Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft
File:                     WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft (raw, json)
Hash identifier:          UyXlNJw/IjflLI5Kg2CRUyw8A9HIBt6d0RCre2a3+e8=
Subject key identifier:   00:F3:C9:5A:A4:06:91:CB:65:D1:76:3B:53:7D:AB:BF:07:17:B0:08
Authority key identifier: 59:F9:D4:8D:D9:16:90:97:83:E3:17:71:D8:AD:7E:CB:30:DC:3B:A2
Certificate issuer:       /CN=A917C909/serialNumber=59F9D48DD916909783E31771D8AD7ECB30DC3BA2
Certificate serial:       17
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfnUjdkWkJeD4xdx2K1-yzDcO6I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft
Manifest number:          16
Signing time:             Fri 31 Jan 2025 07:03:12 +0000
Manifest this update:     Fri 31 Jan 2025 07:03:11 +0000
Manifest next update:     Fri 07 Feb 2025 07:03:11 +0000
Files and hashes:         1: WfnUjdkWkJeD4xdx2K1-yzDcO6I.crl (hash: Bg0z8Iitex+Gy4G0NwzmU1lAsQfYV32IqjA7ey4LIGw=)
                          2: 853312D2C0DD11EFB5F0D24AC4F9AE02.roa (hash: FGrsxVel52tLC2c3tTf2jw58e+atsnyXCQDnNztZqg4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C909/serialNumber=59F9D48DD916909783E31771D8AD7ECB30DC3BA2
        Validity
            Not Before: Jan 31 07:03:11 2025 GMT
            Not After : Feb  7 07:03:11 2025 GMT
        Subject: CN=679c75b0-ac50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4f:61:26:76:72:6e:eb:93:fa:24:43:de:3d:
                    20:f7:63:3a:17:bf:08:94:0f:58:38:26:bd:85:96:
                    fc:8e:57:31:13:f4:08:48:7d:81:96:c7:56:04:dc:
                    8c:34:f6:de:e1:4f:a8:da:9d:a4:47:b4:a2:24:17:
                    72:f6:53:c1:84:d4:d4:db:fb:76:b4:43:8c:27:60:
                    e5:d6:69:b6:c8:74:b0:dd:31:f5:a2:71:f8:44:bd:
                    0c:d2:3d:91:cf:56:e3:df:ea:8b:59:17:8e:0a:e2:
                    04:11:c2:92:66:d7:66:c4:8b:39:24:92:ba:24:19:
                    c9:3c:2a:3d:b4:f7:3c:94:d7:8d:e1:93:9b:3d:bf:
                    f3:c9:db:a3:a8:31:51:d5:15:80:3a:c1:67:4e:46:
                    4a:85:6a:ce:4a:69:82:ba:d8:57:8a:24:d9:59:e1:
                    72:c7:2a:fc:f4:e5:f9:c6:f2:7f:17:74:6e:c0:1d:
                    3f:7e:ae:df:68:0e:f2:30:cd:e7:57:52:49:da:71:
                    a3:04:12:e1:24:8b:ea:a7:a8:f1:58:a8:c1:25:a5:
                    cc:1c:3c:ed:59:3c:ad:33:01:5e:ff:55:b0:cb:f1:
                    4c:a4:38:f2:16:56:ad:d2:f0:9a:b2:24:87:0e:e0:
                    74:b7:32:51:a8:86:7c:ea:ab:e8:16:33:b3:f4:aa:
                    c7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F3:C9:5A:A4:06:91:CB:65:D1:76:3B:53:7D:AB:BF:07:17:B0:08
            X509v3 Authority Key Identifier:
                keyid:59:F9:D4:8D:D9:16:90:97:83:E3:17:71:D8:AD:7E:CB:30:DC:3B:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfnUjdkWkJeD4xdx2K1-yzDcO6I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:e6:ee:52:ad:c3:84:c4:97:37:b9:12:b5:64:2b:9d:4c:5c:
         60:5a:60:a9:0b:cb:7f:7c:cd:91:94:99:51:a0:f3:b1:f0:d4:
         32:e8:a6:24:bd:3f:88:e7:f0:ef:17:95:79:af:78:1e:94:12:
         ed:9d:89:ac:c9:03:51:7a:f7:21:3a:5d:c2:9c:82:31:f9:69:
         e3:0c:5d:fc:3e:ef:30:a7:08:3c:f6:44:be:ae:9b:72:8a:98:
         65:9b:e6:eb:7a:6f:7b:8c:67:bc:8d:d8:b8:1f:1f:bb:43:06:
         a7:af:85:f4:02:57:a9:63:56:e9:86:f4:a5:c8:b6:e6:45:64:
         8e:14:9e:d8:af:10:ac:5e:c8:af:74:ec:24:04:27:dc:0f:8e:
         fe:f0:80:be:64:6a:97:00:09:ee:5e:34:d7:70:95:b7:92:90:
         3c:33:7d:d1:0a:30:20:f3:7e:a2:2e:05:cc:88:c2:5c:96:e3:
         14:df:6c:91:1a:1d:4b:13:3c:2e:70:9e:ce:49:95:36:37:5b:
         8e:e5:e2:70:d9:27:b9:92:23:61:80:61:3a:99:d2:44:e7:19:
         7e:8e:f6:f1:b7:0e:16:9a:6c:4e:9d:5a:28:1b:8e:22:63:bb:
         7b:71:01:50:c2:7f:c8:5e:7e:cd:ae:9b:aa:21:ba:e4:45:31:
         06:e9:17:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----