Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft
File:                     RMCz5V6PTVgxhgXnITScArKJwv0.mft (raw, json)
Hash identifier:          5mGJ6ZlTpatyVM/uXMD3uqH/mwjCNg07zgqeRJ6ZC7U=
Subject key identifier:   9C:FB:90:F3:49:6B:39:33:89:6E:60:C6:08:5F:CE:CF:7C:73:C5:81
Authority key identifier: 44:C0:B3:E5:5E:8F:4D:58:31:86:05:E7:21:34:9C:02:B2:89:C2:FD
Certificate issuer:       /CN=A91167F7/serialNumber=44C0B3E55E8F4D58318605E721349C02B289C2FD
Certificate serial:       069E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RMCz5V6PTVgxhgXnITScArKJwv0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft
Manifest number:          0699
Signing time:             Thu 30 Jan 2025 22:11:32 +0000
Manifest this update:     Thu 30 Jan 2025 22:11:32 +0000
Manifest next update:     Thu 06 Feb 2025 22:11:32 +0000
Files and hashes:         1: RMCz5V6PTVgxhgXnITScArKJwv0.crl (hash: Liz1bOmc8tv3VYeGriWHzam9mesqem+5Ja38CsdWcPw=)
                          2: 980A0D7254B511EBAC30E864C4F9AE02.roa (hash: PrgqmGPVCZutr73KuPF9z7k4L5rKkcCQ9HWUA608bqU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1694 (0x69e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91167F7/serialNumber=44C0B3E55E8F4D58318605E721349C02B289C2FD
        Validity
            Not Before: Jan 30 22:11:32 2025 GMT
            Not After : Feb  6 22:11:32 2025 GMT
        Subject: CN=679bf914-4edb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5c:df:9b:5f:4c:06:fc:93:1a:62:7d:39:78:
                    21:8d:30:c3:61:c5:d8:3b:f8:48:1a:5d:19:be:17:
                    13:7c:b7:c6:ac:0c:17:20:4c:82:3a:72:b7:ca:02:
                    e4:17:cd:86:f5:08:10:87:95:47:e0:68:0e:d2:f2:
                    3b:bc:88:6c:a8:ff:73:52:ba:f0:c7:53:f0:8a:71:
                    0d:3d:ae:75:cf:c4:81:8b:bf:a8:62:1d:96:c8:78:
                    f7:99:51:15:d5:74:47:6a:4f:fa:e1:4d:dd:68:6d:
                    06:bc:f0:6d:36:e6:12:4a:74:c7:60:f8:e8:d3:41:
                    45:84:47:cd:cf:d2:1c:4a:71:d3:56:d4:d8:46:49:
                    93:bf:96:54:2b:ea:5e:fa:3d:55:26:52:4c:2f:c0:
                    dd:39:4d:b1:a7:40:c9:87:41:93:dd:ad:3a:fa:7d:
                    ea:3f:05:71:60:f1:c2:9a:ee:62:8a:a9:a8:59:8b:
                    ae:57:a1:e3:94:8d:e8:5f:7b:17:c3:bc:a9:26:3c:
                    e9:0b:e5:b2:7d:9a:59:5e:b6:09:eb:f1:71:6b:b6:
                    33:39:1b:b7:f3:3d:e4:e1:f3:e7:5a:a2:cf:3c:54:
                    81:6a:7d:0f:a7:86:4d:f9:ab:5f:04:16:93:e8:40:
                    cf:28:1c:10:1e:7f:6e:f1:b7:1d:17:7f:e1:ef:f7:
                    64:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:FB:90:F3:49:6B:39:33:89:6E:60:C6:08:5F:CE:CF:7C:73:C5:81
            X509v3 Authority Key Identifier:
                keyid:44:C0:B3:E5:5E:8F:4D:58:31:86:05:E7:21:34:9C:02:B2:89:C2:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RMCz5V6PTVgxhgXnITScArKJwv0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:52:f6:2a:3f:f8:61:ad:5e:8a:dd:8f:f8:5b:d0:e1:33:06:
         fc:74:97:f4:50:e8:af:9e:f5:4d:44:d0:b2:ba:d8:53:92:92:
         ec:f7:39:6d:9b:81:81:d2:b0:2c:bd:17:bb:a7:f6:f5:69:5b:
         9f:87:d0:0d:15:ea:84:e0:39:b9:18:7f:3a:5a:48:41:96:18:
         bc:b1:2c:d3:3b:71:b5:53:30:c3:a3:73:a0:d1:d3:f7:e6:bb:
         43:50:e1:cd:0b:d8:72:a2:af:68:ef:52:f6:35:d5:fe:a9:c2:
         2e:92:fb:24:cd:9e:4d:e1:9c:bf:d5:7e:cd:eb:e1:49:fa:37:
         35:84:e7:84:00:25:23:0e:01:ef:a1:a6:72:be:86:e8:c9:69:
         1a:95:76:d7:7b:2b:7c:e4:2a:bc:86:7f:2f:6d:ce:e5:f5:fa:
         ee:39:6c:77:8a:de:d2:6b:b2:36:5b:82:34:67:89:b2:83:9e:
         c2:76:1d:d4:1c:e8:4c:93:f2:b2:1d:f9:34:1d:90:03:7b:61:
         77:8e:fd:44:dc:f2:61:0e:4d:98:25:8f:91:89:4f:f5:28:07:
         31:1c:07:7d:2c:e4:ea:97:0a:11:e2:a1:89:fd:79:e1:4a:19:
         71:a9:a1:62:af:13:c0:e6:e2:de:5c:8b:dd:70:0c:fc:4d:42:
         fc:6a:a7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----