Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.mft
File:                     JJNuE2nJDB7fka9Qctc_50V9yUM.mft (raw, json)
Hash identifier:          COqx8L0MUDlJXF0nxiPsU0VUVheOPQdorEemq+AqoHE=
Subject key identifier:   AC:55:D6:4D:B8:5F:64:81:0C:4B:99:64:FA:C1:94:F9:5C:D7:2C:A1
Authority key identifier: 24:93:6E:13:69:C9:0C:1E:DF:91:AF:50:72:D7:3F:E7:45:7D:C9:43
Certificate issuer:       /CN=A91D8B7C/serialNumber=24936E1369C90C1EDF91AF5072D73FE7457DC943
Certificate serial:       1381
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JJNuE2nJDB7fka9Qctc_50V9yUM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.mft
Manifest number:          1376
Signing time:             Fri 31 Jan 2025 16:58:38 +0000
Manifest this update:     Fri 31 Jan 2025 16:58:37 +0000
Manifest next update:     Fri 07 Feb 2025 16:58:37 +0000
Files and hashes:         1: JJNuE2nJDB7fka9Qctc_50V9yUM.crl (hash: G7YBrnPk/kchtSUlTfSGrTQdKFsvC68VjT1pBmCW5Kw=)
                          2: C2AB1A10B64411E89321A417C4F9AE02.roa (hash: sQZhVCqGnQgPNsHomc/Him+uzpF3a8NDcj08KMyeCpg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4993 (0x1381)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8B7C/serialNumber=24936E1369C90C1EDF91AF5072D73FE7457DC943
        Validity
            Not Before: Jan 31 16:58:37 2025 GMT
            Not After : Feb  7 16:58:37 2025 GMT
        Subject: CN=679d013d-389b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9c:18:a7:84:2e:11:2d:2d:5a:ec:46:56:08:
                    3a:cd:bf:64:b3:0e:4d:d3:27:97:72:7f:e6:44:71:
                    ee:b9:53:e1:c8:de:0c:71:88:56:66:62:6d:9c:4b:
                    d6:0f:82:21:4b:b7:de:9b:b2:bf:f4:28:36:c8:b9:
                    8f:66:94:d5:57:06:d9:bb:e5:70:d4:f1:35:7e:a0:
                    5b:28:f0:9f:ab:98:90:46:98:62:3b:ee:e3:96:d6:
                    7a:78:ad:59:91:73:1f:92:aa:0e:71:2c:a4:24:7c:
                    d8:08:60:01:11:61:45:ec:ea:f0:d2:9f:74:da:c6:
                    3d:5c:3b:ba:31:e6:07:af:3d:6b:71:9f:40:4f:b3:
                    a3:ce:67:32:c4:42:38:7e:c0:9f:d7:99:8c:be:88:
                    6c:15:f4:fb:27:90:93:bd:66:43:8c:ac:c4:ca:3c:
                    e6:59:a5:f8:e6:a5:2d:11:1e:90:b1:46:65:33:d8:
                    7d:75:04:cf:27:5d:1f:3f:91:d9:de:1a:df:8b:0d:
                    af:90:51:2c:8e:16:a6:c3:ee:27:2e:9d:6f:c9:ba:
                    b8:bf:7a:c1:77:98:e9:80:7e:21:fa:b1:dd:de:fb:
                    bc:6d:61:fd:cc:d4:1d:75:49:de:f5:5c:f5:9b:7c:
                    a8:15:e5:3b:ea:88:0f:43:b5:3d:e5:06:2f:c5:e5:
                    aa:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:55:D6:4D:B8:5F:64:81:0C:4B:99:64:FA:C1:94:F9:5C:D7:2C:A1
            X509v3 Authority Key Identifier:
                keyid:24:93:6E:13:69:C9:0C:1E:DF:91:AF:50:72:D7:3F:E7:45:7D:C9:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JJNuE2nJDB7fka9Qctc_50V9yUM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:e7:4d:2d:e8:94:40:e9:34:c1:77:8b:bc:42:f5:4c:75:51:
         4e:93:34:8b:46:34:a7:85:65:d8:99:cf:3d:e1:b2:d2:79:c5:
         40:6f:8a:36:a3:74:84:09:8f:bd:9b:95:5d:8b:73:8e:d5:a7:
         a5:1b:c8:05:f8:e1:97:77:1e:67:ca:28:c7:e7:44:8d:27:76:
         d6:8e:f1:ac:f6:8e:00:20:e4:7d:ef:25:ed:e3:af:32:0e:ed:
         10:b8:bf:a8:5b:f6:bb:4b:ce:da:07:6d:2e:e2:92:01:12:71:
         6e:a3:53:52:d3:e3:c1:de:e2:e8:2e:01:b4:e8:09:75:46:c8:
         a0:4a:60:6f:1a:f0:78:63:60:31:2a:b3:c5:63:85:70:19:e1:
         e5:a8:94:85:8d:44:5c:bb:24:7f:1e:81:27:4b:83:62:b6:35:
         a5:ee:e1:0a:d7:1b:9a:e3:c8:b7:89:26:3e:da:81:18:9e:c9:
         6f:f3:1d:2d:cf:50:14:fe:c5:ef:93:04:e6:f8:59:95:56:c2:
         7c:d8:5f:84:61:38:41:cf:ed:90:5f:f2:c2:7e:6f:8a:ac:aa:
         30:f1:15:04:c4:d4:88:4b:0c:57:1d:d6:2d:96:78:36:fc:b4:
         b9:6c:8e:bc:2b:8b:69:24:64:64:78:ad:56:aa:c4:80:43:6e:
         7e:20:c2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:59:20 2025 by rpki-client