Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.mft
File:                     QFAqSwwf9GgvUuNAZARERSh9S7g.mft (raw, json)
Hash identifier:          N8iqw+RvgIogF0vFIdOMYVdImUTZez3dmk/WaDiVEd8=
Subject key identifier:   4B:A4:E8:3F:E1:FF:3E:CF:17:1C:E8:44:07:83:D9:FF:52:70:1F:69
Authority key identifier: 40:50:2A:4B:0C:1F:F4:68:2F:52:E3:40:64:04:44:45:28:7D:4B:B8
Certificate issuer:       /CN=A9146179/serialNumber=40502A4B0C1FF4682F52E34064044445287D4BB8
Certificate serial:       25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFAqSwwf9GgvUuNAZARERSh9S7g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.mft
Manifest number:          24
Signing time:             Fri 31 Jan 2025 06:52:29 +0000
Manifest this update:     Fri 31 Jan 2025 06:52:29 +0000
Manifest next update:     Fri 07 Feb 2025 06:52:29 +0000
Files and hashes:         1: QFAqSwwf9GgvUuNAZARERSh9S7g.crl (hash: hdsl07RbEN0BRh5p4aaN3I5l8Q2wMDroHv1wpzsi6yA=)
                          2: D2158BC4AA7C11EF9A76A779C4F9AE02.roa (hash: LaPRc5QCE3D/egNmbBmNccMoDV83OnAl0IeSttB5Fwk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146179/serialNumber=40502A4B0C1FF4682F52E34064044445287D4BB8
        Validity
            Not Before: Jan 31 06:52:29 2025 GMT
            Not After : Feb  7 06:52:29 2025 GMT
        Subject: CN=679c732d-de8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:23:4c:a5:99:b1:c9:e4:b3:76:69:30:fc:5c:
                    ea:cc:d1:27:64:c2:43:65:56:e6:05:de:41:8a:5a:
                    6c:21:fe:29:66:27:d4:7d:c6:64:87:e7:73:34:6f:
                    47:6f:45:f1:7b:e1:68:3e:d4:c2:d5:81:35:ea:58:
                    e0:38:ec:9c:7f:c7:8a:9e:10:40:99:f5:dc:bd:03:
                    e3:03:fe:9d:9d:f6:76:30:8d:ab:c7:02:04:12:fb:
                    9c:1f:bd:9e:4f:3b:7f:24:7d:60:fd:60:a7:ac:62:
                    66:09:0e:bf:71:39:a5:a2:c7:08:2e:00:08:90:3c:
                    ea:37:f8:d4:9a:23:64:82:90:5d:1e:12:f3:5e:da:
                    67:0a:2f:57:61:a3:1d:61:2d:e5:51:37:25:d0:72:
                    0a:90:86:9f:1e:12:c6:f1:b2:6a:44:b9:ec:0b:ec:
                    56:04:15:14:fb:22:95:5d:d6:11:55:ff:90:b9:90:
                    47:47:3a:00:e4:20:b6:7f:4d:49:d9:8c:71:af:7f:
                    6c:38:b4:30:a1:d9:8c:e6:51:a2:52:87:b6:06:ba:
                    ed:ad:d5:80:bc:57:f8:90:ed:06:65:9b:b4:f9:66:
                    06:c2:12:8d:c7:ce:30:57:d2:a7:06:83:7d:af:06:
                    ae:28:72:1b:48:48:0b:1d:9b:3a:df:15:12:bc:f5:
                    b8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:A4:E8:3F:E1:FF:3E:CF:17:1C:E8:44:07:83:D9:FF:52:70:1F:69
            X509v3 Authority Key Identifier:
                keyid:40:50:2A:4B:0C:1F:F4:68:2F:52:E3:40:64:04:44:45:28:7D:4B:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFAqSwwf9GgvUuNAZARERSh9S7g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:4a:85:c9:24:da:98:2f:12:08:02:09:3f:3c:2b:cf:2e:9a:
         46:37:93:01:ba:b8:cd:6a:01:f8:b3:f1:6d:57:3d:c1:c6:16:
         86:3e:82:46:d3:f9:6e:43:02:69:92:1c:96:5e:09:e1:0f:fe:
         52:70:0d:fb:e7:2a:80:36:0f:da:14:1f:c9:4b:4d:b7:03:8b:
         37:b8:09:20:10:d4:dd:40:bc:19:8a:42:1f:9b:cd:90:75:0b:
         6e:83:04:99:84:09:5b:06:f9:15:88:66:c9:a8:97:83:5c:91:
         3b:91:b0:45:2b:73:63:79:63:dc:89:f2:16:37:20:c3:3c:b6:
         e1:fc:36:56:6c:f6:a2:40:3d:85:45:47:94:4a:60:92:9e:b3:
         ec:5e:1f:48:6d:55:cc:b6:b7:b4:0d:39:a0:40:5e:22:7c:bb:
         8f:ae:51:dd:20:aa:ed:f1:9c:04:fc:89:6e:ec:bc:aa:2a:9c:
         c4:f9:0f:ce:e4:c4:09:44:6e:ec:16:2b:cc:66:4a:0b:8f:72:
         df:b8:63:12:8d:26:a6:33:58:80:5c:ca:09:b9:7d:90:9c:4c:
         70:23:40:7b:cd:60:eb:15:f7:30:48:7c:32:35:5b:97:74:bc:
         3f:f3:90:0a:8d:33:0d:d8:bd:78:d9:2b:34:8f:44:b9:3b:6e:
         72:a6:4d:cf
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
NjE3OTExMC8GA1UEBRMoNDA1MDJBNEIwQzFGRjQ2ODJGNTJFMzQwNjQwNDQ0NDUy
ODdENEJCODAeFw0yNTAxMzEwNjUyMjlaFw0yNTAyMDcwNjUyMjlaMBgxFjAUBgNV
BAMTDTY3OWM3MzJkLWRlOGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCoI0ylmbHJ5LN2aTD8XOrM0SdkwkNlVuYF3kGKWmwh/ilmJ9R9xmSH53M0b0dv
RfF74Wg+1MLVgTXqWOA47Jx/x4qeEECZ9dy9A+MD/p2d9nYwjavHAgQS+5wfvZ5P
O38kfWD9YKesYmYJDr9xOaWixwguAAiQPOo3+NSaI2SCkF0eEvNe2mcKL1dhox1h
LeVRNyXQcgqQhp8eEsbxsmpEuewL7FYEFRT7IpVd1hFV/5C5kEdHOgDkILZ/TUnZ
jHGvf2w4tDCh2YzmUaJSh7YGuu2t1YC8V/iQ7QZlm7T5ZgbCEo3HzjBX0qcGg32v
Bq4ochtISAsdmzrfFRK89biBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUS6ToP+H/
Ps8XHOhEB4PZ/1JwH2kwHwYDVR0jBBgwFoAUQFAqSwwf9GgvUuNAZARERSh9S7gw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2MTc5LzU0RTA0NzE2QUE3
QzExRUZBMzNCRkQ3N0M0RjlBRTAyL1FGQXFTd3dmOUdndlV1TkFaQVJFUlNoOVM3
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUUZBcVN3d2Y5R2d2VXVOQVpBUkVSU2g5UzdnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2
MTc5LzU0RTA0NzE2QUE3QzExRUZBMzNCRkQ3N0M0RjlBRTAyL1FGQXFTd3dmOUdn
dlV1TkFaQVJFUlNoOVM3Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBABxKhckk2pgvEggCCT88K88umkY3kwG6uM1qAfiz8W1XPcHGFoY+gkbT
+W5DAmmSHJZeCeEP/lJwDfvnKoA2D9oUH8lLTbcDize4CSAQ1N1AvBmKQh+bzZB1
C26DBJmECVsG+RWIZsmol4NckTuRsEUrc2N5Y9yJ8hY3IMM8tuH8NlZs9qJAPYVF
R5RKYJKes+xeH0htVcy2t7QNOaBAXiJ8u4+uUd0gqu3xnAT8iW7svKoqnMT5D87k
xAlEbuwWK8xmSguPct+4YxKNJqYzWIBcygm5fZCcTHAjQHvNYOsV9zBIfDI1W5d0
vD/zkAqNMw3YvXjZKzSPRLk7bnKmTc8=
-----END CERTIFICATE-----