Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5A57/76F267FA56EC11EF8A0CB24FC4F9AE02/QBwaNjT5h86fnlzvVAncG9D_K6o.mft
File:                     QBwaNjT5h86fnlzvVAncG9D_K6o.mft (raw, json)
Hash identifier:          FNzCv9kmIxFwyHKVnxmuc7hq7e8ZR3OfbBLyYQKB0hw=
Subject key identifier:   24:74:F5:F3:E8:5A:A4:FF:98:B7:A1:B3:B4:EA:C4:40:08:CB:15:4D
Authority key identifier: 40:1C:1A:36:34:F9:87:CE:9F:9E:5C:EF:54:09:DC:1B:D0:FF:2B:AA
Certificate issuer:       /CN=A91A5A57/serialNumber=401C1A3634F987CE9F9E5CEF5409DC1BD0FF2BAA
Certificate serial:       78
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBwaNjT5h86fnlzvVAncG9D_K6o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5A57/76F267FA56EC11EF8A0CB24FC4F9AE02/QBwaNjT5h86fnlzvVAncG9D_K6o.mft
Manifest number:          78
Signing time:             Sat 29 Mar 2025 06:01:24 +0000
Manifest this update:     Sat 29 Mar 2025 06:01:24 +0000
Manifest next update:     Sat 05 Apr 2025 06:01:24 +0000
Files and hashes:         1: QBwaNjT5h86fnlzvVAncG9D_K6o.crl (hash: O/s1ETQ4pM11wRDC/uFkRN6lo0hT+ovYUTt5CFccSfI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120 (0x78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5A57
        Validity
            Not Before: Mar 29 06:01:24 2025 GMT
            Not After : Apr  5 06:01:24 2025 GMT
        Subject: CN=67e78cb4-c61f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c0:d5:23:72:13:c9:fd:f7:99:7d:05:2d:88:
                    64:4b:7d:69:76:2b:89:e9:46:ee:5d:94:e5:55:2e:
                    d1:58:9b:52:57:d4:b6:c6:64:64:06:aa:d2:94:cc:
                    2e:db:07:da:c0:e3:8d:8b:fa:a7:c5:ad:33:e9:67:
                    5a:c8:1f:7c:ab:2d:04:60:7d:33:97:8b:f6:be:67:
                    af:68:94:e0:58:93:0a:34:44:1e:fe:c1:46:a1:a8:
                    df:0b:86:0f:90:b4:84:46:04:70:f7:c7:66:74:12:
                    02:87:37:8c:31:30:16:3d:d9:fe:51:9c:44:14:03:
                    83:00:d1:3d:8c:0e:c6:cd:9a:48:20:f8:6c:5e:46:
                    eb:3d:c0:0d:b3:e0:00:18:10:4d:d4:57:21:64:b7:
                    d0:7b:05:91:a3:70:26:47:9c:1b:a2:94:8a:ff:52:
                    8a:eb:47:be:e2:c8:cd:c4:39:49:10:78:56:74:79:
                    65:d4:8b:ff:07:9e:f6:46:ae:5e:ec:3a:4f:ea:23:
                    e5:d1:75:0a:38:4e:8f:1d:36:c4:09:3d:33:96:2d:
                    a9:52:37:f3:66:63:b5:5a:c4:58:ab:d4:fa:54:28:
                    13:c7:ca:28:96:a2:87:13:79:12:ed:db:f2:65:11:
                    6b:e9:95:b0:94:68:eb:10:87:0b:5d:24:01:8e:e1:
                    b6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:74:F5:F3:E8:5A:A4:FF:98:B7:A1:B3:B4:EA:C4:40:08:CB:15:4D
            X509v3 Authority Key Identifier:
                keyid:40:1C:1A:36:34:F9:87:CE:9F:9E:5C:EF:54:09:DC:1B:D0:FF:2B:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5A57/76F267FA56EC11EF8A0CB24FC4F9AE02/QBwaNjT5h86fnlzvVAncG9D_K6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBwaNjT5h86fnlzvVAncG9D_K6o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5A57/76F267FA56EC11EF8A0CB24FC4F9AE02/QBwaNjT5h86fnlzvVAncG9D_K6o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:36:ee:79:fc:5f:8c:e5:1c:c9:40:db:32:89:16:fb:7d:a9:
         17:61:49:f9:46:b2:30:b7:04:d3:c2:fa:7b:f0:93:ea:d7:97:
         6a:9c:39:8d:f6:74:b7:e8:6a:ef:ce:19:75:81:ee:fd:90:af:
         19:51:e3:45:3f:07:cf:a0:6d:28:63:26:ca:ad:ab:01:2c:0e:
         f7:cb:2e:22:21:96:73:4b:a1:9b:d8:43:43:08:22:c6:76:cc:
         fe:e8:fb:3c:95:5f:d5:89:45:47:34:ea:a6:e8:5c:96:e3:c3:
         fb:cf:65:76:ac:2f:89:25:bb:19:17:08:f1:4e:41:af:e8:7b:
         f4:c1:a6:08:e9:d4:d5:ec:88:94:9b:e8:c9:ce:04:cb:5b:b3:
         74:7f:6f:99:0d:67:e9:45:24:de:3f:0c:c9:b9:bf:8c:32:2b:
         f5:26:5e:ae:4b:9c:f7:ac:1c:92:47:dc:19:1a:fb:96:0d:88:
         ff:4b:6a:75:bf:cc:04:88:f6:f7:88:0c:9d:26:e9:3a:e0:7b:
         d2:8e:ad:3a:38:38:90:eb:db:3e:2d:42:3e:fb:4d:1f:59:79:
         e4:db:8b:5f:a5:1c:c1:e4:b9:1e:66:22:7e:17:3e:b8:1d:fc:
         32:10:60:a1:09:57:01:c9:fd:07:f6:e1:fe:65:46:60:fd:b8:
         f0:69:8c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:57:59 2025 by rpki-client