Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.mft
File:                     1QTYGQKxg4soKun0XE3D-BeOJO4.mft (raw, json)
Hash identifier:          8E6GRnhTd0kuWIAVJsqupEv2VPHrNrhGrWwBHJC9ILY=
Subject key identifier:   7A:1F:9A:19:C1:6E:67:FB:F3:2A:0D:B1:40:7F:0A:49:EA:1C:77:A3
Authority key identifier: D5:04:D8:19:02:B1:83:8B:28:2A:E9:F4:5C:4D:C3:F8:17:8E:24:EE
Certificate issuer:       /CN=A913A74D/serialNumber=D504D81902B1838B282AE9F45C4DC3F8178E24EE
Certificate serial:       0828
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QTYGQKxg4soKun0XE3D-BeOJO4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.mft
Manifest number:          0822
Signing time:             Thu 30 Jan 2025 20:51:55 +0000
Manifest this update:     Thu 30 Jan 2025 20:51:54 +0000
Manifest next update:     Thu 06 Feb 2025 20:51:54 +0000
Files and hashes:         1: 1QTYGQKxg4soKun0XE3D-BeOJO4.crl (hash: AVPNY4IFrUEMnPwOXITXzETCTpEg5FhzqE68HXBiVoA=)
                          2: 833D8D9AC72711EA8890F311C4F9AE02.roa (hash: tIeSqHeCHUuOJ39Gd9YUOSN/PIr6jNAJWJM2EB0gZPY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2088 (0x828)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A74D/serialNumber=D504D81902B1838B282AE9F45C4DC3F8178E24EE
        Validity
            Not Before: Jan 30 20:51:54 2025 GMT
            Not After : Feb  6 20:51:54 2025 GMT
        Subject: CN=679be66b-321d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fa:ff:98:b1:37:bb:c0:3f:70:58:1f:2c:5e:
                    40:1c:5c:3c:1a:13:fe:03:37:79:59:78:96:4f:83:
                    58:bb:6e:e5:37:f8:53:fe:4b:b8:c3:92:87:46:cc:
                    a4:ea:8f:db:17:16:a5:47:89:9c:58:69:80:73:a3:
                    e7:ea:c9:9a:c2:67:5d:74:63:ac:c6:fc:08:e6:44:
                    ce:95:f5:39:55:00:4f:a3:7e:7c:3c:16:9e:8f:6e:
                    81:48:ab:7b:a6:95:3f:4e:e4:39:5d:86:07:61:99:
                    b3:89:58:37:d6:cc:96:5d:8f:10:a3:b9:52:d3:ec:
                    0b:36:0e:eb:64:8f:0a:7f:76:06:c3:7e:dd:b5:c0:
                    20:5d:77:23:43:9c:1c:21:95:0f:8d:da:bf:a9:8a:
                    82:01:f0:c0:6b:80:3a:6e:dc:f2:24:24:fa:52:92:
                    43:5e:01:55:f1:8e:78:5c:88:29:d5:d5:d9:b1:9f:
                    cc:fa:6b:44:37:79:5d:0a:c2:5f:0c:42:4c:72:65:
                    d6:0a:1d:ec:0c:ba:ce:bc:55:45:23:1c:f4:92:2d:
                    c2:4f:6f:3e:00:3c:d5:d8:a0:13:20:1c:b7:22:67:
                    04:48:8a:2d:54:82:71:be:76:67:9d:1c:b2:c6:79:
                    2f:67:15:25:8e:78:21:53:e9:af:81:6f:a7:21:e9:
                    13:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:1F:9A:19:C1:6E:67:FB:F3:2A:0D:B1:40:7F:0A:49:EA:1C:77:A3
            X509v3 Authority Key Identifier:
                keyid:D5:04:D8:19:02:B1:83:8B:28:2A:E9:F4:5C:4D:C3:F8:17:8E:24:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QTYGQKxg4soKun0XE3D-BeOJO4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:7f:c8:90:6c:ae:30:5a:41:b3:a6:b3:41:39:06:26:97:95:
         47:e8:5e:79:bf:51:8a:df:6f:d7:96:96:4d:d4:f3:f2:55:76:
         fc:69:75:27:dc:0b:50:05:b4:fc:2b:97:20:3c:18:25:76:31:
         45:e6:f1:cb:aa:b9:8e:3c:10:1e:72:06:85:57:90:4b:1b:5e:
         40:b0:6b:5b:f5:21:f6:1f:19:c3:f0:fe:b7:dc:db:8d:ae:84:
         87:c7:1c:fd:66:d4:e9:3e:61:db:e8:03:63:b9:96:d2:5e:fd:
         6d:ed:10:75:a0:8e:eb:9a:12:54:12:95:af:55:4b:d9:6d:f9:
         31:03:f7:8e:31:08:44:c8:5c:15:8f:9a:67:e3:bd:d6:1e:20:
         98:d4:bf:d9:cd:2c:ae:33:e4:fd:f5:d7:f3:0b:06:9f:1d:f5:
         60:d3:7e:81:30:d3:be:49:c9:c2:c4:3b:f3:8a:bd:5f:ab:e0:
         16:cb:3b:fb:23:bc:86:e8:0e:55:98:41:b3:38:7b:c0:82:27:
         eb:ae:3f:ea:41:0d:58:ec:65:e2:4a:56:16:e1:27:49:ee:45:
         b6:be:e9:d0:bc:54:78:b7:24:95:78:d6:d5:fa:23:0f:da:c1:
         1b:4d:b3:2b:76:19:e2:96:4a:0a:22:04:44:a3:8a:b3:7b:cb:
         17:06:ce:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:12:00 2025 by rpki-client