Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.mft
File:                     atWLLDI-9A_AiUCxRgfQhpXOhpg.mft (raw, json)
Hash identifier:          +vuOLC9f4B9j+swSkTGBTyAobq2FpWaIwVAflOQAIEY=
Subject key identifier:   CC:BF:61:2B:6D:62:81:02:E0:A8:94:68:4A:2D:D9:E9:91:F6:46:3B
Authority key identifier: 6A:D5:8B:2C:32:3E:F4:0F:C0:89:40:B1:46:07:D0:86:95:CE:86:98
Certificate issuer:       /CN=A91BB6B3/serialNumber=6AD58B2C323EF40FC08940B14607D08695CE8698
Certificate serial:       05E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atWLLDI-9A_AiUCxRgfQhpXOhpg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.mft
Manifest number:          05E1
Signing time:             Thu 30 Jan 2025 22:57:52 +0000
Manifest this update:     Thu 30 Jan 2025 22:57:52 +0000
Manifest next update:     Thu 06 Feb 2025 22:57:52 +0000
Files and hashes:         1: atWLLDI-9A_AiUCxRgfQhpXOhpg.crl (hash: +/ssvrdW2dl3Vp9JIhpMxM5apNiArx1TIFo20Ma56XU=)
                          2: D154F886EB7E11EE973A5D76C4F9AE02.roa (hash: KNP57ubsOVF9oNCH7Xk/Z7xQApgpYUwHKDlJNQIBNxs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1507 (0x5e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB6B3/serialNumber=6AD58B2C323EF40FC08940B14607D08695CE8698
        Validity
            Not Before: Jan 30 22:57:52 2025 GMT
            Not After : Feb  6 22:57:52 2025 GMT
        Subject: CN=679c03f0-9709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:18:53:9a:22:f9:ad:64:c4:2a:6b:7b:6f:19:
                    55:f7:e9:b9:dd:81:b8:9f:45:9d:0b:5c:d1:2a:cb:
                    4e:28:0b:7c:5c:96:13:17:63:53:b7:79:6a:7d:eb:
                    d2:00:57:02:c9:b2:46:36:92:66:ea:c8:32:53:67:
                    8b:fa:e8:af:f8:c5:fe:0c:bf:61:c6:7e:86:73:fe:
                    69:2e:20:36:6f:34:26:c6:83:80:3b:32:6c:9f:20:
                    3a:29:dc:ee:0c:72:09:52:fa:dc:68:58:bc:8d:f0:
                    a5:81:06:2d:f3:88:16:09:f8:05:79:94:9a:10:07:
                    25:d1:28:52:13:73:fe:e8:b9:3e:44:77:42:be:24:
                    36:23:a6:13:03:86:cd:cd:71:ca:b0:a8:b3:76:3e:
                    f8:4b:48:a8:a3:77:55:0c:a2:06:35:0e:0d:21:93:
                    fa:8d:03:71:54:ee:cd:85:d4:c7:06:55:a5:95:4f:
                    fd:6d:d7:dd:d9:94:8c:d5:30:d1:4a:95:e8:7f:81:
                    65:01:b3:ac:16:21:2c:3d:08:7a:c6:26:21:0d:66:
                    3d:89:70:9c:5f:f4:b0:ac:70:ba:d5:6f:a2:b6:76:
                    95:2f:a8:93:27:85:c5:4e:e4:0f:3f:ea:80:54:9a:
                    8e:77:4d:af:44:27:35:a4:1b:fb:78:18:5d:bb:26:
                    eb:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:BF:61:2B:6D:62:81:02:E0:A8:94:68:4A:2D:D9:E9:91:F6:46:3B
            X509v3 Authority Key Identifier:
                keyid:6A:D5:8B:2C:32:3E:F4:0F:C0:89:40:B1:46:07:D0:86:95:CE:86:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atWLLDI-9A_AiUCxRgfQhpXOhpg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:15:23:12:6d:32:0f:45:9e:df:fd:3e:e3:05:ba:96:d5:9a:
         d2:9d:a8:22:f4:53:1a:aa:63:a3:e2:4f:d2:34:f0:4d:17:91:
         e5:0a:d6:8b:1d:c0:ac:bc:60:e0:1e:02:e2:d1:25:ec:6f:c3:
         f6:ce:53:78:77:0d:d8:32:20:00:37:4e:88:61:c0:1a:1f:9e:
         ee:2a:81:e3:3f:ee:20:97:2e:a8:1d:98:06:e5:0d:d8:e4:9c:
         ed:0c:6a:fe:ba:cc:3e:d6:07:59:cc:f4:25:80:a1:2c:8d:5a:
         31:07:3e:4f:e5:dd:9e:4c:2a:f9:27:ae:b9:64:c7:54:b9:82:
         80:a9:6d:01:a4:b7:bf:72:30:c6:30:f2:17:0b:fc:cb:06:be:
         cd:99:e7:56:1b:7f:a8:2e:b9:3e:da:c0:8e:90:7e:5c:63:16:
         15:0a:12:76:4c:fc:93:97:eb:92:ef:33:60:6f:19:34:d2:75:
         f5:d5:ca:7a:5b:94:79:e1:ef:bd:8d:d5:45:48:3a:c8:43:0d:
         27:ce:fa:93:c3:10:57:9f:53:1e:48:a7:52:07:28:08:e7:59:
         80:f7:b6:75:e3:6c:41:6e:4e:e0:24:ba:a6:3d:15:8d:9c:0f:
         d5:db:e2:5b:9b:ec:18:ab:2c:29:65:7e:30:f0:31:69:32:ad:
         c8:2e:b9:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----