Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911EA9E/66E0C6384A0711EEA1BF5030C4F9AE02/1nV_wyQJ28LyK2LDGbnkTbnqB5k.mft
File:                     1nV_wyQJ28LyK2LDGbnkTbnqB5k.mft (raw, json)
Hash identifier:          zAMSpnq0c6lsiqk6eXQk7WZwuaFFWY80fhTpIN87A4g=
Subject key identifier:   28:8B:05:C0:C3:08:E6:FB:6A:55:51:EF:6B:B4:A2:92:71:BA:68:49
Authority key identifier: D6:75:7F:C3:24:09:DB:C2:F2:2B:62:C3:19:B9:E4:4D:B9:EA:07:99
Certificate issuer:       /CN=A911EA9E/serialNumber=D6757FC32409DBC2F22B62C319B9E44DB9EA0799
Certificate serial:       010D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nV_wyQJ28LyK2LDGbnkTbnqB5k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911EA9E/66E0C6384A0711EEA1BF5030C4F9AE02/1nV_wyQJ28LyK2LDGbnkTbnqB5k.mft
Manifest number:          010A
Signing time:             Fri 31 Jan 2025 04:05:42 +0000
Manifest this update:     Fri 31 Jan 2025 04:05:41 +0000
Manifest next update:     Fri 07 Feb 2025 04:05:41 +0000
Files and hashes:         1: 1nV_wyQJ28LyK2LDGbnkTbnqB5k.crl (hash: qsbey7bF54GDRAUN6I70Sgz2w/ZoeOwWE8U2ntY0Csc=)
                          2: C7C28CAC4A0711EEBE153131C4F9AE02.roa (hash: fULv4mZtsqynbOZKV5hkIaFsTcwy4lbv2N6/j51k2ns=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 269 (0x10d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911EA9E/serialNumber=D6757FC32409DBC2F22B62C319B9E44DB9EA0799
        Validity
            Not Before: Jan 31 04:05:41 2025 GMT
            Not After : Feb  7 04:05:41 2025 GMT
        Subject: CN=679c4c15-9f35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:04:27:65:dc:25:79:3d:bf:65:62:4a:75:15:
                    f7:b8:53:83:c4:15:2f:61:b3:e2:b2:91:16:c1:ba:
                    69:53:b1:45:05:3b:7f:90:dc:37:f0:07:7b:cb:4b:
                    fc:d8:0e:79:31:63:a0:a3:68:89:83:11:5b:54:b7:
                    aa:ab:9f:0d:3c:81:f1:8c:6c:90:4e:4d:1c:42:da:
                    5d:2f:b5:b8:0f:58:15:80:46:d8:77:83:52:0e:d2:
                    81:9f:fb:87:eb:d6:48:a8:b7:77:bd:a3:74:95:aa:
                    7f:0b:a2:a8:ba:a0:f9:98:3f:df:bc:93:0c:0c:a8:
                    9e:d8:98:3b:77:5e:73:45:e2:20:9a:1d:80:5d:65:
                    51:c8:3b:1f:11:04:c2:75:a9:6c:82:59:fa:55:37:
                    f3:35:6a:44:e2:44:14:3b:02:84:7e:2b:33:40:10:
                    4a:1e:0f:fa:98:62:95:34:c6:25:4b:79:10:4f:d1:
                    a1:24:a5:95:c9:cf:91:e4:03:ba:4a:15:4a:e4:08:
                    54:bf:36:b1:d3:7c:ab:d8:2d:24:28:b7:4d:f7:6c:
                    f6:2a:fd:1f:0a:d1:bc:a7:ca:11:43:c1:ec:02:69:
                    27:3b:29:16:72:72:b9:93:41:6b:1a:c9:88:e0:02:
                    d4:de:6f:7e:0c:3b:84:77:5e:2e:4d:9a:43:18:d5:
                    f5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:8B:05:C0:C3:08:E6:FB:6A:55:51:EF:6B:B4:A2:92:71:BA:68:49
            X509v3 Authority Key Identifier:
                keyid:D6:75:7F:C3:24:09:DB:C2:F2:2B:62:C3:19:B9:E4:4D:B9:EA:07:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911EA9E/66E0C6384A0711EEA1BF5030C4F9AE02/1nV_wyQJ28LyK2LDGbnkTbnqB5k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nV_wyQJ28LyK2LDGbnkTbnqB5k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA9E/66E0C6384A0711EEA1BF5030C4F9AE02/1nV_wyQJ28LyK2LDGbnkTbnqB5k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:46:8a:fb:4f:79:d5:c6:0b:75:fd:cc:61:7a:54:ba:8f:6f:
         34:79:86:60:39:bd:49:34:c8:44:a5:78:22:d8:51:91:b7:66:
         e4:ca:04:1f:f5:21:84:ce:d7:e3:b9:cf:80:16:6e:23:16:8d:
         3d:51:79:47:f9:2e:aa:5a:b8:3c:90:d4:1e:5c:f8:ad:1c:2e:
         c4:6b:af:aa:9b:52:d0:78:83:59:db:aa:b0:8d:e6:c7:88:3d:
         ae:11:00:9c:69:49:08:b8:93:35:94:57:d5:eb:67:cc:1a:43:
         85:b4:c0:44:b3:64:f3:58:e0:cc:3a:c0:fc:25:35:a1:c0:ab:
         30:8c:47:c0:4f:d0:17:1b:c6:be:bd:13:f8:3e:be:26:72:cf:
         6a:86:48:66:5f:b0:d1:86:c4:77:16:42:e3:d3:78:f1:d1:f2:
         f8:34:33:88:5b:a2:95:19:22:0c:78:c2:d8:f5:19:09:8e:2d:
         bb:68:b8:ae:68:db:7b:ba:2f:e6:40:a8:ae:d7:af:c6:a2:8d:
         76:62:64:b3:56:e7:93:1b:7b:7a:f2:ec:8f:9c:dd:b8:1c:28:
         9a:a1:7e:7e:4a:a0:af:00:b8:e2:e0:96:83:b7:9f:07:01:56:
         8c:2c:47:67:53:d9:d4:13:e7:18:95:d0:ac:3c:c6:98:f2:6b:
         a2:37:6b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----