Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.mft
File:                     pWrnLGamTmJ5yMycDv5PNjaQJ4A.mft (raw, json)
Hash identifier:          CF+EE7UAINKvUUj0uMD6meAve0tgYFE3RUJNL1B0oHw=
Subject key identifier:   88:77:C0:36:AD:E3:00:AD:C0:1F:0F:67:DA:68:02:AA:CF:D1:C2:85
Authority key identifier: A5:6A:E7:2C:66:A6:4E:62:79:C8:CC:9C:0E:FE:4F:36:36:90:27:80
Certificate issuer:       /CN=A912A471/serialNumber=A56AE72C66A64E6279C8CC9C0EFE4F3636902780
Certificate serial:       DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWrnLGamTmJ5yMycDv5PNjaQJ4A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.mft
Manifest number:          DB
Signing time:             Fri 31 Jan 2025 04:41:42 +0000
Manifest this update:     Fri 31 Jan 2025 04:41:41 +0000
Manifest next update:     Fri 07 Feb 2025 04:41:41 +0000
Files and hashes:         1: pWrnLGamTmJ5yMycDv5PNjaQJ4A.crl (hash: LCgES5lMBO3mx/4bLGVU/3QYCh+JYRIBiwCvaNzkXjQ=)
                          2: AC21E1E8924411EE96AA9544C4F9AE02.roa (hash: xTZDs1cESf1SGEobV9O/GqTj36xfVMlMR7VudfYRv7o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 222 (0xde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A471/serialNumber=A56AE72C66A64E6279C8CC9C0EFE4F3636902780
        Validity
            Not Before: Jan 31 04:41:41 2025 GMT
            Not After : Feb  7 04:41:41 2025 GMT
        Subject: CN=679c5485-a6b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:38:33:51:52:01:2d:5e:7f:6b:0e:37:79:03:
                    85:90:78:06:26:b8:be:c0:fe:ff:cb:de:b6:9a:0d:
                    a8:4a:ab:64:14:8d:56:f8:19:a9:36:e7:7a:42:e2:
                    89:2a:54:ec:d8:11:13:e5:b8:15:06:4a:5f:99:d1:
                    67:7c:c4:5f:df:24:e8:1a:36:f6:8a:81:ea:c6:8b:
                    d4:5d:1e:2e:e5:c7:27:86:30:cb:ed:6f:0b:29:fb:
                    be:68:20:66:59:f9:1a:ae:ed:1e:ff:e3:72:6c:13:
                    3b:a8:12:5c:d3:16:d4:8c:e3:96:69:11:e0:bd:17:
                    41:62:f5:56:94:ae:94:a0:7c:18:19:f8:e0:4d:9a:
                    bb:05:d6:e5:44:b5:55:af:9b:a2:e2:1f:c2:70:37:
                    9d:ae:3b:3e:db:a6:59:8b:39:4f:50:bf:50:db:da:
                    17:ca:fc:d4:ef:66:12:07:d4:fd:2a:44:e6:ad:f2:
                    7b:cc:da:44:a0:79:24:c7:11:62:9c:d8:e3:d2:5f:
                    a0:fc:79:25:a2:30:de:1e:a3:af:ff:25:11:9f:8d:
                    80:36:89:d3:e5:8c:62:79:d8:fe:bb:b3:3f:b3:b7:
                    4d:47:6f:b0:d4:be:c4:07:38:ed:77:17:bc:1d:d5:
                    35:9c:1d:f7:d4:ba:49:b2:e6:9d:d5:26:1f:2f:4a:
                    68:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:77:C0:36:AD:E3:00:AD:C0:1F:0F:67:DA:68:02:AA:CF:D1:C2:85
            X509v3 Authority Key Identifier:
                keyid:A5:6A:E7:2C:66:A6:4E:62:79:C8:CC:9C:0E:FE:4F:36:36:90:27:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWrnLGamTmJ5yMycDv5PNjaQJ4A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:53:4c:2a:68:cd:66:39:87:dc:12:27:3d:73:7e:d3:2c:60:
         5d:54:aa:9d:b9:d6:2c:cb:6d:68:e0:6e:f2:31:1c:32:74:71:
         6e:ce:6e:af:e6:4a:31:db:36:82:86:ee:cb:88:f6:a5:66:f1:
         24:d3:f0:39:81:86:d8:1d:98:a4:86:d7:0f:fc:98:b5:f8:c0:
         9f:00:81:e4:e9:11:7a:f6:d2:fb:e5:36:e1:25:1c:3d:2c:55:
         57:a3:6b:fa:17:fd:16:05:b6:5a:df:c2:db:b2:b9:5d:dc:70:
         07:bc:18:80:55:14:0b:a7:13:c8:f3:fc:5d:03:96:7a:c6:2a:
         46:dd:57:65:b9:8e:da:a9:b6:90:43:b0:de:96:42:2d:31:29:
         ae:e0:e2:98:02:43:44:86:e3:56:e8:7d:a1:4d:cb:2b:d2:8c:
         6a:24:84:a9:ba:d9:8f:3d:7d:92:b0:62:57:6b:2e:e5:44:a3:
         7c:9f:e3:1c:af:86:79:a1:19:f0:0e:37:49:d1:c4:0d:f5:20:
         54:aa:80:ea:4c:93:f7:26:4a:83:73:e2:6e:1b:2c:6d:e5:19:
         f7:68:3d:85:95:c3:f0:31:50:33:20:55:cc:63:ec:40:5e:f5:
         0f:0d:12:db:f5:61:65:01:8d:3f:05:19:5a:31:6d:da:55:59:
         c9:a3:6f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:02:10 2025 by rpki-client