Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft
File:                     WAVTuIPew92yT2iObC0b-pPCY6o.mft (raw, json)
Hash identifier:          YbBk0rkLBGGRYcwQ7w9LOYuiB4BvDThJyaKYeKjNBQs=
Subject key identifier:   2C:08:91:8D:61:14:14:0A:62:45:49:39:74:B6:6A:59:B9:70:43:7B
Authority key identifier: 58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA
Certificate issuer:       /CN=A91304A9/serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA
Certificate serial:       0B29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft
Manifest number:          0AF7
Signing time:             Fri 28 Mar 2025 19:37:33 +0000
Manifest this update:     Fri 28 Mar 2025 19:37:33 +0000
Manifest next update:     Fri 04 Apr 2025 19:37:33 +0000
Files and hashes:         1: WAVTuIPew92yT2iObC0b-pPCY6o.crl (hash: 6gmtLWmxHW0TCdDPqDo9PaDjDqw42CCJxfJSEceeD8I=)
                          2: 91C771A2D02111EA843F372FC4F9AE02.roa (hash: aRceLWJKUcKLo5PR7+NR0vevgsQeIIozPpK4yxpso68=)
                          3: 64B67878AE7711EA98E12731C4F9AE02.roa (hash: whniw/rt8w3AT9eiCUwlSP3EPH0+CO0/R53FHraLneY=)
                          4: A6E747F89A3A11ECB43ED422C4F9AE02.roa (hash: widrlSBflwKa5cPhRuUBG9ePUJ0Q7GU99keGJenritI=)
                          5: FAA6AEE45F6C11EE8C65650FC4F9AE02.roa (hash: NdPZ57ZKycOHouK01+ZOfbmPKtj5MxKNGMw+rowaWDE=)
                          6: CA9C62B6011911F0A7636250C4F9AE02.roa (hash: TkFlKbRc5DRwjd6c06mswpd/RwtK/5VG1Y75IO7usZE=)
                          7: 89E1ED764CC111EE87453D77C4F9AE02.roa (hash: i4o6KpN/sFIWxaZMoc1d6q2sPtevZ9Tpc5mV9I6tNEk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2857 (0xb29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91304A9
        Validity
            Not Before: Mar 28 19:37:33 2025 GMT
            Not After : Apr  4 19:37:33 2025 GMT
        Subject: CN=67e6fa7d-35a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:98:46:b3:84:b6:c7:c8:74:f0:c8:98:35:e1:
                    7a:dc:3b:ca:09:dc:9f:b2:2e:b5:fc:c9:e8:89:8b:
                    45:a3:b2:f2:62:e7:1e:ec:2f:f9:f8:a2:3e:84:d7:
                    b0:92:12:77:c8:f0:14:42:f5:b9:f6:5e:76:22:13:
                    ac:3e:68:6e:01:31:84:7c:bc:e9:6b:d7:59:b2:d4:
                    35:1d:cf:05:2b:02:08:c1:fc:bf:d3:99:91:e5:4a:
                    11:98:38:6f:bb:6b:d6:7e:f7:87:c8:7b:9e:56:04:
                    8e:3f:e6:38:2d:d8:94:10:20:11:6f:fd:01:68:6a:
                    19:74:75:0b:97:d1:96:08:1e:72:bd:be:8b:e9:b6:
                    8a:08:9c:7b:94:6f:e7:cb:1b:9b:c0:0f:24:01:4a:
                    88:18:70:50:2e:c6:50:2f:3e:1c:11:be:70:de:1d:
                    62:3e:ea:d3:11:6d:d8:5e:f0:00:02:35:af:28:28:
                    10:38:54:00:4f:20:98:f5:38:a6:c9:02:22:f4:e7:
                    ca:14:75:b0:a2:58:4f:b0:06:56:5f:c0:7d:12:0a:
                    9d:41:ff:23:86:c1:a0:58:8e:e1:dc:4e:e1:69:c4:
                    68:0b:4a:af:61:84:39:93:bb:81:b3:05:b3:df:29:
                    18:2a:11:03:a5:74:da:a0:90:14:b7:d8:c9:f5:ee:
                    76:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:08:91:8D:61:14:14:0A:62:45:49:39:74:B6:6A:59:B9:70:43:7B
            X509v3 Authority Key Identifier:
                keyid:58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:fc:6f:2b:14:20:e8:0c:16:33:b1:ac:10:2a:a4:bd:92:9b:
         69:7a:5b:51:c0:e2:d1:59:78:4e:01:dd:ea:79:51:83:f1:f4:
         5e:b9:9a:b0:36:39:13:14:d8:d0:21:42:06:90:ad:ad:bb:9e:
         96:8f:46:7a:8f:74:d4:4f:64:64:ff:26:aa:3c:d9:72:98:18:
         d3:ea:22:bd:f3:03:64:13:a0:e8:27:69:1d:78:47:fe:14:04:
         41:cd:28:1c:54:e1:37:c6:96:76:a0:9f:86:f2:17:e3:67:84:
         ef:90:37:df:3d:71:5c:ea:50:25:b0:63:04:2d:f4:b7:ab:ad:
         fb:8b:7e:30:98:cb:f0:aa:5d:cf:2a:39:79:e4:96:2f:c1:04:
         c4:dd:39:9c:48:cd:4b:81:c0:f1:99:e5:3f:4b:ed:41:70:4e:
         99:bc:ee:91:7d:16:93:81:e6:43:1c:d5:38:32:5c:ef:61:b8:
         d6:b5:4c:65:85:e0:c0:15:83:de:71:58:c4:1a:82:84:2c:27:
         c6:70:ce:d6:c5:03:55:28:29:bd:67:d8:fc:90:05:ae:86:6e:
         f6:e7:4b:d5:48:24:bd:5c:96:3d:8a:93:77:bc:05:71:90:0e:
         a6:4c:27:7e:78:54:1c:62:d3:56:0b:20:d3:c9:33:d6:2a:3e:
         ac:58:f4:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:39:12 2025 by rpki-client