Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft
File:                     Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft (raw, json)
Hash identifier:          VX3GgnuW4GdsuXh/z+iws+ZL8+nWGgNYhDLFOj7GN6Q=
Subject key identifier:   15:70:8C:F1:38:35:F3:83:54:AE:EC:AB:D2:E6:A3:27:8C:17:C9:6D
Authority key identifier: 5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9
Certificate issuer:       /CN=A911F8BC/serialNumber=5A07E6D8F7197E34A93944EAF69398E4AA7428E9
Certificate serial:       0565
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft
Manifest number:          0559
Signing time:             Thu 30 Jan 2025 23:25:58 +0000
Manifest this update:     Thu 30 Jan 2025 23:25:57 +0000
Manifest next update:     Thu 06 Feb 2025 23:25:57 +0000
Files and hashes:         1: Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl (hash: M35ZvzYrOnmnFTqVN3vTA+yf7tWatE/il2FhQqW0VjM=)
                          2: 5284A644D3DC11EB9FCD6135C4F9AE02.roa (hash: KjSC+EBY/UPIqhkSiTjfbrlSvd1G9oxKPCBMNEBLTuc=)
                          3: 99B4BAA6D3E411EBB67F2616C4F9AE02.roa (hash: uorWefsb8OvwMByFaUFxQVQuG9e9l+g4lViL2blRqv0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1381 (0x565)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F8BC/serialNumber=5A07E6D8F7197E34A93944EAF69398E4AA7428E9
        Validity
            Not Before: Jan 30 23:25:57 2025 GMT
            Not After : Feb  6 23:25:57 2025 GMT
        Subject: CN=679c0a86-ec53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a7:13:56:eb:c8:39:cc:02:13:3b:65:42:79:
                    e5:b3:43:aa:a9:ac:b9:b3:34:ad:6e:ee:81:72:ea:
                    0d:49:38:6b:f1:b1:42:52:f8:b7:31:ad:1e:5e:93:
                    b4:19:54:1f:00:29:a4:30:dd:dd:96:fc:56:95:f9:
                    43:b8:ba:bc:f2:d7:fa:ac:a1:43:3d:37:2d:0d:3e:
                    b7:88:c7:bf:a3:c9:76:32:92:21:c9:e9:0d:ed:f3:
                    12:2b:0e:5b:df:01:24:73:74:42:53:84:fa:c5:4e:
                    af:20:e7:35:da:77:83:e6:6c:ef:db:04:a8:84:92:
                    24:93:77:bd:3c:81:d4:12:68:10:9a:0d:c0:46:20:
                    76:2f:da:2b:fc:51:c4:5f:42:a1:45:a1:ef:3d:ab:
                    40:d4:0f:ce:4c:61:bd:1e:a0:57:79:ba:8c:ab:17:
                    18:b4:df:c5:70:07:d1:4f:07:c8:72:1a:dc:59:ed:
                    be:4f:ce:93:d7:7b:e2:26:d6:5f:f7:f2:95:b1:7f:
                    ea:85:ac:8a:3d:b7:75:e2:28:7e:c5:ce:97:f4:80:
                    13:0c:37:ba:ad:25:3d:f5:a4:9e:e5:1c:e3:e2:09:
                    fd:a8:3d:d3:f9:41:15:5b:04:e5:59:49:c4:77:e3:
                    99:11:11:1b:d7:a9:22:bd:f4:cf:23:09:a8:62:21:
                    6a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:70:8C:F1:38:35:F3:83:54:AE:EC:AB:D2:E6:A3:27:8C:17:C9:6D
            X509v3 Authority Key Identifier:
                keyid:5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:61:03:e9:6c:a0:d3:54:48:4b:de:b1:94:64:55:dc:9a:29:
         37:7d:e6:de:29:d4:8a:24:b5:9f:9a:33:50:66:7c:61:24:7e:
         02:40:43:1e:a6:87:41:66:13:0a:e3:3b:f4:26:07:d9:0f:bc:
         aa:fb:5c:6d:12:fc:1f:9c:d6:5e:33:68:79:df:51:8a:a8:20:
         dc:45:8f:cc:f3:b6:0b:5b:41:d6:48:25:25:41:06:a4:94:6a:
         50:1c:aa:74:e0:76:8d:1e:5c:19:9f:dc:f0:f5:20:ac:9a:24:
         98:4a:a5:52:49:d0:82:2a:69:f0:dd:07:8a:7c:55:23:d5:5e:
         c5:63:e9:ec:94:c7:b1:13:94:db:21:25:1e:f5:77:30:3c:fc:
         83:84:2f:77:65:89:0c:a6:56:e5:b4:0c:70:09:9c:53:07:d9:
         8b:cf:1c:f4:3e:8c:fb:a6:72:00:3d:98:0c:32:36:97:ce:4d:
         d5:38:6d:1d:01:5c:81:7f:f1:2b:b3:84:c3:1e:17:84:a3:73:
         ca:25:82:08:45:38:4c:b7:1a:de:66:88:7f:cc:90:fd:a1:ab:
         4c:bf:6a:9b:71:45:47:9a:a6:3e:41:f1:c8:05:6b:53:4c:33:
         74:bc:48:5e:3d:42:b9:74:82:a2:fb:31:50:5a:13:07:8c:96:
         40:24:68:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:17:50 2025 by rpki-client