Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft
File:                     wK73B39SYiVnF5rOVq1e6M1kYE4.mft (raw, json)
Hash identifier:          trkdb4WrAPJrwkf7iLwWdSkD9KcnM+94UWjcnLIeqqY=
Subject key identifier:   6C:BA:B6:A6:80:2A:9E:5B:3A:00:17:91:76:C7:2B:3C:38:9E:2D:22
Authority key identifier: C0:AE:F7:07:7F:52:62:25:67:17:9A:CE:56:AD:5E:E8:CD:64:60:4E
Certificate issuer:       /CN=A917B0F6/serialNumber=C0AEF7077F52622567179ACE56AD5EE8CD64604E
Certificate serial:       010A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft
Manifest number:          0106
Signing time:             Sat 29 Mar 2025 04:26:21 +0000
Manifest this update:     Sat 29 Mar 2025 04:26:21 +0000
Manifest next update:     Sat 05 Apr 2025 04:26:21 +0000
Files and hashes:         1: wK73B39SYiVnF5rOVq1e6M1kYE4.crl (hash: oSmYapIiy3CLPBvo1PHagDTAhRDz7qI9n7Ijqjp9SuY=)
                          2: 6307B34A7CAD11EE9E7B9434C4F9AE02.roa (hash: 2gzrMjXP4Am0pQ80O9+rI75KjzU6RpDqcXF/j3n7Tn0=)
                          3: 3BE03ECC7D4D11EE93D62E30C4F9AE02.roa (hash: +PmKxO27F3AHIJ3oHg1od1w1E6envfjFt6OCrfWbtQk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 266 (0x10a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B0F6
        Validity
            Not Before: Mar 29 04:26:21 2025 GMT
            Not After : Apr  5 04:26:21 2025 GMT
        Subject: CN=67e7766d-60a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:94:31:b2:a1:03:fd:52:7d:27:94:a5:33:34:
                    ed:fd:39:4a:6c:65:a5:5a:02:a7:59:9a:65:b2:91:
                    6f:19:be:36:20:4c:d5:1f:a9:c6:fa:e0:91:43:34:
                    a6:5e:ef:75:ce:23:0c:45:9b:4f:69:20:f2:f1:c0:
                    e3:ea:cc:86:f0:91:02:ce:dd:ee:90:64:fe:b0:9b:
                    ee:ec:0d:b8:85:bf:4d:62:bc:80:02:38:5b:fd:d5:
                    9b:71:6e:da:a6:fa:c5:b4:a5:fa:a0:28:f5:e2:80:
                    a1:b4:e3:86:1d:1c:3e:d0:02:fa:af:40:87:21:0e:
                    9b:94:49:e1:b7:2b:a9:f7:43:7a:9d:9f:e9:12:18:
                    aa:07:6b:7c:16:8b:3d:55:52:2d:ef:7f:b1:2e:a6:
                    fd:79:6d:4f:b5:0b:1e:6e:4d:44:d2:3a:bb:6c:5f:
                    df:5e:82:4c:23:82:46:70:15:6b:a0:38:0a:72:d1:
                    3a:41:7e:bb:f8:d3:af:05:c8:f6:2c:83:8c:19:ca:
                    53:a9:bc:47:15:90:eb:4a:b3:4b:48:03:df:34:f6:
                    20:e0:06:03:04:4f:c2:73:d5:ac:33:d3:5c:7a:89:
                    24:80:01:b6:84:c2:24:b7:e2:8f:73:75:9f:70:0a:
                    70:b2:c1:d7:e8:a0:d5:43:6b:6f:57:d1:fa:2b:3e:
                    6a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:BA:B6:A6:80:2A:9E:5B:3A:00:17:91:76:C7:2B:3C:38:9E:2D:22
            X509v3 Authority Key Identifier:
                keyid:C0:AE:F7:07:7F:52:62:25:67:17:9A:CE:56:AD:5E:E8:CD:64:60:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:4e:4e:10:43:60:ec:3e:47:1e:fb:c7:21:c9:ac:bf:c6:44:
         0c:13:d0:79:4e:22:30:dd:84:06:4d:37:4a:06:c1:43:37:1a:
         5a:6b:65:81:22:8e:b6:1a:02:14:8e:85:de:ed:1f:b4:fe:56:
         3b:40:7e:5c:65:d4:7e:4a:99:5d:ea:0f:03:2f:13:be:8d:1a:
         75:a0:90:45:32:ec:d2:8d:9f:0e:50:57:19:f6:a0:41:42:f3:
         fa:d7:95:d2:3b:ea:d0:cc:d3:b3:3a:92:cb:ec:81:99:c9:0e:
         11:34:bf:55:ba:5e:0a:b1:72:40:06:b9:96:6e:a2:97:2e:2c:
         18:cd:2b:9c:dd:37:25:e1:a8:0a:4b:da:2a:0e:aa:60:8b:40:
         4a:f7:c8:9a:34:82:c1:ee:65:8b:8a:b5:89:f5:80:85:e8:69:
         2b:6b:55:ae:56:24:5a:16:de:9e:71:27:7a:3e:f5:11:ab:db:
         b6:c9:55:f7:9d:60:37:2f:b9:9a:17:9b:b8:e7:11:2f:8e:ce:
         36:c7:27:35:f8:47:63:51:6c:db:48:01:a3:9c:d2:b7:c2:76:
         78:90:6c:7d:65:95:9f:19:eb:76:af:04:fd:0e:80:96:34:18:
         ae:35:cb:7f:ab:0f:f8:d7:f8:65:96:b8:99:cd:d3:42:6d:47:
         07:8c:67:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:00:44 2025 by rpki-client