Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.mft
File:                     JrLIRi_qHaUUFmtbE5CtDMJ3pag.mft (raw, json)
Hash identifier:          IFibJVhqd+6tNejQMRnMSZVRRhbCDuN2++cD+DdiCkc=
Subject key identifier:   03:C9:34:B5:B7:62:B0:6D:64:37:69:CA:F4:57:8E:46:A4:45:49:B6
Authority key identifier: 26:B2:C8:46:2F:EA:1D:A5:14:16:6B:5B:13:90:AD:0C:C2:77:A5:A8
Certificate issuer:       /CN=A91DD5EC/serialNumber=26B2C8462FEA1DA514166B5B1390AD0CC277A5A8
Certificate serial:       0161
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JrLIRi_qHaUUFmtbE5CtDMJ3pag.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.mft
Manifest number:          015B
Signing time:             Sat 29 Mar 2025 03:32:56 +0000
Manifest this update:     Sat 29 Mar 2025 03:32:55 +0000
Manifest next update:     Sat 05 Apr 2025 03:32:55 +0000
Files and hashes:         1: JrLIRi_qHaUUFmtbE5CtDMJ3pag.crl (hash: zPOTQfBP4b7wiiXnGj05Q3TFd1pq+6ND3llvY//zbQs=)
                          2: EB75D8C4FDE111ED848B004CC4F9AE02.roa (hash: bEYOw16YffGMy8yneXxHr3Zrg83Aj3Be9wOSROcVCMY=)
                          3: 2DDB3932FF4711EDA9459E3DC4F9AE02.roa (hash: 43u6VU4uVf/bt9Gf14qd7/mI+N905JTL9noJWyloshU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 353 (0x161)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD5EC
        Validity
            Not Before: Mar 29 03:32:55 2025 GMT
            Not After : Apr  5 03:32:55 2025 GMT
        Subject: CN=67e769e8-318d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1c:e0:ce:d5:3f:82:14:7e:52:31:7b:4d:00:
                    a2:8c:f1:a0:05:a4:c3:36:2d:ee:ee:ed:9e:40:4d:
                    37:4a:37:37:c9:5e:24:9e:b9:dd:a4:eb:35:e8:4b:
                    d6:b3:37:76:95:74:b4:a3:2b:f5:fc:63:28:34:ab:
                    32:4c:43:77:14:11:5d:e1:02:58:24:5f:3b:e4:7d:
                    10:3d:44:10:7f:cb:ec:f3:16:a9:f3:1c:fa:32:78:
                    88:39:6a:02:49:f0:21:65:a1:2f:ca:37:e2:fa:8f:
                    3f:f3:65:1f:6f:df:40:6b:0c:28:97:39:7d:30:ca:
                    59:87:9b:4f:66:de:42:da:68:94:e3:5b:b1:a7:94:
                    40:92:bc:a2:d4:3d:96:f9:42:4f:04:b3:f4:14:76:
                    90:be:d0:85:7e:02:4d:42:50:3f:0e:52:e6:9e:0f:
                    41:56:48:4a:7d:ae:33:92:39:6d:3d:f8:e8:55:17:
                    d8:c3:24:fa:72:8a:98:cd:8b:ef:b2:56:d4:c7:c7:
                    f7:55:c2:2c:ad:a1:7a:58:00:26:1c:e3:c5:90:11:
                    a5:3a:21:a5:8a:0f:e1:5b:bf:d3:83:0c:53:20:6d:
                    d0:32:4a:b9:fe:17:51:1c:5c:5b:4e:5e:a3:ae:7d:
                    a5:47:ed:f3:1d:58:d4:6e:db:38:9e:7c:9c:7f:b7:
                    c4:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C9:34:B5:B7:62:B0:6D:64:37:69:CA:F4:57:8E:46:A4:45:49:B6
            X509v3 Authority Key Identifier:
                keyid:26:B2:C8:46:2F:EA:1D:A5:14:16:6B:5B:13:90:AD:0C:C2:77:A5:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JrLIRi_qHaUUFmtbE5CtDMJ3pag.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:43:bd:2c:9b:6f:93:0a:cf:7e:7d:ff:ee:ea:76:45:94:2e:
         60:7b:f2:72:e6:49:6c:e2:a5:8a:79:07:09:42:f1:49:69:d8:
         ef:19:a1:39:df:ae:64:4f:62:3e:7b:d5:d1:46:83:a5:8b:e8:
         f4:66:95:4d:e2:aa:80:0d:8c:f7:a9:15:d5:15:31:4b:3a:e2:
         67:54:75:cb:c1:95:ba:8f:95:6b:ce:ff:f8:8c:35:00:62:3f:
         ab:1a:25:f2:86:d3:a9:d4:3a:69:8e:98:dd:7e:22:94:0f:16:
         46:66:e2:b1:cd:e8:8a:25:70:20:72:9d:31:dd:16:14:c3:a1:
         c9:10:ba:81:e2:63:89:5e:fa:2b:b6:23:40:9c:16:36:58:80:
         72:dd:e7:38:5e:ac:34:64:cb:d4:dd:af:99:c6:58:c9:b2:44:
         72:58:79:22:6a:a5:80:4f:17:a6:a9:74:ca:aa:ad:fc:1a:6d:
         34:2b:be:cd:47:62:f9:f0:49:10:55:f3:06:4d:ae:fc:cc:7c:
         69:71:d9:3a:f7:21:56:ad:0a:30:5c:ef:e7:91:b3:8d:06:9e:
         da:94:f6:ff:3f:91:63:c4:a4:17:b5:6d:46:ac:ca:84:99:03:
         e6:4d:63:56:dc:5e:11:8f:c9:9f:99:cc:9c:0f:ec:db:bf:96:
         5f:04:63:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:26:33 2025 by rpki-client