Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E323/E7FC2F1EEFEE11ED977B1A64C4F9AE02/wWHphZYf2VfmZ-8ujKp3N_qShdE.mft
File:                     wWHphZYf2VfmZ-8ujKp3N_qShdE.mft (raw, json)
Hash identifier:          ipWoVjOrZVTzh8Qwqj5cC5M8TVZedaiNhwoHGadG+QA=
Subject key identifier:   A8:57:1A:32:12:3F:8B:14:80:3F:C5:F5:15:BC:89:35:20:84:59:F0
Authority key identifier: C1:61:E9:85:96:1F:D9:57:E6:67:EF:2E:8C:AA:77:37:FA:92:85:D1
Certificate issuer:       /CN=A916E323/serialNumber=C161E985961FD957E667EF2E8CAA7737FA9285D1
Certificate serial:       014B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wWHphZYf2VfmZ-8ujKp3N_qShdE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E323/E7FC2F1EEFEE11ED977B1A64C4F9AE02/wWHphZYf2VfmZ-8ujKp3N_qShdE.mft
Manifest number:          0146
Signing time:             Fri 31 Jan 2025 03:31:49 +0000
Manifest this update:     Fri 31 Jan 2025 03:31:49 +0000
Manifest next update:     Fri 07 Feb 2025 03:31:49 +0000
Files and hashes:         1: wWHphZYf2VfmZ-8ujKp3N_qShdE.crl (hash: /YEydt966KSNJr4pCq7zIBdshjYaSzOVL9N348PlVaQ=)
                          2: 67DC0600EFF411EDB617DD7DC4F9AE02.roa (hash: Jrs9iVpBkhWObUZZRk09z2kiCsYhTgr/jMdFkC3tj10=)
                          3: 6881BE7EEFF411EDB617DD7DC4F9AE02.roa (hash: pcKNVy8KNgNcIGTnXKtg//wrVOXs2JXaYqznl9PD1II=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 331 (0x14b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E323/serialNumber=C161E985961FD957E667EF2E8CAA7737FA9285D1
        Validity
            Not Before: Jan 31 03:31:49 2025 GMT
            Not After : Feb  7 03:31:49 2025 GMT
        Subject: CN=679c4425-d446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:6c:12:e1:5c:71:a4:0f:2a:9a:7f:21:40:99:
                    ac:fc:d3:f1:65:d0:ac:7a:b7:c5:a9:38:95:fe:e2:
                    86:0c:95:be:02:32:0c:6f:96:6d:0b:5d:24:bd:f8:
                    da:9f:28:91:c8:a0:b4:89:1e:85:c9:d7:5a:6b:4a:
                    ca:4d:91:29:6b:39:21:7b:34:5c:47:85:c4:71:95:
                    44:57:35:9a:16:7b:9f:36:49:56:0d:b2:0d:52:6a:
                    3d:a8:86:48:9c:28:81:84:57:57:1d:f1:21:a1:13:
                    e0:fa:23:28:72:8e:00:7d:1e:63:f9:24:08:6b:fd:
                    1f:66:7d:c3:f4:3b:1e:bd:b1:6b:d5:bb:9d:3b:15:
                    74:41:83:98:8b:82:6a:6e:9a:f0:43:dd:37:36:c8:
                    9f:c0:82:8b:f9:9f:e7:47:d0:fd:4c:e6:26:02:7d:
                    e4:4c:88:d1:3e:8c:7f:82:d0:67:34:07:29:7d:d1:
                    57:1a:eb:07:4e:71:d9:be:7e:ef:53:0d:8b:55:a6:
                    5d:b1:ed:b7:40:b5:22:aa:0c:9a:75:8b:3d:17:ab:
                    0a:eb:6b:44:81:65:96:f6:d6:2d:95:a0:38:69:e8:
                    2b:d9:c3:10:bb:8a:1e:d2:82:89:5b:81:ec:11:83:
                    14:26:fd:a9:6d:56:d6:35:18:0f:72:e4:5e:cd:76:
                    1c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:57:1A:32:12:3F:8B:14:80:3F:C5:F5:15:BC:89:35:20:84:59:F0
            X509v3 Authority Key Identifier:
                keyid:C1:61:E9:85:96:1F:D9:57:E6:67:EF:2E:8C:AA:77:37:FA:92:85:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E323/E7FC2F1EEFEE11ED977B1A64C4F9AE02/wWHphZYf2VfmZ-8ujKp3N_qShdE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wWHphZYf2VfmZ-8ujKp3N_qShdE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E323/E7FC2F1EEFEE11ED977B1A64C4F9AE02/wWHphZYf2VfmZ-8ujKp3N_qShdE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:d5:32:e1:7b:7a:df:fa:a2:55:b0:df:35:f8:10:e4:b2:e5:
         71:3b:d3:4a:d1:d7:1e:24:a2:f2:df:e5:bb:36:33:13:f6:a0:
         aa:eb:89:ca:55:2d:7c:d8:86:3a:d0:3c:36:b4:99:6b:4f:a9:
         77:d6:1d:c9:86:69:7b:0a:8f:87:df:00:02:3c:6b:1a:12:25:
         2a:7b:ec:b0:eb:07:4b:14:bf:75:12:0d:be:14:54:78:b1:91:
         4c:13:75:f3:03:c6:dd:c8:66:5b:f9:0f:24:6e:33:36:74:95:
         48:61:75:84:b1:20:91:6c:c1:ca:ed:19:a8:a4:64:2d:b2:ee:
         5b:44:eb:fd:b7:05:fa:f1:cf:51:ad:05:30:33:02:cc:98:ec:
         c7:f5:5b:6c:99:ef:8f:3b:ba:00:77:5c:08:b4:fb:7b:60:e3:
         2f:5f:8c:54:e9:7b:9d:02:f4:90:cd:4f:b9:0a:68:86:da:4e:
         d7:95:36:50:b9:c5:e2:07:ca:4b:d2:2d:bc:9d:56:11:3f:0a:
         cd:59:bf:31:50:fa:c1:80:80:e2:d0:7f:64:7d:0d:90:1f:ef:
         4e:8e:c7:27:9a:2f:e0:61:28:29:ff:05:29:eb:ca:87:ce:e7:
         53:74:36:c5:b7:5c:e7:a6:49:f6:b0:53:d8:4e:a8:dc:92:dd:
         8f:95:7f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:11:00 2025 by rpki-client