Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft
File:                     WHRSDaeB94Db1xDULIQcE6etF1c.mft (raw, json)
Hash identifier:          lIcxTLmsNsJ9IJXbJ+t1vomjvC1dlJ5AwavW+g13rsg=
Subject key identifier:   41:92:A4:F7:C5:EC:70:11:D4:8E:FA:29:11:8E:65:01:BA:47:AE:46
Authority key identifier: 58:74:52:0D:A7:81:F7:80:DB:D7:10:D4:2C:84:1C:13:A7:AD:17:57
Certificate issuer:       /CN=A91AF2CD/serialNumber=5874520DA781F780DBD710D42C841C13A7AD1757
Certificate serial:       0172
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft
Manifest number:          0166
Signing time:             Fri 31 Jan 2025 03:22:21 +0000
Manifest this update:     Fri 31 Jan 2025 03:22:20 +0000
Manifest next update:     Fri 07 Feb 2025 03:22:20 +0000
Files and hashes:         1: WHRSDaeB94Db1xDULIQcE6etF1c.crl (hash: I95QOF7SGZhEus07X3+SoMpSPJoKujz1k3iG1P7iEqw=)
                          2: B412DC700EC011EE8C18290AC4F9AE02.roa (hash: QaySh+U2ImR7fI4OfAXAG1QKvLn5LnVgI5Wmw5xhFUc=)
                          3: AD88248C1FBE11EE97342E64C4F9AE02.roa (hash: GPafla64VUamN9CnaYJ2F+XELitJmP/fVhbH40kAovU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 370 (0x172)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF2CD/serialNumber=5874520DA781F780DBD710D42C841C13A7AD1757
        Validity
            Not Before: Jan 31 03:22:20 2025 GMT
            Not After : Feb  7 03:22:20 2025 GMT
        Subject: CN=679c41ed-1dc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f5:45:54:44:77:a6:0e:6d:e4:4d:7e:6b:57:
                    21:aa:08:51:2a:ee:7f:18:4d:1e:fd:38:32:da:fd:
                    39:99:9f:04:0d:db:4a:89:49:2f:16:75:6d:aa:27:
                    2e:9b:70:8f:43:31:ff:d6:1e:d9:60:5d:53:db:24:
                    6b:a2:65:7a:c0:35:e2:be:3c:82:9d:65:f5:05:a8:
                    dd:d7:0f:5f:8c:6a:93:e3:91:f5:49:aa:35:73:f2:
                    2b:65:60:65:87:93:42:b8:c0:8a:9a:c0:95:09:11:
                    04:83:43:61:84:5b:98:a2:ce:5e:5c:e6:93:5d:90:
                    1c:b2:39:5e:1b:f8:c5:cb:ac:f4:c8:fc:ce:6f:53:
                    c3:2a:a8:4c:1e:b6:40:07:97:c1:31:c3:6c:f4:5d:
                    0f:8d:12:f0:c1:cf:59:af:ff:73:40:ba:4b:45:02:
                    c7:78:a2:8b:37:69:ea:dd:58:c0:82:04:8f:0a:60:
                    76:df:08:ff:7f:72:94:06:57:d6:89:57:92:db:c7:
                    dc:92:de:75:1c:f4:d9:c1:ce:68:c8:7c:e8:6a:55:
                    77:74:a1:99:b4:02:70:a2:2c:6b:50:24:18:ad:6a:
                    52:14:07:74:b0:01:1c:6f:6d:09:3f:42:1c:6f:b5:
                    0a:5d:79:95:93:9d:9b:a2:3f:04:18:00:1a:f5:31:
                    f5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:92:A4:F7:C5:EC:70:11:D4:8E:FA:29:11:8E:65:01:BA:47:AE:46
            X509v3 Authority Key Identifier:
                keyid:58:74:52:0D:A7:81:F7:80:DB:D7:10:D4:2C:84:1C:13:A7:AD:17:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:3c:00:2a:e9:f3:0d:a9:05:cf:f5:80:bd:17:33:88:a3:20:
         de:2f:c8:4b:e3:12:55:7c:fd:42:70:2f:0f:2e:a0:b4:56:09:
         64:f2:46:78:f0:f3:f9:2c:6b:14:24:5c:aa:b1:7e:bc:19:9a:
         17:79:50:4a:11:01:40:69:fe:ef:34:b6:f9:e0:5d:b5:71:12:
         0a:29:61:e3:71:b9:da:61:3e:41:c5:04:cb:74:7e:fa:67:d5:
         13:bc:ca:f6:d3:a3:9b:74:bc:e2:d7:59:24:d3:53:cf:79:3a:
         80:ca:e3:c8:c6:9c:3c:b0:f3:7c:8c:90:28:b8:5c:c9:1f:f9:
         31:e2:d7:43:1b:84:0b:06:11:91:ce:11:8f:0e:5c:59:07:03:
         7e:d7:e2:42:30:96:7a:80:19:40:a1:f7:70:27:b0:54:1e:ba:
         05:0c:37:18:e0:2f:c0:5c:8b:01:47:c2:1f:c4:65:fa:70:e2:
         6e:55:90:56:bc:91:38:63:22:de:c9:9d:11:54:53:02:75:8c:
         81:17:c6:3a:3b:68:f1:b0:19:07:d0:1d:8d:73:70:e7:af:89:
         b9:a6:ae:79:ec:1c:e2:2d:b9:f5:07:9e:c7:f2:77:d6:4d:22:
         85:12:5f:ca:51:f3:3b:fc:ac:53:76:40:bb:29:b2:4c:35:4a:
         a5:12:e0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:55:35 2025 by rpki-client