Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4325/ED8565E8812F11EB94D38132C4F9AE02/Jf1ayZmwOV5sDr1WHhsbiODWB2M.mft
File:                     Jf1ayZmwOV5sDr1WHhsbiODWB2M.mft (raw, json)
Hash identifier:          GjjsyVVNZpaBM52zfn5kVbb9dozSA1RtUmdkt17GxoY=
Subject key identifier:   A1:2A:CA:61:83:86:DA:11:E5:FA:B9:54:27:BD:15:AE:DC:D8:A9:5D
Authority key identifier: 25:FD:5A:C9:99:B0:39:5E:6C:0E:BD:56:1E:1B:1B:88:E0:D6:07:63
Certificate issuer:       /CN=A91D4325/serialNumber=25FD5AC999B0395E6C0EBD561E1B1B88E0D60763
Certificate serial:       0631
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jf1ayZmwOV5sDr1WHhsbiODWB2M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4325/ED8565E8812F11EB94D38132C4F9AE02/Jf1ayZmwOV5sDr1WHhsbiODWB2M.mft
Manifest number:          0629
Signing time:             Thu 30 Jan 2025 22:39:10 +0000
Manifest this update:     Thu 30 Jan 2025 22:39:10 +0000
Manifest next update:     Thu 06 Feb 2025 22:39:10 +0000
Files and hashes:         1: Jf1ayZmwOV5sDr1WHhsbiODWB2M.crl (hash: Z21Iw5bzykDghzyD6g/xywNUBxAxKAw2ACB2F4xOTPI=)
                          2: CE6FBAEE813111EBA15FAC34C4F9AE02.roa (hash: aM+7gCUGE+qk8+F9OXTcC/AfNjJw372IOJzcraxEznU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1585 (0x631)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4325/serialNumber=25FD5AC999B0395E6C0EBD561E1B1B88E0D60763
        Validity
            Not Before: Jan 30 22:39:10 2025 GMT
            Not After : Feb  6 22:39:10 2025 GMT
        Subject: CN=679bff8e-23a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:de:07:b5:3b:7a:c7:99:f8:25:a0:25:f8:d7:
                    78:29:d0:bd:69:ea:ff:51:74:7a:29:80:86:cd:e4:
                    5c:6d:2a:40:54:69:7c:1f:a4:71:e2:ac:16:98:16:
                    db:0f:a7:0c:58:b7:03:e2:b7:4e:96:c1:fb:5b:8e:
                    0f:f4:ed:1a:c7:b0:4f:9d:c4:d1:3f:fc:7d:52:07:
                    b6:a2:2d:49:78:24:8e:b9:69:18:ff:ea:9f:f7:3c:
                    ad:08:e9:fb:25:da:b9:18:5d:fd:75:8f:ad:64:d8:
                    a7:3a:6e:49:08:62:f6:1c:85:ba:0b:3f:db:04:d1:
                    6f:39:85:58:d2:b6:e0:7e:75:57:99:9e:d7:c6:6f:
                    a6:43:0e:8b:56:fd:b8:6c:c8:66:a0:fe:5e:9d:68:
                    af:85:10:25:19:09:8a:53:6a:bd:44:1d:51:ca:df:
                    f8:2d:ca:b7:a5:c1:5f:de:27:f7:25:d4:26:4e:a1:
                    e0:39:87:c6:80:5f:da:5d:27:38:20:93:61:f0:a1:
                    cd:d5:60:0d:a1:ae:2c:7c:05:18:2b:77:d0:05:b9:
                    ad:2c:60:ad:26:16:79:b9:9e:21:6f:86:f8:3f:ba:
                    ec:2b:d5:02:ee:86:a4:25:67:4d:37:39:4f:9b:f1:
                    70:3b:94:33:72:57:df:77:6a:6d:c7:6a:95:74:0b:
                    29:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:2A:CA:61:83:86:DA:11:E5:FA:B9:54:27:BD:15:AE:DC:D8:A9:5D
            X509v3 Authority Key Identifier:
                keyid:25:FD:5A:C9:99:B0:39:5E:6C:0E:BD:56:1E:1B:1B:88:E0:D6:07:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4325/ED8565E8812F11EB94D38132C4F9AE02/Jf1ayZmwOV5sDr1WHhsbiODWB2M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jf1ayZmwOV5sDr1WHhsbiODWB2M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4325/ED8565E8812F11EB94D38132C4F9AE02/Jf1ayZmwOV5sDr1WHhsbiODWB2M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:6c:c5:84:59:32:e5:96:ea:d9:35:7e:0a:15:f4:1f:f8:36:
         42:4d:25:7c:c7:bf:90:79:ff:65:a5:52:f1:fc:38:2a:8e:7c:
         b2:ed:95:16:fc:c5:6d:2d:17:e6:7c:71:ff:e5:37:de:a4:0e:
         5e:33:c8:5f:07:9a:db:32:c5:34:37:21:1b:ab:72:c1:0e:6f:
         fb:ac:1c:b7:7b:28:27:ff:53:e6:20:4b:3a:3d:a8:d6:a5:3b:
         77:6c:a9:64:20:c5:0d:07:57:f8:24:11:62:23:96:c6:0d:29:
         44:18:a7:89:d7:45:12:79:ae:91:f9:76:ce:94:be:3a:f2:18:
         f1:e9:2c:30:fe:6c:81:df:89:05:ac:72:d8:98:c1:60:d7:4e:
         d4:2e:66:c8:25:95:ce:17:5d:16:01:e1:92:32:39:8c:aa:41:
         e8:49:dd:c8:56:62:ea:57:03:bc:47:c3:05:d0:ef:7e:6b:9d:
         01:9b:e3:17:17:78:f3:e3:f4:8d:26:fb:59:fd:6e:e2:0d:77:
         7b:50:7a:b7:f1:c1:81:f7:55:84:9b:7b:fe:70:e7:aa:a4:e6:
         27:0b:87:cc:35:0e:af:28:e2:d0:8a:34:8c:15:8e:29:b5:dd:
         3d:ca:7a:85:cb:fb:b6:fd:a6:ff:3c:e8:20:d1:87:f6:51:7c:
         26:5d:71:55
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDQzMjUxMTAvBgNVBAUTKDI1RkQ1QUM5OTlCMDM5NUU2QzBFQkQ1NjFFMUIxQjg4
RTBENjA3NjMwHhcNMjUwMTMwMjIzOTEwWhcNMjUwMjA2MjIzOTEwWjAYMRYwFAYD
VQQDEw02NzliZmY4ZS0yM2E0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzN4HtTt6x5n4JaAl+Nd4KdC9aer/UXR6KYCGzeRcbSpAVGl8H6Rx4qwWmBbb
D6cMWLcD4rdOlsH7W44P9O0ax7BPncTRP/x9Uge2oi1JeCSOuWkY/+qf9zytCOn7
Jdq5GF39dY+tZNinOm5JCGL2HIW6Cz/bBNFvOYVY0rbgfnVXmZ7Xxm+mQw6LVv24
bMhmoP5enWivhRAlGQmKU2q9RB1Ryt/4Lcq3pcFf3if3JdQmTqHgOYfGgF/aXSc4
IJNh8KHN1WANoa4sfAUYK3fQBbmtLGCtJhZ5uZ4hb4b4P7rsK9UC7oakJWdNNzlP
m/FwO5Qzclffd2ptx2qVdAspswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKEqymGD
htoR5fq5VCe9Fa7c2KldMB8GA1UdIwQYMBaAFCX9WsmZsDlebA69Vh4bG4jg1gdj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDMyNS9FRDg1NjVFODgx
MkYxMUVCOTREMzgxMzJDNEY5QUUwMi9KZjFheVptd09WNXNEcjFXSGhzYmlPRFdC
Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pmMWF5Wm13T1Y1c0RyMVdIaHNiaU9EV0IyTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NDMyNS9FRDg1NjVFODgxMkYxMUVCOTREMzgxMzJDNEY5QUUwMi9KZjFheVptd09W
NXNEcjFXSGhzYmlPRFdCMk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDCbMWEWTLllurZNX4KFfQf+DZCTSV8x7+Qef9lpVLx/Dgqjnyy7ZUW
/MVtLRfmfHH/5TfepA5eM8hfB5rbMsU0NyEbq3LBDm/7rBy3eygn/1PmIEs6PajW
pTt3bKlkIMUNB1f4JBFiI5bGDSlEGKeJ10USea6R+XbOlL468hjx6Sww/myB34kF
rHLYmMFg107ULmbIJZXOF10WAeGSMjmMqkHoSd3IVmLqVwO8R8MF0O9+a50Bm+MX
F3jz4/SNJvtZ/W7iDXd7UHq38cGB91WEm3v+cOeqpOYnC4fMNQ6vKOLQijSMFY4p
td09ynqFy/u2/ab/POgg0Yf2UXwmXXFV
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:46:13 2025 by rpki-client