Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft
File:                     QX1X3RxCy0uksVLTbbBby3iBM98.mft (raw, json)
Hash identifier:          GW5GLIgxJbOA7vdtRbvUkYfJ6WJa1BNyWmFAyMqw6cU=
Subject key identifier:   CD:2A:EA:EB:88:66:9C:8F:D7:BF:84:C2:8C:75:65:4D:B5:78:4C:B9
Authority key identifier: 41:7D:57:DD:1C:42:CB:4B:A4:B1:52:D3:6D:B0:5B:CB:78:81:33:DF
Certificate issuer:       /CN=A9148848/serialNumber=417D57DD1C42CB4BA4B152D36DB05BCB788133DF
Certificate serial:       01A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft
Manifest number:          01A3
Signing time:             Fri 31 Jan 2025 02:30:43 +0000
Manifest this update:     Fri 31 Jan 2025 02:30:42 +0000
Manifest next update:     Fri 07 Feb 2025 02:30:42 +0000
Files and hashes:         1: QX1X3RxCy0uksVLTbbBby3iBM98.crl (hash: eDexw/dNyiVergjSC3TrPUVqPOhSiOqgkK+iTOJN+38=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 421 (0x1a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148848/serialNumber=417D57DD1C42CB4BA4B152D36DB05BCB788133DF
        Validity
            Not Before: Jan 31 02:30:42 2025 GMT
            Not After : Feb  7 02:30:42 2025 GMT
        Subject: CN=679c35d2-5bf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:dd:7c:ab:3e:a0:16:ba:d4:e3:58:99:2a:7b:
                    dc:fb:c9:07:9c:87:74:45:76:2f:a9:0e:0f:c8:04:
                    e9:4f:0e:f0:ef:54:49:55:af:7c:52:f9:61:58:7b:
                    84:34:25:2e:5f:21:5f:71:76:5a:1c:ec:85:8b:73:
                    48:54:48:03:93:99:ca:6a:d4:22:ab:f2:ec:e9:d2:
                    f3:84:47:b8:f4:c1:89:ca:42:fc:01:28:66:04:f9:
                    13:d2:4f:0a:b2:4a:a8:98:fc:a7:47:32:0c:39:e3:
                    d4:ad:25:05:c9:0e:0a:d2:04:64:bb:d0:68:c4:b3:
                    1f:8f:9a:bd:d5:e3:5b:95:c0:e1:72:35:1c:19:b1:
                    c2:69:93:38:8a:0d:40:f6:0a:bb:14:96:35:97:d9:
                    0e:7a:c7:13:24:2f:fd:3a:56:f6:e5:a2:fb:d5:99:
                    75:5d:09:7d:8b:7d:77:3d:ad:08:56:93:e4:c1:4f:
                    73:fc:17:34:b0:20:2d:15:81:45:cf:75:51:d8:a7:
                    51:74:b2:56:d3:bb:e0:18:a7:28:c8:6e:69:e3:e6:
                    31:e5:46:a0:15:06:74:96:9e:b4:3a:6e:cc:92:b1:
                    0d:52:73:49:8b:c2:99:5b:7c:19:bd:d6:ab:a8:aa:
                    9f:19:be:a8:0a:f8:69:08:c8:4a:ad:8c:9f:31:b3:
                    95:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:2A:EA:EB:88:66:9C:8F:D7:BF:84:C2:8C:75:65:4D:B5:78:4C:B9
            X509v3 Authority Key Identifier:
                keyid:41:7D:57:DD:1C:42:CB:4B:A4:B1:52:D3:6D:B0:5B:CB:78:81:33:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:52:14:32:3d:ce:1b:6c:35:11:78:9b:9e:97:bc:ec:44:4d:
         8e:d2:53:8d:87:cc:79:d1:e6:fe:24:ce:b5:48:17:f3:b4:09:
         5f:1c:5e:08:29:bb:70:42:de:42:0a:9f:27:68:ac:e4:5c:9e:
         53:fd:4f:33:93:46:21:70:b8:74:50:ce:20:8b:f8:a6:3c:94:
         1a:3d:d1:ad:2f:e5:6d:a3:bd:25:b7:c2:bf:16:9e:0b:08:13:
         e6:35:ed:11:aa:55:5e:21:50:1c:04:d0:02:04:fb:df:81:54:
         a1:94:2f:4e:d6:99:27:50:62:b8:24:a2:2a:dd:2e:e4:9e:49:
         21:99:29:ab:96:4e:70:70:71:aa:1d:90:5f:75:ab:9a:2c:90:
         10:18:39:f0:fe:5a:06:2e:9e:7d:1b:25:a6:51:dc:24:49:ed:
         28:9c:a6:53:af:45:8a:ed:70:3a:66:d6:1f:4a:7c:44:fd:de:
         63:0a:7f:0a:cc:7d:f0:c9:33:ab:3d:4c:aa:a5:b8:ce:42:b2:
         d1:83:43:d8:08:db:63:63:0b:d0:8b:af:5b:be:73:9d:24:40:
         95:e4:15:8c:e5:6f:d0:b0:02:a7:67:ad:c7:ff:bd:e3:0c:c3:
         c6:e5:13:85:a1:a3:d8:79:51:84:e7:df:44:82:00:21:83:67:
         28:61:be:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:09:19 2025 by rpki-client