Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/BQN-TN5E7GZCxBafqFE3LXj7_Ks.mft
File:                     BQN-TN5E7GZCxBafqFE3LXj7_Ks.mft (raw, json)
Hash identifier:          ghCCIZzEVzBR2ACNNiQECZDt68GwWw4tUL0kba8AAfM=
Subject key identifier:   6F:E7:94:75:5C:02:F4:1E:A2:FD:E6:30:C7:B8:09:36:EE:D8:64:A9
Authority key identifier: 05:03:7E:4C:DE:44:EC:66:42:C4:16:9F:A8:51:37:2D:78:FB:FC:AB
Certificate issuer:       /CN=A915E77C/serialNumber=05037E4CDE44EC6642C4169FA851372D78FBFCAB
Certificate serial:       0198
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQN-TN5E7GZCxBafqFE3LXj7_Ks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/BQN-TN5E7GZCxBafqFE3LXj7_Ks.mft
Manifest number:          0195
Signing time:             Fri 31 Jan 2025 02:43:14 +0000
Manifest this update:     Fri 31 Jan 2025 02:43:14 +0000
Manifest next update:     Fri 07 Feb 2025 02:43:14 +0000
Files and hashes:         1: BQN-TN5E7GZCxBafqFE3LXj7_Ks.crl (hash: w6XlaniZ6R+sBXIBIP+n4si5U26scG+Z5vWplMgb2m0=)
                          2: A20DDFE2725911ED8CB4D763C4F9AE02.roa (hash: YLNPavuZCOudMxVfyqmjZm9NJz/Z+dCM3fPBM36z61c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 408 (0x198)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E77C/serialNumber=05037E4CDE44EC6642C4169FA851372D78FBFCAB
        Validity
            Not Before: Jan 31 02:43:14 2025 GMT
            Not After : Feb  7 02:43:14 2025 GMT
        Subject: CN=679c38c2-959d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6c:15:83:8f:a1:d1:5e:17:6b:6c:cc:76:5d:
                    16:73:78:ec:9e:c4:c4:af:13:87:cb:52:43:4a:dc:
                    37:04:18:de:11:da:55:dc:3d:4b:6b:27:b4:b9:0e:
                    13:5d:2a:c0:38:79:95:52:a3:e8:29:30:4f:60:ba:
                    f3:75:05:7c:f1:ca:3e:5d:52:e7:32:32:a9:57:4c:
                    f1:a5:d2:19:46:34:0a:89:13:aa:73:f4:99:74:57:
                    5f:fe:75:fd:2a:5c:12:d6:53:f8:bd:db:61:e2:04:
                    59:0a:d1:fc:c8:37:41:8f:30:9f:04:68:fe:ec:01:
                    fb:b9:97:1b:ad:f2:4f:51:16:92:56:d2:3e:90:60:
                    fb:29:47:42:ad:d2:91:8a:45:7f:26:80:c9:ff:e9:
                    73:ce:de:a3:c2:f6:3c:11:46:5d:c9:d7:6e:98:04:
                    fa:ae:5a:54:ba:51:cb:07:1c:8b:50:43:ae:84:b3:
                    39:2d:10:91:63:13:e3:02:5e:51:d2:57:fe:b2:23:
                    8a:90:7a:47:e6:7d:6a:5c:76:0f:59:95:a5:cc:75:
                    19:c7:81:42:83:75:3d:6b:87:25:11:13:42:e5:b2:
                    1d:c3:bb:a1:6e:ef:79:25:3c:4e:65:42:b9:c4:84:
                    d0:76:8f:00:2b:13:21:3d:ac:c5:37:b5:13:9c:75:
                    03:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E7:94:75:5C:02:F4:1E:A2:FD:E6:30:C7:B8:09:36:EE:D8:64:A9
            X509v3 Authority Key Identifier:
                keyid:05:03:7E:4C:DE:44:EC:66:42:C4:16:9F:A8:51:37:2D:78:FB:FC:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/BQN-TN5E7GZCxBafqFE3LXj7_Ks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQN-TN5E7GZCxBafqFE3LXj7_Ks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/BQN-TN5E7GZCxBafqFE3LXj7_Ks.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:b0:e8:11:f1:af:94:30:8d:c7:26:84:77:57:c8:18:98:6a:
         9f:32:57:af:c1:b9:d5:8c:ff:d8:07:e0:b7:f9:9c:ad:96:c0:
         0b:ec:5b:8a:82:1f:c8:51:65:7b:97:f9:cb:d3:70:ee:f2:eb:
         61:98:d0:6d:95:8b:08:38:ed:aa:b7:2e:70:b2:25:b4:b6:7c:
         b2:aa:04:34:24:ff:dc:13:b2:00:5d:f2:d1:f3:3b:76:33:ad:
         e8:4e:6d:b7:fc:f9:0a:02:86:b5:42:0e:74:fa:a2:9e:a3:5d:
         a7:31:d3:48:e9:1f:a5:52:47:86:6c:13:16:82:99:7d:64:6b:
         5b:1e:d4:d8:ed:65:d8:6c:a6:ad:be:75:41:28:13:d0:8c:07:
         49:d3:03:58:68:ac:f6:31:af:7e:44:43:54:c9:39:e6:e2:28:
         65:bb:25:c3:6d:3e:f1:eb:01:4e:bd:51:ff:b4:ef:4f:1d:f5:
         a4:5c:e1:e9:8a:8a:11:90:ee:f7:18:e9:ec:48:42:57:fc:70:
         e5:13:59:bb:cb:3d:80:d5:ef:72:3a:6c:49:af:c6:3a:fb:3f:
         f0:9a:6c:88:81:56:08:5f:e7:8c:21:bd:05:1c:76:27:78:a7:
         e0:43:8d:63:d6:e8:a1:b3:77:94:58:a8:e7:02:57:2e:f9:e9:
         76:c1:2a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----