Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.mft
File:                     WdWIElpxZphzjR0enm2KaNdAmyc.mft (raw, json)
Hash identifier:          1iu2fOnik4DXix/MNdZ/tKQkhinS9ajWTP0auiUqtxI=
Subject key identifier:   59:7C:30:0F:E3:10:3E:CE:DD:59:57:93:E8:25:4E:1C:B7:82:A7:96
Authority key identifier: 59:D5:88:12:5A:71:66:98:73:8D:1D:1E:9E:6D:8A:68:D7:40:9B:27
Certificate issuer:       /CN=A91A27AB/serialNumber=59D588125A716698738D1D1E9E6D8A68D7409B27
Certificate serial:       016B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.mft
Manifest number:          0154
Signing time:             Sat 29 Mar 2025 03:52:45 +0000
Manifest this update:     Sat 29 Mar 2025 03:52:45 +0000
Manifest next update:     Sat 05 Apr 2025 03:52:45 +0000
Files and hashes:         1: WdWIElpxZphzjR0enm2KaNdAmyc.crl (hash: yEgv5Np5CowLsBLEhrFV+6ZoBON7xCuGIupl67Cr/lM=)
                          2: B7D0DFCE4DB711EF8E122A5FC4F9AE02.roa (hash: VKZ9LIexMFkEYGOmEADIBtbRMOmwzVdorGbV8zP17Qg=)
                          3: 6A9F1EFECC1211EEAA175022C4F9AE02.roa (hash: YF4v1PogTCjL1Qjwdf/xOXt8Ti7J50YFk5loWfPyIno=)
                          4: 74444F50490E11EFA7EAAA70C4F9AE02.roa (hash: 2y8wJ1PVjmvj/h6RNUPibqQJhsY3FKf+7tKEQmy95j0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 363 (0x16b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A27AB
        Validity
            Not Before: Mar 29 03:52:45 2025 GMT
            Not After : Apr  5 03:52:45 2025 GMT
        Subject: CN=67e76e8d-3c61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:35:ca:45:51:71:81:e0:a8:77:ea:d6:1e:0c:
                    6f:00:6c:fe:2a:80:7a:40:e4:49:68:57:0e:be:57:
                    9a:61:f6:93:5b:b8:39:73:63:1c:35:14:a1:44:06:
                    f9:58:79:74:3f:e1:1d:b5:58:cd:ce:77:48:e9:5e:
                    6b:bb:c3:f6:b5:11:ac:d6:fb:b2:ae:37:32:cd:82:
                    41:35:c6:87:a8:13:24:15:5c:d6:5b:f9:2f:ca:52:
                    f2:ed:9b:b0:d3:1b:5a:43:d3:be:7d:2e:e1:e6:ec:
                    a2:12:8b:51:c1:88:d4:34:90:9d:af:b0:02:44:1e:
                    a6:17:76:4a:20:9a:e8:00:9e:ff:91:32:73:66:69:
                    ce:3c:81:50:c9:55:01:1b:57:36:b9:0b:6c:65:cf:
                    4c:ec:af:83:59:6d:52:32:5b:bf:5b:98:f1:1c:84:
                    e0:fc:c9:dd:ff:4e:d5:4f:c9:3e:33:4d:d8:fe:87:
                    d3:09:8d:58:cf:89:87:f3:e7:2c:0c:d8:cf:76:40:
                    b6:70:84:7a:61:ec:0f:a9:05:05:5b:75:c4:94:cd:
                    e2:9d:57:55:76:40:cd:6a:50:73:26:14:bc:bd:95:
                    cb:c6:16:ab:9f:ab:78:f6:f0:05:e6:01:8b:c7:9b:
                    a9:ad:32:78:71:eb:af:15:e5:a0:25:aa:6d:ee:53:
                    28:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:7C:30:0F:E3:10:3E:CE:DD:59:57:93:E8:25:4E:1C:B7:82:A7:96
            X509v3 Authority Key Identifier:
                keyid:59:D5:88:12:5A:71:66:98:73:8D:1D:1E:9E:6D:8A:68:D7:40:9B:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:10:34:08:34:05:84:97:19:a8:d2:66:69:75:04:73:4a:8f:
         e8:4a:2a:40:cd:02:b5:f4:e8:ae:45:9b:01:1c:15:21:15:1c:
         a6:ae:a9:52:83:56:78:02:da:64:e1:2c:26:39:18:10:c2:2c:
         45:02:c6:de:60:bb:c5:17:1f:db:0c:cb:70:fe:a5:00:c3:9d:
         b7:c1:0b:2b:0c:31:0f:6c:62:e7:ff:56:20:6c:e1:ab:a0:27:
         69:80:ba:92:3e:47:f2:45:6a:83:91:a0:b1:92:72:30:d2:f5:
         26:5c:82:a3:46:17:f5:d0:db:ba:59:79:af:76:fc:25:e0:a0:
         b6:2d:5f:91:4b:f9:e2:1b:ea:eb:ef:e4:20:bc:59:f1:cb:67:
         c7:3c:ba:32:9d:c7:3c:26:16:60:45:4d:86:97:b2:70:c6:18:
         6d:42:41:0d:00:2b:f5:26:1c:8b:d0:fa:0e:5b:29:0f:33:41:
         d1:01:e6:a7:33:f0:b5:61:e2:33:72:3e:78:3e:00:c0:a4:cb:
         cf:62:02:8d:aa:e1:0c:6b:24:2c:b8:f9:4a:db:a4:4c:2e:19:
         fb:68:de:97:d5:92:0e:8e:83:21:16:d3:bf:d3:ea:47:69:75:
         8a:b4:17:51:c2:39:3a:fa:cc:2d:97:8d:2e:66:d0:75:cf:71:
         4e:2f:bf:0e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTI3QUIxMTAvBgNVBAUTKDU5RDU4ODEyNUE3MTY2OTg3MzhEMUQxRTlFNkQ4QTY4
RDc0MDlCMjcwHhcNMjUwMzI5MDM1MjQ1WhcNMjUwNDA1MDM1MjQ1WjAYMRYwFAYD
VQQDEw02N2U3NmU4ZC0zYzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7zXKRVFxgeCod+rWHgxvAGz+KoB6QORJaFcOvleaYfaTW7g5c2McNRShRAb5
WHl0P+EdtVjNzndI6V5ru8P2tRGs1vuyrjcyzYJBNcaHqBMkFVzWW/kvylLy7Zuw
0xtaQ9O+fS7h5uyiEotRwYjUNJCdr7ACRB6mF3ZKIJroAJ7/kTJzZmnOPIFQyVUB
G1c2uQtsZc9M7K+DWW1SMlu/W5jxHITg/Mnd/07VT8k+M03Y/ofTCY1Yz4mH8+cs
DNjPdkC2cIR6YewPqQUFW3XElM3inVdVdkDNalBzJhS8vZXLxharn6t49vAF5gGL
x5uprTJ4ceuvFeWgJapt7lMoswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFl8MA/j
ED7O3VlXk+glThy3gqeWMB8GA1UdIwQYMBaAFFnViBJacWaYc40dHp5timjXQJsn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjdBQi82RjZFOTgyODMx
MEUxMUVFODg5RkYwM0ZDNEY5QUUwMi9XZFdJRWxweFpwaHpqUjBlbm0yS2FOZEFt
eWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dkV0lFbHB4WnBoempSMGVubTJLYU5kQW15Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MjdBQi82RjZFOTgyODMxMEUxMUVFODg5RkYwM0ZDNEY5QUUwMi9XZFdJRWxweFpw
aHpqUjBlbm0yS2FOZEFteWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCkEDQINAWElxmo0mZpdQRzSo/oSipAzQK19OiuRZsBHBUhFRymrqlS
g1Z4Atpk4SwmORgQwixFAsbeYLvFFx/bDMtw/qUAw523wQsrDDEPbGLn/1YgbOGr
oCdpgLqSPkfyRWqDkaCxknIw0vUmXIKjRhf10Nu6WXmvdvwl4KC2LV+RS/niG+rr
7+QgvFnxy2fHPLoyncc8JhZgRU2Gl7JwxhhtQkENACv1JhyL0PoOWykPM0HRAean
M/C1YeIzcj54PgDApMvPYgKNquEMayQsuPlK26RMLhn7aN6X1ZIOjoMhFtO/0+pH
aXWKtBdRwjk6+swtl40uZtB1z3FOL78O
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:06:26 2025 by rpki-client