Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/qq7HHKNN7wjYjud72RwVcXXMPAk.mft
File:                     qq7HHKNN7wjYjud72RwVcXXMPAk.mft (raw, json)
Hash identifier:          HMCgQUctwPNYuP3TYKNPFMIZbXJ4azDPJX0uj+pU8G0=
Subject key identifier:   98:77:DB:CA:29:E1:20:7A:4F:A0:9C:A1:5E:51:B5:86:5B:33:FB:73
Authority key identifier: AA:AE:C7:1C:A3:4D:EF:08:D8:8E:E7:7B:D9:1C:15:71:75:CC:3C:09
Certificate issuer:       /CN=A91A6353/serialNumber=AAAEC71CA34DEF08D88EE77BD91C157175CC3C09
Certificate serial:       06AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qq7HHKNN7wjYjud72RwVcXXMPAk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/qq7HHKNN7wjYjud72RwVcXXMPAk.mft
Manifest number:          0685
Signing time:             Sun 08 Jun 2025 22:08:31 +0000
Manifest this update:     Sun 08 Jun 2025 22:08:30 +0000
Manifest next update:     Sun 15 Jun 2025 22:08:30 +0000
Files and hashes:         1: qq7HHKNN7wjYjud72RwVcXXMPAk.crl (hash: UAikD+uXgqwC4FbkcilRl7/tzutPKk7EaE9dbCZa5sc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1709 (0x6ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6353, serialNumber=AAAEC71CA34DEF08D88EE77BD91C157175CC3C09
        Validity
            Not Before: Jun  8 22:08:30 2025 GMT
            Not After : Jun 15 22:08:30 2025 GMT
        Subject: CN=684609df-a35d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:00:05:59:3c:8a:f3:a8:87:56:b5:4f:1f:ba:
                    27:50:8f:5c:52:5b:d0:01:3f:69:82:16:ad:9f:12:
                    39:da:43:4f:16:f5:3b:69:e3:df:d7:7d:40:51:33:
                    f2:a4:5d:64:0e:1e:68:1d:e7:50:0e:a9:4c:11:12:
                    0b:3d:4c:72:8a:56:3f:00:e1:20:59:59:4e:04:04:
                    49:2d:2d:fc:ce:33:41:36:47:1e:67:08:e0:29:6d:
                    b3:7c:ba:18:63:c3:aa:25:a4:3e:51:ea:2f:76:79:
                    66:b0:06:c9:8d:39:b6:93:21:4e:61:b5:38:ee:fb:
                    9a:a6:99:67:48:af:95:94:fc:67:d4:da:20:84:00:
                    22:b0:fe:55:6a:fc:a8:06:8a:de:a9:b6:b0:49:36:
                    de:1b:21:0b:3e:99:8c:8f:25:c7:cb:44:b9:bd:cd:
                    a6:0d:65:86:db:45:54:53:c1:e4:7f:5e:87:8c:3f:
                    2a:f4:61:df:cb:74:5f:68:98:c6:77:d3:79:f0:3d:
                    8f:bc:cb:75:f1:01:08:f3:1f:29:fe:2c:34:09:c8:
                    98:58:0c:1b:90:6e:92:1f:48:42:2b:d8:73:42:f2:
                    45:6e:87:8b:6a:13:28:5e:8b:93:db:21:00:df:0b:
                    fd:b3:8c:3f:46:de:d8:63:79:bd:3d:ca:94:12:5b:
                    09:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:77:DB:CA:29:E1:20:7A:4F:A0:9C:A1:5E:51:B5:86:5B:33:FB:73
            X509v3 Authority Key Identifier:
                keyid:AA:AE:C7:1C:A3:4D:EF:08:D8:8E:E7:7B:D9:1C:15:71:75:CC:3C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/qq7HHKNN7wjYjud72RwVcXXMPAk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qq7HHKNN7wjYjud72RwVcXXMPAk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/qq7HHKNN7wjYjud72RwVcXXMPAk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:9c:df:0e:0d:96:97:30:5b:41:ce:4a:95:3a:37:0d:09:36:
         c6:4a:4d:80:f5:77:34:4a:12:9e:31:ab:7d:17:94:62:19:5d:
         f7:f7:3e:c1:47:c8:bc:91:1f:85:0b:8c:9b:fe:87:03:a6:4c:
         f2:08:30:dc:15:6d:c5:c8:84:a4:08:d6:63:9f:98:67:58:1c:
         88:ae:5e:ee:8c:bf:41:47:2c:7d:59:7a:53:4e:70:19:79:c4:
         22:93:da:74:ad:36:b6:bd:07:d4:8a:50:75:be:43:af:11:36:
         f2:43:e5:dd:3b:21:7f:cf:50:8e:14:99:3f:81:0e:84:f0:25:
         b0:6f:92:d4:43:ad:e6:3c:f0:c2:87:fa:95:e6:ed:be:2f:02:
         93:35:eb:bd:f1:dc:23:ac:1e:51:67:3d:69:a3:d8:2d:04:52:
         19:27:99:86:c4:1c:03:d3:5d:94:f4:5d:b2:1b:0f:80:60:03:
         71:d5:e7:92:a8:5a:81:79:21:2d:0a:da:2a:90:79:51:3b:3c:
         5c:8b:99:92:a4:5d:73:6e:36:15:6c:5f:7e:00:5e:03:c9:bb:
         2f:6b:c9:4e:e6:50:ab:d8:21:93:81:6c:03:3f:55:be:26:c0:
         6b:b4:6d:77:59:99:e0:2d:13:91:99:90:80:b1:65:49:ee:04:
         dd:04:ab:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:20:55 2025 by rpki-client