Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft
File:                     QX1X3RxCy0uksVLTbbBby3iBM98.mft (raw, json)
Hash identifier:          bc59lKTnRroMM8OJY1kmgdHZ33YXytVk+++yo+c6Tf0=
Subject key identifier:   2D:25:A6:C6:A1:89:2A:C6:3F:4D:98:A6:B0:98:02:CF:9F:66:3C:BA
Authority key identifier: 41:7D:57:DD:1C:42:CB:4B:A4:B1:52:D3:6D:B0:5B:CB:78:81:33:DF
Certificate issuer:       /CN=A9148848/serialNumber=417D57DD1C42CB4BA4B152D36DB05BCB788133DF
Certificate serial:       01C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft
Manifest number:          01C0
Signing time:             Sat 29 Mar 2025 02:32:34 +0000
Manifest this update:     Sat 29 Mar 2025 02:32:34 +0000
Manifest next update:     Sat 05 Apr 2025 02:32:34 +0000
Files and hashes:         1: QX1X3RxCy0uksVLTbbBby3iBM98.crl (hash: K5FU7qnkqcChhkY/18kFao38B0vCD5drGp+ahhq5VUY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 450 (0x1c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148848
        Validity
            Not Before: Mar 29 02:32:34 2025 GMT
            Not After : Apr  5 02:32:34 2025 GMT
        Subject: CN=67e75bc2-830c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9e:c6:e5:fd:d7:36:7a:d9:ae:28:a9:b4:d3:
                    ff:8a:94:2a:22:22:22:f0:55:04:fb:ed:6d:bb:bd:
                    26:93:13:5e:24:6c:23:83:86:67:83:ca:01:08:12:
                    a0:00:ed:13:6a:bd:f8:c6:20:75:7c:e6:23:7a:2e:
                    6b:41:d6:ad:96:e0:03:fc:66:6a:42:42:2e:1e:c9:
                    d1:a3:0f:25:4c:dc:8e:7b:a2:d8:08:33:e6:2d:9d:
                    18:8b:e1:d4:9c:25:90:a4:0e:df:13:bb:bf:58:65:
                    1b:fd:d4:6e:9e:cd:ec:1b:46:06:fb:38:f2:02:44:
                    a4:c2:e5:8d:c0:d0:8b:e9:a3:da:8a:bd:68:fa:1d:
                    7a:c8:41:44:0a:68:f5:84:6e:b4:f0:f7:15:2a:23:
                    85:00:7c:8c:ce:23:ec:8c:8c:6c:dd:78:e2:47:e1:
                    59:1c:6f:2a:ac:c0:f7:99:f2:69:6b:82:07:a0:d4:
                    3e:90:b4:8b:01:25:12:79:f7:4e:c8:66:80:2e:95:
                    8b:08:e1:12:e1:03:63:9b:3d:b7:e8:22:ba:d2:f4:
                    da:3a:9e:26:f0:1c:fc:62:d3:b2:b1:04:a8:71:37:
                    65:95:f9:b0:98:86:a3:01:b7:ad:f4:22:ac:53:57:
                    f0:a0:c9:03:3c:71:94:51:03:39:ec:76:73:56:78:
                    e2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:25:A6:C6:A1:89:2A:C6:3F:4D:98:A6:B0:98:02:CF:9F:66:3C:BA
            X509v3 Authority Key Identifier:
                keyid:41:7D:57:DD:1C:42:CB:4B:A4:B1:52:D3:6D:B0:5B:CB:78:81:33:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:dc:39:9b:3e:80:26:1f:b1:18:2f:e2:e1:70:fa:0c:d2:27:
         45:c5:d1:ec:bc:54:7d:c5:53:27:9c:2d:d5:bd:bf:1f:88:45:
         72:dd:71:43:42:07:b5:5f:1b:18:9a:05:f8:b1:b6:d5:f3:3b:
         8c:87:43:1c:0c:a1:f2:ed:87:dd:b1:9c:2f:8d:04:92:ab:b3:
         8c:ef:1d:03:6e:3b:b5:60:4e:db:d9:44:ea:8c:8d:64:b8:b1:
         03:53:c0:10:b6:92:50:d5:e4:f7:ff:8c:01:bc:5e:1a:f9:22:
         81:3a:bd:00:87:f1:13:2e:e8:61:90:10:80:e9:c9:57:16:5a:
         35:74:df:0d:78:43:55:9e:82:30:06:3d:ee:83:c3:36:c6:d8:
         7b:f8:ff:38:6d:85:4a:ec:82:0c:d3:db:90:73:db:5e:3e:56:
         e0:33:34:1d:4a:9b:d8:47:09:44:c2:1a:23:a4:a5:55:6b:dd:
         1c:58:53:99:bb:a4:d5:d0:d8:a1:c9:74:9d:ce:14:3f:be:60:
         2f:b7:3b:27:4f:3e:4d:4b:d9:4f:8a:8d:91:75:ff:ec:78:da:
         f6:67:a6:24:84:49:2d:90:3e:72:c2:7a:71:e7:dc:f2:59:ba:
         f9:c9:50:0d:2b:e7:bf:fe:4e:57:cc:d1:f8:1f:9c:61:e7:f7:
         f2:b1:c8:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:12:41 2025 by rpki-client