Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft
File:                     aIUqt_JxT89U118KrjBorcOLNcw.mft (raw, json)
Hash identifier:          7hDlqLjQ/Eu2fTlnPazWgGp7iPZx/SwwgUBkOnNCnkU=
Subject key identifier:   F8:A7:3C:61:D9:CE:BE:69:CB:16:87:DC:0A:FF:9C:61:82:E4:18:A8
Authority key identifier: 68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC
Certificate issuer:       /CN=A91187FD/serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC
Certificate serial:       018F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft
Manifest number:          0167
Signing time:             Fri 31 Jan 2025 03:42:36 +0000
Manifest this update:     Fri 31 Jan 2025 03:42:36 +0000
Manifest next update:     Fri 07 Feb 2025 03:42:36 +0000
Files and hashes:         1: aIUqt_JxT89U118KrjBorcOLNcw.crl (hash: fRxAVCWxpoBEoTBP9bPhpDjC0h/41PqH6LZJK4MsFxk=)
                          2: 50F934AEFFCE11EEAF1CA783C4F9AE02.roa (hash: sVvAJAto5nS+PJW2xudvaNZimEOtDLNCZ3HK4HpuOtY=)
                          3: 41BE8C60BF7211EE8D281E83C4F9AE02.roa (hash: EFlPTIDh/flAQJr1anznK2j9MXoucgVjlIwMhZopTcg=)
                          4: F8D5DC60BF7111EE806CB182C4F9AE02.roa (hash: dnFPJnob0iVhfZy+h628YHTmIBu/2rM+XDutXFD80e0=)
                          5: F95B12AEBF7111EE806CB182C4F9AE02.roa (hash: LVpmryw+uYS24nJeG/+qspxNYBu9ZoQZ5h3e0ahfWXo=)
                          6: 8692D090BF7111EE95DFE981C4F9AE02.roa (hash: Wpe5PworCum/nFcap1/E1+zKePOZQIpIAtfCfOVXg7s=)
                          7: 0EE376F8BF7111EEA53E4981C4F9AE02.roa (hash: KHuTzz/kFiU3cRoYtOMYxj6wU6aR+DEFWLsHndFiGX4=)
                          8: 20127C7C120411EF91CB6459C4F9AE02.roa (hash: EGjFAKrOA7ymJav4jaslQmpl/cbPT+voPNs5hCTYUM4=)
                          9: F9CB1E5ABF7111EE806CB182C4F9AE02.roa (hash: pS29Ljdr6W25s2Hduyo4rCqyFsm2/2KQ7prNwHso1r0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 399 (0x18f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91187FD/serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC
        Validity
            Not Before: Jan 31 03:42:36 2025 GMT
            Not After : Feb  7 03:42:36 2025 GMT
        Subject: CN=679c46ac-fcf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:58:51:75:65:1b:64:a8:04:3e:57:f0:b2:61:
                    4f:53:6b:ba:cb:42:ef:77:1e:3b:1d:73:40:d9:00:
                    b2:34:62:0b:5e:ad:68:b2:f7:66:d6:57:15:9a:a6:
                    0a:f5:72:96:bf:64:e3:9b:b8:20:2e:5c:60:f9:46:
                    ad:31:f5:04:73:12:49:ce:16:f3:da:b1:38:90:5f:
                    65:97:1d:86:69:6f:0c:9e:4f:d8:60:d7:2e:5b:1f:
                    43:fd:f6:b9:2b:15:6c:1a:59:de:e9:b2:b1:61:12:
                    50:6b:e8:e6:78:12:0e:c6:aa:69:5c:aa:85:b0:e4:
                    74:1e:2c:5d:51:fb:c2:ac:93:b6:77:6a:3d:28:dd:
                    78:8f:42:ba:0f:98:d1:e4:3e:03:f0:bd:fc:4a:70:
                    cc:a0:78:85:d8:59:40:eb:df:a2:c3:58:26:08:42:
                    ab:20:5a:dd:db:65:90:ed:e0:54:4c:76:f5:f9:4f:
                    69:c9:ca:1c:00:3c:e3:69:03:3c:ac:b7:e8:52:47:
                    02:9d:98:19:5e:78:89:51:7e:42:14:92:60:13:1a:
                    28:53:99:f2:b4:ab:f0:fa:c3:2a:13:ac:8f:b5:4b:
                    95:f7:7c:ea:26:57:23:1a:1c:42:08:b9:14:e7:cb:
                    f4:43:03:77:d3:b4:63:3a:10:bf:a5:8e:e2:0c:c7:
                    62:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:A7:3C:61:D9:CE:BE:69:CB:16:87:DC:0A:FF:9C:61:82:E4:18:A8
            X509v3 Authority Key Identifier:
                keyid:68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:70:e5:58:77:29:fa:02:ea:b9:4f:8d:63:b9:e1:ce:72:75:
         e9:1b:3a:0d:a4:2b:1a:2f:f1:7c:d7:35:97:8b:6a:8c:c3:a9:
         8c:0c:1f:7f:9c:e6:44:f0:b0:4a:aa:77:71:ff:a2:e4:b4:71:
         62:d7:51:93:77:35:e5:53:b8:d1:df:2e:5c:b4:e9:3c:54:14:
         1b:54:66:4c:5e:fc:68:92:d3:f9:10:08:39:70:c6:cd:d1:00:
         08:e3:fc:a1:66:7b:39:92:f5:aa:c5:4d:c5:d8:a6:51:2c:dc:
         15:25:f0:bf:85:1d:98:2d:9d:16:ee:b5:da:df:70:db:db:8c:
         ca:a3:a7:c5:50:14:79:04:8c:c3:ed:43:ac:50:2f:60:e4:f4:
         89:90:55:80:0d:99:8d:0e:27:14:01:97:62:b2:ab:d9:cd:e1:
         88:fd:c9:2e:47:52:46:97:23:73:c9:16:fd:32:ea:c2:01:72:
         a0:c1:d2:4c:dc:10:fa:83:bb:60:03:d5:4c:eb:2d:2a:76:38:
         da:d8:cd:ef:90:40:95:79:4f:5a:a4:2c:85:de:22:0a:8b:e4:
         66:4d:ef:09:89:24:39:d9:3d:15:b2:42:39:8f:da:f0:0e:33:
         d7:29:e1:15:62:ad:fa:fd:fb:33:46:99:0b:7c:98:58:15:9f:
         b1:1e:03:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----