Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.mft
File:                     qbsN-21P9jtyiDO-CtZiN5bsihk.mft (raw, json)
Hash identifier:          cHr/rcKWtNJCiXH2ABCD6zgqfWdKIyOyXLutX8XSbFE=
Subject key identifier:   3B:E3:22:EB:96:0C:14:FB:70:D0:10:85:4E:4D:3A:36:43:9B:B3:6C
Authority key identifier: A9:BB:0D:FB:6D:4F:F6:3B:72:88:33:BE:0A:D6:62:37:96:EC:8A:19
Certificate issuer:       /CN=A91EBBD7/serialNumber=A9BB0DFB6D4FF63B728833BE0AD6623796EC8A19
Certificate serial:       09F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbsN-21P9jtyiDO-CtZiN5bsihk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.mft
Manifest number:          09F1
Signing time:             Thu 30 Jan 2025 19:58:56 +0000
Manifest this update:     Thu 30 Jan 2025 19:58:55 +0000
Manifest next update:     Thu 06 Feb 2025 19:58:55 +0000
Files and hashes:         1: qbsN-21P9jtyiDO-CtZiN5bsihk.crl (hash: vPSUUN38MmQPvrK2cGSX/F8Z3qdzEl8RMnNxrhcmF0E=)
                          2: 651072686CBB11EA95256D30C4F9AE02.roa (hash: RbBtMUxEM5O1piu47myWbtaMm/ZIwxdcYTXVUwgD12E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2551 (0x9f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBBD7/serialNumber=A9BB0DFB6D4FF63B728833BE0AD6623796EC8A19
        Validity
            Not Before: Jan 30 19:58:55 2025 GMT
            Not After : Feb  6 19:58:55 2025 GMT
        Subject: CN=679bda00-26b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f9:da:ba:1e:c5:b2:3d:a5:b8:55:8e:3f:b6:
                    ba:e8:a0:13:51:da:fc:d0:ec:0e:22:3d:21:4f:d9:
                    08:26:d0:e4:a0:00:df:02:04:61:db:7d:b3:0a:b8:
                    90:0b:f2:6d:0b:fc:5f:4d:51:f7:0c:71:df:a4:63:
                    30:df:4f:36:72:a1:12:d5:71:ab:73:c7:35:9f:0e:
                    82:2a:c5:ac:3c:16:df:56:ae:4e:8e:85:ba:8a:dc:
                    6b:2b:40:5e:7c:b2:fd:37:b0:ae:5d:71:98:07:1f:
                    12:56:3e:a2:d2:f9:d1:37:70:8b:95:3b:d4:12:3e:
                    af:b0:de:e2:f5:ee:29:78:96:7b:4a:6c:9c:fd:86:
                    64:77:30:3b:49:f4:47:b0:da:02:78:6f:63:80:11:
                    96:fe:51:89:17:ea:ab:17:d4:e8:23:2b:0f:7b:9d:
                    10:a6:21:d0:4a:85:32:29:72:5d:fe:75:67:ff:b0:
                    72:73:f0:01:bf:88:5b:7f:28:b3:f4:7e:85:fc:19:
                    66:ed:5c:72:04:2e:28:f7:47:dc:c3:6c:fa:ad:e6:
                    14:72:fd:2c:54:64:f1:ea:60:7a:85:49:b0:65:1d:
                    e0:dc:9b:19:f9:ca:f3:ce:22:fa:6f:19:de:44:14:
                    6b:a2:b3:1b:8b:ce:21:b5:6c:8a:bd:dc:c7:87:14:
                    85:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:E3:22:EB:96:0C:14:FB:70:D0:10:85:4E:4D:3A:36:43:9B:B3:6C
            X509v3 Authority Key Identifier:
                keyid:A9:BB:0D:FB:6D:4F:F6:3B:72:88:33:BE:0A:D6:62:37:96:EC:8A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbsN-21P9jtyiDO-CtZiN5bsihk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:81:e3:a5:33:79:ee:4f:37:27:6f:e6:e1:85:7a:0a:c5:0c:
         ef:60:9e:0d:32:de:13:02:e7:d5:f6:b9:8f:0c:56:74:92:ef:
         8c:7b:5f:0c:c4:0e:c1:f5:bb:90:ac:36:40:70:76:d1:15:8c:
         a8:94:5d:0f:5f:03:9f:8b:89:f7:8e:ea:84:7d:ec:c0:8e:8f:
         4a:42:45:8d:c5:1d:2c:68:6d:83:1d:f6:2b:9f:4c:57:37:3c:
         f2:35:0b:2b:5f:25:fd:17:ca:ef:8f:02:87:96:a3:56:0f:41:
         3b:13:0d:31:b8:99:8f:16:e3:29:96:71:3f:43:08:90:3e:62:
         1f:ab:b0:84:68:d6:5c:f7:cc:fb:e5:57:b5:16:6d:15:c2:be:
         1c:7c:2a:d3:8b:19:53:f9:1b:4b:bd:b7:0b:a9:94:d3:3e:4a:
         1f:cb:81:f6:c7:96:c5:fd:54:f8:fc:23:66:90:b4:37:60:ea:
         61:85:ec:7f:b3:2b:ea:21:86:57:7d:1d:b4:ab:a1:bf:26:00:
         0f:e4:ab:65:16:f1:51:6b:ae:68:60:d6:67:8e:1f:c4:c6:cc:
         16:88:4c:10:27:72:73:85:28:0a:72:28:34:84:fd:4c:39:b3:
         bf:87:4a:a2:bf:cb:52:21:d6:31:c2:b2:95:4b:a9:a4:f3:94:
         61:78:d3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:11:42 2025 by rpki-client