Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.mft
File:                     QeLjUgZMov-eIcSENVrALkQHJY0.mft (raw, json)
Hash identifier:          +yq4SAgotMcvVRXkcwGZTkf6VHyjWJT9yfjwzgh9kuk=
Subject key identifier:   94:F4:1A:B7:42:81:EC:B4:44:60:45:28:A7:31:90:10:5A:38:CB:35
Authority key identifier: 41:E2:E3:52:06:4C:A2:FF:9E:21:C4:84:35:5A:C0:2E:44:07:25:8D
Certificate issuer:       /CN=A9131D5E/serialNumber=41E2E352064CA2FF9E21C484355AC02E4407258D
Certificate serial:       0553
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeLjUgZMov-eIcSENVrALkQHJY0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.mft
Manifest number:          054C
Signing time:             Thu 30 Jan 2025 23:27:56 +0000
Manifest this update:     Thu 30 Jan 2025 23:27:55 +0000
Manifest next update:     Thu 06 Feb 2025 23:27:55 +0000
Files and hashes:         1: QeLjUgZMov-eIcSENVrALkQHJY0.crl (hash: jmdXeL2GZ3On++A6QM0dmXDaPYDAzgG2ne56zUtkXtQ=)
                          2: 9B41336A9ABB11EC9D11861FC4F9AE02.roa (hash: JjNvo6+sKFXJO5jB79ObwXmzISqdgMEQqhlFwLrXnJs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1363 (0x553)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131D5E/serialNumber=41E2E352064CA2FF9E21C484355AC02E4407258D
        Validity
            Not Before: Jan 30 23:27:55 2025 GMT
            Not After : Feb  6 23:27:55 2025 GMT
        Subject: CN=679c0afc-f5fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:81:e0:46:e5:56:66:d2:9f:cc:8b:00:8c:4d:
                    72:58:58:6e:74:0d:ad:80:d2:91:5e:67:24:ea:69:
                    cd:fe:8d:19:7b:20:50:97:0f:d9:60:33:cc:41:4f:
                    65:87:5b:d3:f1:25:cc:aa:55:cc:f9:c8:9c:de:27:
                    f1:b2:c7:8a:2e:ff:c2:2e:94:c5:01:40:3b:41:2f:
                    da:eb:78:1f:1b:c9:b4:fa:e1:2e:57:16:d4:26:fb:
                    d1:06:ca:18:d2:57:7a:0b:13:b3:b7:4d:e7:ab:ed:
                    70:d9:3f:ce:08:f5:41:67:66:f4:fe:80:54:50:42:
                    70:2d:62:c0:ec:e5:ad:7e:a1:ae:2d:77:be:00:8a:
                    e9:69:eb:71:e8:65:83:2a:3e:b4:47:86:95:e3:6b:
                    cd:12:b7:17:94:42:2a:50:1a:8a:c2:13:f0:d5:ee:
                    3d:c3:25:39:9c:90:c6:b4:a7:98:14:86:5b:21:19:
                    95:30:0b:6d:bc:f3:f0:4c:89:d2:35:bc:11:9d:dd:
                    12:be:ba:cd:dd:60:af:fb:85:00:ba:29:7c:25:1b:
                    b8:f6:5c:cd:d6:0a:d2:4b:6c:e8:92:05:1c:a6:59:
                    6b:fc:3a:06:f7:79:14:73:4c:6c:b5:09:32:bc:c5:
                    45:db:2a:0a:57:83:f3:5c:4a:e9:d5:46:09:a5:31:
                    ba:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:F4:1A:B7:42:81:EC:B4:44:60:45:28:A7:31:90:10:5A:38:CB:35
            X509v3 Authority Key Identifier:
                keyid:41:E2:E3:52:06:4C:A2:FF:9E:21:C4:84:35:5A:C0:2E:44:07:25:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeLjUgZMov-eIcSENVrALkQHJY0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:5e:4b:44:1c:a3:f6:07:ea:e4:60:9a:73:07:b2:89:de:62:
         b5:11:f9:9c:55:d0:7a:04:3a:0c:34:6a:04:12:2d:d3:3d:09:
         6d:94:07:5e:a5:db:9f:50:be:9a:5b:5c:1b:39:9f:ec:91:84:
         e3:04:07:4e:7a:8e:4c:9c:ed:12:08:ea:11:c4:3e:7e:ac:b6:
         e7:be:da:8c:09:ba:89:87:bd:89:b5:6f:f4:90:88:da:bf:d3:
         03:56:ad:a0:0b:d4:4e:e1:fe:df:59:95:b3:cf:ed:4e:0c:c5:
         48:f2:88:8d:fb:fb:3b:30:0b:0b:96:b0:f5:09:b2:24:02:db:
         20:f6:d6:3f:df:fb:5c:7c:9a:4c:16:c5:e4:02:d3:c0:a3:66:
         0d:a8:5a:20:5c:7b:f2:22:5a:b5:3c:1b:c1:20:64:1c:d6:1a:
         7e:c9:97:31:b1:ba:30:4f:74:43:77:e2:b9:23:0a:1f:39:58:
         d5:a1:c3:a1:95:82:67:69:2c:3d:02:b6:1e:02:3f:0d:58:99:
         8b:c3:6e:e2:9b:2a:d2:9d:87:2c:b8:33:c7:8f:b6:ea:a0:ca:
         94:9e:64:ed:d4:b8:84:7a:52:a6:4e:54:d8:7e:6e:cd:1d:de:
         c9:ed:bb:65:64:e7:8a:00:fc:86:93:3c:49:7c:4a:72:5d:54:
         df:47:ef:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:58:02 2025 by rpki-client