Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft
File:                     Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft (raw, json)
Hash identifier:          NhnPqYQDo2tG3lY1d+ED7gMwx7hz7rOiOZDY+aZgzFE=
Subject key identifier:   CA:03:76:0E:39:B0:FE:7A:7F:69:C3:76:24:28:EF:E7:61:12:27:A2
Authority key identifier: 42:FE:F3:31:74:1A:54:D5:A0:AE:75:53:10:8D:4D:2D:32:B0:57:B0
Certificate issuer:       /CN=A9113B62/serialNumber=42FEF331741A54D5A0AE7553108D4D2D32B057B0
Certificate serial:       14
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft
Manifest number:          13
Signing time:             Fri 31 Jan 2025 07:04:54 +0000
Manifest this update:     Fri 31 Jan 2025 07:04:53 +0000
Manifest next update:     Fri 07 Feb 2025 07:04:53 +0000
Files and hashes:         1: Qv7zMXQaVNWgrnVTEI1NLTKwV7A.crl (hash: dPcre6rx+zKEiY9ch+ixgEsXLt2BOr7dAyVoH+WC2dE=)
                          2: 01238706C86211EFBDCCC22AC4F9AE02.roa (hash: sqsd36HvdOtJGpobxnch2UziqlMaZAChQP7HevqvsWs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113B62/serialNumber=42FEF331741A54D5A0AE7553108D4D2D32B057B0
        Validity
            Not Before: Jan 31 07:04:53 2025 GMT
            Not After : Feb  7 07:04:53 2025 GMT
        Subject: CN=679c7616-6a6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:25:cf:90:7e:e8:8c:d1:4a:67:71:2c:27:71:
                    cc:d2:1d:dd:8a:a1:4f:e8:7e:b9:1d:ed:fe:10:d8:
                    dc:28:dd:ab:0e:ed:ad:4b:5b:e3:65:a0:3b:93:55:
                    44:ae:eb:85:6d:bc:e4:4e:4b:07:4f:d7:de:a3:48:
                    0f:88:eb:d7:e7:8e:40:c3:cb:29:18:7c:43:68:8a:
                    99:bc:5f:66:6a:52:1a:1a:44:fc:3f:17:32:ad:97:
                    6d:d2:7a:35:7d:93:ad:5d:0b:02:ec:6c:cc:a5:2f:
                    be:e5:4e:6c:81:b6:f1:f5:71:69:65:f5:78:39:00:
                    90:ec:33:92:e2:23:db:34:5a:58:5c:8d:66:11:23:
                    a9:db:b5:d5:86:4e:08:7f:5a:c3:74:cf:fc:f7:1e:
                    7e:fb:81:9e:dc:1c:98:78:e5:3d:54:d9:12:b7:bf:
                    81:ab:b9:59:1c:af:16:fb:5c:4d:90:77:49:4f:fe:
                    2f:66:9d:0e:40:c8:da:42:03:02:56:0c:ad:5f:d6:
                    eb:1e:82:c4:21:43:80:55:ed:4d:60:ff:0a:22:2b:
                    60:09:d2:d5:0c:3f:93:af:84:9b:b1:df:5f:b3:8f:
                    17:8a:ef:d6:25:04:cf:eb:71:6e:b6:16:83:a0:aa:
                    e4:e5:5d:93:bb:93:62:99:81:2a:61:de:90:0f:23:
                    e5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:03:76:0E:39:B0:FE:7A:7F:69:C3:76:24:28:EF:E7:61:12:27:A2
            X509v3 Authority Key Identifier:
                keyid:42:FE:F3:31:74:1A:54:D5:A0:AE:75:53:10:8D:4D:2D:32:B0:57:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:e8:97:09:66:d8:8e:ff:9c:5f:d4:e3:5b:26:81:20:0c:08:
         aa:5f:2c:3f:40:c8:e1:63:37:1c:93:b1:7c:0c:a2:be:32:a1:
         a0:44:f1:00:fc:54:ff:13:0e:f3:96:7c:8c:c6:d2:82:f7:36:
         64:7e:c8:a4:d5:c6:48:77:90:11:96:0b:4a:9f:eb:bb:de:7a:
         c0:55:fc:c4:d5:13:47:ae:c1:ad:70:45:07:de:2c:93:9f:ee:
         6b:b2:7f:39:83:fa:60:03:89:79:02:cc:fc:ea:8b:b0:7e:65:
         bd:0e:bd:77:d8:49:d6:36:11:0c:ec:83:a1:4a:96:6a:14:d4:
         68:00:8c:f2:dc:a3:d4:40:36:78:ec:9a:68:1f:55:e8:58:62:
         bc:4d:d6:d5:37:63:29:a7:29:50:a3:0d:1d:b5:87:e4:e1:a5:
         89:78:ce:00:8c:8a:18:c7:32:bf:17:98:0c:42:47:6d:82:08:
         b0:04:27:39:99:11:b0:cf:91:8e:43:cb:8b:87:74:8b:3a:dd:
         c8:b4:89:34:7e:eb:6c:b0:48:44:8b:3c:00:dc:c5:99:01:01:
         60:82:14:2f:94:2a:25:eb:6c:96:58:55:97:fa:85:96:c3:66:
         60:e9:60:72:87:78:83:88:6b:01:75:0a:0c:8d:e7:9a:d2:e8:
         4c:c1:a6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----