Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft
File:                     u5rRr2kxSy7y9klB8Db94PfMTwI.mft (raw, json)
Hash identifier:          1gKe/Lxvzj7jSMS+w0BUx/ARiDe915YNQwwm+OPwfsM=
Subject key identifier:   E9:E4:05:23:32:D5:E3:67:C9:F8:E1:B6:D8:AC:25:37:D1:B8:C4:60
Authority key identifier: BB:9A:D1:AF:69:31:4B:2E:F2:F6:49:41:F0:36:FD:E0:F7:CC:4F:02
Certificate issuer:       /CN=A911DA8C/serialNumber=BB9AD1AF69314B2EF2F64941F036FDE0F7CC4F02
Certificate serial:       010E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u5rRr2kxSy7y9klB8Db94PfMTwI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft
Manifest number:          010B
Signing time:             Fri 31 Jan 2025 01:28:56 +0000
Manifest this update:     Fri 31 Jan 2025 01:28:56 +0000
Manifest next update:     Fri 07 Feb 2025 01:28:56 +0000
Files and hashes:         1: u5rRr2kxSy7y9klB8Db94PfMTwI.crl (hash: Uo3TGWCMI2oxoMdZv8/U+K92BXwUVMdA6aPwL1oqEcA=)
                          2: B6369EA2521711EE899DAC80C4F9AE02.roa (hash: HmUyjBFHI1+/W084EHPJ3tp/TeXvZpxhICsUCVrwFxo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 270 (0x10e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DA8C/serialNumber=BB9AD1AF69314B2EF2F64941F036FDE0F7CC4F02
        Validity
            Not Before: Jan 31 01:28:56 2025 GMT
            Not After : Feb  7 01:28:56 2025 GMT
        Subject: CN=679c2758-e1df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:99:00:2c:34:98:4e:c4:7c:2d:b0:ca:51:a0:
                    ba:db:83:01:29:cb:bf:b4:b9:fc:66:c4:82:9f:50:
                    a7:98:79:12:21:04:3a:f5:e3:1e:07:65:6b:d3:1d:
                    17:88:e8:7a:de:66:5c:a6:04:eb:58:88:97:fa:b3:
                    5d:6e:4a:9e:70:dd:54:e7:b2:b7:d0:b4:26:0a:96:
                    04:ca:72:4f:ec:d7:6f:a3:bd:37:1c:f5:b2:38:a6:
                    ff:fe:45:90:1d:89:37:c5:44:da:c8:9e:af:2b:3d:
                    04:8e:e8:b3:f4:fb:10:a6:c0:fe:1c:c0:63:24:29:
                    5b:6d:12:33:b8:97:0e:4e:39:e9:30:3c:a1:1e:6e:
                    1b:57:b3:47:51:9c:61:d2:38:ec:d1:73:30:ba:37:
                    51:6a:2d:4a:3a:75:cb:25:79:81:80:cb:cc:4b:d5:
                    03:d1:f9:45:9c:38:d7:0b:68:75:2c:b5:20:e7:e3:
                    7f:b0:a6:38:f5:89:57:de:11:f5:34:88:4f:d8:cf:
                    43:8d:cf:d6:62:52:24:ca:14:7a:10:dd:f5:d4:e8:
                    2a:00:e9:6e:87:f9:ca:42:64:c5:38:74:92:09:9d:
                    97:10:b7:fe:53:9c:b1:23:0d:e2:7c:47:be:9f:c0:
                    a0:17:b0:af:ef:9b:db:ae:56:9f:1f:2c:fd:96:9c:
                    63:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E4:05:23:32:D5:E3:67:C9:F8:E1:B6:D8:AC:25:37:D1:B8:C4:60
            X509v3 Authority Key Identifier:
                keyid:BB:9A:D1:AF:69:31:4B:2E:F2:F6:49:41:F0:36:FD:E0:F7:CC:4F:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u5rRr2kxSy7y9klB8Db94PfMTwI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:7e:03:2d:0a:8e:25:c9:e3:b7:b8:b7:c3:b4:49:92:2d:cc:
         af:1c:18:f3:46:eb:cb:94:ae:7f:8e:37:06:97:83:66:1a:af:
         e6:a4:40:15:a2:f4:68:43:de:4f:2f:17:5c:0c:57:0b:c3:b0:
         ff:87:65:25:61:b2:f6:29:6f:17:b8:7d:67:a0:2e:9e:4e:40:
         34:cd:e2:b3:88:81:8b:69:49:f8:06:e1:6b:83:27:db:33:e2:
         49:84:a6:27:aa:cd:85:a4:de:11:ab:cf:d2:79:06:ca:c4:d5:
         3c:38:4d:da:d5:9e:8f:61:81:44:38:67:d8:98:ab:94:58:d2:
         b5:d3:e1:8a:54:27:f7:74:a6:30:2c:22:6c:f5:6b:85:d8:5e:
         35:64:a3:a3:49:ec:93:02:10:a7:47:bc:61:49:c5:5c:e3:e1:
         8c:86:46:47:86:11:2a:9d:cf:48:2d:8a:71:5b:31:d9:38:90:
         d1:c8:11:62:e6:57:fe:f6:31:78:5c:17:a8:45:11:cb:a8:2b:
         5e:c3:15:e0:71:31:f5:bc:10:11:6f:34:64:c3:18:4e:27:a1:
         0f:26:53:0f:8a:95:68:6d:cc:84:a8:6f:76:50:7e:8d:ca:4d:
         76:24:8b:a4:f8:94:0e:4d:b7:fd:68:26:97:56:f1:8f:d6:47:
         97:9e:3a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----