Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft
File:                     Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft (raw, json)
Hash identifier:          YcLKnY2xUT68To8l10PfusxZUbreylC9pxh6TedgS0I=
Subject key identifier:   DE:F5:A2:39:BA:C5:8F:24:18:22:05:79:AD:6C:2C:63:E8:7D:08:0E
Authority key identifier: 43:D2:50:D5:C1:F6:09:ED:17:4D:FF:26:43:01:DB:45:BE:25:B1:B4
Certificate issuer:       /CN=A91978DD/serialNumber=43D250D5C1F609ED174DFF264301DB45BE25B1B4
Certificate serial:       16F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft
Manifest number:          16EE
Signing time:             Fri 31 Jan 2025 16:38:38 +0000
Manifest this update:     Fri 31 Jan 2025 16:38:37 +0000
Manifest next update:     Fri 07 Feb 2025 16:38:37 +0000
Files and hashes:         1: Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.crl (hash: DGfjOPL9AbLPKvWqJa6iUqHT0nlAwYfeLqLDXF1/RAs=)
                          2: 16ABD910E0C111E7BA64DE22C4F9AE02.roa (hash: Ooak6D5iQ2fJ6FZTf7sU2wRFg0kTNy2Wu4Ysho3zOO0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5879 (0x16f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91978DD/serialNumber=43D250D5C1F609ED174DFF264301DB45BE25B1B4
        Validity
            Not Before: Jan 31 16:38:37 2025 GMT
            Not After : Feb  7 16:38:37 2025 GMT
        Subject: CN=679cfc8e-9233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7f:52:bf:e7:65:1e:e8:c1:8f:63:8d:38:96:
                    0e:bb:55:93:07:07:e2:05:91:3b:b4:e3:c3:1f:5c:
                    4f:b4:bd:df:b0:3c:fa:9a:14:13:e7:01:5b:85:9c:
                    90:a3:8b:f3:ef:2f:8e:ef:3b:c5:64:d7:da:45:90:
                    6e:2c:0f:64:93:e2:3e:3c:fa:72:f9:58:d6:b8:20:
                    25:6a:5f:91:98:36:50:72:d6:a0:87:2a:4e:d7:1c:
                    3d:d4:8a:b8:76:9f:44:ca:23:83:57:83:0e:e4:4e:
                    b3:fa:62:88:68:70:06:db:82:3a:b8:05:e9:a4:52:
                    81:c0:8f:26:eb:12:f5:b3:83:f9:7c:0a:51:dd:b5:
                    b7:58:50:20:48:64:7f:a7:00:a9:49:48:61:36:e5:
                    8f:e0:9a:13:18:29:7d:12:a1:4b:31:c6:df:e1:7f:
                    16:f9:1f:b2:e2:69:92:b2:6f:77:bc:88:c2:05:47:
                    b2:c8:d1:2f:c4:b3:05:6e:c5:35:b0:16:32:e8:f5:
                    4b:2d:ee:0a:69:de:34:67:6c:66:e7:52:a5:e7:1a:
                    ca:a9:f9:e7:3c:e6:a1:63:4e:64:82:f0:bd:61:fe:
                    94:4a:41:33:36:96:e2:2c:7a:f9:ff:9d:32:9b:07:
                    44:4e:08:ae:8a:b3:db:83:b4:0a:7e:27:98:a5:8a:
                    e2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:F5:A2:39:BA:C5:8F:24:18:22:05:79:AD:6C:2C:63:E8:7D:08:0E
            X509v3 Authority Key Identifier:
                keyid:43:D2:50:D5:C1:F6:09:ED:17:4D:FF:26:43:01:DB:45:BE:25:B1:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:93:6b:18:ad:c9:5a:87:cc:7a:9c:8a:04:d0:9c:c9:18:2c:
         dc:1b:0f:e5:bf:8e:f3:ea:7d:39:70:40:d0:2f:4f:87:08:16:
         d0:2c:f2:68:32:16:d9:c6:9a:1e:b7:7a:dd:98:b7:02:50:9a:
         24:9c:4d:29:a9:8a:f0:ea:6c:0b:02:27:ba:fa:37:4a:d0:94:
         7b:7c:4b:05:d9:d5:11:79:e3:78:06:b9:01:6d:fc:0c:ad:fd:
         90:7d:c0:bd:61:3a:0b:e8:ab:6a:e8:15:5e:f0:59:3d:28:ca:
         49:82:10:c2:47:4a:b9:73:de:de:3e:fb:e1:ea:6c:da:24:9c:
         c4:b2:47:75:b9:4b:b9:df:ee:20:a5:ef:0c:85:c9:7c:5a:c7:
         2d:b0:b1:66:0a:34:8f:78:ee:aa:22:9f:fa:57:0b:69:98:ea:
         51:3e:1b:d2:9f:7f:ea:16:ea:d4:e5:51:30:11:92:8d:52:a0:
         0c:b4:48:e6:97:ea:82:05:41:d4:fe:1a:2a:55:85:28:28:29:
         1e:25:86:83:b1:ce:f6:ee:64:25:d5:2e:5f:b1:91:b9:3f:39:
         68:6f:33:8b:bf:2e:2d:b1:3b:4e:aa:e6:14:2a:3d:0c:b5:86:
         36:10:7b:7e:83:fc:3e:67:e8:f8:2f:0a:20:5a:37:0a:81:72:
         f0:04:6b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:19:42 2025 by rpki-client