Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/qtqjxEEWYN9cNEipHISuV1eibhM.mft
File:                     qtqjxEEWYN9cNEipHISuV1eibhM.mft (raw, json)
Hash identifier:          n0xp54fkT17h0xucCdqfn/0ttWsKWSr6+ALS9kWbQCA=
Subject key identifier:   23:C2:A5:94:16:BC:94:65:3B:11:56:40:59:CA:34:3C:15:CE:E6:D2
Authority key identifier: AA:DA:A3:C4:41:16:60:DF:5C:34:48:A9:1C:84:AE:57:57:A2:6E:13
Certificate issuer:       /CN=A915C07D/serialNumber=AADAA3C4411660DF5C3448A91C84AE5757A26E13
Certificate serial:       067D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtqjxEEWYN9cNEipHISuV1eibhM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/qtqjxEEWYN9cNEipHISuV1eibhM.mft
Manifest number:          0668
Signing time:             Thu 30 Jan 2025 22:24:57 +0000
Manifest this update:     Thu 30 Jan 2025 22:24:56 +0000
Manifest next update:     Thu 06 Feb 2025 22:24:56 +0000
Files and hashes:         1: qtqjxEEWYN9cNEipHISuV1eibhM.crl (hash: Y65fQAOfMpO4GZ/exGXUs2YW+aW7lDMYtGsU2o+Ny8o=)
                          2: E349FB7A6B8B11EBA041C843C4F9AE02.roa (hash: pH5N/Qx1YY5gq3cEOXWljF1Kkz3BHRfE8oyjPHPjT5Q=)
                          3: E4C0040A8C8C11EBB81BA228C4F9AE02.roa (hash: zHLsyhTV60ZHxvQdwbDX5bbqYkoP6kC08f+Bv/mppKY=)
                          4: 9D181A24D78211EC944E227FC4F9AE02.roa (hash: yUMXKBsm+dh5a8mwbXbljjnmOf1V4J6P/dOjZa9dbcE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1661 (0x67d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C07D/serialNumber=AADAA3C4411660DF5C3448A91C84AE5757A26E13
        Validity
            Not Before: Jan 30 22:24:56 2025 GMT
            Not After : Feb  6 22:24:56 2025 GMT
        Subject: CN=679bfc38-b52e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:55:ff:b5:ca:cb:ec:74:07:60:c5:9e:1d:6c:
                    74:38:d9:83:ef:3a:9c:ce:b9:16:b4:51:a6:61:52:
                    f2:35:a2:e2:d4:52:e3:98:4c:00:3f:01:67:29:de:
                    e5:c6:3f:d9:82:cb:50:76:7e:bc:7f:0c:5e:73:e4:
                    0e:5f:c5:cb:55:6f:8b:18:d0:e4:e1:c3:ce:fe:a0:
                    54:04:6c:79:c8:13:d0:77:8c:0e:76:34:f9:91:8e:
                    c4:f7:7f:7d:2a:21:d6:2f:b9:41:eb:3c:82:e4:33:
                    fb:59:96:e8:0a:28:a2:42:43:52:f8:a0:f3:45:5b:
                    b0:3f:a0:4a:71:22:fb:a1:3c:71:88:a0:dd:14:ec:
                    47:b1:e6:55:08:1a:97:a5:1c:7c:c1:da:9d:c2:e7:
                    17:6a:1d:cd:bf:cd:40:ee:69:e4:65:64:33:b3:5c:
                    24:74:c1:b7:87:b1:9a:c5:63:68:17:e4:a3:f0:fc:
                    f2:93:47:68:1f:10:12:e8:1b:76:39:84:8d:ef:84:
                    39:90:85:87:a6:14:21:25:2a:ed:ba:9e:9b:15:d5:
                    db:c7:f1:27:2b:47:27:e3:ff:f8:f9:e5:e3:ce:27:
                    88:7b:4c:4d:1f:4e:fe:97:21:ae:47:a4:f5:f3:68:
                    3e:51:16:cc:8c:2a:4d:e9:c9:48:cb:0e:87:22:74:
                    e6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C2:A5:94:16:BC:94:65:3B:11:56:40:59:CA:34:3C:15:CE:E6:D2
            X509v3 Authority Key Identifier:
                keyid:AA:DA:A3:C4:41:16:60:DF:5C:34:48:A9:1C:84:AE:57:57:A2:6E:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/qtqjxEEWYN9cNEipHISuV1eibhM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtqjxEEWYN9cNEipHISuV1eibhM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/qtqjxEEWYN9cNEipHISuV1eibhM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:d4:51:79:37:7c:38:1c:39:eb:29:f4:fc:91:ae:7a:30:23:
         42:8c:86:9e:52:3f:a5:06:b8:f6:7d:3e:db:40:24:38:64:1c:
         c6:62:e1:6e:e8:46:a8:a6:81:63:f8:c7:e3:8b:11:52:c1:30:
         4c:cf:c3:d8:2e:4f:bd:70:c2:82:49:74:bc:8e:09:60:9d:87:
         37:a0:ce:ba:ad:ab:51:db:e3:4c:ae:4a:bf:cb:c6:08:bd:b0:
         1c:ec:59:e7:1b:8a:82:dc:51:12:f8:e4:ff:8a:64:da:ca:0d:
         35:68:6e:c9:ea:9e:69:f1:89:db:a1:54:75:ca:3e:b5:89:cc:
         35:8e:0b:e4:10:73:94:92:0c:4f:3a:62:70:17:a3:66:b4:57:
         8f:31:69:3a:b5:91:71:78:2e:b4:c8:c0:e6:29:5a:eb:9e:5b:
         6b:34:28:af:2e:6b:e4:22:b8:d6:21:03:ac:ee:f9:d9:67:d8:
         9c:17:e5:c3:93:93:68:ed:2a:fe:68:21:8a:4d:7c:17:b2:5e:
         01:62:ae:ae:73:56:59:24:76:fc:6f:d4:6b:f3:0d:70:e5:a7:
         e4:5f:0e:6e:80:53:5d:40:79:ac:b1:d0:b8:1d:5b:94:1b:ec:
         cc:e1:20:b0:e4:43:55:41:0f:7c:e7:2f:1a:40:2a:01:3d:b9:
         e2:42:29:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:58:35 2025 by rpki-client