Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91315C1/3009A8AA1C5211EA84D19937C4F9AE02/QG4t-6oOoAfdxmmT8sezCNoKGlc.mft
File:                     QG4t-6oOoAfdxmmT8sezCNoKGlc.mft (raw, json)
Hash identifier:          ew4JSYbEr/78drjy/Ehrc3GIxNVQc5BmSldrl7Tu+UA=
Subject key identifier:   47:D0:CB:E4:97:C7:25:A2:3E:EA:31:10:B6:FC:4F:FB:F5:C6:A0:3E
Authority key identifier: 40:6E:2D:FB:AA:0E:A0:07:DD:C6:69:93:F2:C7:B3:08:DA:0A:1A:57
Certificate issuer:       /CN=A91315C1/serialNumber=406E2DFBAA0EA007DDC66993F2C7B308DA0A1A57
Certificate serial:       0B93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QG4t-6oOoAfdxmmT8sezCNoKGlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91315C1/3009A8AA1C5211EA84D19937C4F9AE02/QG4t-6oOoAfdxmmT8sezCNoKGlc.mft
Manifest number:          0B8C
Signing time:             Thu 30 Jan 2025 19:01:21 +0000
Manifest this update:     Thu 30 Jan 2025 19:01:20 +0000
Manifest next update:     Thu 06 Feb 2025 19:01:20 +0000
Files and hashes:         1: QG4t-6oOoAfdxmmT8sezCNoKGlc.crl (hash: Us1FpaqSiJSF8bkWf1S9R+z0ISJ0ZHzs3HTsfH8ZMBA=)
                          2: 9D6DB59E1C5211EA8C6AAE37C4F9AE02.roa (hash: D/Qj3pCK2Np4jpoJRYW5KlTZ+Slzggz4RvRPZv/ZYEY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2963 (0xb93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91315C1/serialNumber=406E2DFBAA0EA007DDC66993F2C7B308DA0A1A57
        Validity
            Not Before: Jan 30 19:01:20 2025 GMT
            Not After : Feb  6 19:01:20 2025 GMT
        Subject: CN=679bcc81-6c1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:46:8e:d3:a7:a6:24:86:dc:65:37:c8:8a:bf:
                    36:55:5c:74:1c:25:89:f7:05:5a:17:e6:3e:8c:04:
                    08:8e:29:97:ad:7e:a6:86:8a:b4:6f:cf:13:20:3d:
                    f4:33:cd:a4:65:34:e3:25:6f:83:d7:ac:c3:c2:14:
                    3e:a1:94:b4:40:1a:89:b3:61:6d:e3:a1:ce:c7:63:
                    38:e1:64:fe:3d:22:d3:1f:8b:f8:bb:d1:5a:2d:32:
                    6a:9c:13:41:c9:ff:94:45:3b:c2:6c:10:70:9a:b8:
                    96:83:f3:d1:53:33:f9:64:82:7e:93:06:04:95:d0:
                    c2:e7:45:23:aa:36:2f:3e:d6:e5:9e:6a:d5:58:35:
                    2c:f4:5f:60:be:5f:f3:ac:c4:b3:5d:38:25:f8:96:
                    3e:8c:da:ef:aa:6b:8a:a0:86:8b:ad:3f:d2:9e:31:
                    86:99:9e:58:62:95:4c:14:c0:5a:a5:5f:7c:7d:c8:
                    c8:c6:c1:5c:10:4a:03:62:aa:00:32:07:24:fa:67:
                    ff:0c:42:b6:e1:58:cf:4f:57:90:eb:e7:04:39:4c:
                    0c:eb:c6:3e:0a:51:57:27:ce:be:18:01:33:b3:46:
                    02:60:34:7b:1a:1e:21:20:d5:18:dc:48:8c:ce:03:
                    ff:5d:9e:6c:5d:fa:76:19:a5:6e:51:3a:67:7c:f3:
                    ed:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:D0:CB:E4:97:C7:25:A2:3E:EA:31:10:B6:FC:4F:FB:F5:C6:A0:3E
            X509v3 Authority Key Identifier:
                keyid:40:6E:2D:FB:AA:0E:A0:07:DD:C6:69:93:F2:C7:B3:08:DA:0A:1A:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91315C1/3009A8AA1C5211EA84D19937C4F9AE02/QG4t-6oOoAfdxmmT8sezCNoKGlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QG4t-6oOoAfdxmmT8sezCNoKGlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91315C1/3009A8AA1C5211EA84D19937C4F9AE02/QG4t-6oOoAfdxmmT8sezCNoKGlc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:91:22:fa:0f:2b:a7:3c:5d:1f:dc:b8:13:a4:24:5e:97:47:
         dc:95:e1:6d:de:89:a5:d2:b9:29:75:90:88:e6:2d:82:ed:8d:
         3b:cb:ae:ca:fc:f2:0e:a6:00:1d:54:c2:1b:94:1f:e6:28:9d:
         44:9a:e2:76:85:7f:0b:40:17:d7:3f:a0:bb:23:e5:0d:aa:77:
         33:a2:4a:fc:be:e8:d3:3d:f9:8b:bc:e6:6d:64:e9:7b:3c:ca:
         87:00:14:a3:96:dd:59:e6:ea:75:60:6e:7b:e1:bf:bf:5a:e4:
         6f:6c:df:b7:6f:2d:aa:30:76:43:ef:b7:49:20:0c:e1:c9:ad:
         c2:8c:37:bd:13:29:cd:f1:8a:85:9d:11:d6:0d:d0:d9:e1:fb:
         d0:57:e3:55:2f:5b:91:d8:0e:93:81:3a:40:15:92:27:ae:31:
         5b:b5:df:24:51:00:43:00:fc:63:ce:03:d9:9f:eb:ed:68:bb:
         ac:03:7c:96:6f:fa:98:bf:f9:80:38:79:a0:85:ae:25:5d:99:
         44:85:58:d1:d8:c6:8d:17:68:e7:f4:30:cd:8b:fe:f6:a1:f6:
         dc:13:ea:ae:df:5c:56:02:2e:cf:37:81:0d:0b:36:1c:b2:4f:
         2f:df:a4:0a:a2:0f:70:bd:64:21:ab:f6:36:f7:f0:6a:83:6c:
         45:cd:ed:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----