Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft
File:                     qvquPFcDs5M3_T16lmbFjLjDtQk.mft (raw, json)
Hash identifier:          NaZOQmtt29cXh4CfSkcEIgFKB7pjxNNceBk3lEsaSIQ=
Subject key identifier:   92:32:52:DF:0D:1A:9A:57:E5:AD:EF:AC:99:26:1A:A0:C0:7C:8B:64
Authority key identifier: AA:FA:AE:3C:57:03:B3:93:37:FD:3D:7A:96:66:C5:8C:B8:C3:B5:09
Certificate issuer:       /CN=A9117394/serialNumber=AAFAAE3C5703B39337FD3D7A9666C58CB8C3B509
Certificate serial:       3517
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft
Manifest number:          34B9
Signing time:             Fri 31 Jan 2025 14:18:36 +0000
Manifest this update:     Fri 31 Jan 2025 14:18:35 +0000
Manifest next update:     Fri 07 Feb 2025 14:18:35 +0000
Files and hashes:         1: qvquPFcDs5M3_T16lmbFjLjDtQk.crl (hash: J195thml9Ivw+EiBBB6BeydZTsakFAMv1njer9HbU/c=)
                          2: D52009B06A6311EFA96F023DC4F9AE02.roa (hash: F5aTMcUYsmdixUm9yQzG1VwvhsqYUF6nPzXXk9qwa44=)
                          3: 90F73AF40E2511EBBB7F993CC4F9AE02.roa (hash: xfrnwW4CE8rEb6G9IL8uJB1Hv4mR3WOgjrI080cSfHc=)
                          4: 4D91B0C25ED111EFAFFEA662C4F9AE02.roa (hash: qedOB7JdFBTfxxMEPND3tzfrdQHqBUmjzqhuDo8ig1E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13591 (0x3517)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9117394/serialNumber=AAFAAE3C5703B39337FD3D7A9666C58CB8C3B509
        Validity
            Not Before: Jan 31 14:18:35 2025 GMT
            Not After : Feb  7 14:18:35 2025 GMT
        Subject: CN=679cdbbb-ccfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ae:8e:9b:9e:6d:83:cd:fb:00:44:7d:2a:2e:
                    6a:b1:e4:53:66:89:fe:13:26:ef:ec:bd:62:a7:97:
                    0e:71:6d:dc:a3:55:76:83:81:d4:49:08:a8:47:71:
                    1c:65:ed:19:6f:ca:eb:72:74:02:d0:41:6b:43:eb:
                    98:45:fa:53:b6:d1:af:c0:5f:68:a6:37:f2:7c:f0:
                    2a:32:49:83:56:21:86:a0:6d:ed:6a:dd:72:f9:bc:
                    d8:c4:fd:32:f9:de:7e:46:44:7c:6f:b3:98:26:ac:
                    f9:46:79:47:b7:31:fe:a9:0f:7e:a3:14:d5:8c:fe:
                    74:8c:f1:90:e1:a8:13:c6:d7:ce:1b:3c:77:3f:11:
                    51:5d:55:3d:15:47:c1:1f:56:7f:a3:69:ec:3f:a6:
                    5e:3a:a0:4a:ab:ab:f8:fc:76:fb:3d:35:c8:11:fd:
                    ca:02:cb:49:64:84:96:da:17:17:2f:71:25:3a:c7:
                    d5:a2:40:c6:24:d7:2e:c3:ba:15:38:bf:d9:7c:4a:
                    25:30:0e:ab:0d:3e:d4:64:d3:eb:4b:60:be:ca:95:
                    ff:0c:ff:fd:26:a5:82:ed:05:73:f9:32:08:84:2a:
                    26:27:62:39:55:62:0c:10:aa:70:ed:9c:69:b5:55:
                    b6:88:78:19:45:9a:6b:bd:75:db:16:33:eb:00:eb:
                    27:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:32:52:DF:0D:1A:9A:57:E5:AD:EF:AC:99:26:1A:A0:C0:7C:8B:64
            X509v3 Authority Key Identifier:
                keyid:AA:FA:AE:3C:57:03:B3:93:37:FD:3D:7A:96:66:C5:8C:B8:C3:B5:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:ad:5a:b6:d7:47:a9:af:4a:b7:cd:b4:23:a9:85:af:80:b4:
         b1:68:7e:4b:bf:57:b8:20:02:b7:47:4c:b3:61:17:a1:53:bf:
         ad:e6:de:a2:a6:62:81:be:09:e2:9c:24:be:d0:c1:84:35:51:
         a5:cc:ea:65:af:77:3d:d0:46:f6:4d:a7:e5:6c:dc:98:56:ba:
         98:ac:78:55:3b:f5:89:09:58:a2:08:93:18:b4:28:87:d1:6e:
         b6:51:5c:10:9f:4e:59:56:45:0f:2f:cb:45:0f:b6:c8:33:9b:
         1b:c5:dc:5c:a0:aa:63:8c:4e:54:b0:c6:bf:4a:59:3d:36:5c:
         22:e5:c9:3f:19:31:d0:3a:b5:b9:8b:a9:4d:6a:0f:e4:8f:28:
         40:cb:f1:c0:af:78:69:00:b6:b1:af:04:38:df:9c:cf:5d:79:
         bf:25:73:95:86:f1:84:8d:98:d0:b1:18:98:04:4a:73:e5:0a:
         23:4d:d9:a3:ef:e2:a2:ca:1a:c5:91:78:19:af:36:54:99:5a:
         41:06:db:44:27:8e:15:0f:47:57:0b:20:47:c5:60:3f:cf:af:
         44:aa:04:1d:a2:0f:df:6b:70:1f:98:7f:c0:ad:79:b3:a7:65:
         3f:0d:a5:50:be:d7:4e:58:1b:4b:d9:6b:8a:55:43:a8:a8:22:
         6b:ef:e1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 14:37:14 2025 by rpki-client