Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft
File:                     qkybf_t3YNE02jT6MRKd4Rod4q4.mft (raw, json)
Hash identifier:          p13qg4plJJ1LhIFmv7JJlVH9ehCluavLBNWude8jtMk=
Subject key identifier:   6D:3D:37:87:64:7D:91:EA:8A:90:54:78:51:4C:AC:0E:73:D5:59:C7
Authority key identifier: AA:4C:9B:7F:FB:77:60:D1:34:DA:34:FA:31:12:9D:E1:1A:1D:E2:AE
Certificate issuer:       /CN=A9156021/serialNumber=AA4C9B7FFB7760D134DA34FA31129DE11A1DE2AE
Certificate serial:       2DE3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft
Manifest number:          2DD6
Signing time:             Fri 28 Mar 2025 15:35:32 +0000
Manifest this update:     Fri 28 Mar 2025 15:35:32 +0000
Manifest next update:     Fri 04 Apr 2025 15:35:32 +0000
Files and hashes:         1: qkybf_t3YNE02jT6MRKd4Rod4q4.crl (hash: NfBc2Piz6gA9F4sJZR/zLdNPw+ButQagZeU7mLRN1Go=)
                          2: 3408D944DC0311EC879DE280C4F9AE02.roa (hash: SF0KSzVCHmFw/vbmezHEwC+CagFNOXzqq/EI5Ov054o=)
                          3: 5B102332845711EEB3DC4A5EC4F9AE02.roa (hash: ziUiMds6NJgi8TDHiQaMAYIvEJIsNCMspTIFgHdhreo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11747 (0x2de3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156021
        Validity
            Not Before: Mar 28 15:35:32 2025 GMT
            Not After : Apr  4 15:35:32 2025 GMT
        Subject: CN=67e6c1c4-d25c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:24:18:42:e6:79:38:32:64:a2:4d:43:d7:da:
                    b1:54:36:91:99:00:70:b1:94:e8:48:b4:59:9a:e1:
                    b8:99:fe:d7:9c:01:81:2f:dd:c8:84:c5:37:b2:5c:
                    ef:a4:94:06:61:ff:cb:29:16:49:02:07:3e:f2:7d:
                    74:61:b3:bb:49:a2:30:b3:2b:f7:50:f6:d1:32:c2:
                    43:90:d4:04:0c:b6:a7:99:ca:5e:2c:2e:87:82:37:
                    0f:2c:c3:74:33:e2:27:0d:84:77:f6:71:51:90:41:
                    b3:22:17:92:1f:92:79:8a:79:1f:e5:0c:cb:13:bb:
                    7b:1d:d3:60:b8:2e:f4:20:aa:70:4c:00:7f:a2:66:
                    44:f6:6f:69:4f:d7:d2:35:bf:8b:7b:04:d7:13:71:
                    af:3a:b6:05:a6:5f:01:4d:29:0b:6f:18:de:89:81:
                    f7:be:7e:fd:15:95:86:67:d3:ec:52:4f:57:13:c5:
                    eb:66:c4:a6:76:39:27:4b:8d:3f:22:bb:29:72:86:
                    ec:1b:3e:77:fb:92:67:e9:28:ca:d0:1d:3e:c2:20:
                    90:f3:07:86:31:68:98:3d:fa:e9:36:67:ac:01:c5:
                    c0:43:f6:c0:24:2a:1c:45:9c:69:ee:8b:ec:55:dc:
                    29:5e:c7:82:33:89:a9:92:9e:ed:99:a4:02:cd:28:
                    4f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:3D:37:87:64:7D:91:EA:8A:90:54:78:51:4C:AC:0E:73:D5:59:C7
            X509v3 Authority Key Identifier:
                keyid:AA:4C:9B:7F:FB:77:60:D1:34:DA:34:FA:31:12:9D:E1:1A:1D:E2:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:0d:cf:be:21:3c:a4:7c:23:a8:80:b7:aa:c0:db:f2:a7:d4:
         6e:4b:ec:05:d5:25:b0:6c:c6:73:5c:ae:14:50:70:cc:a3:9c:
         bd:c7:ab:93:9b:c5:db:b5:51:02:16:9f:4a:81:cb:9a:f9:c3:
         e0:d8:fb:3c:6c:57:26:f5:4d:79:15:c6:44:b0:2a:55:55:61:
         b8:bc:3a:7e:4e:a4:ce:09:82:fb:5d:3c:1b:85:ba:9c:7c:38:
         6b:40:61:f4:67:ed:49:d3:44:9b:20:27:63:34:32:39:58:ee:
         e2:ac:5c:b5:b5:20:5a:53:02:eb:f8:1b:11:e9:9e:ca:2e:5a:
         f2:77:a5:12:42:40:66:51:b9:7c:6a:e6:e5:49:62:5b:e7:66:
         df:0c:30:1c:54:7b:d7:99:51:42:db:2f:26:1f:52:cc:9f:e8:
         cf:27:58:43:aa:ab:3b:01:89:e7:a4:4c:be:20:37:eb:c7:0b:
         ce:89:12:04:20:55:66:f1:5f:26:30:bd:49:f3:70:7e:a9:33:
         eb:cb:5e:21:fd:1a:ec:a4:bc:84:75:2b:2b:29:7b:f2:d8:5d:
         da:98:ea:16:a3:6e:ba:3f:2c:93:e5:69:37:e9:d5:a8:bc:84:
         51:cd:42:fd:f2:31:89:27:b2:56:16:3d:f8:df:fa:f3:08:4d:
         22:e8:8b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----