Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft
File:                     o_JydS7F2eEp5N_KCAuI05t5SUQ.mft (raw, json)
Hash identifier:          mLvC88QNKZYkfam4qPAiU0BKo+IYHrVTLinLvJGZUTM=
Subject key identifier:   6A:01:99:66:88:00:53:59:C5:5F:39:11:89:99:7D:52:F0:21:DE:A3
Authority key identifier: A3:F2:72:75:2E:C5:D9:E1:29:E4:DF:CA:08:0B:88:D3:9B:79:49:44
Certificate issuer:       /CN=A91E504E/serialNumber=A3F272752EC5D9E129E4DFCA080B88D39B794944
Certificate serial:       037F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft
Manifest number:          0374
Signing time:             Fri 31 Jan 2025 00:58:26 +0000
Manifest this update:     Fri 31 Jan 2025 00:58:25 +0000
Manifest next update:     Fri 07 Feb 2025 00:58:25 +0000
Files and hashes:         1: o_JydS7F2eEp5N_KCAuI05t5SUQ.crl (hash: 2RzddhIIjPsJ9n35GeYytErQTii7fo4R6VOzVqxW06c=)
                          2: 60523BEA0CA411ED96936D79C4F9AE02.roa (hash: 53okBBihrVod9gd5c53/fKO2EZYSA4Bon9/JWGkN+Rg=)
                          3: 39574A98960D11ECAAC81D60C4F9AE02.roa (hash: 2N56kFgApjf7qIYT6IwxnOYom7Jlq6/P84ID+wKdJxY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 895 (0x37f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E504E/serialNumber=A3F272752EC5D9E129E4DFCA080B88D39B794944
        Validity
            Not Before: Jan 31 00:58:25 2025 GMT
            Not After : Feb  7 00:58:25 2025 GMT
        Subject: CN=679c2031-7ed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b0:27:8c:49:4e:78:66:9c:1c:4c:d9:f2:9a:
                    e5:7c:70:15:30:f7:3b:10:8e:be:ef:50:c5:e9:57:
                    f3:e4:08:a6:96:7e:02:55:64:22:10:63:ff:35:71:
                    55:00:56:52:f5:b3:e9:4c:e2:d6:cc:04:9e:7e:08:
                    c8:a2:3d:5f:13:86:78:9f:51:63:ac:89:39:91:17:
                    0a:5c:a2:c1:cf:a7:c9:28:46:34:bc:2d:d1:0f:45:
                    ed:37:6c:32:0d:36:1f:50:20:76:9d:2c:4e:f1:e9:
                    a7:38:cc:0b:14:e0:96:4a:cc:91:74:ad:20:3f:88:
                    40:44:b5:a2:7c:45:98:21:bd:c4:79:bf:7b:89:3d:
                    cb:c0:9c:dd:97:4d:e5:e7:32:3a:9e:98:60:6d:44:
                    78:21:51:b9:10:a6:8d:dc:55:06:0f:9c:c4:6f:b0:
                    1b:ad:4a:92:34:53:cb:e2:1a:ad:70:10:01:57:81:
                    ef:e5:ba:e6:ce:ad:8b:0e:62:7d:ce:50:18:aa:65:
                    f0:fc:f1:76:76:92:b1:1f:c5:62:e6:a9:a9:28:7d:
                    f6:ea:88:af:e4:09:38:9c:8e:ff:0f:8c:7c:10:98:
                    1d:bc:1c:63:b4:8e:13:8f:60:f1:50:c1:e7:9e:c7:
                    6b:aa:2e:2d:d5:a5:ce:16:9d:7d:82:4e:dc:99:38:
                    4d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:01:99:66:88:00:53:59:C5:5F:39:11:89:99:7D:52:F0:21:DE:A3
            X509v3 Authority Key Identifier:
                keyid:A3:F2:72:75:2E:C5:D9:E1:29:E4:DF:CA:08:0B:88:D3:9B:79:49:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:9c:ba:00:3c:29:f1:0a:04:5e:fb:04:8f:e7:28:15:11:02:
         82:6a:6c:36:e5:c5:46:ab:20:95:c2:d6:a6:45:fb:49:a2:70:
         b6:9b:23:96:2a:c1:84:7e:bb:fe:b2:d5:a8:5f:13:2b:90:11:
         03:1e:4b:b3:8c:95:9a:94:b6:2e:e6:98:e2:8a:bc:d5:d2:d9:
         b5:3f:7b:45:e2:b6:a9:2e:ac:93:b3:20:17:8e:fc:59:a8:02:
         0a:7e:35:42:89:d0:70:91:d5:34:db:09:e7:06:c2:fd:3f:35:
         f4:a3:3d:d5:11:d8:69:cd:65:57:5e:6b:a3:aa:69:75:0a:dc:
         dc:c9:4e:f5:89:db:87:ce:e0:6b:6c:c2:12:89:01:14:cb:96:
         bd:cb:2b:76:a8:f7:79:09:6b:fa:94:89:86:e0:a1:6f:a7:52:
         ff:ce:64:b1:96:8b:bd:3c:1e:80:9a:74:ef:eb:86:bc:9e:33:
         2d:2a:15:5a:b7:e0:f5:2e:1e:04:61:29:f9:17:3a:55:94:c7:
         ac:14:bb:ba:43:df:9a:01:10:f0:34:7d:be:fe:61:a6:c7:b9:
         cb:de:9d:0c:d2:46:a2:36:11:b5:c1:54:a0:44:95:c3:4b:41:
         76:db:f7:86:ff:07:e2:85:98:1a:03:2a:cd:08:ab:11:80:e3:
         77:53:05:76
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA38wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTUwNEUxMTAvBgNVBAUTKEEzRjI3Mjc1MkVDNUQ5RTEyOUU0REZDQTA4MEI4OEQz
OUI3OTQ5NDQwHhcNMjUwMTMxMDA1ODI1WhcNMjUwMjA3MDA1ODI1WjAYMRYwFAYD
VQQDEw02NzljMjAzMS03ZWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAurAnjElOeGacHEzZ8prlfHAVMPc7EI6+71DF6Vfz5Aimln4CVWQiEGP/NXFV
AFZS9bPpTOLWzASefgjIoj1fE4Z4n1FjrIk5kRcKXKLBz6fJKEY0vC3RD0XtN2wy
DTYfUCB2nSxO8emnOMwLFOCWSsyRdK0gP4hARLWifEWYIb3Eeb97iT3LwJzdl03l
5zI6nphgbUR4IVG5EKaN3FUGD5zEb7AbrUqSNFPL4hqtcBABV4Hv5brmzq2LDmJ9
zlAYqmXw/PF2dpKxH8Vi5qmpKH326oiv5Ak4nI7/D4x8EJgdvBxjtI4Tj2DxUMHn
nsdrqi4t1aXOFp19gk7cmThNVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGoBmWaI
AFNZxV85EYmZfVLwId6jMB8GA1UdIwQYMBaAFKPycnUuxdnhKeTfyggLiNObeUlE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTA0RS81OTA5NDk5MDk2
MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9vX0p5ZFM3RjJlRXA1Tl9LQ0F1STA1dDVT
VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29fSnlkUzdGMmVFcDVOX0tDQXVJMDV0NVNVUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NTA0RS81OTA5NDk5MDk2MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9vX0p5ZFM3RjJl
RXA1Tl9LQ0F1STA1dDVTVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBUnLoAPCnxCgRe+wSP5ygVEQKCamw25cVGqyCVwtamRftJonC2myOW
KsGEfrv+stWoXxMrkBEDHkuzjJWalLYu5pjiirzV0tm1P3tF4rapLqyTsyAXjvxZ
qAIKfjVCidBwkdU02wnnBsL9PzX0oz3VEdhpzWVXXmujqml1CtzcyU71iduHzuBr
bMISiQEUy5a9yyt2qPd5CWv6lImG4KFvp1L/zmSxlou9PB6AmnTv64a8njMtKhVa
t+D1Lh4EYSn5FzpVlMesFLu6Q9+aARDwNH2+/mGmx7nL3p0M0kaiNhG1wVSgRJXD
S0F22/eG/wfihZgaAyrNCKsRgON3UwV2
-----END CERTIFICATE-----
Generated at Sat Apr 26 03:34:48 2025 by rpki-client