Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft
File:                     wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft (raw, json)
Hash identifier:          knwzqYaNJFDeg2AITcJznP59x9aOfSkfem+qsCV/WSc=
Subject key identifier:   ED:17:F8:A3:AB:ED:41:DA:ED:72:87:3B:85:32:8E:90:E8:1C:1E:DF
Authority key identifier: C2:22:C1:9E:BF:52:84:4D:4B:7C:DA:0E:F7:54:E6:D3:30:C4:B6:09
Certificate issuer:       /CN=A91CE821/serialNumber=C222C19EBF52844D4B7CDA0EF754E6D330C4B609
Certificate serial:       1486
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wiLBnr9ShE1LfNoO91Tm0zDEtgk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft
Manifest number:          189A
Signing time:             Fri 31 Jan 2025 16:53:28 +0000
Manifest this update:     Fri 31 Jan 2025 16:53:27 +0000
Manifest next update:     Fri 07 Feb 2025 16:53:27 +0000
Files and hashes:         1: wiLBnr9ShE1LfNoO91Tm0zDEtgk.crl (hash: sqLmTA0YwDj7NaoYMTbMOG/im2ycY37ANcqlyT3yTCE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5254 (0x1486)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE821/serialNumber=C222C19EBF52844D4B7CDA0EF754E6D330C4B609
        Validity
            Not Before: Jan 31 16:53:27 2025 GMT
            Not After : Feb  7 16:53:27 2025 GMT
        Subject: CN=679d0007-bdf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e4:1b:d2:22:95:c1:1e:c8:61:e1:d1:93:be:
                    b8:92:f4:b2:6f:3f:97:11:b0:00:7f:f0:d2:96:2b:
                    53:eb:9a:2b:a5:3d:0a:79:ee:59:91:16:03:3e:ea:
                    a2:50:8b:72:b1:7e:84:70:aa:5a:ad:4d:e7:ad:28:
                    dc:f6:00:f4:3e:fa:53:18:13:34:fb:94:60:52:63:
                    43:85:9c:44:e6:be:b3:44:f6:32:61:0a:23:3f:31:
                    11:e2:e4:33:dd:32:1a:fb:93:8c:71:c2:56:4b:99:
                    28:a8:2f:a4:9f:6b:30:1f:c7:07:43:2e:be:69:dc:
                    81:48:3a:16:34:c7:67:80:fb:d1:ca:52:4b:a3:ac:
                    55:5c:4f:fc:ae:22:e5:23:0d:d0:cf:14:81:a1:ca:
                    28:10:17:0c:82:ad:a2:1b:37:a0:58:15:f0:4b:47:
                    86:01:97:79:61:62:1c:47:e1:56:78:79:48:ee:96:
                    ce:93:9d:10:76:f5:6e:80:c9:bf:7e:94:cc:31:22:
                    3b:b3:ba:a1:b1:d2:76:25:04:f4:16:65:1c:4f:24:
                    47:59:06:ca:15:f1:a5:a3:7e:91:61:ee:75:e0:95:
                    e1:87:d5:4e:65:77:56:ba:da:db:5a:ea:57:9d:31:
                    d7:5f:9a:63:a5:c3:af:31:4f:96:31:bf:5f:3c:90:
                    8e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:17:F8:A3:AB:ED:41:DA:ED:72:87:3B:85:32:8E:90:E8:1C:1E:DF
            X509v3 Authority Key Identifier:
                keyid:C2:22:C1:9E:BF:52:84:4D:4B:7C:DA:0E:F7:54:E6:D3:30:C4:B6:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wiLBnr9ShE1LfNoO91Tm0zDEtgk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:b3:ad:db:58:d0:6c:a7:9f:73:c4:22:33:17:f7:b6:a6:24:
         1c:9d:05:1e:87:b1:a6:03:df:1d:a1:6e:d4:8e:dc:a6:5a:ad:
         76:ea:ea:7f:9d:73:fd:4c:d3:e1:2f:e1:17:b3:27:52:fd:65:
         b2:0d:d5:d8:d2:c5:1e:a5:60:f5:65:c8:05:b6:20:fa:e5:41:
         1c:60:31:8a:9c:f1:4d:51:b6:8c:3e:63:5b:b1:ec:56:b2:f0:
         4f:7b:29:cc:05:87:90:5a:90:12:3e:ae:01:51:9a:0c:e4:05:
         ed:25:7e:08:7d:0d:4f:41:10:48:61:33:f4:05:3f:cb:01:42:
         95:fc:10:a7:c0:22:ec:66:ab:a0:fb:88:cb:d4:dc:31:7a:c0:
         6b:3f:b9:85:19:17:b5:5f:cb:af:67:03:4b:c2:79:cb:c7:a4:
         45:de:2a:fc:e5:75:bc:16:c6:96:14:96:44:77:33:70:2c:0d:
         73:54:d0:82:ad:6c:85:a1:eb:2f:b8:85:55:44:17:fd:b0:90:
         3c:7b:eb:c3:80:c8:3b:5a:c0:ae:18:06:a2:4c:63:ce:15:ea:
         b8:c5:fa:bc:27:ff:64:aa:b8:37:e2:49:bf:b9:8e:78:a2:19:
         e3:05:49:73:61:cd:69:3c:72:af:a3:e1:95:e3:89:cb:b3:32:
         e6:42:4c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:50:55 2025 by rpki-client