Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft
File:                     tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft (raw, json)
Hash identifier:          sqWwqot1EpJMAR93oReC2r+TOD5RaVcAfP4gW9rSd7k=
Subject key identifier:   46:4D:A3:BA:71:48:09:46:71:53:74:85:64:67:67:1C:09:0A:FB:7A
Authority key identifier: B6:6A:92:77:0F:98:ED:67:59:C8:E4:57:E8:F0:3F:10:4D:97:56:06
Certificate issuer:       /CN=A91126F4/serialNumber=B66A92770F98ED6759C8E457E8F03F104D975606
Certificate serial:       0199
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmqSdw-Y7WdZyORX6PA_EE2XVgY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft
Manifest number:          0195
Signing time:             Fri 31 Jan 2025 02:44:36 +0000
Manifest this update:     Fri 31 Jan 2025 02:44:36 +0000
Manifest next update:     Fri 07 Feb 2025 02:44:36 +0000
Files and hashes:         1: tmqSdw-Y7WdZyORX6PA_EE2XVgY.crl (hash: agUBIRzI6MZhbXFJJQGZggjHuBZNwGNkEhffoKQO40M=)
                          2: 0D086D9476BA11EDB6CB335CC4F9AE02.roa (hash: Anttd8KClIIq+ymDx+NA0obcuq7QmsU2Z4tCY+1upuQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 409 (0x199)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91126F4/serialNumber=B66A92770F98ED6759C8E457E8F03F104D975606
        Validity
            Not Before: Jan 31 02:44:36 2025 GMT
            Not After : Feb  7 02:44:36 2025 GMT
        Subject: CN=679c3914-be29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2d:a1:98:6a:f5:e1:25:33:c0:c9:ad:2f:fc:
                    de:0e:80:e0:56:3c:16:6e:35:c1:06:38:8f:88:b2:
                    f7:1a:9a:8f:b6:ee:c2:ad:37:03:cf:42:29:6e:00:
                    11:38:43:10:ef:43:94:62:8d:5b:54:84:8e:14:46:
                    4f:e9:e4:aa:9c:61:70:ea:e3:32:18:ec:ba:32:99:
                    b6:7a:2c:9d:a1:05:ee:40:aa:18:39:84:04:6f:8e:
                    3f:b8:fb:a5:94:65:66:00:33:bb:fa:af:83:58:58:
                    dc:61:63:8e:98:bb:09:a6:35:d7:25:ce:61:b1:a1:
                    95:67:b1:1f:3e:1b:b6:08:94:2f:f5:75:a3:63:51:
                    a1:7f:f9:99:e9:cc:be:71:c7:f6:3d:7e:f1:5f:b9:
                    9b:b1:a2:3f:d6:aa:b2:f7:a4:c6:a1:58:d7:72:ee:
                    5d:9c:f9:ef:95:ed:8b:93:76:e8:46:7d:23:f7:80:
                    78:1b:7b:d6:98:3c:72:fa:68:ff:8d:c8:ab:4f:57:
                    4f:8e:ab:ce:be:20:fe:33:6b:d0:08:e6:f1:30:3a:
                    0e:06:21:23:71:e4:46:b9:b3:77:f1:fd:c9:5d:99:
                    88:94:7f:48:65:4e:92:56:52:20:5e:07:32:2c:bb:
                    cf:e5:26:dd:ae:08:25:37:ac:63:47:ed:8e:13:cd:
                    51:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:4D:A3:BA:71:48:09:46:71:53:74:85:64:67:67:1C:09:0A:FB:7A
            X509v3 Authority Key Identifier:
                keyid:B6:6A:92:77:0F:98:ED:67:59:C8:E4:57:E8:F0:3F:10:4D:97:56:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmqSdw-Y7WdZyORX6PA_EE2XVgY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:7a:d2:4f:1c:8e:d6:67:ba:2f:01:47:f2:40:1a:4e:50:61:
         b4:0d:eb:26:cb:ae:c3:19:07:dc:ce:e4:0b:e4:ee:b4:c4:a9:
         02:a4:6e:fb:3b:5b:2f:04:af:80:7f:28:99:72:5d:6a:28:c3:
         fb:6f:c2:39:21:fb:8e:73:7e:13:6b:61:0a:69:88:bc:46:5b:
         cd:bb:67:42:b6:10:38:a2:27:80:4c:74:e2:ce:d5:53:e7:d7:
         ce:b8:94:47:7f:7c:dd:16:bf:6a:86:87:0f:14:57:d0:03:52:
         9b:3c:db:93:89:fc:65:67:76:ec:1f:35:c5:86:c0:6b:1f:fb:
         3e:ce:fc:4b:92:88:6c:93:61:c8:08:53:1c:f1:20:41:7d:18:
         1a:9d:c2:3f:ae:84:3a:96:a1:87:e1:c8:a4:c1:f6:1a:11:7f:
         65:ce:13:a0:f6:f2:b5:73:8e:d7:7a:6a:b4:98:13:3a:4d:2f:
         ce:e0:89:08:2a:8f:76:9b:dc:f7:37:20:cf:da:87:0a:84:4e:
         f4:e1:fa:cf:e8:33:ba:aa:84:84:73:9e:18:a6:71:6f:60:b5:
         54:84:47:da:6c:71:83:ce:cd:96:f1:b6:bb:e1:39:5d:44:fb:
         b1:38:1f:b8:d8:0d:79:35:fd:9d:b7:74:86:3a:fd:cc:bc:d2:
         3f:4f:13:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----