Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft
File:                     QstM8CH28_wMgcT98cl9dCEAMXs.mft (raw, json)
Hash identifier:          fWm/qov25gVxoEjLjY68WKxg3B+KVc0hJgkEJzStaV4=
Subject key identifier:   F7:59:6C:7A:57:4B:9C:68:C7:FC:FF:5C:89:E2:97:86:3E:20:FD:B4
Authority key identifier: 42:CB:4C:F0:21:F6:F3:FC:0C:81:C4:FD:F1:C9:7D:74:21:00:31:7B
Certificate issuer:       /CN=A9113B73/serialNumber=42CB4CF021F6F3FC0C81C4FDF1C97D742100317B
Certificate serial:       071F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QstM8CH28_wMgcT98cl9dCEAMXs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft
Manifest number:          0717
Signing time:             Fri 28 Mar 2025 22:09:08 +0000
Manifest this update:     Fri 28 Mar 2025 22:09:07 +0000
Manifest next update:     Fri 04 Apr 2025 22:09:07 +0000
Files and hashes:         1: QstM8CH28_wMgcT98cl9dCEAMXs.crl (hash: rt5Zr0Gj/Pe9v5sVatqsMMNS9i5GfAP5JCatSIOpiq0=)
                          2: 038C732E874611EB83B41D39C4F9AE02.roa (hash: zhnmsmc/g0LWn+TJAjTjuEzqoDewcjKeARZv6m3Jwn8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1823 (0x71f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113B73
        Validity
            Not Before: Mar 28 22:09:07 2025 GMT
            Not After : Apr  4 22:09:07 2025 GMT
        Subject: CN=67e71e03-17c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d8:51:2a:94:6d:0a:51:f7:06:ab:1d:ca:14:
                    b9:aa:aa:bc:de:6a:cb:54:c4:99:a7:13:24:ab:a0:
                    63:b5:39:1a:2c:3d:08:ec:13:b2:7e:35:6e:20:cd:
                    60:70:32:cc:ed:de:d3:c5:66:6c:7c:c6:ea:e3:b9:
                    b3:82:a0:01:2f:2a:a9:65:d9:1f:9f:7e:c2:36:52:
                    af:f4:0c:f8:03:4a:c0:c2:6e:01:6b:34:0b:fa:c9:
                    6b:c1:7e:43:7b:67:7a:65:e7:e6:56:07:0b:3e:7c:
                    80:aa:86:d6:4c:6f:54:c3:7c:17:86:3b:a5:d4:a4:
                    c0:23:91:52:88:8d:11:d4:72:a5:ba:ae:94:5e:56:
                    3e:20:11:89:1a:b6:68:af:37:4d:ae:dd:91:38:0e:
                    2d:f3:60:b1:88:3d:89:6e:82:b7:94:c0:e3:53:7c:
                    15:0d:0f:0f:12:f9:f9:cf:80:94:62:8b:02:56:b9:
                    e3:9b:6f:a6:fd:8b:ac:25:83:1c:68:b0:72:34:d9:
                    d3:16:42:f8:6f:ac:49:c4:33:45:4d:e8:7f:7d:c7:
                    be:9c:fc:de:a7:71:29:64:fe:87:50:30:6f:32:29:
                    ca:85:6e:87:c6:ae:3b:97:d5:8e:90:d6:00:15:e7:
                    59:a7:de:10:25:b3:5f:39:d5:72:09:98:38:bf:75:
                    ce:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:59:6C:7A:57:4B:9C:68:C7:FC:FF:5C:89:E2:97:86:3E:20:FD:B4
            X509v3 Authority Key Identifier:
                keyid:42:CB:4C:F0:21:F6:F3:FC:0C:81:C4:FD:F1:C9:7D:74:21:00:31:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QstM8CH28_wMgcT98cl9dCEAMXs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:60:57:30:fe:04:35:71:ff:db:2c:d9:a3:5d:08:0e:d7:a5:
         57:19:a0:21:6d:14:f8:ed:ce:c1:4a:b2:81:ad:e2:52:ca:9e:
         36:04:24:08:0c:f7:1f:dc:b2:71:a0:62:b4:cd:eb:3a:d5:96:
         c7:fa:bb:4e:a3:ed:93:a8:3b:a2:38:f6:01:85:e8:75:a4:83:
         3b:b4:97:84:46:ee:4f:9f:74:e0:05:4b:bd:f8:f1:75:ab:87:
         b6:84:34:ef:fe:ea:87:09:f0:bf:39:fd:96:bb:a5:cf:a6:ad:
         f4:4e:ea:be:9a:16:8f:fc:75:84:84:31:20:66:70:b5:57:9d:
         8a:08:dd:ee:48:f5:b8:aa:a3:fa:b7:a4:42:ed:26:b8:55:9d:
         0f:a3:fa:3e:5e:7e:d5:f8:d5:2f:f5:da:1b:d8:b7:62:ab:52:
         6d:92:f1:08:ba:6b:4a:10:9e:72:49:eb:5e:5c:c3:9e:c9:43:
         43:d6:a9:b3:ab:42:34:41:e3:48:51:43:0b:28:db:0f:a4:4d:
         1f:6c:4e:96:59:39:9a:3d:4d:93:4c:eb:8e:a4:b7:9c:aa:19:
         7f:92:c5:17:eb:d7:10:9d:33:1c:94:0b:72:97:15:2d:90:02:
         83:17:76:b2:ec:43:83:7e:5f:27:e7:b8:93:2c:d8:e7:73:78:
         ee:00:f9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----