Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/WpmwJ2cZ06g3cPquFNdXXMZmSI0.mft
File:                     WpmwJ2cZ06g3cPquFNdXXMZmSI0.mft (raw, json)
Hash identifier:          xmvwkQRimAIlm23DRfSe4SVLYLs1YSh6uwqr+FJs7VQ=
Subject key identifier:   A0:E7:36:1A:D7:36:CC:0B:92:3A:90:15:37:64:DD:22:62:72:B5:2C
Authority key identifier: 5A:99:B0:27:67:19:D3:A8:37:70:FA:AE:14:D7:57:5C:C6:66:48:8D
Certificate issuer:       /CN=A91E3B1D/serialNumber=5A99B0276719D3A83770FAAE14D7575CC666488D
Certificate serial:       02B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpmwJ2cZ06g3cPquFNdXXMZmSI0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/WpmwJ2cZ06g3cPquFNdXXMZmSI0.mft
Manifest number:          02B0
Signing time:             Fri 31 Jan 2025 01:36:17 +0000
Manifest this update:     Fri 31 Jan 2025 01:36:16 +0000
Manifest next update:     Fri 07 Feb 2025 01:36:16 +0000
Files and hashes:         1: WpmwJ2cZ06g3cPquFNdXXMZmSI0.crl (hash: Xq6erK2K3FpJUEZIRsCQvXYMRUejqiDgZs7XftqhWxI=)
                          2: A1C11FC2D18411EFBBD4971AC4F9AE02.roa (hash: xZ7YqIDaoUd+RzHbOlkF6x1jlcucQQ6yGO7tO0froi4=)
                          3: B370AF6CD18411EF960DE726C4F9AE02.roa (hash: 9iKSHz86/EIZlRAE/OwM+VXopdTWIKeDLhef41MF2CA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 697 (0x2b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3B1D/serialNumber=5A99B0276719D3A83770FAAE14D7575CC666488D
        Validity
            Not Before: Jan 31 01:36:16 2025 GMT
            Not After : Feb  7 01:36:16 2025 GMT
        Subject: CN=679c2910-95b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:43:52:89:ca:3e:76:4c:35:21:73:38:88:c4:
                    73:88:87:06:ab:bd:2d:15:77:96:84:3f:a8:28:46:
                    5d:d1:9a:04:35:68:51:f9:be:91:0c:40:4a:9e:06:
                    87:9c:8f:08:69:62:98:62:59:60:d3:4a:ff:77:da:
                    b4:fe:0b:59:a4:f8:8b:60:03:62:41:b7:a2:07:ce:
                    90:e4:a5:51:c7:43:57:eb:f4:ba:73:e9:ae:eb:46:
                    7d:a7:0a:3a:55:71:ef:40:4c:fe:66:ec:26:29:d1:
                    8e:b4:19:63:67:9f:d0:25:49:c0:dd:d6:ca:60:26:
                    19:c5:b9:1d:41:54:52:14:f0:28:f1:ea:76:09:af:
                    67:09:1c:22:75:c4:ea:2c:39:e9:5c:5c:cf:99:02:
                    56:af:21:0b:c1:cd:86:d6:fe:b7:26:c5:17:b8:7c:
                    67:93:8f:7e:6a:1b:25:03:fe:46:a8:85:bc:39:43:
                    8b:fe:2e:d4:9d:1e:a8:b1:23:22:1d:08:92:ed:17:
                    d8:e7:b8:04:19:47:17:93:03:88:4c:56:6f:d8:db:
                    60:c5:30:46:83:1f:87:5c:e2:ad:02:35:bd:c3:0f:
                    5f:15:69:bf:85:2b:fa:73:5d:1c:41:53:07:eb:bc:
                    5e:fc:e4:cc:c6:65:98:46:c0:af:b9:bc:cb:72:1e:
                    26:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:E7:36:1A:D7:36:CC:0B:92:3A:90:15:37:64:DD:22:62:72:B5:2C
            X509v3 Authority Key Identifier:
                keyid:5A:99:B0:27:67:19:D3:A8:37:70:FA:AE:14:D7:57:5C:C6:66:48:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/WpmwJ2cZ06g3cPquFNdXXMZmSI0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpmwJ2cZ06g3cPquFNdXXMZmSI0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/WpmwJ2cZ06g3cPquFNdXXMZmSI0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:44:e8:13:b4:0a:5e:6b:f5:23:2d:bd:3d:3a:ad:55:28:92:
         01:9b:c2:f5:fe:a3:1b:fd:06:7c:a6:12:a7:bd:8e:72:1e:35:
         ff:18:a4:9a:5a:fe:56:eb:32:3b:25:ae:11:a5:f7:bf:45:46:
         0a:86:c0:ee:5e:81:c5:52:e3:ee:f3:60:91:6b:05:9e:7f:8c:
         5a:b6:4e:87:82:79:d6:ed:89:df:a3:7e:d6:55:a9:37:91:5a:
         20:ef:91:a6:cc:37:b5:ca:5b:e6:e8:56:ea:86:75:f3:52:b6:
         d6:83:57:e6:f8:35:79:72:93:19:99:73:d7:a4:97:26:ae:14:
         36:29:fe:aa:74:d9:26:f7:d1:dd:25:d7:41:1a:fe:99:3b:c7:
         c2:3b:2d:bb:98:2a:b7:5d:99:c2:ea:b4:90:1c:b4:ef:a9:40:
         5c:71:45:84:eb:af:3d:13:90:fb:de:4f:fe:02:ce:16:eb:38:
         69:a3:b9:90:46:e9:e9:3e:57:bb:57:f2:cc:89:7c:62:c0:c7:
         6e:ec:60:c9:7c:d0:45:2b:d1:a3:12:9f:0e:c9:51:c0:ea:9f:
         fd:fd:75:b5:7a:40:d7:e9:4e:3a:c4:e6:6e:e8:e3:18:04:42:
         3e:04:84:06:25:36:aa:fe:35:a1:0c:dc:43:e5:51:86:4b:fc:
         43:65:79:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:34:15 2025 by rpki-client