Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft
File:                     q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft (raw, json)
Hash identifier:          EQ/Cd2vrzY+hwk7PPmRwGZBSA9Zl94JwLYOZ5Va0UJs=
Subject key identifier:   BE:F0:27:46:10:DA:2F:AB:68:8E:48:E6:33:FF:6A:56:24:20:35:6C
Authority key identifier: AB:45:DB:FC:35:57:7F:27:C9:9F:CF:40:A3:9B:38:6B:32:35:0A:DA
Certificate issuer:       /CN=A9136CB3/serialNumber=AB45DBFC35577F27C99FCF40A39B386B32350ADA
Certificate serial:       010F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft
Manifest number:          0107
Signing time:             Fri 31 Jan 2025 04:11:40 +0000
Manifest this update:     Fri 31 Jan 2025 04:11:40 +0000
Manifest next update:     Fri 07 Feb 2025 04:11:40 +0000
Files and hashes:         1: q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl (hash: kU89KC/pmjSScUBNXHi/4nt8o/q8iwUb0ocjUsdxGxs=)
                          2: B210BF28D1BF11EF95281B83C4F9AE02.roa (hash: ZnF+YTP2pRwfo0eUOGSGb1Y71fB7TRDK5QfyiO+cZbM=)
                          3: 20DA8B7E571D11EEAA430244C4F9AE02.roa (hash: dRKaSZEwPfTmZ9fnNDPlpvp0Ujh9QZMuM+RN8ZLvFSw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 271 (0x10f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136CB3/serialNumber=AB45DBFC35577F27C99FCF40A39B386B32350ADA
        Validity
            Not Before: Jan 31 04:11:40 2025 GMT
            Not After : Feb  7 04:11:40 2025 GMT
        Subject: CN=679c4d7c-09fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9e:f8:44:2e:5b:bb:47:03:c7:73:f6:ba:72:
                    97:8a:19:4c:d4:47:1e:76:48:eb:28:42:93:7d:72:
                    a2:60:ca:4f:44:d7:de:d3:99:dc:07:55:fc:8d:fc:
                    86:89:29:be:ff:9d:13:e3:ec:54:30:21:54:23:5d:
                    13:9d:ff:71:8e:35:74:75:ea:71:8b:73:83:d2:3d:
                    8d:59:c2:97:1d:4a:2f:5e:e9:20:be:fc:c8:12:87:
                    f0:cd:d9:f4:58:0f:4b:13:0f:4e:2c:f9:22:1e:0a:
                    0e:cd:a7:45:42:06:b2:4d:ee:8a:0c:36:7d:c1:29:
                    76:a1:89:78:bd:6f:cf:c2:47:00:98:27:f9:4c:b8:
                    a5:ab:1e:0b:72:55:fb:bf:e4:0a:0e:4c:b6:1e:ca:
                    0f:ca:07:2c:1d:e4:4c:51:76:5f:11:aa:43:fe:c4:
                    21:0e:ee:36:6d:37:c1:61:5d:9c:c7:49:5b:da:73:
                    a1:58:77:fd:ca:34:c0:79:33:8c:f0:79:23:be:11:
                    8e:b3:b8:40:ac:c8:4e:41:db:06:ca:0e:03:7d:46:
                    c2:49:43:65:6f:be:0a:20:9a:ce:18:0d:a7:7b:f3:
                    5a:73:c9:7c:79:a5:a2:9f:15:bb:b8:2d:71:66:5f:
                    1f:79:1b:3e:01:9f:e8:c7:a1:44:21:fa:76:6f:93:
                    93:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F0:27:46:10:DA:2F:AB:68:8E:48:E6:33:FF:6A:56:24:20:35:6C
            X509v3 Authority Key Identifier:
                keyid:AB:45:DB:FC:35:57:7F:27:C9:9F:CF:40:A3:9B:38:6B:32:35:0A:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:57:99:88:6c:08:cb:f2:3e:75:bb:8b:84:e6:8c:79:c9:0c:
         49:11:a1:8e:da:53:c9:e6:42:ee:ab:87:ed:ea:5d:9e:33:9d:
         65:f2:b0:ad:97:d3:09:e9:0a:b1:b0:3d:fb:73:3f:8d:09:6e:
         25:c8:0d:af:1f:e4:76:3c:85:e1:dc:88:5b:e4:86:ea:70:4a:
         52:d9:38:c5:50:85:f4:4b:b4:02:5d:7c:7b:ea:94:11:31:2f:
         50:8b:ab:21:80:f3:87:92:dd:4d:21:70:34:77:d5:83:51:9a:
         d3:11:61:e7:30:c0:6a:7d:8f:f9:60:35:f3:fb:96:fd:83:8c:
         52:af:19:01:a7:06:01:6f:8e:c9:9e:2a:49:42:51:cf:b8:fc:
         73:44:57:2f:3e:47:00:c4:40:27:ac:92:5e:a5:8f:79:b2:38:
         6e:f6:c2:82:7e:63:05:db:fb:34:a5:02:4f:c1:5a:4c:28:63:
         3a:87:5c:2b:2f:77:89:46:ab:f7:f8:0a:a9:1b:a0:59:40:52:
         c6:0a:50:a4:b0:1a:17:37:2a:46:d4:32:8d:df:24:58:3a:77:
         c7:a2:c4:19:21:3a:46:18:75:77:e2:f8:1c:a8:8e:01:ba:91:
         36:a1:94:ca:59:99:53:2b:85:66:23:a6:7c:bf:1b:01:9b:83:
         0b:1d:33:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----