Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDE68/80B2F3F815EA11E8A7353613C4F9AE02/JojUjjQhkrX9qNttrWLMFch1A_o.mft
File:                     JojUjjQhkrX9qNttrWLMFch1A_o.mft (raw, json)
Hash identifier:          0pb3g63Oa8pZZMSy9IUy5Vckp3MZ7kdHHoYYrinqd8s=
Subject key identifier:   98:90:47:B7:B9:67:D1:F2:D3:1C:6A:43:8A:89:09:D4:6F:DE:35:41
Authority key identifier: 26:88:D4:8E:34:21:92:B5:FD:A8:DB:6D:AD:62:CC:15:C8:75:03:FA
Certificate issuer:       /CN=A91BDE68/serialNumber=2688D48E342192B5FDA8DB6DAD62CC15C87503FA
Certificate serial:       15FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JojUjjQhkrX9qNttrWLMFch1A_o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BDE68/80B2F3F815EA11E8A7353613C4F9AE02/JojUjjQhkrX9qNttrWLMFch1A_o.mft
Manifest number:          15EF
Signing time:             Fri 31 Jan 2025 16:44:37 +0000
Manifest this update:     Fri 31 Jan 2025 16:44:36 +0000
Manifest next update:     Fri 07 Feb 2025 16:44:36 +0000
Files and hashes:         1: JojUjjQhkrX9qNttrWLMFch1A_o.crl (hash: RgN2xlF1du8VW/mg/oVnFy3esbX003TYz7fe9zCB5Mc=)
                          2: 1F8AECC6EF8411EBB4E00D4DC4F9AE02.roa (hash: V1SwqzHI+ZNQe6jN+twymLot2bdeSiq+QMKz3KdM7RM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5631 (0x15ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDE68/serialNumber=2688D48E342192B5FDA8DB6DAD62CC15C87503FA
        Validity
            Not Before: Jan 31 16:44:36 2025 GMT
            Not After : Feb  7 16:44:36 2025 GMT
        Subject: CN=679cfdf5-932c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f9:3b:e7:06:c1:03:08:b8:33:50:fe:91:17:
                    b7:f7:bd:7a:b1:a5:24:ed:2e:57:95:88:c5:8a:66:
                    12:8d:5c:05:78:09:0a:24:7b:76:ce:6c:26:90:a3:
                    43:bf:d7:8f:70:0e:91:de:c0:63:39:cd:bf:27:93:
                    34:36:d8:ea:75:9b:b4:c7:66:51:cf:99:3e:c4:31:
                    83:df:9d:15:3e:2b:b2:3c:10:8c:a4:48:90:bb:0b:
                    2d:f3:0b:41:b4:c5:03:2a:5d:f9:f9:a8:da:0d:8e:
                    a3:42:82:98:58:ad:5c:15:54:0d:14:e0:ce:10:76:
                    be:d8:72:f2:c3:a3:57:36:9f:c9:27:4d:c9:92:1f:
                    95:1f:0e:3f:ae:65:06:5d:7f:11:b9:d3:51:72:79:
                    82:52:e0:08:a4:9b:f7:14:7e:66:01:ac:46:91:09:
                    0b:42:78:df:85:68:ab:14:da:f1:24:40:e1:43:42:
                    60:75:2b:1c:40:34:e0:d6:43:74:b7:34:ca:ca:4d:
                    a3:02:d2:31:29:6e:04:42:45:40:57:17:f6:94:7d:
                    9e:fd:83:d1:51:0b:bc:4a:25:a2:71:6e:84:b4:44:
                    49:0c:91:85:2d:aa:80:a9:aa:bc:96:fa:96:0c:51:
                    ee:a2:66:76:81:79:bc:1d:07:10:36:7b:87:9f:ba:
                    fb:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:90:47:B7:B9:67:D1:F2:D3:1C:6A:43:8A:89:09:D4:6F:DE:35:41
            X509v3 Authority Key Identifier:
                keyid:26:88:D4:8E:34:21:92:B5:FD:A8:DB:6D:AD:62:CC:15:C8:75:03:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BDE68/80B2F3F815EA11E8A7353613C4F9AE02/JojUjjQhkrX9qNttrWLMFch1A_o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JojUjjQhkrX9qNttrWLMFch1A_o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDE68/80B2F3F815EA11E8A7353613C4F9AE02/JojUjjQhkrX9qNttrWLMFch1A_o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:fd:00:1d:28:f2:7b:9f:fa:c2:2c:1b:3b:7f:86:1f:34:e0:
         65:50:92:2b:81:94:d9:80:4a:c4:a8:51:65:1d:97:23:41:fc:
         72:a4:4e:98:d8:f0:0c:b8:37:e0:f5:44:a7:0f:c3:bb:12:b9:
         0c:03:85:ff:6a:13:5f:94:c6:fc:3e:5d:cc:e6:6a:16:37:d4:
         62:a0:03:de:85:48:73:59:9a:dd:3b:44:ac:62:07:ff:81:a1:
         58:99:60:56:59:22:e9:b4:fd:e7:dd:b1:4c:17:41:3a:af:06:
         f4:3e:b5:00:be:48:02:72:77:63:6f:5f:06:20:7f:44:f5:dc:
         f2:46:76:83:a0:95:3c:07:cd:67:3b:37:ec:c8:e3:7d:3c:e6:
         ff:de:85:e7:07:e4:ea:2e:19:30:97:f3:3a:21:cb:af:ab:7b:
         4b:ea:0c:84:4f:4c:01:85:6c:2d:45:1d:1b:23:1d:49:2f:e9:
         46:93:dc:86:4d:15:b0:d8:39:74:8c:72:45:db:1a:cb:04:82:
         0a:48:78:27:60:4c:28:bd:91:6b:a0:cf:92:cd:9b:b8:5c:9b:
         1d:0f:f2:73:c9:2e:f7:c8:17:93:b2:b4:7f:76:7f:3a:1a:7c:
         f5:15:9b:f1:0a:e2:c7:8d:f6:3a:92:37:39:f3:06:ee:89:b8:
         f3:ce:bf:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:36:17 2025 by rpki-client