Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft
File:                     ZfzR8nTT59WOTQyihVjTS2sVLWc.mft (raw, json)
Hash identifier:          96sTXcpAxjq8xIB1EmBmp9oFwaZ+yhkbxB0TrKz+/F8=
Subject key identifier:   37:27:D4:C5:45:4B:75:93:2E:51:3E:BF:17:87:AF:E4:EF:8A:85:D0
Authority key identifier: 65:FC:D1:F2:74:D3:E7:D5:8E:4D:0C:A2:85:58:D3:4B:6B:15:2D:67
Certificate issuer:       /CN=A911F7D0/serialNumber=65FCD1F274D3E7D58E4D0CA28558D34B6B152D67
Certificate serial:       10DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft
Manifest number:          10D5
Signing time:             Fri 31 Jan 2025 17:18:02 +0000
Manifest this update:     Fri 31 Jan 2025 17:18:01 +0000
Manifest next update:     Fri 07 Feb 2025 17:18:01 +0000
Files and hashes:         1: ZfzR8nTT59WOTQyihVjTS2sVLWc.crl (hash: 29wxTdLRmVPhcMHYiJD38k5sb/H+850WUGo2uJZFTe0=)
                          2: 1BFF84B0131611E991379440C4F9AE02.roa (hash: iC6LRZGwf2FGgFxAGczD/XcJVANVhOgDNLJbpYHlxpQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4316 (0x10dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F7D0/serialNumber=65FCD1F274D3E7D58E4D0CA28558D34B6B152D67
        Validity
            Not Before: Jan 31 17:18:01 2025 GMT
            Not After : Feb  7 17:18:01 2025 GMT
        Subject: CN=679d05c9-2835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:51:44:c6:9f:7e:c2:13:5b:e5:56:2c:de:25:
                    72:94:c2:e6:3a:67:12:e6:83:cc:36:05:8c:b9:6b:
                    71:8f:9f:fb:fb:75:3d:3d:ad:f1:2e:a3:67:b6:d0:
                    3c:b8:69:45:26:23:9d:66:ca:b8:f2:b2:f0:23:57:
                    ee:97:31:bb:4e:cd:58:86:0a:1f:74:44:2c:ce:aa:
                    e9:f8:3f:4b:1b:95:ae:97:97:f2:d3:25:d5:24:cf:
                    3b:61:21:94:43:08:e6:a0:45:85:68:28:55:a8:d4:
                    e1:f8:49:c4:55:e0:4c:67:40:f9:4e:f8:b8:38:bc:
                    34:ef:0b:9a:94:86:9b:1e:a1:d6:ee:a8:4d:2a:c8:
                    dd:4a:5f:09:2f:be:b8:15:99:18:0f:0e:d9:2c:db:
                    0d:a2:e8:6c:15:99:f4:63:07:04:1f:83:f8:2b:23:
                    47:45:b9:fc:da:46:c5:80:59:a0:b8:bb:c4:f3:ee:
                    7c:0f:25:90:11:50:c2:ed:26:04:db:1e:09:74:78:
                    2c:b1:e3:18:20:6f:16:c3:06:ae:5b:d7:a6:e6:4e:
                    4e:54:54:0c:85:a5:35:07:79:fa:15:28:17:6f:75:
                    53:2a:e0:1e:e5:cf:7f:e7:48:95:63:ad:b9:5d:77:
                    09:91:aa:e4:c7:cb:8a:72:37:33:62:f4:2d:fa:e0:
                    c9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:27:D4:C5:45:4B:75:93:2E:51:3E:BF:17:87:AF:E4:EF:8A:85:D0
            X509v3 Authority Key Identifier:
                keyid:65:FC:D1:F2:74:D3:E7:D5:8E:4D:0C:A2:85:58:D3:4B:6B:15:2D:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:14:1d:c0:6a:97:08:35:8c:cc:84:1f:28:8a:83:63:9c:56:
         d0:e2:df:73:fe:09:ad:0c:88:72:8e:d3:87:c3:b5:b8:f6:23:
         2a:cc:a2:09:ed:f4:f4:f8:de:b3:a1:b0:70:13:f7:25:ea:69:
         b9:37:0c:6d:57:d9:86:17:30:25:ad:31:7a:75:88:27:14:6b:
         3f:4d:0b:75:6b:57:c4:7c:bc:3b:b7:e2:a5:d7:93:13:2a:a3:
         a9:83:85:66:5b:e5:7b:2b:e1:12:a4:42:00:43:b1:e8:51:92:
         0c:ce:48:50:13:69:19:38:73:7b:d1:6e:9c:c9:b0:5f:1e:ae:
         cb:50:72:52:49:cc:56:dd:1a:d9:e3:6f:f4:0f:78:2d:b9:42:
         82:7c:bb:7a:3d:99:73:20:99:aa:48:39:12:4d:8b:f2:3a:5c:
         9c:fe:12:16:a0:52:c9:78:8e:e7:83:94:21:8d:8d:47:06:4e:
         f3:c9:bf:af:dc:5c:35:db:b7:04:39:b6:f2:24:8c:b8:81:0d:
         26:b7:27:26:4d:a1:3b:da:8e:f2:c0:61:c8:cf:c0:76:63:f8:
         63:82:35:ea:27:73:f0:b8:7f:6d:60:c1:90:2c:4c:b8:fc:15:
         7d:8c:9f:f1:1f:03:17:61:d6:f1:ec:37:d5:1b:0c:34:47:52:
         ea:e9:a0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----