Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.mft
File:                     qI7iP_jXCCjO28cB54yAdH_8Eco.mft (raw, json)
Hash identifier:          Jci56SJh/O/k+ZBCm+uVqakREfBaREheHEuEQvsJn4w=
Subject key identifier:   79:C4:4C:80:16:76:3F:3F:8D:9D:4E:EA:D4:DF:14:FA:67:01:6D:C9
Authority key identifier: A8:8E:E2:3F:F8:D7:08:28:CE:DB:C7:01:E7:8C:80:74:7F:FC:11:CA
Certificate issuer:       /CN=A9188A46/serialNumber=A88EE23FF8D70828CEDBC701E78C80747FFC11CA
Certificate serial:       25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qI7iP_jXCCjO28cB54yAdH_8Eco.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.mft
Manifest number:          23
Signing time:             Sat 29 Mar 2025 07:09:57 +0000
Manifest this update:     Sat 29 Mar 2025 07:09:57 +0000
Manifest next update:     Sat 05 Apr 2025 07:09:57 +0000
Files and hashes:         1: qI7iP_jXCCjO28cB54yAdH_8Eco.crl (hash: ajPTsPIsW7Oanu4Bz0HBmI6IifQqwYUB20lMeVQQglI=)
                          2: F3964710DC9611EF9965F120C4F9AE02.roa (hash: m1p9gDbyX7TV/W36Rz61piz8WXiRToAGwtHk1Dx3J+0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188A46
        Validity
            Not Before: Mar 29 07:09:57 2025 GMT
            Not After : Apr  5 07:09:57 2025 GMT
        Subject: CN=67e79cc5-1a4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a8:c3:67:e5:85:8a:42:42:de:1e:bc:1c:3a:
                    79:84:9b:07:57:80:aa:e8:0a:5f:7c:87:8a:c7:4f:
                    36:76:52:f0:35:52:be:95:86:8a:44:bf:2b:3b:1b:
                    c7:8c:16:64:9a:bd:8d:10:d4:1a:a0:a1:3b:9c:b7:
                    46:40:c7:bd:75:60:fb:da:ed:38:38:74:26:3a:6f:
                    f7:dc:66:a7:2b:c1:94:85:dc:a8:bd:bf:ca:1c:dd:
                    90:fc:74:87:37:fc:5d:e0:42:29:c6:70:f5:c5:aa:
                    ac:65:af:e0:d0:77:d8:2d:b7:68:09:a4:90:3c:b1:
                    1e:8e:cc:7d:b8:c4:c5:6c:39:b5:9c:e1:fe:11:5d:
                    7a:a9:9b:4f:9c:5f:89:69:ba:05:d6:f2:b4:c1:ea:
                    27:d1:48:c1:41:1b:0e:c8:de:1d:4e:7d:dc:f3:7f:
                    90:c4:cb:3e:33:f5:c4:9e:03:da:63:6c:2b:24:cc:
                    f5:83:d6:7c:1c:ee:e2:42:3e:c3:b2:51:79:4a:2c:
                    fd:6d:1a:32:97:c8:cd:7b:47:bd:b9:93:08:4f:df:
                    30:c8:68:72:b9:c2:81:a6:5d:df:90:ab:3b:84:68:
                    f4:a0:c4:04:f2:42:da:33:85:e7:65:dd:82:05:4d:
                    c1:e5:4f:02:33:92:2a:1e:11:b3:07:5b:b6:28:24:
                    30:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C4:4C:80:16:76:3F:3F:8D:9D:4E:EA:D4:DF:14:FA:67:01:6D:C9
            X509v3 Authority Key Identifier:
                keyid:A8:8E:E2:3F:F8:D7:08:28:CE:DB:C7:01:E7:8C:80:74:7F:FC:11:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qI7iP_jXCCjO28cB54yAdH_8Eco.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:27:5b:89:13:2e:7b:30:e7:fc:3c:31:77:06:7d:4f:6e:8c:
         5c:66:2d:91:09:84:ad:9f:af:26:9c:1f:94:1b:da:bf:c9:55:
         3f:89:58:90:13:39:ac:ed:15:79:c7:2e:be:a5:ec:96:c6:f9:
         bd:22:7b:57:eb:7a:d7:63:b3:f4:ab:cb:4d:e8:1c:bb:1a:e8:
         77:24:7e:ac:80:a4:f5:7d:5e:2e:f7:34:3a:06:85:22:22:88:
         f0:5a:0b:99:10:b2:b7:01:80:69:30:3c:47:5b:76:f5:ec:28:
         d8:a1:4f:62:bb:10:5e:d2:75:a4:56:cb:66:46:74:56:13:d3:
         f5:74:88:8e:e4:d5:b5:5d:bb:0f:be:0e:f9:23:8a:84:0a:70:
         1c:98:60:16:21:3e:4d:ad:c2:f9:a9:1f:14:c2:da:eb:f2:e3:
         3f:74:03:20:81:b2:7d:c2:10:50:5e:cc:bd:80:27:2c:8d:0a:
         db:16:57:a5:fe:5a:b0:2c:7c:c4:9c:3f:f6:14:f2:64:fc:dd:
         4c:0b:26:19:be:9a:01:43:61:4a:17:4b:1d:e8:d8:2a:35:1e:
         9c:e6:7a:61:d6:0a:76:e6:bd:a5:cf:50:62:65:c6:2f:c3:fe:
         13:36:45:a9:e7:ef:fe:52:96:d7:55:45:ac:5e:91:5d:e6:a7:
         12:88:72:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----