Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.mft
File:                     wxYxlYXuLPJHtTUDcUZ9wmncnOU.mft (raw, json)
Hash identifier:          jgJKFAvNRBB0UJ4MU/2Vsv/XUijDp4equYt74hmOgW4=
Subject key identifier:   39:23:DC:B7:0A:1C:92:D2:BD:64:FA:5C:A4:20:58:C9:4A:94:32:3D
Authority key identifier: C3:16:31:95:85:EE:2C:F2:47:B5:35:03:71:46:7D:C2:69:DC:9C:E5
Certificate issuer:       /CN=A91619BE/serialNumber=C316319585EE2CF247B5350371467DC269DC9CE5
Certificate serial:       3481
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.mft
Manifest number:          345D
Signing time:             Fri 31 Jan 2025 14:26:13 +0000
Manifest this update:     Fri 31 Jan 2025 14:26:13 +0000
Manifest next update:     Fri 07 Feb 2025 14:26:13 +0000
Files and hashes:         1: wxYxlYXuLPJHtTUDcUZ9wmncnOU.crl (hash: nTc5T7AKyBApsIFJShS+gQ/Ncym1Zmm/xY1RBT6RXSA=)
                          2: 3AA9ABDAA6C711E9933CF621C4F9AE02.roa (hash: vX/4yZE912/s2GuoQPXplPBoigawhbTtUVYeRq0wrOs=)
                          3: 3A0818A6A6C711E9933CF621C4F9AE02.roa (hash: 1g67cbWkfoHfH38TqnuwuXBiU6DRHwpF9jTBceu2aoA=)
                          4: 39651CE6A6C711E9933CF621C4F9AE02.roa (hash: r3eAM1iSh01D9RSagvxa0vLEAGKKq7t8Jj5qAIDWLps=)
                          5: 387D8CB4A6C711E9933CF621C4F9AE02.roa (hash: c6ol8jHJXDUln65jGLaP5C/f2Ij4iKXUx4DPHDYkjY8=)
                          6: 45598DB8FA1611EA9C6CE978C4F9AE02.roa (hash: gORNfp8EF7+Nyqco8O51JKHceZDE2ToJOAPUBBi1FKY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13441 (0x3481)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91619BE/serialNumber=C316319585EE2CF247B5350371467DC269DC9CE5
        Validity
            Not Before: Jan 31 14:26:13 2025 GMT
            Not After : Feb  7 14:26:13 2025 GMT
        Subject: CN=679cdd85-b280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b5:dd:ae:60:be:e5:85:2b:dc:84:bc:53:36:
                    5d:00:6b:6d:67:2a:ab:92:4e:2c:c0:bc:17:d0:f5:
                    d3:58:7b:6f:9b:77:63:fb:1b:d4:19:0f:64:5b:5b:
                    62:20:6f:c5:a1:7a:76:18:4e:ff:18:ea:de:ec:b3:
                    b3:00:27:74:1b:1b:e5:4b:b1:c3:ec:bc:b8:07:ad:
                    a8:9d:11:95:8d:01:dd:23:c4:ab:46:f0:eb:58:8b:
                    aa:e1:05:97:19:47:32:53:a7:87:39:c4:87:ad:13:
                    13:37:eb:c3:96:b7:3f:33:0f:24:34:1b:2f:17:3b:
                    b9:2e:e6:27:00:c9:55:10:9c:fa:4b:a3:6a:62:cf:
                    66:2a:be:70:8e:5b:24:8a:9b:91:a8:3a:37:af:9d:
                    3c:33:bc:8b:0c:f0:57:4b:fc:69:bc:78:81:8f:ca:
                    cb:21:9d:0d:fa:f1:99:a0:3e:a6:bb:76:a0:7e:bd:
                    f4:60:e1:89:6b:a2:94:89:56:fb:22:84:ba:78:c7:
                    b0:7b:f5:f4:52:61:1a:e2:d6:d5:91:45:01:ea:cf:
                    a3:02:14:2d:35:a4:fa:eb:67:d1:0b:9d:23:f0:d4:
                    d9:31:00:99:b7:c2:70:0a:3a:7b:83:4c:78:fe:b1:
                    cf:62:a7:12:6c:6b:6c:af:1e:1e:b2:53:23:cc:c1:
                    b7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:23:DC:B7:0A:1C:92:D2:BD:64:FA:5C:A4:20:58:C9:4A:94:32:3D
            X509v3 Authority Key Identifier:
                keyid:C3:16:31:95:85:EE:2C:F2:47:B5:35:03:71:46:7D:C2:69:DC:9C:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:1e:73:48:98:06:53:60:6f:f5:bb:68:ef:cb:b7:62:10:c2:
         9f:84:16:ae:c4:c9:ef:d9:a2:59:a6:9e:1b:8b:c2:1c:65:33:
         3a:39:c8:6a:b7:47:aa:7c:49:ad:15:08:78:01:21:61:75:42:
         c2:c4:b1:91:54:7c:65:74:22:2d:17:1d:98:97:07:fd:c2:8b:
         bc:31:a0:a8:52:e1:fc:1f:ff:42:f2:6b:cd:ba:c3:b5:c7:06:
         c9:a7:c3:07:cf:ee:fd:29:5f:ce:e3:4d:9b:98:ca:bd:0c:c0:
         db:e4:2f:4f:c2:b3:da:95:4b:ae:9d:00:34:af:8d:14:dd:01:
         4c:6e:4f:6e:e7:55:bb:c1:f0:6f:50:79:bd:02:87:04:16:cb:
         fa:05:48:36:a8:7c:6a:e4:ee:25:ff:cd:50:73:63:eb:43:64:
         37:db:c6:4c:e4:79:06:66:72:d1:b8:f6:87:ef:85:90:89:55:
         1c:1b:20:ad:15:e9:28:6b:89:86:ab:18:66:85:82:bd:1d:41:
         86:45:6a:9c:87:cd:1a:18:82:bd:87:77:22:c1:55:41:06:e0:
         f5:ad:21:50:c3:9c:95:f7:3c:c6:fc:84:c9:5e:d9:f7:21:58:
         6f:84:35:84:92:49:1d:bf:0a:f9:cb:ff:40:d5:7e:f3:f5:58:
         8c:51:ac:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:41:28 2025 by rpki-client