Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.mft
File:                     OtjA2kteE0OjhFRLZEARiFJg_wc.mft (raw, json)
Hash identifier:          whVfyJr51Kflq7WHC2F8QiJSV3Y5Nkkt/BqZbQ4p440=
Subject key identifier:   BC:FE:25:C4:C7:7A:00:A8:4D:CB:4B:09:6E:1A:EA:1C:1F:28:1C:37
Authority key identifier: 3A:D8:C0:DA:4B:5E:13:43:A3:84:54:4B:64:40:11:88:52:60:FF:07
Certificate issuer:       /CN=A916022F/serialNumber=3AD8C0DA4B5E1343A384544B644011885260FF07
Certificate serial:       12E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OtjA2kteE0OjhFRLZEARiFJg_wc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.mft
Manifest number:          235D
Signing time:             Fri 31 Jan 2025 17:02:48 +0000
Manifest this update:     Fri 31 Jan 2025 17:02:47 +0000
Manifest next update:     Fri 07 Feb 2025 17:02:47 +0000
Files and hashes:         1: OtjA2kteE0OjhFRLZEARiFJg_wc.crl (hash: ahmC9SB2f3A1s/jWUcuFRoauVNZ/ggErTFzXE1mjrKw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4835 (0x12e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916022F/serialNumber=3AD8C0DA4B5E1343A384544B644011885260FF07
        Validity
            Not Before: Jan 31 17:02:47 2025 GMT
            Not After : Feb  7 17:02:47 2025 GMT
        Subject: CN=679d0238-c1e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:44:ab:06:9c:b6:75:f1:a1:db:84:83:43:2f:
                    a9:e1:f2:51:61:08:22:6f:bb:48:78:8e:99:8a:f7:
                    cc:da:39:cd:06:33:5d:a8:77:a3:eb:8f:99:2d:b7:
                    24:27:1b:1d:d0:ef:06:2d:3f:43:ce:b9:1e:3a:51:
                    8a:3e:58:d1:32:cf:a6:4e:52:a7:e8:6d:d0:ea:ea:
                    b7:6c:47:f5:61:a2:90:09:a2:3f:f8:2c:36:46:fa:
                    e4:c7:e9:21:5b:33:ad:be:f0:26:f3:20:42:04:f6:
                    a8:f2:6c:6f:1d:68:4a:8c:3f:f3:2c:f9:65:fe:5a:
                    38:c3:35:5e:87:cb:b3:9d:3c:1d:27:c5:5b:c9:68:
                    28:25:ae:61:8f:cf:93:07:dc:b3:8f:14:8e:17:d4:
                    ed:d5:b0:55:aa:e1:9f:78:f0:20:2d:71:33:6a:2b:
                    61:78:3a:c2:2c:f6:4f:9f:14:d8:28:c5:80:6d:9c:
                    1f:f1:03:a9:db:77:94:3b:53:a0:44:e8:95:b6:bc:
                    d3:4c:2d:65:58:eb:d6:9c:0b:b3:90:28:55:b7:74:
                    1f:a3:d6:d4:46:33:d1:a9:e2:42:43:6f:b9:08:b8:
                    9d:31:3d:c8:c4:06:e9:7b:2c:24:47:ea:2e:47:9b:
                    dd:82:c1:cb:20:f3:05:2c:d7:b7:95:44:cf:96:57:
                    8a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:FE:25:C4:C7:7A:00:A8:4D:CB:4B:09:6E:1A:EA:1C:1F:28:1C:37
            X509v3 Authority Key Identifier:
                keyid:3A:D8:C0:DA:4B:5E:13:43:A3:84:54:4B:64:40:11:88:52:60:FF:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OtjA2kteE0OjhFRLZEARiFJg_wc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:f7:77:f4:32:8e:49:a9:e6:e5:98:53:34:f7:25:b4:c6:3f:
         5e:b3:71:1c:83:1d:e8:c0:97:13:ed:4e:f1:65:31:59:34:44:
         f1:cb:6d:18:d7:67:c5:fb:5f:ab:26:77:e2:63:54:9b:64:34:
         d2:e9:32:a2:9a:82:4a:61:81:01:d7:54:40:d9:ee:5c:8b:44:
         16:78:70:77:c0:d1:cb:6f:b8:34:4b:31:04:4c:07:c4:fc:7c:
         6f:81:03:95:04:59:98:75:8d:a4:7e:e6:fa:5c:f9:aa:b2:b4:
         02:01:dd:85:29:fb:fd:67:57:d0:90:5d:a5:a8:e2:8f:62:00:
         2e:a4:4c:e4:b8:f2:12:2b:02:1b:4b:35:a7:25:dd:41:90:10:
         97:b5:d5:14:5d:25:79:d2:7d:a3:1a:5c:72:93:43:b3:17:99:
         03:0a:5f:63:f5:8d:5a:10:4a:e4:e8:d8:62:fa:76:ff:49:cb:
         46:d4:78:b5:20:fb:1a:95:da:a1:59:87:0b:dd:f1:d2:05:07:
         12:2d:5e:a6:1d:33:7a:52:d7:ca:62:f4:b8:26:14:5a:83:1a:
         af:f4:91:8d:7a:d2:f0:8b:24:2a:b9:19:27:1d:48:25:de:4a:
         90:2a:88:4f:20:f5:6b:22:d4:e7:7e:79:fc:f5:e1:03:d6:8d:
         f1:d2:6b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:52:07 2025 by rpki-client