Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.mft
File:                     WECNLJ73mVEabl1w-C7IaZbzE_Q.mft (raw, json)
Hash identifier:          n/rb/Y+zLoQZ9r+50KoUthDo0Oyylg4QWejCBd9uRCc=
Subject key identifier:   C7:67:9D:56:18:F9:74:3E:5E:C6:09:54:87:3B:75:73:1B:1B:CA:34
Authority key identifier: 58:40:8D:2C:9E:F7:99:51:1A:6E:5D:70:F8:2E:C8:69:96:F3:13:F4
Certificate issuer:       /CN=A91B85B2/serialNumber=58408D2C9EF799511A6E5D70F82EC86996F313F4
Certificate serial:       069C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WECNLJ73mVEabl1w-C7IaZbzE_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.mft
Manifest number:          0694
Signing time:             Thu 30 Jan 2025 22:17:10 +0000
Manifest this update:     Thu 30 Jan 2025 22:17:09 +0000
Manifest next update:     Thu 06 Feb 2025 22:17:09 +0000
Files and hashes:         1: WECNLJ73mVEabl1w-C7IaZbzE_Q.crl (hash: 8yQTuHoEBIn2eQHsAIfteBoZvx0w6hFx1x1W8sdavvE=)
                          2: E4A690EE5AC211EFAB8E8C16C4F9AE02.roa (hash: xDkjde8fXVe0/58MBEqY/WqNBmnSLATc80yeKpLKQQc=)
                          3: 3DD34804574A11EBB748600AC4F9AE02.roa (hash: LBebV0Evm/UGpPLphMH1G/iMGgilZT2vx+yzYjP/e3o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1692 (0x69c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B85B2/serialNumber=58408D2C9EF799511A6E5D70F82EC86996F313F4
        Validity
            Not Before: Jan 30 22:17:09 2025 GMT
            Not After : Feb  6 22:17:09 2025 GMT
        Subject: CN=679bfa66-909a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:39:3d:45:81:bc:b8:62:93:eb:b2:ed:b8:32:
                    49:40:74:48:f6:d1:cf:5d:99:77:37:47:5e:c8:a6:
                    f2:80:37:9b:e4:8a:e5:70:b7:f4:23:73:85:18:29:
                    ff:31:9f:60:0e:f1:a9:72:a7:49:80:20:55:88:a4:
                    99:88:d6:0f:58:9a:f0:9e:97:f2:a6:87:1c:75:34:
                    7a:5e:a1:53:a4:56:70:06:6a:d2:f7:b6:e7:0e:91:
                    6f:0c:af:1b:35:ec:9c:b0:69:f9:ab:ce:ff:1f:46:
                    a8:ee:a9:ad:f9:b2:59:dd:b6:b7:f7:23:6d:05:cc:
                    12:0e:a1:46:77:5a:41:6f:ad:d2:3d:0e:92:3e:78:
                    62:58:92:61:11:4f:92:ce:0e:e9:9b:ab:23:f8:75:
                    f5:24:c0:46:a3:23:77:ea:90:ba:37:3e:c9:fd:4e:
                    b8:2c:32:43:d2:10:67:3f:e4:ba:f3:40:a0:f9:46:
                    18:91:91:92:a6:37:f3:eb:69:60:af:08:97:7c:c1:
                    83:d5:c4:88:2a:e2:16:cb:40:47:7c:b6:5b:51:28:
                    b9:be:60:eb:e4:99:3d:99:be:cd:76:d2:be:0a:90:
                    1c:19:5b:33:bd:5d:30:c1:61:02:27:04:8d:b2:b6:
                    b4:b7:ac:7a:c7:83:0e:66:c6:75:66:5e:18:c6:93:
                    e7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:67:9D:56:18:F9:74:3E:5E:C6:09:54:87:3B:75:73:1B:1B:CA:34
            X509v3 Authority Key Identifier:
                keyid:58:40:8D:2C:9E:F7:99:51:1A:6E:5D:70:F8:2E:C8:69:96:F3:13:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WECNLJ73mVEabl1w-C7IaZbzE_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:eb:f7:7a:4b:67:6f:c3:87:d2:08:96:85:25:1c:5a:44:ec:
         e9:d0:aa:46:b4:90:57:21:5c:ae:2b:27:59:5f:bd:19:70:43:
         eb:fc:3d:ef:40:f3:e5:b8:6c:94:57:3b:00:14:0e:1a:29:4a:
         aa:70:c2:e2:3f:c1:f7:ec:df:ac:5c:a5:3b:0e:0c:88:99:1f:
         e6:7e:59:8f:9f:81:57:cd:6c:fd:41:33:34:3e:87:a9:a1:cb:
         70:1c:e6:8b:62:e1:2c:ea:14:13:fb:08:5e:26:07:d6:e4:19:
         cd:e1:63:0d:e8:35:f8:c6:90:60:b8:0a:51:d6:9d:2f:1d:ff:
         45:bd:f6:9b:bf:76:eb:ec:b9:85:68:b2:68:1a:1a:26:88:a8:
         56:99:8b:13:7d:dd:57:f9:db:85:9b:72:94:c5:7c:10:c8:bc:
         05:e1:b7:54:82:7c:0e:f8:39:9d:dd:1d:aa:24:82:04:45:b1:
         b0:41:d1:7f:0f:9b:10:b8:db:5b:6e:61:c4:9b:39:49:78:1d:
         78:a7:9a:79:f4:86:45:20:6a:3e:f3:ba:dc:f9:fb:33:8f:5a:
         35:51:a3:6b:b0:be:5c:bf:d0:a5:02:04:d4:d0:dd:25:c5:65:
         a8:f3:9f:f4:20:ce:d3:4b:35:d9:a6:8d:8a:0d:ed:f8:ef:90:
         15:58:63:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:16:36 2025 by rpki-client