Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164215/D6DA1396A95E11EBA549E653C4F9AE02/Wl89PDwn7yXPbEA1MxiBYClqEGg.mft
File:                     Wl89PDwn7yXPbEA1MxiBYClqEGg.mft (raw, json)
Hash identifier:          ZuIwMrnksUMVtjr6cMvP+JgihhbEL6EtxTLO67lvSCg=
Subject key identifier:   FC:43:CD:C6:63:D0:D3:AD:11:AE:04:BA:CA:E1:7C:FE:9C:62:8B:72
Authority key identifier: 5A:5F:3D:3C:3C:27:EF:25:CF:6C:40:35:33:18:81:60:29:6A:10:68
Certificate issuer:       /CN=A9164215/serialNumber=5A5F3D3C3C27EF25CF6C403533188160296A1068
Certificate serial:       05DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wl89PDwn7yXPbEA1MxiBYClqEGg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164215/D6DA1396A95E11EBA549E653C4F9AE02/Wl89PDwn7yXPbEA1MxiBYClqEGg.mft
Manifest number:          05DA
Signing time:             Fri 28 Mar 2025 23:15:15 +0000
Manifest this update:     Fri 28 Mar 2025 23:15:15 +0000
Manifest next update:     Fri 04 Apr 2025 23:15:15 +0000
Files and hashes:         1: Wl89PDwn7yXPbEA1MxiBYClqEGg.crl (hash: ah0t9nidNJwNtCx+2s0+5A0sp2iQKyTEN8JuCeu1/9E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1499 (0x5db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164215
        Validity
            Not Before: Mar 28 23:15:15 2025 GMT
            Not After : Apr  4 23:15:15 2025 GMT
        Subject: CN=67e72d83-1fbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:77:b1:68:c7:a5:8d:3e:c4:f2:37:82:92:87:
                    20:3d:85:a8:b3:41:9c:c5:f0:b9:c7:52:86:2f:11:
                    ae:d6:48:e3:89:81:56:94:c0:c1:2f:f6:bd:87:9f:
                    48:89:01:05:0b:00:f8:90:3c:c5:fe:99:f9:21:07:
                    a1:a5:5e:96:e1:36:76:1b:dc:11:47:18:e5:0e:c7:
                    a0:2a:72:b1:7e:ff:9f:43:3d:2e:ac:75:7a:01:42:
                    67:ff:ba:6d:ae:95:3d:a4:42:b2:07:6f:8d:6b:78:
                    62:ea:90:27:81:7e:5d:b5:37:d8:f6:02:7d:63:80:
                    79:5d:fe:7d:42:90:ed:44:e7:d4:43:80:6b:36:16:
                    be:0a:15:06:ce:a0:62:d2:61:0b:7e:6b:97:cf:a1:
                    63:94:e7:77:0c:58:1b:4a:b4:d2:30:bf:ef:f1:32:
                    16:38:80:46:a0:74:30:1c:41:d9:1a:64:44:9c:bd:
                    c3:22:be:60:aa:e1:3b:19:77:3c:15:06:28:36:82:
                    19:d8:b7:27:83:7d:f9:73:0e:d0:45:a3:f4:90:22:
                    a8:07:e5:c2:1e:de:6d:32:9b:0c:a5:18:a5:fa:5a:
                    3b:b2:65:65:12:89:9d:eb:c8:c1:8c:62:f2:86:45:
                    49:ae:69:8c:b9:dc:60:8e:c8:97:3c:5e:c9:bf:28:
                    9d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:43:CD:C6:63:D0:D3:AD:11:AE:04:BA:CA:E1:7C:FE:9C:62:8B:72
            X509v3 Authority Key Identifier:
                keyid:5A:5F:3D:3C:3C:27:EF:25:CF:6C:40:35:33:18:81:60:29:6A:10:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164215/D6DA1396A95E11EBA549E653C4F9AE02/Wl89PDwn7yXPbEA1MxiBYClqEGg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wl89PDwn7yXPbEA1MxiBYClqEGg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164215/D6DA1396A95E11EBA549E653C4F9AE02/Wl89PDwn7yXPbEA1MxiBYClqEGg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:c5:24:7d:3e:16:bf:2d:e3:b4:64:83:36:71:39:9a:26:dc:
         77:06:48:41:10:42:03:fa:0e:fd:d4:8e:f0:e0:fa:8d:4a:02:
         4d:f5:1a:46:6d:1e:0c:ff:27:07:b7:88:6c:63:51:75:8b:10:
         39:8b:1c:86:46:d7:fa:36:6b:82:04:d7:54:95:08:8b:4b:c5:
         48:84:34:27:98:4a:60:3f:5e:fd:4b:48:2c:1a:b7:6e:f3:07:
         60:74:47:fa:7f:b7:cc:2b:c8:33:05:23:3b:37:f0:eb:85:48:
         56:b0:ba:83:e3:8b:42:2a:d9:1c:b8:2c:4c:86:44:85:ee:0a:
         17:26:09:11:e8:b6:d4:f3:a7:30:80:fa:8a:84:3a:8c:0b:7d:
         5e:21:93:59:15:44:ba:13:c5:41:c8:98:a2:8b:d3:ee:cc:14:
         2e:e5:38:53:e4:f0:9c:6c:1e:ff:c8:76:03:6b:fd:e4:2f:af:
         1f:b6:13:7d:3b:de:81:70:09:58:bb:c0:f3:6c:81:df:37:53:
         2e:fe:69:1b:61:54:f2:1d:06:39:a5:2d:dc:50:44:cf:b2:a7:
         fc:7a:35:46:bb:ce:37:a5:9a:bd:95:bb:dc:4e:c8:cc:60:1a:
         7f:45:4c:7e:7b:de:84:bb:06:14:6d:11:72:b3:65:00:ea:95:
         0b:6b:7a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:52:24 2025 by rpki-client