Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft
File:                     WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft (raw, json)
Hash identifier:          bU5k4x4y+sIPvsetVTD9XYMs5EVPlN34U4B1SO/1hXQ=
Subject key identifier:   12:1D:42:DA:3A:E1:9F:B1:C8:AF:AB:98:7F:91:F0:13:60:AE:9E:E4
Authority key identifier: 58:6F:93:31:76:F6:54:54:35:BB:06:97:FE:5F:98:2A:20:93:94:1B
Certificate issuer:       /CN=A915B50D/serialNumber=586F933176F6545435BB0697FE5F982A2093941B
Certificate serial:       45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft
Manifest number:          44
Signing time:             Fri 31 Jan 2025 06:27:24 +0000
Manifest this update:     Fri 31 Jan 2025 06:27:24 +0000
Manifest next update:     Fri 07 Feb 2025 06:27:24 +0000
Files and hashes:         1: WG-TMXb2VFQ1uwaX_l-YKiCTlBs.crl (hash: BwddbPyykbW+XcO5kNhov1DCbgsG1xl4NQE6TNS/iBY=)
                          2: EABF54FA7BC111EFA1A45E4BC4F9AE02.roa (hash: fkSkf/lrYAP+GPqi/wzsXVOHAz3euOzdB17q/HqvVko=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B50D/serialNumber=586F933176F6545435BB0697FE5F982A2093941B
        Validity
            Not Before: Jan 31 06:27:24 2025 GMT
            Not After : Feb  7 06:27:24 2025 GMT
        Subject: CN=679c6d4c-94a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a2:77:ac:a9:4f:30:8e:ed:0f:36:71:ff:16:
                    79:ef:a2:d6:ac:e6:d1:1a:9b:c5:5a:08:87:34:a6:
                    33:75:a8:e1:9c:90:90:3c:57:cf:66:c9:cf:6c:bb:
                    1a:c8:d0:2c:be:b7:9e:f9:09:4f:b9:18:3f:fe:60:
                    5a:fd:88:f2:fa:b1:a4:3d:0b:7b:a9:1a:b9:76:fd:
                    18:97:84:61:df:b3:3c:90:65:a0:c5:00:6a:c1:f4:
                    ed:c9:ce:80:4e:63:fb:ee:6d:ea:b9:b3:cf:09:41:
                    a3:3c:44:02:cc:50:fd:5a:4f:f0:38:3a:f8:70:83:
                    9f:42:03:a0:c0:b4:0f:b6:af:05:b8:88:77:f5:f4:
                    45:2f:bd:c5:49:a2:8d:21:98:3e:c1:2b:b2:7d:af:
                    d4:05:b9:50:88:ae:29:05:24:bd:b8:c5:9c:14:c0:
                    6b:ea:b0:62:58:51:60:d5:9a:92:06:95:a1:85:b8:
                    11:73:77:de:00:5d:62:1f:75:72:ae:e7:6f:fb:84:
                    16:63:ee:2d:a7:f4:e6:d4:45:90:c6:ac:d4:84:04:
                    3b:97:cc:7f:e0:00:13:72:3e:d3:29:72:c4:5a:cf:
                    3c:3b:3d:96:a6:03:f1:08:22:65:cb:d1:f9:32:3a:
                    c1:8b:56:d6:9b:a4:77:32:9a:fe:8a:cb:38:96:99:
                    c7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:1D:42:DA:3A:E1:9F:B1:C8:AF:AB:98:7F:91:F0:13:60:AE:9E:E4
            X509v3 Authority Key Identifier:
                keyid:58:6F:93:31:76:F6:54:54:35:BB:06:97:FE:5F:98:2A:20:93:94:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:97:22:73:fc:ac:02:90:a7:f8:b3:e9:88:ca:4d:0c:0d:3f:
         c5:ac:2d:de:8a:49:97:a5:dd:06:8d:b2:69:57:e8:9d:05:80:
         7d:27:65:6a:ca:e2:7d:f5:1b:56:97:f4:51:42:e8:49:88:75:
         2f:57:d6:b5:2d:a2:e0:8c:58:24:eb:2e:68:6e:61:90:7c:73:
         cb:47:8d:0b:8d:92:7a:c5:80:9e:18:cf:e2:54:d0:0c:be:c9:
         19:17:80:24:f9:1b:e7:2b:c4:b2:6a:c3:42:6a:8d:d1:8b:e2:
         75:37:25:1a:0a:85:92:8c:58:58:e0:c6:97:10:c8:07:31:8d:
         3c:ae:5c:f3:1b:ec:53:84:dd:25:7d:a0:6c:f4:ff:c7:42:65:
         6c:e9:0c:ea:ad:54:87:22:e3:40:6e:54:da:a8:84:02:08:a5:
         04:4f:c0:3b:ef:e9:0d:f9:ea:72:ce:9b:f9:01:bd:28:db:37:
         6b:66:97:09:0a:df:09:85:16:84:62:4d:8d:70:e7:86:af:c1:
         b1:15:ac:6f:33:20:f0:1b:71:2e:9c:19:15:1e:3f:f0:54:ff:
         1a:42:52:5f:c8:fe:71:0a:33:c9:5a:9b:27:7f:13:b4:78:ab:
         a6:68:cb:67:e3:ec:71:b5:73:89:8e:cd:1e:a0:05:10:c5:5e:
         88:0f:75:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:05:48 2025 by rpki-client