Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft
File:                     QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft (raw, json)
Hash identifier:          EOqhgPEee4ZTRipxK5OHlD+lUa5Vs9QKlXWqdKR+3oU=
Subject key identifier:   F4:03:6F:01:AD:D0:F6:FE:3A:DD:39:C2:CF:D4:B1:29:D7:B3:66:6D
Authority key identifier: 41:D2:68:C5:11:3E:F3:ED:7B:17:3B:78:0E:01:7E:D3:FE:85:55:F7
Certificate issuer:       /CN=A91D891D/serialNumber=41D268C5113EF3ED7B173B780E017ED3FE8555F7
Certificate serial:       04C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft
Manifest number:          0BDC
Signing time:             Thu 30 Jan 2025 21:42:08 +0000
Manifest this update:     Thu 30 Jan 2025 21:42:07 +0000
Manifest next update:     Thu 06 Feb 2025 21:42:07 +0000
Files and hashes:         1: QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl (hash: rKaExZ6cWPFiAsxO043uHTiJmEJ6oVBOLG3Nf0ZeCnE=)
                          2: A3583B2616B711ECBD752D47C4F9AE02.roa (hash: 1xVLNQlNrVwrhPb266jUjImDeI1JBJLkEMDQeKUBnFI=)
                          3: A3E3640816B711ECBD752D47C4F9AE02.roa (hash: c9XW6vjr9ZRxN55xmeXFihDxkfyhr1D0e4wxYGC5e+I=)
                          4: A291634816B711ECBD752D47C4F9AE02.roa (hash: Ctq7IqjnfC2JklzmQsi0+l8pKomLg5k/LbwaF/nwW84=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1221 (0x4c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D891D/serialNumber=41D268C5113EF3ED7B173B780E017ED3FE8555F7
        Validity
            Not Before: Jan 30 21:42:07 2025 GMT
            Not After : Feb  6 21:42:07 2025 GMT
        Subject: CN=679bf22f-c730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5f:55:f2:3d:db:70:fd:d6:32:25:0c:d2:86:
                    f4:bf:52:f7:c7:e3:ad:9c:bb:01:57:c2:31:cb:d1:
                    20:dd:69:fc:58:8a:fc:c5:84:c2:90:06:2f:80:c1:
                    22:b7:e1:c5:c2:92:81:56:05:e3:65:d3:7e:1d:4d:
                    a0:3b:46:e8:b2:18:73:c5:c8:2a:30:0d:31:14:78:
                    b9:29:50:a1:25:34:de:96:c6:e9:4d:07:00:0e:48:
                    a2:ae:dc:72:8c:5a:e6:04:91:bb:ce:34:3d:5c:f9:
                    17:1c:84:c1:f1:36:1d:71:84:9d:fa:76:b2:07:f2:
                    85:0a:4f:78:c9:56:6c:b4:e8:5c:93:16:a5:9e:ef:
                    51:0c:0e:83:22:b8:aa:6d:26:8e:f8:de:e8:4f:8c:
                    c4:e5:b4:08:9e:f3:4a:f4:52:e4:f1:f7:82:84:bf:
                    43:9e:81:5b:dd:be:cd:1b:85:32:f7:07:0d:6e:24:
                    79:18:55:c8:4d:b6:42:79:76:e7:ba:52:bb:6e:21:
                    48:e9:19:05:4c:32:30:08:59:1d:92:42:22:e1:ed:
                    d6:c4:83:2e:48:0b:6f:c1:24:5c:59:6d:b1:bc:70:
                    96:80:57:81:69:43:27:2f:fa:94:15:29:25:61:89:
                    50:ad:ca:5c:f9:7e:69:da:55:f3:08:55:f3:e4:45:
                    1e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:03:6F:01:AD:D0:F6:FE:3A:DD:39:C2:CF:D4:B1:29:D7:B3:66:6D
            X509v3 Authority Key Identifier:
                keyid:41:D2:68:C5:11:3E:F3:ED:7B:17:3B:78:0E:01:7E:D3:FE:85:55:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:6b:6d:ce:30:7c:c3:32:83:98:f9:f0:3e:bf:19:23:ce:49:
         39:c8:47:45:83:f7:e1:33:26:13:4d:a5:5b:41:af:fe:22:f2:
         34:ef:de:99:77:1f:27:21:91:a4:04:d9:cc:71:d4:57:a1:ee:
         27:c5:86:e1:29:21:2d:fc:73:45:fe:18:a1:98:e2:cf:d8:e3:
         74:38:0e:fa:fe:8f:73:2c:99:b0:09:57:e6:86:77:b6:e7:d9:
         2a:e4:2c:7e:ac:e6:2a:4e:5f:bb:bf:5e:ae:ff:64:8d:3d:23:
         81:7e:f7:3a:18:b1:9f:a1:e9:ef:79:4e:e1:c5:f3:70:9a:54:
         19:dc:57:9d:91:72:89:aa:cf:c2:f8:f0:a5:29:c7:79:d7:25:
         98:60:68:bf:aa:30:69:fe:0e:4a:58:a1:9b:3c:97:42:13:13:
         4b:4c:39:34:2e:b4:05:62:c2:fb:b3:18:94:6f:cb:ed:89:6b:
         e6:c2:e0:b5:d0:dc:9f:19:1b:70:e2:6c:df:ad:60:45:49:57:
         fb:3a:1d:6f:e9:cc:d6:af:de:96:a1:05:7d:02:4e:1d:34:b7:
         1c:5a:ed:ce:84:c2:76:38:60:44:2e:de:ae:fc:21:03:ef:f5:
         88:84:f4:88:87:e3:8f:f2:bf:5d:f2:85:a7:ed:03:d5:c5:53:
         fb:72:64:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:55:16 2025 by rpki-client