Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft
File:                     QELCSQ19r-wzIDFu1ap04L7Kqak.mft (raw, json)
Hash identifier:          H/Q71xuWMmIQWfYYBXmiLo2IyhHA+cWmofjrUQ9ioCg=
Subject key identifier:   5E:09:9C:52:28:26:3C:2F:76:B4:C6:5F:41:15:6C:B0:51:D8:1E:E8
Authority key identifier: 40:42:C2:49:0D:7D:AF:EC:33:20:31:6E:D5:AA:74:E0:BE:CA:A9:A9
Certificate issuer:       /CN=A91A7169/serialNumber=4042C2490D7DAFEC3320316ED5AA74E0BECAA9A9
Certificate serial:       D6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft
Manifest number:          C8
Signing time:             Sat 29 Mar 2025 05:16:49 +0000
Manifest this update:     Sat 29 Mar 2025 05:16:49 +0000
Manifest next update:     Sat 05 Apr 2025 05:16:48 +0000
Files and hashes:         1: QELCSQ19r-wzIDFu1ap04L7Kqak.crl (hash: /sK2O/fxddq+FMev1KVqatSZ5KPqCXCG+72lxaN7XKo=)
                          2: FCF99042301011EFBC350682C4F9AE02.roa (hash: w6V5zVhSWP7KHaVRuECmZWSRiBZBcxO4NF/bu4dDU1U=)
                          3: 3D937A30EBB211EEA93D9B14C4F9AE02.roa (hash: 4IAC/jSQTXj2MYLQMkt3TE5hsCOe0XFD7gTvlHGKKzs=)
                          4: 3E0BA21CEBB211EEA93D9B14C4F9AE02.roa (hash: eYzLLwqXSEETTXrW2+hB6aRYqoSuQiyl6DUCdQfwtGE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 214 (0xd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7169
        Validity
            Not Before: Mar 29 05:16:49 2025 GMT
            Not After : Apr  5 05:16:48 2025 GMT
        Subject: CN=67e78241-fc04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:51:4d:db:3d:a7:29:e9:f8:a7:96:de:ec:ce:
                    00:e7:d1:96:73:de:b8:48:4c:72:6c:31:f4:cf:d5:
                    c8:38:ec:e6:cf:82:df:81:aa:c9:b2:93:4c:9d:3b:
                    4a:2f:e9:ac:9e:90:17:ae:8b:3e:71:b5:45:3c:bf:
                    fd:36:2f:e1:fb:27:59:ae:b0:74:82:00:06:0e:0e:
                    83:14:63:61:9f:45:52:cc:84:f4:ab:a7:0a:d6:2c:
                    54:dc:b2:dd:64:38:1a:dd:7c:35:f9:37:e5:73:26:
                    87:eb:1c:c8:10:fa:e2:08:2b:ea:15:71:2f:12:e5:
                    9c:c2:7d:c0:87:67:9f:3d:8b:13:48:83:6f:0b:79:
                    63:62:ee:e8:9e:b4:d8:e0:2c:18:18:e6:9f:31:5b:
                    c6:4d:a0:a8:9f:e8:ab:a9:89:c2:95:b8:89:02:54:
                    31:31:f8:33:74:02:9a:40:ba:21:b7:10:06:c9:dc:
                    5e:c8:79:df:2c:74:a3:b2:02:1f:ab:5f:e8:78:38:
                    9f:02:7c:8a:22:94:1d:54:a9:ba:6b:aa:be:79:94:
                    f7:25:10:8c:e9:d2:49:c9:66:8e:28:53:1e:70:d1:
                    9f:92:ce:b7:a0:39:dc:cb:03:1b:81:f4:03:8a:0b:
                    e3:7c:e3:b5:a6:79:ca:c2:4d:c9:19:eb:3e:2d:41:
                    07:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:09:9C:52:28:26:3C:2F:76:B4:C6:5F:41:15:6C:B0:51:D8:1E:E8
            X509v3 Authority Key Identifier:
                keyid:40:42:C2:49:0D:7D:AF:EC:33:20:31:6E:D5:AA:74:E0:BE:CA:A9:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:cf:72:12:25:9e:11:92:2c:5d:91:ff:b2:6f:f8:48:cb:c3:
         42:48:1a:e2:ed:42:e4:56:be:4f:cd:93:82:c0:62:58:e9:a9:
         81:c8:41:44:fa:ff:a9:53:dd:1e:ed:20:8b:be:54:c1:18:4d:
         ff:2a:d6:f8:e1:8b:eb:d4:2d:8e:5d:9b:3e:75:2e:04:e4:f4:
         6f:2b:4e:c8:5e:cf:16:e5:35:18:99:94:18:b9:b6:76:83:95:
         27:e0:0d:07:3f:3e:f7:94:ed:e3:4d:dc:58:8f:00:e5:09:74:
         a6:b0:4e:83:c2:37:21:da:10:c1:37:cb:b2:2f:da:f5:c2:25:
         52:d3:f0:6f:5a:e1:d9:13:28:44:b8:bd:e9:c1:11:43:0b:16:
         ee:bb:ea:ec:5a:f7:b1:ff:99:d9:57:ac:5c:ee:a4:d0:ad:a5:
         fa:a7:4f:8d:89:e3:ad:fb:ee:20:24:95:21:ee:e6:8b:60:cd:
         1c:d7:f3:10:0e:22:1b:4f:b2:83:de:6b:0e:81:b7:0f:c2:33:
         78:65:38:3f:06:48:25:38:bc:b2:3e:ea:9a:9b:b6:75:83:d1:
         fa:fa:4b:c7:a7:ff:95:94:6e:4e:ed:4b:b3:2b:4e:d3:89:38:
         90:bb:2a:42:e3:1b:88:9c:e0:39:82:c2:42:dd:bc:1a:f5:ab:
         67:c1:17:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----