Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft
File:                     qvquPFcDs5M3_T16lmbFjLjDtQk.mft (raw, json)
Hash identifier:          4VPB5FYww4gk9zHFZdllOGR0pIAMYh6H6fud3Oes/20=
Subject key identifier:   D6:A0:C5:74:A5:C3:7F:04:55:6C:93:09:48:C5:93:6A:DF:E5:72:87
Authority key identifier: AA:FA:AE:3C:57:03:B3:93:37:FD:3D:7A:96:66:C5:8C:B8:C3:B5:09
Certificate issuer:       /CN=A9117394/serialNumber=AAFAAE3C5703B39337FD3D7A9666C58CB8C3B509
Certificate serial:       3533
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft
Manifest number:          34D5
Signing time:             Fri 28 Mar 2025 14:18:50 +0000
Manifest this update:     Fri 28 Mar 2025 14:18:49 +0000
Manifest next update:     Fri 04 Apr 2025 14:18:49 +0000
Files and hashes:         1: qvquPFcDs5M3_T16lmbFjLjDtQk.crl (hash: 3aaAqstjlIO+uLrGUmA0GbQqz0ZyZuJMBaRlQu3LAHQ=)
                          2: D52009B06A6311EFA96F023DC4F9AE02.roa (hash: F5aTMcUYsmdixUm9yQzG1VwvhsqYUF6nPzXXk9qwa44=)
                          3: 90F73AF40E2511EBBB7F993CC4F9AE02.roa (hash: xfrnwW4CE8rEb6G9IL8uJB1Hv4mR3WOgjrI080cSfHc=)
                          4: 4D91B0C25ED111EFAFFEA662C4F9AE02.roa (hash: qedOB7JdFBTfxxMEPND3tzfrdQHqBUmjzqhuDo8ig1E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13619 (0x3533)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9117394
        Validity
            Not Before: Mar 28 14:18:49 2025 GMT
            Not After : Apr  4 14:18:49 2025 GMT
        Subject: CN=67e6afca-572a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ec:4d:3c:3e:f4:bb:1d:ee:ee:c6:94:85:c1:
                    a0:76:ad:91:49:94:00:e7:9a:3c:71:3a:d7:c5:6d:
                    89:88:76:71:27:e4:4e:bc:de:b9:cb:39:a9:f1:c2:
                    62:c7:4f:d3:8f:34:94:f1:46:1b:e2:9a:6f:2c:45:
                    6a:4f:b5:f6:62:b0:91:2a:da:7c:3d:69:0d:fb:65:
                    1f:52:97:b4:f9:1e:2c:39:89:18:b9:04:c0:0f:af:
                    31:4b:54:a1:5b:31:2e:c5:47:a8:05:dd:5a:5a:fd:
                    bb:ec:9e:22:df:95:16:3f:87:e2:97:6f:92:0a:56:
                    ba:9b:98:5c:6c:40:c3:83:d8:8e:5a:bf:c2:ae:a9:
                    be:d2:52:74:ea:65:dd:6c:cb:e0:48:0a:db:cd:77:
                    4f:ee:d6:2f:97:74:8d:fc:e5:fa:2c:b6:9b:0b:9d:
                    4f:a2:a2:8a:4b:0e:22:22:39:a7:e6:76:3b:9f:c5:
                    5a:72:86:be:21:41:f1:c0:b2:c0:d0:78:70:f7:2d:
                    3b:bf:1d:77:ed:40:d3:08:72:9b:9c:f3:51:d0:aa:
                    e6:f4:51:67:12:5f:9b:0b:2e:5d:cd:8b:fb:91:86:
                    f2:be:d1:41:a8:71:6f:ab:f0:38:58:45:aa:b3:46:
                    1b:f4:fc:93:53:4c:46:6a:26:f2:38:c5:9c:fc:6d:
                    05:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A0:C5:74:A5:C3:7F:04:55:6C:93:09:48:C5:93:6A:DF:E5:72:87
            X509v3 Authority Key Identifier:
                keyid:AA:FA:AE:3C:57:03:B3:93:37:FD:3D:7A:96:66:C5:8C:B8:C3:B5:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:24:94:a4:1a:6a:d7:d4:89:c3:46:e2:97:90:b7:d1:31:ed:
         6f:29:5a:0e:34:5d:f1:40:93:a0:f2:89:65:5c:b9:db:7c:b6:
         6e:38:90:59:05:c2:bd:04:7c:73:93:b4:f7:53:9d:e0:ef:09:
         2b:0c:3a:1e:83:75:61:d5:a6:0e:45:e0:31:82:7e:11:fe:66:
         c2:86:8d:73:a6:71:46:28:b1:ac:12:00:02:e4:18:cd:d6:95:
         a3:02:74:96:4a:77:e7:b8:0e:02:eb:68:f2:8f:1d:bc:58:18:
         fc:84:05:2e:65:00:ab:aa:cf:29:6b:7b:5d:d3:a5:09:e2:4b:
         a4:3d:d9:f7:88:9a:ee:e9:52:4d:0d:64:58:c6:1c:e3:fa:78:
         15:bd:41:2d:78:3a:4a:cd:cb:5c:f1:87:11:2d:e7:5e:35:4e:
         a1:8a:51:60:52:63:eb:90:2b:17:6d:fa:16:de:9b:55:0c:4b:
         d6:95:d0:0d:62:04:26:30:aa:3d:ab:fd:b2:cc:5e:c7:54:30:
         16:be:cf:e6:73:08:8c:83:ca:be:f9:9a:57:8a:f8:0f:d2:f9:
         2d:9d:b2:b1:c3:af:90:47:59:3b:01:53:1e:7a:cf:2e:54:7e:
         8b:62:c8:bc:65:75:e8:d5:59:76:66:ce:f7:e1:21:c4:3f:88:
         c9:a1:5d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 12:22:35 2025 by rpki-client