Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft
File:                     JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft (raw, json)
Hash identifier:          Mfe48qda3J2J1Nt1YMqtcrTkKx6ok5O98XNPmJ59/64=
Subject key identifier:   D6:A8:55:21:75:2A:F3:84:77:EF:81:C4:37:79:8D:6E:58:D4:BE:F4
Authority key identifier: 25:52:90:A0:1A:A9:B9:11:8B:66:EE:DA:0F:90:5F:6D:40:DB:05:AE
Certificate issuer:       /CN=A91B9E19/serialNumber=255290A01AA9B9118B66EEDA0F905F6D40DB05AE
Certificate serial:       0DA0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft
Manifest number:          0D80
Signing time:             Fri 31 Jan 2025 17:26:05 +0000
Manifest this update:     Fri 31 Jan 2025 17:26:05 +0000
Manifest next update:     Fri 07 Feb 2025 17:26:05 +0000
Files and hashes:         1: JVKQoBqpuRGLZu7aD5BfbUDbBa4.crl (hash: pcr62G8w+FN/Lf47tf3k5/mCkN22Hb3qQuJp4AKxl7U=)
                          2: 41088D5C7CF011EFA2B7A53EC4F9AE02.roa (hash: jbDEc+DrTvT0YMSjfKg3ftpV+pKzVsK3T6h7J/D7/To=)
                          3: FDAC7EBA26D811EE86689D0EC4F9AE02.roa (hash: bGy4c/mxWImIv0YqS2vs9eOAtgoEFpWUBcGJektAPIs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3488 (0xda0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9E19/serialNumber=255290A01AA9B9118B66EEDA0F905F6D40DB05AE
        Validity
            Not Before: Jan 31 17:26:05 2025 GMT
            Not After : Feb  7 17:26:05 2025 GMT
        Subject: CN=679d07ad-cfbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:20:87:22:b8:0d:26:d0:65:d7:28:f4:a1:f8:
                    22:b2:8c:45:2d:79:3d:01:6f:17:ad:f5:d5:86:aa:
                    d7:44:bc:a9:92:da:78:38:b8:8e:03:bd:0c:e9:22:
                    d5:5d:9a:6a:70:e5:a0:2e:4f:46:38:84:07:67:e0:
                    5a:41:92:52:28:7d:a5:f1:2d:9e:b4:83:fd:d6:db:
                    4b:09:6b:fc:af:b7:8b:2d:8c:b7:78:e8:9f:6b:8b:
                    55:69:91:c0:d2:e2:7e:bf:d1:48:6f:15:42:11:6a:
                    33:1a:4d:6f:c9:75:f0:e6:38:07:89:a0:e6:00:a5:
                    52:54:c4:88:71:1e:88:47:bb:ff:a6:72:90:a1:3e:
                    d5:52:8b:39:fb:c0:a8:fc:20:c7:ad:cc:06:f3:23:
                    3f:56:62:28:c2:44:0f:96:db:94:b0:bf:7b:aa:c3:
                    eb:4b:e5:94:c5:6e:75:f6:ed:e5:0c:ba:88:3c:f6:
                    a0:7a:94:96:b8:12:43:40:41:c9:50:f3:e9:ac:c9:
                    51:b9:7d:46:f6:66:8d:8b:3d:0c:e4:dd:a0:e3:39:
                    44:44:d2:4a:8c:ed:b9:4b:26:6c:b3:26:75:a9:10:
                    87:cd:1b:a0:9a:bc:df:c7:2c:67:64:b7:47:0b:32:
                    a6:8c:f8:b5:f6:d0:c7:41:7f:41:87:b1:a7:2b:80:
                    aa:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A8:55:21:75:2A:F3:84:77:EF:81:C4:37:79:8D:6E:58:D4:BE:F4
            X509v3 Authority Key Identifier:
                keyid:25:52:90:A0:1A:A9:B9:11:8B:66:EE:DA:0F:90:5F:6D:40:DB:05:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:99:41:26:99:e4:de:46:98:7a:ea:32:42:6f:cb:05:dd:8f:
         af:49:4e:19:13:9a:7c:4f:e4:bf:13:09:6b:1d:7c:ad:93:fd:
         74:57:8b:b4:c4:1f:eb:4f:08:1d:0b:83:7a:07:c3:93:62:d6:
         a3:4e:72:7e:15:1a:7f:d4:34:ac:fd:86:72:67:fd:b8:3d:6d:
         26:1d:08:09:d5:b7:97:8a:ab:13:0b:b2:80:64:10:d3:cd:39:
         8f:19:96:8d:c3:44:76:50:74:b2:47:bf:a2:53:e7:87:41:c1:
         fc:1c:bb:ad:39:be:c1:eb:b0:d0:6f:13:ed:6d:e4:de:c2:55:
         96:de:84:52:ed:01:e5:d7:a1:d0:72:cc:07:91:b3:08:82:53:
         9d:f8:6d:1b:c3:78:fa:4b:3b:9d:6c:a2:11:15:2c:3c:14:86:
         a4:d7:1f:48:e5:bf:e4:e6:48:56:c1:6f:7f:0c:d0:21:bb:e5:
         5d:66:2a:af:cf:c0:01:1c:e9:6f:e5:74:1f:27:64:cb:20:29:
         89:af:be:91:48:7c:74:64:c8:fc:55:fc:fe:d2:17:1d:f2:91:
         28:29:6c:37:7e:36:c0:4b:44:7b:41:ad:7c:00:4e:00:db:58:
         4c:78:e2:25:f3:5f:88:be:84:ff:4a:05:83:c5:ec:0b:42:c0:
         c2:cd:ac:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:54:18 2025 by rpki-client