Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.mft
File:                     qu_cqSXayY_a0YyFf58d5YagUbY.mft (raw, json)
Hash identifier:          ZCNoQ5iZ3c0GM9auiTxbfkHq+UAaH9uTlD9WNSscvfY=
Subject key identifier:   9D:AB:B4:CC:B5:9C:B4:FA:83:6E:A6:FA:CA:EE:E9:36:22:98:78:B9
Authority key identifier: AA:EF:DC:A9:25:DA:C9:8F:DA:D1:8C:85:7F:9F:1D:E5:86:A0:51:B6
Certificate issuer:       /CN=A918235E/serialNumber=AAEFDCA925DAC98FDAD18C857F9F1DE586A051B6
Certificate serial:       035C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qu_cqSXayY_a0YyFf58d5YagUbY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.mft
Manifest number:          0357
Signing time:             Fri 31 Jan 2025 01:02:55 +0000
Manifest this update:     Fri 31 Jan 2025 01:02:55 +0000
Manifest next update:     Fri 07 Feb 2025 01:02:55 +0000
Files and hashes:         1: qu_cqSXayY_a0YyFf58d5YagUbY.crl (hash: xjVTXRAvDZHg7WTd/xTXq9u4ck2JwZVfVYMrX1Y1PZM=)
                          2: 48E696FE9ED611ECAC3B1777C4F9AE02.roa (hash: wh4KvNLBK6XFgoR8FRnF/jwZCf/huqxHy9C0SYykY04=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 860 (0x35c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918235E/serialNumber=AAEFDCA925DAC98FDAD18C857F9F1DE586A051B6
        Validity
            Not Before: Jan 31 01:02:55 2025 GMT
            Not After : Feb  7 01:02:55 2025 GMT
        Subject: CN=679c213f-d7e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ff:f7:aa:6c:00:34:4a:8a:cd:3c:3f:80:29:
                    df:15:7c:c3:33:77:62:7b:35:a6:ff:ca:f6:bc:90:
                    0b:37:50:6a:59:cc:f3:e0:d0:3a:ea:0e:c9:f6:bc:
                    1e:42:31:ab:f8:c6:99:dd:ad:b5:2f:48:dd:a3:30:
                    0a:e5:f3:67:21:41:73:4f:14:28:b2:0e:5b:d6:e8:
                    a0:eb:be:fc:79:ec:e9:ac:f1:2b:d8:cd:5c:9c:55:
                    db:ca:ca:71:8a:74:39:c2:6c:6c:f0:9d:b1:6d:e4:
                    f9:1b:d0:fd:48:d5:cf:47:38:1f:37:5c:ab:a6:23:
                    65:63:23:3a:41:54:11:60:51:3c:c1:79:87:47:22:
                    2f:8a:ec:a2:8a:38:bb:da:a6:e4:9d:41:c4:e3:85:
                    f5:a4:81:b8:28:1b:6c:0c:4e:ca:b5:8a:8c:14:f1:
                    8d:0e:2c:33:68:cd:dd:eb:a4:dd:54:83:87:53:2a:
                    e7:86:bf:80:83:2a:1f:21:e8:32:1a:62:1f:1d:61:
                    c5:37:41:6e:10:b1:9c:53:aa:e7:2a:58:0e:d4:b2:
                    9b:d9:d2:b3:4c:4a:0f:d5:8b:39:66:f2:0c:77:64:
                    46:63:89:0b:8f:bb:40:a2:f3:23:48:d3:12:b9:cc:
                    29:a3:ad:0e:6b:c9:b1:bd:c2:cc:72:94:48:91:12:
                    4e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:AB:B4:CC:B5:9C:B4:FA:83:6E:A6:FA:CA:EE:E9:36:22:98:78:B9
            X509v3 Authority Key Identifier:
                keyid:AA:EF:DC:A9:25:DA:C9:8F:DA:D1:8C:85:7F:9F:1D:E5:86:A0:51:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qu_cqSXayY_a0YyFf58d5YagUbY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:c2:36:17:e7:a4:43:22:ee:a9:b2:ae:46:b0:34:68:18:a0:
         98:75:d1:bc:35:1a:57:ac:d3:12:d5:9c:f9:22:8f:64:c9:89:
         68:f7:50:d8:8d:19:0f:1e:b7:da:d5:98:1e:6c:f8:e6:c7:e9:
         c4:be:fa:c3:99:c5:7e:f5:69:a3:3d:03:23:7e:5b:58:9e:dc:
         ac:20:42:b3:37:62:be:b0:6c:de:25:22:af:56:2d:dd:5e:53:
         86:30:6b:37:de:24:aa:05:50:70:25:2e:a3:df:d2:ab:43:1e:
         f5:19:6e:fc:39:48:57:30:e3:69:63:9d:84:90:3a:da:ac:93:
         4b:e5:3d:44:49:7b:4b:6a:c5:e8:4b:bc:ba:50:d2:eb:81:e4:
         0d:fe:3b:d4:38:5d:a0:43:2a:08:ff:37:17:b8:39:6c:b9:48:
         e1:07:39:1f:c0:af:f2:45:ee:10:0b:25:a8:27:c6:55:8e:4c:
         4a:b4:be:0a:96:da:97:2c:4d:5e:44:ab:a0:ee:fb:d2:8a:6c:
         77:ff:fb:36:42:15:38:bf:10:34:c6:7e:46:98:85:39:08:4e:
         66:07:37:fe:e4:2a:66:a2:04:a2:8e:f8:73:8f:3f:98:ae:9c:
         3a:e0:1c:c5:07:2c:81:c6:03:5f:4e:38:36:56:1d:12:f4:0b:
         f1:e2:f9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:36:41 2025 by rpki-client