Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.mft
File:                     sqo-Olsp4PQc3Vphf3-2o3obkBE.mft (raw, json)
Hash identifier:          exBRID07A/0/RfPIQGOEzqYWiaW2yYo8clCp+IHOD9o=
Subject key identifier:   4E:68:88:F6:FF:BD:1E:92:83:F8:F4:46:13:F7:18:D6:B1:27:AA:B1
Authority key identifier: B2:AA:3E:3A:5B:29:E0:F4:1C:DD:5A:61:7F:7F:B6:A3:7A:1B:90:11
Certificate issuer:       /CN=A91FB924/serialNumber=B2AA3E3A5B29E0F41CDD5A617F7FB6A37A1B9011
Certificate serial:       3458
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqo-Olsp4PQc3Vphf3-2o3obkBE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.mft
Manifest number:          3451
Signing time:             Fri 31 Jan 2025 14:37:22 +0000
Manifest this update:     Fri 31 Jan 2025 14:37:21 +0000
Manifest next update:     Fri 07 Feb 2025 14:37:21 +0000
Files and hashes:         1: sqo-Olsp4PQc3Vphf3-2o3obkBE.crl (hash: fpagW2fBqHio1b+BS1L0dFeuMJD7Tw5V1Dl15BIq5e4=)
                          2: DF502EECD44511E984021644C4F9AE02.roa (hash: lhTwffgGoDZ+11LSS1CyopFlM7JUjXizmn+X+Kky/Wk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13400 (0x3458)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FB924/serialNumber=B2AA3E3A5B29E0F41CDD5A617F7FB6A37A1B9011
        Validity
            Not Before: Jan 31 14:37:21 2025 GMT
            Not After : Feb  7 14:37:21 2025 GMT
        Subject: CN=679ce022-493b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:cd:8d:13:e6:fb:41:2c:17:85:ed:63:6d:6e:
                    bb:c5:6a:54:5e:21:48:4b:38:02:75:d8:f2:73:d1:
                    7a:18:09:d6:f3:a6:e8:c8:7c:b1:94:d2:f3:20:b6:
                    5d:91:dc:83:f0:ca:f4:f2:6a:97:d3:7e:66:14:d2:
                    0f:ef:aa:7a:89:e5:1d:82:a3:04:6f:cb:f7:28:cf:
                    05:3d:58:f4:59:18:44:4a:70:fd:09:af:01:88:8b:
                    90:f9:b7:7a:e3:fb:18:1a:f5:c1:24:f8:6f:84:f6:
                    28:ce:3d:50:50:c3:1a:ff:d9:1a:9d:a8:ec:2d:25:
                    d2:01:5f:8b:eb:b9:a0:65:16:42:03:24:09:9c:a5:
                    1f:0c:ec:09:dd:b6:ac:9d:03:fa:2f:ed:e9:8b:28:
                    22:f6:ce:d3:4e:ab:7f:ae:92:44:80:5c:4e:9f:cc:
                    30:fa:94:20:4e:cf:ce:f1:47:ef:d7:ea:ed:30:7f:
                    c4:86:23:ff:0d:7a:b4:4a:2a:d3:a8:9b:24:dc:34:
                    0f:09:e6:26:15:9d:96:f9:ea:fc:5c:a8:a5:9d:4a:
                    a2:95:bc:21:a6:7f:5d:39:a4:bc:81:0f:09:22:68:
                    6a:e6:09:a8:2d:5f:8d:20:22:4a:3c:0e:46:08:aa:
                    75:6a:d7:9c:42:2f:1e:76:f3:7f:30:1e:a3:ab:49:
                    3a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:68:88:F6:FF:BD:1E:92:83:F8:F4:46:13:F7:18:D6:B1:27:AA:B1
            X509v3 Authority Key Identifier:
                keyid:B2:AA:3E:3A:5B:29:E0:F4:1C:DD:5A:61:7F:7F:B6:A3:7A:1B:90:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqo-Olsp4PQc3Vphf3-2o3obkBE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB924/FED23D821D8B11E286A2E5E608B02CD2/sqo-Olsp4PQc3Vphf3-2o3obkBE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:0a:23:8a:82:97:6f:29:18:b6:fa:24:f0:b6:21:ee:c6:79:
         c1:c6:42:f9:3d:21:e2:68:86:02:81:f1:ff:eb:64:57:06:22:
         05:11:da:0f:df:9d:0d:5e:31:64:d5:fc:b4:7e:ad:cd:5e:af:
         a3:be:f0:f9:66:8e:cc:02:7d:24:15:ce:38:15:d7:f3:87:93:
         06:ca:66:52:e3:e6:46:4e:65:d1:7a:f3:6a:c5:be:a0:69:73:
         10:50:e2:e9:22:d7:4e:aa:ae:94:d7:89:18:a3:09:03:1d:6b:
         db:97:01:45:53:b9:26:9e:e5:bd:bc:da:92:e7:da:03:d8:17:
         c8:81:c5:b1:36:1d:ef:bd:ee:cb:3f:70:a5:f6:5f:c6:fd:63:
         2a:f7:f6:c2:68:e0:21:cb:c0:a1:a2:2e:5a:61:6e:83:46:5f:
         b9:0d:bc:0a:c7:76:10:05:b0:be:17:e8:93:37:b7:30:ed:c3:
         58:b4:40:b3:26:f5:f9:df:8e:18:a7:fa:b3:00:6c:94:03:75:
         ea:64:bd:b3:a7:ad:f7:f4:0c:5b:46:cf:27:53:9e:d3:42:d7:
         d2:2f:af:0e:e3:7d:b4:03:37:ce:7a:a2:ad:d3:31:d6:2a:4d:
         cb:80:6a:55:37:9e:aa:c7:74:72:67:85:ec:a4:1e:2d:b6:21:
         7c:65:d4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:10:14 2025 by rpki-client