Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft
File:                     wK73B39SYiVnF5rOVq1e6M1kYE4.mft (raw, json)
Hash identifier:          r/FqBxVNMc9N6AHJFNFqvTCE0Pn2yw+ugfNl2FnfmCE=
Subject key identifier:   5E:62:51:60:E1:74:7C:09:6F:13:97:AB:D9:03:47:5F:0F:25:51:06
Authority key identifier: C0:AE:F7:07:7F:52:62:25:67:17:9A:CE:56:AD:5E:E8:CD:64:60:4E
Certificate issuer:       /CN=A917B0F6/serialNumber=C0AEF7077F52622567179ACE56AD5EE8CD64604E
Certificate serial:       ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft
Manifest number:          E9
Signing time:             Fri 31 Jan 2025 04:30:17 +0000
Manifest this update:     Fri 31 Jan 2025 04:30:17 +0000
Manifest next update:     Fri 07 Feb 2025 04:30:17 +0000
Files and hashes:         1: wK73B39SYiVnF5rOVq1e6M1kYE4.crl (hash: ayLNQ4X+KA84ZqfnorZKflw2jCP03UHfqgYvPlIGrRk=)
                          2: 6307B34A7CAD11EE9E7B9434C4F9AE02.roa (hash: 2gzrMjXP4Am0pQ80O9+rI75KjzU6RpDqcXF/j3n7Tn0=)
                          3: 3BE03ECC7D4D11EE93D62E30C4F9AE02.roa (hash: +PmKxO27F3AHIJ3oHg1od1w1E6envfjFt6OCrfWbtQk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 237 (0xed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B0F6/serialNumber=C0AEF7077F52622567179ACE56AD5EE8CD64604E
        Validity
            Not Before: Jan 31 04:30:17 2025 GMT
            Not After : Feb  7 04:30:17 2025 GMT
        Subject: CN=679c51d9-6e13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:aa:3a:0c:0b:9f:e7:ae:6a:ae:ae:64:91:74:
                    1e:ae:9c:b1:b0:cf:e8:f5:c1:39:13:55:e7:78:21:
                    86:8f:01:0d:29:52:45:c7:86:64:82:00:f7:54:20:
                    25:08:1c:d8:99:19:65:47:29:4f:10:9b:58:79:69:
                    43:84:44:84:19:0e:80:50:b1:f3:2b:c6:fe:ec:d3:
                    78:ce:c3:7d:3b:aa:29:9a:a0:d4:c8:cc:ad:b3:e4:
                    1b:3d:71:5f:0c:aa:11:60:63:1e:27:fd:19:be:6f:
                    dc:12:86:67:f0:d5:9c:de:43:dd:ba:1d:e9:64:d4:
                    85:2e:81:f8:4c:d6:ae:6f:13:a7:95:0c:1c:05:b5:
                    fe:8b:e5:25:fd:eb:ac:7a:73:05:a0:38:c4:c8:b4:
                    7e:40:65:24:b4:5e:f1:df:ca:00:a0:47:5a:df:f8:
                    74:fd:e8:c7:e2:6d:3c:de:30:77:1f:6b:1b:88:41:
                    1d:fc:19:36:b0:6f:1d:5b:d2:b3:78:ef:e5:38:02:
                    ef:98:43:2b:a0:b8:cb:e4:a9:60:4b:80:b3:3c:c1:
                    2a:ac:0a:5d:a2:8e:1c:11:34:fe:2f:b8:2b:44:23:
                    48:26:b8:be:aa:77:b2:24:f3:2b:82:2b:33:fb:85:
                    3b:61:56:25:4c:4c:9e:51:53:b2:31:c3:b3:41:9e:
                    f2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:62:51:60:E1:74:7C:09:6F:13:97:AB:D9:03:47:5F:0F:25:51:06
            X509v3 Authority Key Identifier:
                keyid:C0:AE:F7:07:7F:52:62:25:67:17:9A:CE:56:AD:5E:E8:CD:64:60:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:8b:78:21:5c:40:e9:9c:19:82:63:27:cb:5a:54:e3:eb:63:
         5e:7b:b2:45:c5:6d:ba:74:ab:6e:36:19:49:99:d5:94:63:c8:
         95:5f:5c:15:ed:d6:75:b7:1f:8f:20:54:4d:e4:bf:f0:f6:c4:
         76:b5:53:cf:c5:59:86:28:71:1e:1d:70:76:a4:f1:4d:2d:eb:
         50:c6:e2:10:92:2c:07:a6:98:5f:26:88:33:2b:ed:e2:65:b9:
         fd:93:50:0a:17:f0:2a:47:6c:46:7f:0f:c3:6b:11:41:6e:7a:
         45:16:15:c0:de:ed:b1:81:26:1d:8b:83:97:70:01:9b:2a:6e:
         73:d0:0c:20:0f:58:7e:a6:9a:00:ef:ea:d5:15:eb:05:4f:54:
         64:15:6e:b1:44:cb:78:80:b5:63:ed:68:98:b3:c3:e1:2f:77:
         8f:3f:4b:0f:01:de:55:6d:2d:35:f5:9a:40:4c:62:61:01:dd:
         85:21:68:b2:eb:d3:13:a1:79:77:7e:54:87:a2:c1:7a:0c:bd:
         98:18:4d:30:90:45:24:6f:02:4c:79:56:96:e7:9c:e7:71:fa:
         c8:22:a1:56:34:8b:e2:a1:a8:b0:83:84:6d:92:87:0b:86:ce:
         de:ad:a7:98:01:14:28:4a:25:1a:cf:b0:d8:f4:ab:41:d0:27:
         a9:ec:c4:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:01:59 2025 by rpki-client