Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft
File:                     QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft (raw, json)
Hash identifier:          BDiBY3VN0yl6IrVEU/55wzAr5SQx3DLbvNs1cSL0yrs=
Subject key identifier:   CF:F1:93:A1:48:8F:8A:13:37:30:56:00:ED:58:7E:44:53:EF:CE:E8
Authority key identifier: 40:3B:B7:B9:18:F9:15:4A:D8:2C:2A:D3:5A:EF:C0:AB:E8:D0:6A:DE
Certificate issuer:       /CN=A913631F/serialNumber=403BB7B918F9154AD82C2AD35AEFC0ABE8D06ADE
Certificate serial:       0E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QDu3uRj5FUrYLCrTWu_Aq-jQat4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft
Manifest number:          0D
Signing time:             Fri 31 Jan 2025 07:09:38 +0000
Manifest this update:     Fri 31 Jan 2025 07:09:37 +0000
Manifest next update:     Fri 07 Feb 2025 07:09:37 +0000
Files and hashes:         1: QDu3uRj5FUrYLCrTWu_Aq-jQat4.crl (hash: NiEBo2XQZoE7RBpSsHM0oArmn3ayELhAgHJHigT37lY=)
                          2: CA9B891ACF1C11EF981F2F86C4F9AE02.roa (hash: DSiGqsj/wHYJqRQngYpUalsfP9r6Z3qaSue0LX+uo6I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913631F/serialNumber=403BB7B918F9154AD82C2AD35AEFC0ABE8D06ADE
        Validity
            Not Before: Jan 31 07:09:37 2025 GMT
            Not After : Feb  7 07:09:37 2025 GMT
        Subject: CN=679c7732-bd2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:eb:f8:a5:86:7f:3f:3d:54:de:52:99:12:ce:
                    01:69:a4:6c:38:b9:8f:de:bc:bd:0b:fc:c3:dc:7b:
                    21:cb:8d:db:6a:64:e1:4a:92:f8:6d:b7:43:34:fb:
                    be:cb:8d:70:7a:97:03:6e:df:e0:50:27:d3:07:d8:
                    66:74:47:b6:a4:bb:e5:1c:1e:23:17:1d:8f:2b:75:
                    3c:fd:4a:68:70:ec:97:fa:8b:38:47:c4:d5:9a:cc:
                    80:9e:ea:dd:ed:1e:e4:c7:7c:cc:be:7a:d4:5c:84:
                    46:a9:7c:bb:04:50:f7:48:df:0e:d7:7e:21:ef:8d:
                    6b:27:61:4b:06:f2:30:1a:c7:42:37:ab:ee:43:36:
                    b0:b4:a6:23:67:d0:f0:b8:45:aa:a6:5a:47:95:9b:
                    38:f0:79:31:75:64:3d:72:50:e4:3c:eb:de:63:23:
                    75:43:a7:d1:6c:cd:2d:ad:e0:17:26:06:83:45:d0:
                    4a:ca:a9:f6:56:4c:38:5d:39:6b:11:32:4a:d0:f5:
                    5a:f9:33:18:b3:94:78:87:f2:78:89:cf:04:d6:a6:
                    c7:52:da:66:4d:42:47:2d:bb:f4:b6:cd:f2:32:1d:
                    85:89:f5:77:5b:5d:97:83:cb:10:75:5c:24:ac:06:
                    3a:64:e8:39:b4:8e:53:f1:93:23:24:ef:f3:ca:00:
                    3e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:F1:93:A1:48:8F:8A:13:37:30:56:00:ED:58:7E:44:53:EF:CE:E8
            X509v3 Authority Key Identifier:
                keyid:40:3B:B7:B9:18:F9:15:4A:D8:2C:2A:D3:5A:EF:C0:AB:E8:D0:6A:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QDu3uRj5FUrYLCrTWu_Aq-jQat4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:aa:1b:15:25:cc:cf:32:8d:86:70:dd:e9:ea:4e:b9:b2:74:
         1a:82:1d:db:45:01:1a:07:28:32:55:f7:4f:32:51:d6:a1:00:
         bf:e4:2a:f6:d2:29:33:1b:7a:53:24:49:af:2c:f5:73:f7:ee:
         49:aa:40:f6:3a:59:29:e1:91:2f:7a:b7:3e:c8:d9:7e:c7:b8:
         79:59:06:bb:26:aa:09:07:68:69:de:b0:7f:e2:61:d2:8f:39:
         fc:37:fb:6e:6e:81:75:7e:e9:37:36:5c:a9:5c:41:0d:be:f7:
         af:70:b0:7b:6c:6f:a7:b4:87:a3:ec:d2:af:58:18:61:66:da:
         2e:b1:d3:7e:18:39:89:9e:af:85:dd:6e:ff:61:84:d1:69:c8:
         e1:e3:15:d6:e0:65:4d:4a:4a:6b:14:9c:bc:a5:24:60:4f:b0:
         32:cd:8d:d2:ac:58:b5:cd:54:00:65:45:9a:3e:4e:92:e8:ec:
         aa:0e:57:a1:78:31:d9:3a:2a:da:4d:16:d8:f6:9d:b2:a5:21:
         87:e3:9b:5e:19:4b:31:51:0c:e8:13:e5:e5:e8:39:e2:5d:6f:
         90:4e:05:fe:5f:01:23:4b:29:73:28:5f:75:91:37:5e:8b:1c:
         40:74:42:c3:55:f5:33:0d:00:3c:83:53:ea:55:46:2c:e3:4d:
         50:20:56:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----