Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.mft
File:                     QSplEc_tz-y1WQyWyMNh4v7USFc.mft (raw, json)
Hash identifier:          AgfQDEHyOhMhsvfDcWQTMflt001a3pG1F3H3SLUXKzY=
Subject key identifier:   5D:18:53:9E:3B:E9:C9:F3:EB:12:87:96:46:EC:1D:22:CB:56:12:43
Authority key identifier: 41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57
Certificate issuer:       /CN=A91C1323/serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857
Certificate serial:       5FEB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.mft
Manifest number:          348D
Signing time:             Fri 28 Mar 2025 20:31:32 +0000
Manifest this update:     Fri 28 Mar 2025 20:31:32 +0000
Manifest next update:     Fri 04 Apr 2025 20:31:32 +0000
Files and hashes:         1: QSplEc_tz-y1WQyWyMNh4v7USFc.crl (hash: H3dd2Dzg2icqNLB5ckIvBrpxqVReqLTlbCfQz3vpxus=)
                          2: 882F06DEFF0E11EABBCCCF56C4F9AE02.roa (hash: ZH3Mq/JSGWA6DuI0NcZDqTsE9u1Wv10V6AeYETNaO6o=)
                          3: 4E9D3CC61F5511EBAA049D14C4F9AE02.roa (hash: fYTrs1wjsafulOyjkgiosula+uP3MuhhU/iPqCDzV20=)
                          4: B2CE886C07B811F0992B401EC4F9AE02.roa (hash: v2uKdBklLGgPKZ95vqK6iPzh7Ypg3tIQIKaQadoDdJ4=)
                          5: 8FFA8D36FF0C11EA854DE24CC4F9AE02.roa (hash: tnJ3XOL1qQV4G/mV0ORt0qAipnI6yxGGobtXPhZDv0c=)
                          6: CADB5E342D2211EE87D1FB10C4F9AE02.roa (hash: 9GuUG9mVckkRQctgNCdCmkXtRR7SNi7u2JK2feaLBfM=)
                          7: DDBC2904F43811EB996EF71CC4F9AE02.roa (hash: KrCTzS2XbgtLsY6GZt/EHaNU/HloOc9wNHxytXA1aYg=)
                          8: 01A59B2EB72111EC9885AF51C4F9AE02.roa (hash: Giv4rcaEM71vd0FJYtYnZ1NZEvI1/oUilndLpAEn83g=)
                          9: A4857438FC7C11EF9988DB39C4F9AE02.roa (hash: fLhJTsLW5yYu/Aa31sSLrVJ3pE+udcYpxIvEspAz0Mw=)
                          10: A3FED87EFC7C11EF9988DB39C4F9AE02.roa (hash: b9kFI2LP+2ffZX2yHsw0CgRPAE32uqdcH6V4JxpMSsg=)
                          11: A365FCD0FC7C11EF9988DB39C4F9AE02.roa (hash: OpIAPojT2rZcT4UnHkX/rcgChnbzuIm4bFofGx2dBK0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24555 (0x5feb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1323
        Validity
            Not Before: Mar 28 20:31:32 2025 GMT
            Not After : Apr  4 20:31:32 2025 GMT
        Subject: CN=67e70724-db9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f1:d9:1c:e2:d8:ea:ec:bd:c4:74:bf:71:bf:
                    ad:33:b1:9f:58:96:f2:c5:3a:d0:f2:1c:2a:5c:0a:
                    ec:9c:3a:11:fc:a7:4c:c6:0f:9b:a4:70:0b:67:e3:
                    e4:f4:15:75:ac:ac:7e:04:bb:b1:5e:77:8d:df:7d:
                    8e:b9:0e:bd:da:c0:cf:0b:46:c9:a4:a0:67:43:df:
                    91:df:bf:82:30:03:be:f0:5b:d0:8d:cb:ba:18:8e:
                    ac:84:a6:2a:1a:62:48:41:63:d0:2a:c3:ff:b7:34:
                    a7:7f:b8:c6:05:5f:00:a3:80:43:e8:5c:6e:5b:24:
                    30:26:83:24:bc:9e:b4:bf:79:ad:fa:1c:16:0a:a2:
                    e4:a8:7b:5c:b6:90:77:0f:69:e0:39:26:76:48:95:
                    55:4c:77:60:22:55:43:47:ac:bf:da:04:a3:14:f8:
                    a3:46:1e:af:d7:d4:fc:5b:09:ff:f5:2b:16:fe:81:
                    4f:69:bd:08:fa:53:dd:d4:c4:82:9b:c9:80:66:b9:
                    43:a0:c6:d6:cf:5e:54:ab:3b:c0:44:98:26:4a:d2:
                    0d:65:3e:72:81:c2:6d:b9:dd:3f:30:f0:08:7f:5b:
                    06:2d:c7:3a:16:60:e8:d3:aa:fa:db:fd:2a:64:e6:
                    1d:27:fb:d2:26:07:03:3b:63:45:e1:ee:ac:40:43:
                    f0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:18:53:9E:3B:E9:C9:F3:EB:12:87:96:46:EC:1D:22:CB:56:12:43
            X509v3 Authority Key Identifier:
                keyid:41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:e9:e5:f6:cd:54:32:9e:82:cb:67:bd:63:4a:53:41:b0:51:
         b7:96:d6:c0:a9:12:e3:84:83:4f:5e:19:50:80:f8:ae:cc:e5:
         96:7a:12:d9:ca:74:d2:98:df:e7:27:4c:fa:42:48:34:22:a8:
         c0:93:01:c5:03:18:a7:6a:63:69:54:57:39:82:52:a6:a6:ac:
         a5:cb:93:ac:12:28:e4:c2:dc:f6:c5:50:79:ee:38:45:e2:d5:
         04:94:f6:44:07:5c:7a:72:1c:ff:0e:cf:aa:8c:27:85:5e:9a:
         10:0b:5b:d5:09:f6:1b:e4:de:09:d7:c6:41:2d:93:26:57:95:
         09:c0:f2:ed:d9:12:fe:81:af:92:d3:87:d2:c1:c7:c0:bd:df:
         54:d0:21:2a:a1:ad:37:e4:8f:55:f4:07:64:7b:c1:42:2d:61:
         38:4c:3a:cf:b1:86:6d:64:71:5c:d7:dc:f7:78:ee:62:cd:b8:
         c6:01:ce:59:9f:b8:e9:21:fb:ee:5e:db:aa:2a:63:25:32:89:
         5f:ff:78:f6:bd:a8:26:18:25:5d:a1:cb:5b:ea:b7:d8:74:4f:
         df:76:a8:9c:29:e2:29:75:0c:ac:dd:b3:60:b8:0c:b9:d4:f6:
         ad:9d:8d:e9:07:98:93:4a:66:ed:4e:79:79:e9:a3:1b:c6:48:
         83:1e:00:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:32:53 2025 by rpki-client