Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft
File:                     QMCQUT8kAYkgsVHapVRJwV3IS-s.mft (raw, json)
Hash identifier:          somoRZMZqsgGrjvfwl7vrlD4wrZN5Su1Jr4WvbW82Vs=
Subject key identifier:   77:A1:0A:FE:18:7B:DA:58:6D:71:DF:45:BB:E8:82:4F:C6:C8:C2:63
Authority key identifier: 40:C0:90:51:3F:24:01:89:20:B1:51:DA:A5:54:49:C1:5D:C8:4B:EB
Certificate issuer:       /CN=A9111ED2/serialNumber=40C090513F24018920B151DAA55449C15DC84BEB
Certificate serial:       097F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft
Manifest number:          0978
Signing time:             Thu 30 Jan 2025 20:13:29 +0000
Manifest this update:     Thu 30 Jan 2025 20:13:28 +0000
Manifest next update:     Thu 06 Feb 2025 20:13:28 +0000
Files and hashes:         1: QMCQUT8kAYkgsVHapVRJwV3IS-s.crl (hash: icKrbkaapsvsw1pq5JzLVHStFepo/UYDE5jbRUGGQK0=)
                          2: 1E809CD0845111EAA961467EC4F9AE02.roa (hash: H/OVGlOkL0NhP3BGJyz6i1zChcNr+09N/UDEg/ELwo0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2431 (0x97f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111ED2/serialNumber=40C090513F24018920B151DAA55449C15DC84BEB
        Validity
            Not Before: Jan 30 20:13:28 2025 GMT
            Not After : Feb  6 20:13:28 2025 GMT
        Subject: CN=679bdd69-ff17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:76:fa:d8:4e:5b:73:4a:09:7f:2d:61:67:4c:
                    4c:cd:3f:dd:79:fb:a5:66:0a:f1:2f:06:55:3c:0f:
                    65:de:0f:37:84:2b:11:2c:4d:0c:20:c9:2f:90:91:
                    7f:fc:ec:96:26:0f:1c:74:bd:b7:a6:5b:42:87:4f:
                    12:58:58:28:f8:43:77:4b:fb:4a:ba:98:14:47:f5:
                    21:20:b7:9d:f2:87:08:0d:e3:63:79:5b:e1:ae:d0:
                    bc:3c:ce:9c:8c:d0:a0:e3:45:5b:41:28:2e:c3:7a:
                    10:6a:f7:32:82:ca:42:3d:40:20:84:67:f6:8d:5d:
                    51:f0:f3:40:b1:5c:50:c3:df:5a:f8:1b:d0:84:fc:
                    5a:32:46:a7:64:02:07:dc:ad:76:5c:d9:44:d1:67:
                    b1:c2:88:4b:41:24:81:75:3b:66:18:92:fe:ec:3f:
                    7f:ec:6e:bb:cd:37:e3:d0:d7:8b:8b:b7:5e:7d:9a:
                    6a:d7:08:f4:32:05:91:e2:29:2f:e5:80:28:2a:11:
                    3c:6f:83:b9:4d:f4:64:2d:b3:51:34:0e:c8:c2:d0:
                    ab:ca:23:61:f0:13:8d:ab:58:51:36:11:3b:98:c9:
                    de:63:a6:f6:e7:df:29:32:fb:6a:76:a8:cb:2e:f9:
                    79:de:23:de:a6:3a:9b:b4:b5:11:da:4f:ff:93:55:
                    83:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:A1:0A:FE:18:7B:DA:58:6D:71:DF:45:BB:E8:82:4F:C6:C8:C2:63
            X509v3 Authority Key Identifier:
                keyid:40:C0:90:51:3F:24:01:89:20:B1:51:DA:A5:54:49:C1:5D:C8:4B:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:31:5d:9c:5b:4e:73:15:b0:af:1f:db:1f:cf:f4:46:53:d3:
         3f:48:da:2d:26:c0:9a:0c:bf:d3:d3:cd:95:62:2a:25:cc:a4:
         9d:7c:80:1d:24:7b:99:6f:ea:3f:11:33:76:6d:10:7f:de:6a:
         1b:4b:49:ff:e2:83:d8:54:6a:d1:b6:74:aa:91:f0:64:d1:7e:
         8a:fa:fd:e0:c4:f6:4f:86:3e:4a:c6:34:21:b4:de:f0:8c:24:
         42:2d:3d:dc:9e:61:83:61:10:80:f3:32:07:17:fa:97:6a:12:
         a6:94:5f:2b:64:88:51:3a:ab:f4:a1:63:e1:8e:5b:60:f5:ec:
         9d:7c:d2:5b:77:b0:b3:9d:f6:cc:d5:bb:19:03:d0:89:a0:73:
         22:7c:7b:e1:3c:bb:6f:03:77:d5:a0:e3:1a:13:63:81:68:1e:
         9b:8b:53:fe:7e:bb:1e:db:09:fa:43:40:c3:80:b6:5c:4c:7b:
         33:56:70:cd:5e:0c:fa:a8:88:41:44:3c:0b:f7:ce:9a:15:91:
         28:d2:78:bb:49:3f:fd:a2:6e:30:09:46:e3:9f:74:7b:1a:3d:
         e7:c5:a2:3f:07:ba:1a:35:29:ad:65:86:0c:85:78:2b:17:51:
         bf:30:cc:67:8d:f7:a3:2a:8c:74:f3:67:8a:18:46:cb:ab:3d:
         83:c8:e2:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:03:31 2025 by rpki-client