Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft
File:                     9gKmKT9-ZJIHfntNYBYwftEsHDE.mft (raw, json)
Hash identifier:          4AyUVipKXdnJIxTiLxJuRj1fCKY3Ew1HYCeb2FHlqMA=
Subject key identifier:   9D:BB:FE:C5:E1:A8:D0:9D:D4:ED:F7:2A:7D:1E:B1:CE:99:9C:B7:D3
Authority key identifier: F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31
Certificate issuer:       /CN=A911E74F/serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31
Certificate serial:       01A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft
Manifest number:          019E
Signing time:             Fri 31 Jan 2025 02:32:59 +0000
Manifest this update:     Fri 31 Jan 2025 02:32:58 +0000
Manifest next update:     Fri 07 Feb 2025 02:32:58 +0000
Files and hashes:         1: 9gKmKT9-ZJIHfntNYBYwftEsHDE.crl (hash: UrbXoGRzqsuoUf+xEuvXP3yFVvMoZicAFBk2GRad4/4=)
                          2: B695C976638F11EDB427BF33C4F9AE02.roa (hash: KAHZon+NZVrzImj+73HPhmHjCJSfdK1Z3Hco2rg+te8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 417 (0x1a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E74F/serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31
        Validity
            Not Before: Jan 31 02:32:58 2025 GMT
            Not After : Feb  7 02:32:58 2025 GMT
        Subject: CN=679c365b-3d27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5b:78:01:ed:34:0a:83:48:83:d0:4a:fc:53:
                    06:56:83:cc:84:58:68:dc:a3:0c:29:42:13:b1:ac:
                    f9:2a:9a:11:86:78:76:82:f2:61:a2:80:ff:1d:ff:
                    0f:fa:88:29:34:d2:82:64:9e:49:6d:35:e5:d1:53:
                    f5:a7:80:df:ad:07:a2:b2:08:28:0a:0e:e4:bc:f0:
                    8a:82:bd:06:fc:bf:f8:c1:e7:95:22:e5:61:fc:28:
                    ea:35:9b:61:a6:ac:85:db:fb:9d:0b:94:05:b7:8e:
                    14:5a:aa:ff:45:e7:d9:4c:f8:33:67:5f:89:0a:c4:
                    da:69:2c:bb:5a:e9:4e:9c:b6:a0:6c:af:a4:74:d5:
                    4d:be:b5:50:58:e4:8e:4c:75:29:b8:05:2c:98:1e:
                    8c:2e:92:47:45:5b:2f:f5:aa:70:19:dd:7d:01:27:
                    cc:63:53:cc:02:f7:3a:17:a1:8d:df:33:f3:ed:22:
                    0d:4b:e5:8a:fe:09:20:3e:65:4d:c4:83:1c:27:a1:
                    3c:c5:e3:19:dc:6e:97:9e:a6:47:7a:c1:ba:b0:16:
                    c7:b1:f2:14:a3:c0:df:ad:db:93:8a:fa:fd:19:c3:
                    f0:f6:98:0a:6e:b4:e9:d0:40:bc:f6:b8:82:2e:14:
                    f7:87:9b:44:01:9e:16:b0:5e:18:46:da:82:0b:4c:
                    d7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:BB:FE:C5:E1:A8:D0:9D:D4:ED:F7:2A:7D:1E:B1:CE:99:9C:B7:D3
            X509v3 Authority Key Identifier:
                keyid:F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:e2:aa:70:ef:6d:55:0a:98:1f:14:ff:18:85:f6:d4:83:f3:
         ff:80:e4:d2:81:ae:87:c3:96:78:e6:28:70:fb:b9:f0:2e:1b:
         00:8b:5a:20:07:c1:3e:48:1e:de:04:a5:85:82:58:0e:37:8f:
         15:df:97:66:f1:08:57:d8:94:ff:74:d1:a3:c7:32:3c:0f:31:
         c7:3d:61:c0:25:8e:81:5f:b0:a2:ea:37:27:ba:5e:c4:82:06:
         fd:f6:11:ae:0d:db:f5:aa:2e:17:77:85:9c:87:8c:2e:f2:e2:
         91:87:bd:3b:08:a5:6a:74:ad:aa:7e:8c:41:03:af:22:70:84:
         20:5c:93:fb:e5:37:b1:56:7a:9d:8c:d2:84:a3:58:79:86:76:
         ab:e8:ba:f3:b4:59:5f:46:11:3a:d2:0f:0c:02:58:5e:28:eb:
         95:e5:7a:e5:30:68:17:ac:08:1c:84:18:2d:2f:b4:53:78:2b:
         43:48:de:e3:ec:67:a9:aa:91:61:b7:98:51:1e:a4:c6:8a:31:
         05:e9:3e:47:1c:de:8e:25:82:3c:30:19:58:39:e0:f0:7a:83:
         7f:4e:63:d9:0f:5e:26:9a:fb:75:70:bb:0f:2d:d8:7d:95:1c:
         ae:c1:21:4a:4a:1d:18:2f:87:30:81:9f:0c:7e:d8:08:bb:30:
         08:6d:bc:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----