Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft
File:                     M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft (raw, json)
Hash identifier:          GPV9888v+KudWMD49d1Jq6u8kmHlRwWqUELdozUQN5k=
Subject key identifier:   8E:96:A2:E6:34:8C:A8:F9:BA:22:CD:5E:B7:34:35:96:F3:7C:CC:4E
Authority key identifier: 33:74:06:22:DF:86:B3:BF:E7:BF:4A:BD:5D:F1:36:15:87:F0:39:12
Certificate issuer:       /CN=A919337F/serialNumber=33740622DF86B3BFE7BF4ABD5DF1361587F03912
Certificate serial:       0C6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft
Manifest number:          0C67
Signing time:             Fri 31 Jan 2025 18:09:55 +0000
Manifest this update:     Fri 31 Jan 2025 18:09:55 +0000
Manifest next update:     Fri 07 Feb 2025 18:09:55 +0000
Files and hashes:         1: M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl (hash: 7ip5NU0nVb0MwID3OU1WaGhJ8E9oBC+lzm8zHwxBF80=)
                          2: D0566D20F25411E9AEDBEA62C4F9AE02.roa (hash: JRm3KZLihVfX2Mjt/YikIApeielUsAEctutVAu4actQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3182 (0xc6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919337F/serialNumber=33740622DF86B3BFE7BF4ABD5DF1361587F03912
        Validity
            Not Before: Jan 31 18:09:55 2025 GMT
            Not After : Feb  7 18:09:55 2025 GMT
        Subject: CN=679d11f3-27de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fc:b9:6f:2e:d4:e6:f7:01:37:6a:bc:e3:32:
                    52:9d:6c:d8:4c:3f:f0:4f:58:5a:fe:99:0b:9f:1e:
                    59:bd:87:89:c3:f9:66:cb:94:ae:26:6e:66:70:66:
                    f1:79:6d:13:2c:dc:74:bb:4e:6c:f8:32:b3:81:6b:
                    2c:de:3b:2d:79:0c:4a:43:d0:c4:d6:ec:b3:24:39:
                    3e:4a:23:a2:a0:a7:f3:c4:9e:5b:20:9d:a6:e9:61:
                    c4:0e:de:a7:7c:eb:3c:e0:36:fa:e3:b2:0a:5d:3b:
                    ab:93:10:60:d3:29:7e:c6:e3:20:1a:6c:9e:00:c7:
                    00:f0:76:0e:84:a9:b3:a0:11:80:96:08:a0:8f:d1:
                    5e:e2:4b:a5:c5:33:aa:c2:dc:f0:fd:e6:31:c1:1f:
                    8d:a3:14:a8:bd:a9:8c:d2:08:78:7f:f0:cd:28:ef:
                    37:d7:2b:95:82:90:3f:cc:5f:79:8c:c3:80:b9:b3:
                    30:c1:c1:b8:4b:a9:66:08:df:69:64:a8:88:ad:4b:
                    9c:c4:c6:5f:b1:17:fe:02:bf:d9:a4:57:43:a8:52:
                    e7:85:52:9e:a3:ca:00:7e:6b:1b:52:1f:42:9b:aa:
                    06:8c:a2:5a:5a:81:b3:2a:5a:89:2c:c1:85:df:93:
                    7e:b5:f3:2d:d3:f2:16:3e:86:80:b6:1d:8a:5e:1f:
                    33:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:96:A2:E6:34:8C:A8:F9:BA:22:CD:5E:B7:34:35:96:F3:7C:CC:4E
            X509v3 Authority Key Identifier:
                keyid:33:74:06:22:DF:86:B3:BF:E7:BF:4A:BD:5D:F1:36:15:87:F0:39:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:16:95:dd:b8:7d:48:31:f5:be:09:fa:ab:66:02:e9:07:94:
         9a:c3:61:d0:6f:2f:9b:4c:58:9e:3f:0f:2d:b4:11:27:01:ab:
         58:ca:fd:09:19:21:41:74:78:d5:68:ed:32:a3:5e:d1:89:00:
         2b:1f:e0:ce:dc:df:bd:cc:7c:ab:07:72:da:a0:dc:fa:7b:cf:
         94:00:e1:a8:92:f5:85:2d:c5:d7:2e:d2:f7:38:5f:ca:00:87:
         14:bd:bb:0a:1b:d7:71:ed:68:bf:7b:43:de:64:72:b5:bd:e8:
         53:08:83:91:17:26:24:23:35:4a:f0:c2:4b:9b:91:47:9b:e7:
         69:ef:59:22:6c:be:b2:d5:fd:7b:ec:72:33:73:a1:99:90:3f:
         a1:b3:ee:5e:1d:c7:4b:a4:99:57:aa:ee:52:0e:b7:7e:14:f8:
         7d:00:31:be:94:22:db:2d:9f:5d:4b:0e:fe:3e:42:fe:ce:50:
         5d:3a:b0:b4:3a:79:ca:b9:83:eb:76:4a:a9:a9:74:49:ab:81:
         20:ac:74:e0:65:cf:10:2f:f6:94:06:fa:9d:5d:82:6a:48:fd:
         bf:6f:22:6f:a7:e4:b1:c6:ab:fa:d2:52:e5:45:07:47:0b:5d:
         df:71:64:37:ee:21:22:98:91:b0:8d:c5:df:44:d3:69:07:d5:
         ea:f4:54:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----