Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft
File:                     Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft (raw, json)
Hash identifier:          sl1SiiuGbPVyYy5ly5scgioUUWYnJz3ZrCpAg5/J3HM=
Subject key identifier:   6C:6F:70:BD:66:0C:EB:A2:C4:FA:34:8F:AD:3C:14:89:18:73:B7:48
Authority key identifier: 42:CE:50:E1:AC:73:3D:5A:16:6B:54:2C:3C:49:30:9F:36:56:BF:22
Certificate issuer:       /CN=A91DF9B9/serialNumber=42CE50E1AC733D5A166B542C3C49309F3656BF22
Certificate serial:       011A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft
Manifest number:          0118
Signing time:             Fri 31 Jan 2025 03:56:47 +0000
Manifest this update:     Fri 31 Jan 2025 03:56:47 +0000
Manifest next update:     Fri 07 Feb 2025 03:56:46 +0000
Files and hashes:         1: Qs5Q4axzPVoWa1QsPEkwnzZWvyI.crl (hash: NQ4Bn2BnaKZQCzr43V0EhvMivZNy830dbYzWEovLAXc=)
                          2: F3484DBA34CE11EEBBA9D046C4F9AE02.roa (hash: KN097sj8tp2qdOXl0WodsTPOwpV2GR7rS/3ve5t47xI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 282 (0x11a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF9B9/serialNumber=42CE50E1AC733D5A166B542C3C49309F3656BF22
        Validity
            Not Before: Jan 31 03:56:47 2025 GMT
            Not After : Feb  7 03:56:46 2025 GMT
        Subject: CN=679c49ff-f325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:16:45:a9:86:61:71:76:4f:10:e0:2a:f1:fc:
                    a7:04:e5:32:35:47:3a:28:69:e6:fd:ea:6d:29:48:
                    aa:a9:cf:53:2a:0d:85:f1:6d:ad:f1:30:14:26:8a:
                    a3:21:ad:50:f6:91:cf:08:a3:4a:94:b6:85:e5:6b:
                    7c:2b:7a:21:0b:58:32:8d:39:37:f5:49:9e:60:c5:
                    92:ce:3a:d7:7a:1f:61:d5:e9:0e:aa:ba:a3:32:06:
                    f3:59:5a:15:66:93:7c:15:c8:a6:02:66:b5:ae:07:
                    bb:4c:3e:0b:77:47:e1:e4:15:29:0d:51:48:0f:3d:
                    fd:02:bb:d2:33:de:8d:04:a2:f8:da:fa:b0:c6:c4:
                    05:79:a6:39:19:b8:97:fb:63:23:21:7f:b4:01:d0:
                    b3:ba:0f:ea:be:2c:09:58:48:fa:83:08:71:a4:67:
                    52:49:b2:93:32:8f:0d:ca:86:91:6b:96:9a:ca:0b:
                    1e:ef:df:62:ef:69:6c:89:c5:8b:a7:be:03:b8:12:
                    c1:89:49:54:42:62:bf:03:98:d0:34:ef:44:d1:8e:
                    47:cd:22:fb:cd:8b:fa:d2:b5:9e:c3:4c:d1:c9:38:
                    a1:0e:05:a5:8a:c5:6d:72:ce:b2:56:d4:17:2e:c0:
                    1b:3a:d4:61:1b:87:1e:c6:28:a7:af:e1:89:c7:e4:
                    0e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:6F:70:BD:66:0C:EB:A2:C4:FA:34:8F:AD:3C:14:89:18:73:B7:48
            X509v3 Authority Key Identifier:
                keyid:42:CE:50:E1:AC:73:3D:5A:16:6B:54:2C:3C:49:30:9F:36:56:BF:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:75:98:2b:7b:64:ba:aa:d0:fc:49:03:e2:61:67:e2:24:40:
         d6:4f:80:99:f1:4a:43:c2:e8:ce:e1:23:20:d5:fe:62:a4:60:
         df:c6:ba:50:02:79:92:9c:37:78:89:4c:4c:68:8e:8d:9e:ec:
         e9:f5:a2:d4:7d:9d:61:30:a4:b3:72:05:79:b6:df:0d:89:10:
         ce:89:9e:b6:24:28:59:22:56:6d:6f:a9:d4:c0:ef:74:0c:71:
         96:6c:42:60:ef:29:23:39:6d:b0:12:1d:36:91:bd:1c:47:59:
         00:bb:0a:ab:74:91:01:20:4b:74:da:1e:d3:b3:1d:c5:99:fb:
         05:7c:6e:f4:72:42:41:3c:ec:3d:28:f1:72:57:9e:8f:7f:0f:
         76:e4:76:15:e3:80:e2:ab:e1:f3:ec:92:98:1d:19:5f:1c:f1:
         02:0b:73:20:4c:08:7d:c1:4c:a8:e5:2a:ff:48:1a:55:e4:3e:
         30:54:c0:7d:38:2c:c5:0f:91:6e:f6:3a:ff:71:72:48:3d:ce:
         3c:1f:14:54:9b:03:e2:d2:42:61:e4:0d:fd:a5:88:a6:23:83:
         1c:1d:52:89:8e:f3:13:31:53:24:f6:7a:13:c7:9e:2a:5c:01:
         5a:f7:5c:9c:29:4e:ba:80:f1:cc:9d:20:ea:85:55:f9:b3:de:
         5e:23:e7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:56:06 2025 by rpki-client