Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft
File:                     jPbyYoPglD4X1BKxnKKvLNYNRYc.mft (raw, json)
Hash identifier:          YYfzmgUWGdMGxDgkGeheiXyOQXJ38yC6km5ffTkEhdI=
Subject key identifier:   3A:55:96:44:D6:40:37:2F:B2:34:E0:6B:BF:02:D2:85:46:57:0B:F8
Authority key identifier: 8C:F6:F2:62:83:E0:94:3E:17:D4:12:B1:9C:A2:AF:2C:D6:0D:45:87
Certificate issuer:       /CN=A911B7EB/serialNumber=8CF6F26283E0943E17D412B19CA2AF2CD60D4587
Certificate serial:       09EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPbyYoPglD4X1BKxnKKvLNYNRYc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft
Manifest number:          09DF
Signing time:             Thu 30 Jan 2025 20:02:29 +0000
Manifest this update:     Thu 30 Jan 2025 20:02:28 +0000
Manifest next update:     Thu 06 Feb 2025 20:02:28 +0000
Files and hashes:         1: jPbyYoPglD4X1BKxnKKvLNYNRYc.crl (hash: SLemTK4MecD6dqxaWa3nKZzdTAnD9a0iPqAQ1VjNCqw=)
                          2: 4A074A90E19511EC8AD57C6CC4F9AE02.roa (hash: m/p8bbAHJM24HdYiY9DoNYUeIyo2VNJNxbaHYIEgDWw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2540 (0x9ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B7EB/serialNumber=8CF6F26283E0943E17D412B19CA2AF2CD60D4587
        Validity
            Not Before: Jan 30 20:02:28 2025 GMT
            Not After : Feb  6 20:02:28 2025 GMT
        Subject: CN=679bdad4-ab04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d9:58:97:d0:72:43:2f:a1:e9:b4:b1:f9:3a:
                    1a:34:bc:fb:89:bb:14:66:81:62:59:d5:35:21:dd:
                    a2:56:8a:b5:9c:39:81:c5:f3:d3:dc:cb:21:bf:28:
                    5e:0f:a1:5c:9b:ef:f7:92:e2:dd:31:02:f1:e4:08:
                    99:bf:09:15:e3:3a:12:85:52:80:f4:ad:54:79:d8:
                    39:8d:9e:98:9d:c2:8a:11:5b:3b:a2:0b:c9:f2:9e:
                    f3:ac:aa:cc:75:b1:9c:fb:d8:1b:36:e1:ea:22:f6:
                    58:48:aa:48:c0:63:f4:9a:1c:e0:20:9b:ac:89:e6:
                    d5:20:ca:a3:87:a4:75:89:e5:8b:87:e9:a8:f7:2f:
                    dd:8d:63:8d:55:00:88:07:52:1e:f0:11:ec:ef:6b:
                    9a:07:9e:83:ca:8f:a8:71:89:da:8c:02:93:d8:71:
                    d7:4a:15:42:09:b3:fe:76:a9:86:90:93:54:65:f9:
                    6c:bd:bf:99:49:10:dc:f9:4a:61:2c:68:0c:d2:4a:
                    33:77:b5:e2:97:f6:7a:59:ae:50:a4:f9:d3:ab:83:
                    65:da:e9:4e:1d:ae:97:78:90:e8:c4:aa:88:15:25:
                    89:6a:b8:f6:d9:e3:63:d8:2e:91:ff:55:c9:de:d5:
                    aa:8c:c3:f2:ad:06:2b:bb:47:c4:5d:68:e7:ff:a7:
                    ee:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:55:96:44:D6:40:37:2F:B2:34:E0:6B:BF:02:D2:85:46:57:0B:F8
            X509v3 Authority Key Identifier:
                keyid:8C:F6:F2:62:83:E0:94:3E:17:D4:12:B1:9C:A2:AF:2C:D6:0D:45:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPbyYoPglD4X1BKxnKKvLNYNRYc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:bf:d0:e2:54:ac:cd:d4:57:e7:c7:19:f4:35:0e:cf:f1:da:
         5d:7d:e4:d6:8f:6e:e8:a7:50:a6:73:e2:e1:2a:bc:c3:3d:5c:
         63:68:4d:82:58:2b:22:76:f2:29:4d:a5:c6:20:5d:fa:df:69:
         3d:07:1a:5a:51:82:ae:00:22:66:ee:65:06:64:a5:74:09:ce:
         44:f7:4e:8c:89:da:ca:c2:76:b8:b7:ea:1a:a7:14:cf:6b:d9:
         72:96:1e:72:64:22:a5:cd:6a:db:e9:95:50:6e:1a:f7:4d:62:
         68:e9:c0:fd:01:1a:28:90:d1:b1:49:eb:e7:4f:77:56:1b:59:
         bd:39:aa:f4:01:44:62:af:8f:23:60:e2:de:95:df:df:43:76:
         8e:90:94:8a:93:5a:ae:a4:26:59:c9:a0:d7:d3:4d:dc:14:6a:
         76:00:16:5a:7d:2b:eb:27:46:53:c3:d1:ea:f7:69:d2:7a:b3:
         10:bc:4b:92:a4:66:f7:d9:96:30:17:75:6f:e4:46:48:f7:f2:
         38:02:51:4c:8e:db:71:7b:7e:ae:e5:c4:25:ab:a3:45:d7:44:
         db:2a:65:a4:74:60:12:f2:b6:36:bf:42:66:dd:1e:e8:74:65:
         c3:4c:43:27:f7:01:9c:cd:b9:c4:d0:9d:60:70:a0:13:81:2a:
         2f:b1:6f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----