Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4F4C/940765FCF97611EA9534C043C4F9AE02/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.mft
File:                     QeOAoMn6vMEPjqMpY1Lmp4eNNTs.mft (raw, json)
Hash identifier:          6GUY91B7aU0GB/CgaLT0Ot01m8KOTd7zys2sGXLju3c=
Subject key identifier:   6D:3A:D7:A6:B1:2A:0F:97:B5:A2:64:E2:E5:FE:3E:DD:42:4F:D8:A4
Authority key identifier: 41:E3:80:A0:C9:FA:BC:C1:0F:8E:A3:29:63:52:E6:A7:87:8D:35:3B
Certificate issuer:       /CN=A91F4F4C/serialNumber=41E380A0C9FABCC10F8EA3296352E6A7878D353B
Certificate serial:       07A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4F4C/940765FCF97611EA9534C043C4F9AE02/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.mft
Manifest number:          079F
Signing time:             Fri 28 Mar 2025 21:29:30 +0000
Manifest this update:     Fri 28 Mar 2025 21:29:30 +0000
Manifest next update:     Fri 04 Apr 2025 21:29:30 +0000
Files and hashes:         1: QeOAoMn6vMEPjqMpY1Lmp4eNNTs.crl (hash: O5yblAbRwxgxR7oRJRQawmfIFj+CXGLUpBBmSJbN6ok=)
                          2: 770BCA98F97A11EAB938DA5DC4F9AE02.roa (hash: fZBIeDUKsdRpTczFyA/tRXZpgobXbgClU9BqXFuQJMY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1958 (0x7a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4F4C
        Validity
            Not Before: Mar 28 21:29:30 2025 GMT
            Not After : Apr  4 21:29:30 2025 GMT
        Subject: CN=67e714ba-d5b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:11:8f:b3:8b:49:ec:3a:ea:1a:12:d3:d0:3c:
                    9b:68:0b:72:92:bc:23:e9:67:d8:97:a0:06:6e:c0:
                    33:f3:71:da:36:22:d4:02:2d:ba:d2:bd:e2:c7:eb:
                    11:f7:d8:83:e5:49:86:10:43:0b:c9:e9:7d:74:2d:
                    fc:c6:0d:04:c7:a0:a1:e6:ae:9e:e2:3a:89:66:ed:
                    43:bc:2d:37:3c:be:f6:13:6a:d9:6c:29:85:9f:f5:
                    f2:a6:4d:19:d8:97:85:15:f6:49:9a:58:ad:15:18:
                    6a:ee:e5:33:dc:4e:a3:28:18:a1:4a:86:d5:5a:b9:
                    86:b5:a3:b0:b1:a1:38:67:31:67:29:8b:87:8d:d3:
                    2f:50:ce:d6:ce:1a:23:56:d8:6a:f3:45:c1:50:e3:
                    ae:ff:8c:01:91:da:28:f1:b2:3f:15:97:29:25:4e:
                    11:87:e8:cc:2c:b2:c3:01:10:50:b6:eb:3b:8e:a7:
                    02:68:3b:1d:d6:1a:14:fa:64:b2:c4:39:1c:c1:7f:
                    13:86:bc:2b:77:b9:2a:af:e8:1a:59:71:2a:1d:b8:
                    cb:06:9a:a8:80:a0:d2:c8:07:a7:74:49:01:bf:c6:
                    f4:8d:82:79:21:aa:8d:6a:e9:39:61:3e:06:22:c6:
                    ea:a2:3c:78:d4:4f:25:e1:c7:a1:8e:29:72:db:f7:
                    64:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:3A:D7:A6:B1:2A:0F:97:B5:A2:64:E2:E5:FE:3E:DD:42:4F:D8:A4
            X509v3 Authority Key Identifier:
                keyid:41:E3:80:A0:C9:FA:BC:C1:0F:8E:A3:29:63:52:E6:A7:87:8D:35:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4F4C/940765FCF97611EA9534C043C4F9AE02/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4F4C/940765FCF97611EA9534C043C4F9AE02/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:a1:90:63:fd:45:1a:10:f1:20:ff:7b:42:37:2a:c7:2b:7f:
         3d:e4:c5:d6:4d:51:ed:90:fc:0d:b1:64:15:aa:e6:21:39:e0:
         10:ae:4c:dc:c5:b3:83:34:42:02:6d:fb:bb:9e:de:bf:6b:43:
         8b:f8:b9:f4:f6:0e:35:e8:e5:ee:d3:ff:0a:c9:f9:b9:eb:45:
         18:46:2a:48:66:ac:65:52:3b:c3:d7:0b:b7:4f:de:d1:f4:2e:
         43:c0:bd:31:d5:a9:48:0e:9f:ec:6c:a7:6f:83:8b:50:fa:bc:
         f5:d0:f2:02:52:05:37:54:8d:84:92:0c:86:68:fe:c2:f7:a9:
         9e:64:a9:eb:e1:76:92:3f:4e:17:59:b5:79:dd:e1:f8:d6:47:
         d5:3c:9f:a7:c3:fd:67:83:f6:9e:c8:e9:4b:a2:1a:9e:53:ee:
         19:59:2a:ff:c5:9b:77:2d:1c:9f:f9:3e:8e:17:16:5c:ac:b3:
         09:4f:77:e4:be:80:37:a8:77:ae:05:a5:37:73:f0:8e:82:c5:
         32:f8:91:3a:44:8e:a3:57:f0:cb:b6:f7:3a:e2:3b:e2:3f:5d:
         45:1f:55:49:5d:a3:1a:86:16:e2:0c:76:a8:b9:3f:d8:ea:c7:
         69:61:35:2e:8f:9a:bb:73:b4:e3:c8:a6:e8:ff:c2:c5:4d:1f:
         08:11:69:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----