Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft
File:                     WatjEmbskGVhP9Z3y9tP8TvvZEE.mft (raw, json)
Hash identifier:          m1v5bq+axPnI9ee6KjX3srfu5YoVC9zBw3ltWOheZjc=
Subject key identifier:   06:C5:3D:0F:7F:1B:98:6B:5B:7C:6E:73:CE:BE:E7:03:AD:DE:09:58
Authority key identifier: 59:AB:63:12:66:EC:90:65:61:3F:D6:77:CB:DB:4F:F1:3B:EF:64:41
Certificate issuer:       /CN=A9191010/serialNumber=59AB631266EC9065613FD677CBDB4FF13BEF6441
Certificate serial:       1ED0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WatjEmbskGVhP9Z3y9tP8TvvZEE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft
Manifest number:          1ED0
Signing time:             Fri 31 Jan 2025 16:02:46 +0000
Manifest this update:     Fri 31 Jan 2025 16:02:46 +0000
Manifest next update:     Fri 07 Feb 2025 16:02:45 +0000
Files and hashes:         1: WatjEmbskGVhP9Z3y9tP8TvvZEE.crl (hash: vAZa+TFaXA7ADJV1+7ezj/EJQufQq6VTKOa1UtbQXZA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7888 (0x1ed0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191010/serialNumber=59AB631266EC9065613FD677CBDB4FF13BEF6441
        Validity
            Not Before: Jan 31 16:02:46 2025 GMT
            Not After : Feb  7 16:02:45 2025 GMT
        Subject: CN=679cf426-bed7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b0:07:3a:c2:7d:04:ca:f4:f4:48:9b:fa:fc:
                    34:50:f1:f4:cc:d5:c0:e9:90:f1:91:16:82:2f:f6:
                    40:1d:48:bb:96:43:2e:2b:45:86:c6:65:e6:35:76:
                    41:82:ed:60:e5:eb:66:c3:ec:83:30:8d:a5:e1:0c:
                    c3:15:35:95:cc:ed:5e:61:97:e1:bc:20:76:d4:da:
                    7f:fc:03:73:20:a1:76:dc:1d:f4:e1:c9:7f:49:f2:
                    56:cc:93:82:ce:10:03:6b:98:55:c2:21:23:7e:14:
                    78:af:f3:1c:99:ef:e5:7b:7a:72:35:5d:e2:ee:62:
                    28:a3:02:4d:11:55:ff:bb:3e:77:82:fe:4d:a5:59:
                    ee:4d:ae:3f:3a:76:ab:3e:ce:7b:ae:b7:34:57:b0:
                    4b:31:e3:fd:54:fc:bc:31:32:83:82:0e:48:bd:7e:
                    d2:d6:5f:0c:cc:06:f7:97:34:a8:9c:ef:4f:03:8a:
                    08:87:14:13:cf:50:dc:4e:86:40:80:8c:d5:0f:b2:
                    41:b3:f3:9f:66:a1:46:3c:0b:7a:65:07:a9:91:ac:
                    3c:d5:ae:e3:d4:0a:37:29:eb:ea:6f:64:c6:0d:12:
                    10:72:f4:8b:2f:c6:4c:d2:5d:27:bd:ba:9f:28:5d:
                    48:be:5c:22:95:1d:2c:96:1c:72:99:3c:55:db:66:
                    74:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C5:3D:0F:7F:1B:98:6B:5B:7C:6E:73:CE:BE:E7:03:AD:DE:09:58
            X509v3 Authority Key Identifier:
                keyid:59:AB:63:12:66:EC:90:65:61:3F:D6:77:CB:DB:4F:F1:3B:EF:64:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WatjEmbskGVhP9Z3y9tP8TvvZEE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:b7:a8:e7:3f:3d:a8:e6:98:c3:45:80:16:13:79:fc:1e:62:
         b4:e2:cc:0a:5b:6f:5d:85:58:4d:ce:4f:83:79:bd:3d:c7:21:
         7a:ee:5d:4a:57:60:7e:9a:0a:47:84:86:56:15:94:c6:3e:a6:
         1d:77:99:5a:a0:e4:52:45:3d:e7:90:54:35:8e:7d:e1:c1:a6:
         70:ff:b7:21:af:f9:35:69:62:40:27:5c:f9:a7:b7:93:2c:a9:
         91:b7:cb:f4:3c:fd:67:53:e7:cd:32:29:0d:02:87:8a:52:bb:
         13:2b:54:c6:42:a8:38:c7:af:0e:23:aa:69:c0:4f:ff:97:2b:
         c5:db:09:1c:09:ad:f9:6e:d7:7a:17:44:d6:e7:e2:f3:cf:bc:
         26:c3:2a:7f:3c:70:5b:34:6c:c9:c7:dc:cb:7e:09:a6:b9:04:
         48:cf:ea:57:2a:3d:4f:d1:6b:1d:f2:31:e1:70:d9:ca:9c:27:
         3d:68:22:37:76:b6:32:a1:ff:6a:fd:e2:7c:62:87:b2:6c:c8:
         26:38:14:dd:1c:dd:09:e1:76:a2:45:d2:90:08:a2:bf:c3:b2:
         4e:aa:6e:c7:db:91:22:c2:01:6a:15:6a:e7:24:ca:f9:cf:d1:
         5f:f0:5b:5c:85:41:56:12:ff:e6:a9:d1:80:98:2c:41:36:f4:
         86:db:ec:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:22:39 2025 by rpki-client