Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft
File:                     WdGXNa3cboCAl6x3G0a7N1vCMOg.mft (raw, json)
Hash identifier:          /JLiXf4t3x9OFk7IwLCX9FV4E9gHVPY5bclfW5gAgI4=
Subject key identifier:   DC:7B:D0:54:2F:23:58:79:5B:D1:DD:8F:64:19:D2:66:2F:BC:06:E9
Authority key identifier: 59:D1:97:35:AD:DC:6E:80:80:97:AC:77:1B:46:BB:37:5B:C2:30:E8
Certificate issuer:       /CN=A91422D7/serialNumber=59D19735ADDC6E808097AC771B46BB375BC230E8
Certificate serial:       0294
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdGXNa3cboCAl6x3G0a7N1vCMOg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft
Manifest number:          034F
Signing time:             Fri 31 Jan 2025 01:39:18 +0000
Manifest this update:     Fri 31 Jan 2025 01:39:17 +0000
Manifest next update:     Fri 07 Feb 2025 01:39:17 +0000
Files and hashes:         1: WdGXNa3cboCAl6x3G0a7N1vCMOg.crl (hash: 8habJL9mtamV9yZrFSFZprnBHWoJQ+JQu9FFZfopOx8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 660 (0x294)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91422D7/serialNumber=59D19735ADDC6E808097AC771B46BB375BC230E8
        Validity
            Not Before: Jan 31 01:39:17 2025 GMT
            Not After : Feb  7 01:39:17 2025 GMT
        Subject: CN=679c29c6-27c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cd:d4:3f:69:f6:72:45:be:2b:31:4f:3a:52:
                    e4:49:ca:00:7a:9a:41:f3:cf:da:8f:09:79:38:16:
                    3d:b9:06:9a:72:8b:f9:eb:f5:2d:2a:a4:0c:06:06:
                    63:cf:92:7e:c9:35:d5:9d:7f:90:cc:9a:91:79:da:
                    b6:da:40:c2:d1:c7:45:80:d3:8e:16:63:fb:d0:1b:
                    f1:1c:a5:13:67:af:38:c3:6a:66:97:68:33:05:2d:
                    52:74:bd:5a:db:bd:d7:62:85:53:83:24:7a:4e:76:
                    b0:bc:59:12:94:50:2f:ce:f0:cb:82:7d:7c:71:b0:
                    06:55:d3:3f:d9:2e:81:88:1f:02:10:af:a1:7b:8a:
                    0c:2c:4b:54:29:17:24:49:84:be:cf:14:26:d9:19:
                    f3:9d:4e:91:38:cf:97:5b:88:0d:be:7d:a7:4e:2d:
                    e2:c1:6d:78:a7:99:43:98:2f:fd:63:68:87:bc:0d:
                    43:34:00:3b:e3:41:ff:54:61:e5:1f:34:8f:21:2f:
                    8f:70:c5:19:b7:0a:10:87:e1:b8:14:0c:0a:f3:d0:
                    0f:12:08:90:f2:04:55:f6:21:2b:3d:40:31:22:6e:
                    7e:b8:97:f9:79:f1:15:1f:81:75:7b:76:3a:fa:68:
                    c4:71:54:9f:41:50:d0:8b:c7:ca:96:7e:44:fc:b7:
                    34:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:7B:D0:54:2F:23:58:79:5B:D1:DD:8F:64:19:D2:66:2F:BC:06:E9
            X509v3 Authority Key Identifier:
                keyid:59:D1:97:35:AD:DC:6E:80:80:97:AC:77:1B:46:BB:37:5B:C2:30:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdGXNa3cboCAl6x3G0a7N1vCMOg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:fe:00:0b:06:2a:06:06:d5:9b:55:73:84:30:ea:f6:39:08:
         af:82:9f:d4:d0:ae:a1:e0:c4:65:a1:5b:03:2e:9a:9f:d9:29:
         fa:45:22:0f:17:f4:23:51:7b:38:a6:b8:04:71:c6:6b:80:a9:
         16:75:8d:12:0a:47:b2:b7:a9:18:1b:95:ba:a9:48:38:f1:3b:
         ac:8c:10:ff:cf:3a:dc:ad:4a:8e:7b:a3:11:06:8c:3a:e7:57:
         8a:9b:40:5d:57:e2:98:04:cb:31:0f:b5:c5:18:cb:79:51:25:
         07:3c:6e:16:b6:c5:72:02:d8:70:6a:e1:4b:7e:77:ec:ab:3a:
         d7:2a:10:aa:d5:ab:37:38:7b:0f:c4:34:5b:e8:17:25:f4:91:
         19:6f:7f:5d:70:49:ac:4e:e9:7b:0d:89:79:80:1e:87:0b:cd:
         02:58:2b:3d:56:4e:c0:c8:0d:28:22:5f:37:98:c1:9f:56:2d:
         ad:2d:76:58:ab:3a:af:1c:74:09:87:0c:72:c9:1b:fd:34:00:
         5f:41:79:36:c3:24:c6:ed:98:6f:8d:6e:a0:8e:f7:0a:7f:77:
         a3:8e:ea:6b:b9:ed:57:0e:d1:ac:a9:1a:ce:0e:f5:c8:5f:f4:
         78:0a:17:a5:f8:ff:b6:55:c5:1e:1f:c4:1a:c1:03:d6:2e:47:
         67:e5:47:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:37:23 2025 by rpki-client