Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.mft
File:                     cq-668ns3aLu0tSbE-YEjqPkHmA.mft (raw, json)
Hash identifier:          +3oay2eYAaEO3Ep47KmM2d54K9vl0x577sXxGk15HIQ=
Subject key identifier:   A9:6D:4C:0A:69:A8:C1:DB:CB:B5:20:EE:C0:C3:55:08:9C:DE:48:E3
Authority key identifier: 72:AF:BA:EB:C9:EC:DD:A2:EE:D2:D4:9B:13:E6:04:8E:A3:E4:1E:60
Certificate issuer:       /CN=A91FDD4D/serialNumber=72AFBAEBC9ECDDA2EED2D49B13E6048EA3E41E60
Certificate serial:       2165
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cq-668ns3aLu0tSbE-YEjqPkHmA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.mft
Manifest number:          2132
Signing time:             Fri 31 Jan 2025 15:56:51 +0000
Manifest this update:     Fri 31 Jan 2025 15:56:51 +0000
Manifest next update:     Fri 07 Feb 2025 15:56:51 +0000
Files and hashes:         1: cq-668ns3aLu0tSbE-YEjqPkHmA.crl (hash: mNFtVtPVP7ivsCXzDH+DrxoJHUXxpYBI8L2GNqzD9p8=)
                          2: E9DE96C44C3611EEA9D59630C4F9AE02.roa (hash: uVlM8HNY3NDmZuTJ/98xK6ucMIdX8gkJyRYRKke/tSI=)
                          3: 7798FA94D9BF11ED88162D23C4F9AE02.roa (hash: vStZnM9WCgxtVX8wfoyGf3Lbbte/JmkQGjn+i0zi598=)
                          4: 0FB07E54D28311EDB1655152C4F9AE02.roa (hash: 1KNG804HJXbmuscPZGxeo+rIAhTe5LA9W6bCRM5ho8E=)
                          5: E50E6E14B63411EDB4416786C4F9AE02.roa (hash: Tziz2C2qn61onOhQ/7eEcg4qDtF40KkoiHOBMO6jD30=)
                          6: 0F0824DED28311EDB1655152C4F9AE02.roa (hash: sD/Lha1/h/4VymmtWUgMkaUP/2C8au09wbb4DSwjklc=)
                          7: AB9E7432714911EEBF95153CC4F9AE02.roa (hash: cMZRax7yg+Jh41+iL95xVmrPzqbsdWq+nKamnxLnIZ8=)
                          8: 1C628A90671411EEA0040661C4F9AE02.roa (hash: 0N5bttIpbIcm1sEA9sXBrACSJP3bYLL7Dk0nt1z4P4c=)
                          9: EEFB07CCB8A311ED8F694046C4F9AE02.roa (hash: IdMt6eJbJY0CQOsRt3BklbohXFfNbPy1Yiz62IuF3WE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8549 (0x2165)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDD4D/serialNumber=72AFBAEBC9ECDDA2EED2D49B13E6048EA3E41E60
        Validity
            Not Before: Jan 31 15:56:51 2025 GMT
            Not After : Feb  7 15:56:51 2025 GMT
        Subject: CN=679cf2c3-a3aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ac:91:24:58:65:df:bb:6a:37:e1:e7:9b:4f:
                    86:84:45:22:df:c4:34:d4:10:60:2f:6e:1d:12:1d:
                    10:f7:09:f2:b7:a4:66:9b:3e:b2:95:5a:c1:68:55:
                    29:9b:cd:c9:23:8f:2a:2a:dd:12:4c:93:45:74:a5:
                    be:f3:0f:9f:17:4f:3d:27:a9:0b:7a:ea:2e:0b:fb:
                    e6:cb:fe:14:0f:cb:ba:c3:ed:62:31:6d:b1:a5:40:
                    88:43:3c:69:71:41:9f:2a:a1:32:a6:e7:f5:3a:8e:
                    8e:c0:94:c7:43:8f:c5:dd:53:98:11:70:7c:9d:ee:
                    db:d0:b6:78:58:24:1f:02:a9:87:9c:09:2e:af:0b:
                    c3:43:f5:a7:65:27:af:32:75:94:b6:0f:fc:1c:26:
                    b7:b8:95:b2:0e:fa:ab:38:cf:b2:38:9e:33:ff:a8:
                    f7:89:da:da:15:63:69:f4:b3:c0:0c:f9:f5:51:ac:
                    c7:f8:0e:98:d2:10:0b:1f:ce:b3:d1:1e:da:86:e8:
                    89:f5:8d:ec:e7:f1:96:8b:0c:6a:b7:d2:d6:bc:02:
                    4d:54:e3:5f:ac:bc:21:ba:85:6c:9c:88:e2:88:2b:
                    1b:14:ae:f1:aa:dc:fa:8a:06:1a:ac:d0:ba:80:df:
                    e9:fd:34:1a:f1:37:ba:3b:a6:ae:cd:9d:b8:08:4d:
                    8b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:6D:4C:0A:69:A8:C1:DB:CB:B5:20:EE:C0:C3:55:08:9C:DE:48:E3
            X509v3 Authority Key Identifier:
                keyid:72:AF:BA:EB:C9:EC:DD:A2:EE:D2:D4:9B:13:E6:04:8E:A3:E4:1E:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cq-668ns3aLu0tSbE-YEjqPkHmA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:24:c4:bd:0f:35:c7:f5:14:25:e2:32:3b:c3:1a:ec:d0:22:
         ee:db:3c:b1:ff:ec:c3:b3:3f:1f:21:80:9f:49:6e:25:7b:29:
         3b:7e:f7:c1:b6:79:47:e0:80:7a:b5:5b:8f:31:4e:08:d9:5a:
         75:7e:0f:a0:f7:0a:32:43:48:70:51:5f:a2:90:dc:e4:ad:b9:
         d3:86:d1:0d:a3:5f:dc:38:b0:1d:fe:8b:ff:d5:b9:80:d7:c8:
         31:2b:5d:a0:1a:26:0e:49:18:14:59:27:7a:18:94:2d:ee:62:
         56:9b:1d:3f:71:2d:14:9d:13:99:4e:4b:08:43:88:d6:43:72:
         6a:2f:4a:e6:16:77:2b:ab:df:97:81:8c:16:60:5d:92:25:0e:
         89:be:bb:3c:7c:c9:36:0f:ca:a6:d7:43:b3:0c:2f:93:3c:42:
         2e:19:0c:31:5f:da:22:76:14:ec:19:98:9b:5e:f1:0a:3a:45:
         4c:f6:5e:ba:23:9a:20:ba:3a:9b:1b:b8:c5:e1:9b:7b:39:d4:
         fb:b2:24:54:0f:5e:1b:65:f2:ce:39:4e:a7:bb:46:05:db:f8:
         14:dc:66:d5:05:c0:79:9d:93:fc:42:f1:0e:0f:bc:1c:f0:c3:
         bf:ab:ec:d2:9f:7f:9f:8f:fc:14:f0:36:a0:9a:ad:c7:9b:2f:
         8c:d1:85:f6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICIWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkRENEQxMTAvBgNVBAUTKDcyQUZCQUVCQzlFQ0REQTJFRUQyRDQ5QjEzRTYwNDhF
QTNFNDFFNjAwHhcNMjUwMTMxMTU1NjUxWhcNMjUwMjA3MTU1NjUxWjAYMRYwFAYD
VQQDEw02NzljZjJjMy1hM2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs6yRJFhl37tqN+Hnm0+GhEUi38Q01BBgL24dEh0Q9wnyt6Rmmz6ylVrBaFUp
m83JI48qKt0STJNFdKW+8w+fF089J6kLeuouC/vmy/4UD8u6w+1iMW2xpUCIQzxp
cUGfKqEypuf1Oo6OwJTHQ4/F3VOYEXB8ne7b0LZ4WCQfAqmHnAkurwvDQ/WnZSev
MnWUtg/8HCa3uJWyDvqrOM+yOJ4z/6j3idraFWNp9LPADPn1UazH+A6Y0hALH86z
0R7ahuiJ9Y3s5/GWiwxqt9LWvAJNVONfrLwhuoVsnIjiiCsbFK7xqtz6igYarNC6
gN/p/TQa8Te6O6auzZ24CE2LPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKltTApp
qMHby7Ug7sDDVQic3kjjMB8GA1UdIwQYMBaAFHKvuuvJ7N2i7tLUmxPmBI6j5B5g
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREQ0RC9CQUUxMDhDNEVB
NjAxMUU1ODgxNTc3MENDNEY5QUUwMi9jcS02NjhuczNhTHUwdFNiRS1ZRWpxUGtI
bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NxLTY2OG5zM2FMdTB0U2JFLVlFanFQa0htQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
REQ0RC9CQUUxMDhDNEVBNjAxMUU1ODgxNTc3MENDNEY5QUUwMi9jcS02NjhuczNh
THUwdFNiRS1ZRWpxUGtIbUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAtJMS9DzXH9RQl4jI7wxrs0CLu2zyx/+zDsz8fIYCfSW4leyk7fvfB
tnlH4IB6tVuPMU4I2Vp1fg+g9woyQ0hwUV+ikNzkrbnThtENo1/cOLAd/ov/1bmA
18gxK12gGiYOSRgUWSd6GJQt7mJWmx0/cS0UnROZTksIQ4jWQ3JqL0rmFncrq9+X
gYwWYF2SJQ6Jvrs8fMk2D8qm10OzDC+TPEIuGQwxX9oidhTsGZibXvEKOkVM9l66
I5ogujqbG7jF4Zt7OdT7siRUD14bZfLOOU6nu0YF2/gU3GbVBcB5nZP8QvEOD7wc
8MO/q+zSn3+fj/wU8Dagmq3Hmy+M0YX2
-----END CERTIFICATE-----
Generated at Sat Apr 26 05:28:14 2025 by rpki-client