Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.mft
File:                     qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.mft (raw, json)
Hash identifier:          YKddNIqk8QvXYriOxwh2KaW7aQec0pVtiA+wjR/ldS8=
Subject key identifier:   62:EB:81:11:44:61:42:95:EE:B9:3A:89:99:22:84:64:D7:0F:AB:06
Authority key identifier: AB:16:27:B7:A8:51:43:92:E1:C6:78:B7:B0:78:85:5A:44:55:66:E4
Certificate issuer:       /CN=A912A13F/serialNumber=AB1627B7A8514392E1C678B7B078855A445566E4
Certificate serial:       0851
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.mft
Manifest number:          084A
Signing time:             Thu 30 Jan 2025 20:46:37 +0000
Manifest this update:     Thu 30 Jan 2025 20:46:37 +0000
Manifest next update:     Thu 06 Feb 2025 20:46:37 +0000
Files and hashes:         1: qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.crl (hash: M9JXGyZXjsO0cCFpOGY+lLNmHVTMYZFeDZ4E4BfDOlM=)
                          2: 34E1DFE8BF7011EAB745BE31C4F9AE02.roa (hash: Ikd/LHIFGkrNvlawlhSa/JEAr9UmpAWA/8H+UH2uQws=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2129 (0x851)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A13F/serialNumber=AB1627B7A8514392E1C678B7B078855A445566E4
        Validity
            Not Before: Jan 30 20:46:37 2025 GMT
            Not After : Feb  6 20:46:37 2025 GMT
        Subject: CN=679be52d-0aca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:57:17:5f:63:72:af:29:be:48:ab:10:17:58:
                    d3:42:de:fd:46:6f:fa:07:3b:d0:8b:62:95:40:e8:
                    ab:cd:f9:d1:ec:cb:84:16:38:b2:53:a5:f2:5f:e6:
                    d1:3b:65:82:d3:df:cc:be:36:de:b0:5b:26:21:a2:
                    49:7b:e3:ec:98:b4:2d:3c:55:ed:4d:b6:7a:c2:8b:
                    fa:10:63:dc:11:da:70:14:ba:f4:d9:7a:98:af:42:
                    d8:58:62:a0:ac:c3:83:e3:43:0f:8b:38:f2:e6:60:
                    ac:8e:5c:09:a3:6e:8f:4d:8d:5c:68:cb:8f:37:48:
                    a0:56:03:a3:b0:22:88:38:6a:c6:54:bb:e6:03:b2:
                    13:f9:3f:71:a5:6d:37:37:57:39:b3:83:fa:dd:f2:
                    19:eb:10:14:87:20:30:e8:0b:b9:0d:90:4f:f7:52:
                    67:11:9f:06:64:91:50:db:36:80:c7:c5:3e:19:ec:
                    d0:c8:9f:21:e5:2d:9c:d0:f2:dc:fe:4f:7c:a0:d1:
                    04:94:be:2b:8b:67:52:e5:4f:dc:01:e9:56:85:c0:
                    a8:20:25:ab:47:85:99:d8:31:93:b9:39:6c:a9:66:
                    c0:00:ad:b4:99:6f:71:bd:05:10:01:db:0f:d0:30:
                    9e:1a:e9:56:04:99:f5:e6:57:fa:0f:ce:3f:84:33:
                    ad:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:EB:81:11:44:61:42:95:EE:B9:3A:89:99:22:84:64:D7:0F:AB:06
            X509v3 Authority Key Identifier:
                keyid:AB:16:27:B7:A8:51:43:92:E1:C6:78:B7:B0:78:85:5A:44:55:66:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:0e:2a:e6:b9:61:c7:ed:2f:2f:0d:2b:aa:4d:82:5b:4b:bc:
         1b:d0:aa:65:93:67:2d:00:f0:4e:3e:5e:d6:cd:23:86:98:9d:
         29:9b:a5:c0:11:d2:15:17:a9:b2:68:dc:5d:5e:94:71:e2:bf:
         b3:a2:57:03:e8:d7:00:de:56:ca:ff:cf:6e:c3:12:23:b9:2e:
         7d:2e:b9:3f:cd:0c:d3:79:b5:81:77:7f:d2:ce:81:e3:a9:d7:
         45:73:39:7c:b7:b1:ff:75:78:03:9c:84:e9:a5:e9:11:50:69:
         23:aa:4d:cb:47:0b:06:85:eb:a8:fb:72:53:00:a1:b8:64:7b:
         62:97:ba:9c:a0:68:95:cd:12:91:d8:3e:80:57:e0:73:9c:90:
         96:82:f0:08:ea:dc:11:62:59:2a:1f:83:b6:ad:12:fe:2c:de:
         14:59:6f:8e:e5:fb:b4:42:1c:4e:2e:78:02:5f:ed:b5:57:49:
         13:ff:e6:54:41:1c:ae:e9:7f:22:ee:d0:70:bd:c7:75:cd:3a:
         a0:71:bc:45:1c:e2:67:56:bd:61:51:dc:d2:01:fb:6a:55:a1:
         58:79:d7:22:89:8f:2c:60:6d:67:31:85:7e:6e:96:5e:e4:cc:
         9d:8b:cb:a0:cf:92:72:24:8f:7e:f3:b9:a6:d1:7b:3a:c7:17:
         22:82:71:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:31:21 2025 by rpki-client