
         8c:df:db:f3:e5:f2:bd:00:fc:f9:8e:ad:22:84:e3:ea:d4:0a:
         d8:34:9b:58:60:20:06:3e:8b:ba:64:4f:48:90:5a:c5:3c:68:
         01:c5:3c:4f:9c:c7:3c:c8:62:53:26:6e:dc:bf:0f:ef:a8:0e:
         0f:eb:02:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----