Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft
File:                     sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft (raw, json)
Hash identifier:          f58kWilg2scVNW3JEA10sWZJnKKWD0JTyVunYanlZZ0=
Subject key identifier:   F2:44:1F:08:59:DB:0F:24:61:6C:C2:BE:A5:F9:17:24:4B:07:36:52
Authority key identifier: B2:AD:50:F3:57:1B:DA:1E:EC:07:CC:48:DA:01:D3:F3:75:45:8D:24
Certificate issuer:       /CN=A917E7C7/serialNumber=B2AD50F3571BDA1EEC07CC48DA01D3F375458D24
Certificate serial:       89
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sq1Q81cb2h7sB8xI2gHT83VFjSQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft
Manifest number:          87
Signing time:             Fri 31 Jan 2025 05:39:27 +0000
Manifest this update:     Fri 31 Jan 2025 05:39:27 +0000
Manifest next update:     Fri 07 Feb 2025 05:39:27 +0000
Files and hashes:         1: sq1Q81cb2h7sB8xI2gHT83VFjSQ.crl (hash: WI6iC7R+Ae/yEow8Oak5LmIsff+hic5s4UM1yyZ9oVA=)
                          2: 55291FA016B511EFA244974BC4F9AE02.roa (hash: 4G05qDBih2f7QXu4EvcFu/Hi3cjZoiJAPBz1/2wvj2Y=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137 (0x89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E7C7/serialNumber=B2AD50F3571BDA1EEC07CC48DA01D3F375458D24
        Validity
            Not Before: Jan 31 05:39:27 2025 GMT
            Not After : Feb  7 05:39:27 2025 GMT
        Subject: CN=679c620f-e4fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:42:91:7c:fa:f1:77:06:f8:fb:83:18:1b:b2:
                    5c:8d:0d:08:1f:6b:72:51:3c:6a:8a:4e:d6:02:ed:
                    5c:9f:c0:12:d3:7a:32:5d:28:5a:02:fc:23:71:19:
                    92:6d:0a:3b:29:6b:ee:59:80:e4:fa:2c:39:9f:8a:
                    2c:13:61:e9:70:24:79:16:11:30:b3:aa:fd:8d:36:
                    60:31:6e:e0:27:08:9f:c7:da:f2:df:f7:7f:64:de:
                    1a:41:6b:38:18:13:64:6e:6f:77:60:ba:f8:9b:61:
                    2e:f5:67:7c:4c:1a:e3:62:de:82:7f:fd:8a:f2:90:
                    9e:32:0d:ab:d5:93:b5:2b:2b:c6:ca:b8:d5:7e:eb:
                    e3:1e:c7:cc:fe:32:53:17:f8:22:72:9b:e4:d1:25:
                    c2:2c:5c:36:06:4d:f9:7e:5c:47:ed:7f:10:2f:e0:
                    03:b6:6a:86:93:53:47:ac:cc:8a:ac:e9:d5:96:c7:
                    ac:81:e0:d0:99:ca:58:49:cf:4e:96:9c:41:53:4c:
                    e3:58:fb:0a:8c:53:15:e7:85:e5:37:f9:6f:38:f9:
                    27:1e:68:96:df:d9:3f:ca:43:57:a7:6a:19:93:aa:
                    90:0d:a6:01:fb:35:d9:a7:d7:61:ec:6f:9b:23:08:
                    fb:f3:9d:e0:54:7e:5f:c2:13:ae:13:41:de:37:69:
                    a9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:44:1F:08:59:DB:0F:24:61:6C:C2:BE:A5:F9:17:24:4B:07:36:52
            X509v3 Authority Key Identifier:
                keyid:B2:AD:50:F3:57:1B:DA:1E:EC:07:CC:48:DA:01:D3:F3:75:45:8D:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sq1Q81cb2h7sB8xI2gHT83VFjSQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:7e:b7:9d:7b:63:70:87:65:bf:85:37:61:45:90:46:9f:79:
         8e:ec:98:bb:32:21:17:fa:00:d9:0d:77:21:1d:60:48:ee:6d:
         61:23:de:83:62:99:c3:26:2a:31:3c:a9:0a:6c:e6:a9:2c:05:
         3a:49:99:fe:36:e9:73:1f:34:70:f3:e0:24:4a:04:e1:0a:a6:
         91:39:1e:2d:0b:2b:36:32:21:76:1e:b1:a4:d3:22:2e:50:c2:
         0d:6e:55:1b:2d:ef:dd:ff:b3:78:64:74:0a:4e:65:fd:3d:66:
         82:e4:a7:76:82:5c:a9:a5:7a:ce:e8:98:df:05:a3:ea:c6:7c:
         87:21:57:76:56:2e:c4:55:69:30:e9:93:2d:da:80:0c:76:1d:
         0d:d0:82:99:4d:99:c5:ad:aa:26:8c:18:79:3f:d0:ae:77:2b:
         c4:39:66:a9:35:07:e7:8c:33:85:2a:3b:0d:88:be:fb:42:97:
         62:a3:13:28:5a:b4:37:0b:f6:3c:ad:4f:37:33:23:95:01:50:
         8f:ee:a5:3a:7a:f7:84:c3:5f:6b:d5:94:12:d5:27:6f:0f:96:
         f4:a6:aa:31:7b:1a:e6:05:40:68:0b:71:cf:a9:84:7e:9f:9e:
         94:c2:e5:82:c2:3b:5f:9b:ae:46:b7:61:2b:47:4c:c5:e5:4a:
         43:b0:3b:05
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0U3QzcxMTAvBgNVBAUTKEIyQUQ1MEYzNTcxQkRBMUVFQzA3Q0M0OERBMDFEM0Yz
NzU0NThEMjQwHhcNMjUwMTMxMDUzOTI3WhcNMjUwMjA3MDUzOTI3WjAYMRYwFAYD
VQQDEw02NzljNjIwZi1lNGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqUKRfPrxdwb4+4MYG7JcjQ0IH2tyUTxqik7WAu1cn8AS03oyXShaAvwjcRmS
bQo7KWvuWYDk+iw5n4osE2HpcCR5FhEws6r9jTZgMW7gJwifx9ry3/d/ZN4aQWs4
GBNkbm93YLr4m2Eu9Wd8TBrjYt6Cf/2K8pCeMg2r1ZO1KyvGyrjVfuvjHsfM/jJT
F/gicpvk0SXCLFw2Bk35flxH7X8QL+ADtmqGk1NHrMyKrOnVlsesgeDQmcpYSc9O
lpxBU0zjWPsKjFMV54XlN/lvOPknHmiW39k/ykNXp2oZk6qQDaYB+zXZp9dh7G+b
Iwj7853gVH5fwhOuE0HeN2mpnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPJEHwhZ
2w8kYWzCvqX5FyRLBzZSMB8GA1UdIwQYMBaAFLKtUPNXG9oe7AfMSNoB0/N1RY0k
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTdDNy8xQTU5Rjc4RTE2
QjMxMUVGODlDRkUzMEVDNEY5QUUwMi9zcTFRODFjYjJoN3NCOHhJMmdIVDgzVkZq
U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NxMVE4MWNiMmg3c0I4eEkyZ0hUODNWRmpTUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RTdDNy8xQTU5Rjc4RTE2QjMxMUVGODlDRkUzMEVDNEY5QUUwMi9zcTFRODFjYjJo
N3NCOHhJMmdIVDgzVkZqU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA8frede2Nwh2W/hTdhRZBGn3mO7Ji7MiEX+gDZDXchHWBI7m1hI96D
YpnDJioxPKkKbOapLAU6SZn+NulzHzRw8+AkSgThCqaROR4tCys2MiF2HrGk0yIu
UMINblUbLe/d/7N4ZHQKTmX9PWaC5Kd2glyppXrO6JjfBaPqxnyHIVd2Vi7EVWkw
6ZMt2oAMdh0N0IKZTZnFraomjBh5P9CudyvEOWapNQfnjDOFKjsNiL77QpdioxMo
WrQ3C/Y8rU83MyOVAVCP7qU6eveEw19r1ZQS1SdvD5b0pqoxexrmBUBoC3HPqYR+
n56UwuWCwjtfm65Gt2ErR0zF5UpDsDsF
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:43:26 2025 by rpki-client