Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.mft
File:                     QbMaaMknik1EdI4t-MasqBV47LU.mft (raw, json)
Hash identifier:          FBq9y8JZrNLbQe6LeDG8fXAzqK+5Y8uId/5eL7sJVQ0=
Subject key identifier:   8D:18:32:EF:DD:F2:4A:CE:1E:80:8B:7A:E7:B0:A8:82:77:6D:47:14
Authority key identifier: 41:B3:1A:68:C9:27:8A:4D:44:74:8E:2D:F8:C6:AC:A8:15:78:EC:B5
Certificate issuer:       /CN=A9120A29/serialNumber=41B31A68C9278A4D44748E2DF8C6ACA81578ECB5
Certificate serial:       0A97
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbMaaMknik1EdI4t-MasqBV47LU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.mft
Manifest number:          0A91
Signing time:             Thu 30 Jan 2025 19:39:32 +0000
Manifest this update:     Thu 30 Jan 2025 19:39:32 +0000
Manifest next update:     Thu 06 Feb 2025 19:39:32 +0000
Files and hashes:         1: QbMaaMknik1EdI4t-MasqBV47LU.crl (hash: qqqfzY4SYSKXC/XX2kqix7c1xk+RSmq8qo+RvtQj5fI=)
                          2: 73A346A24D5D11EAA811C368C4F9AE02.roa (hash: r+qFQ3fN+c4Grex+TON5FzY+8r6Nkc1WSkFRkqt8yC8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2711 (0xa97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120A29/serialNumber=41B31A68C9278A4D44748E2DF8C6ACA81578ECB5
        Validity
            Not Before: Jan 30 19:39:32 2025 GMT
            Not After : Feb  6 19:39:32 2025 GMT
        Subject: CN=679bd574-519f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4d:7b:e6:24:b4:9b:cb:6a:dc:63:8b:4c:38:
                    ea:3d:88:00:37:20:ed:fc:7c:e9:e9:9a:ab:ae:1b:
                    25:7a:ad:94:c9:e2:4f:6f:76:05:42:14:da:da:3c:
                    23:27:db:1e:bb:59:92:cf:60:d9:35:c4:3f:68:f8:
                    42:ae:a2:b5:33:ae:f4:51:5e:e5:f9:ae:95:37:e9:
                    80:13:5b:f4:28:b7:20:6e:e3:c2:97:4e:2a:f9:33:
                    63:aa:14:6a:ed:27:bb:e7:e6:17:72:0e:74:5f:3e:
                    1e:43:ca:b8:87:07:04:a9:05:05:7f:dd:f6:7d:74:
                    ff:10:e7:80:db:41:b0:fe:cb:7f:1b:8a:28:da:1b:
                    9c:0e:32:3c:11:5e:ca:0a:6d:eb:13:84:67:6f:a5:
                    17:c1:49:4c:bb:99:7c:89:75:e9:f2:f5:02:f0:e6:
                    bb:b3:1e:55:e2:44:c0:07:9b:86:04:96:06:f6:f3:
                    ec:2e:23:54:e9:ff:54:b5:4f:ce:9a:d1:5e:bf:13:
                    45:15:fa:89:f0:c4:44:85:8d:04:35:69:8d:56:7f:
                    de:fb:23:f8:1e:6c:51:07:32:a5:ab:2d:6c:f9:f1:
                    30:53:5d:3d:1f:48:9b:cd:c3:0c:8f:7c:51:74:22:
                    57:51:06:d5:d2:f7:5a:ec:b8:14:4d:68:d4:ad:87:
                    6b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:18:32:EF:DD:F2:4A:CE:1E:80:8B:7A:E7:B0:A8:82:77:6D:47:14
            X509v3 Authority Key Identifier:
                keyid:41:B3:1A:68:C9:27:8A:4D:44:74:8E:2D:F8:C6:AC:A8:15:78:EC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbMaaMknik1EdI4t-MasqBV47LU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:14:40:e5:eb:66:67:d6:05:5e:24:dd:53:25:cb:88:89:03:
         8e:a8:02:37:d4:cf:05:e4:1d:f9:fd:a4:44:7b:aa:85:f7:f6:
         d7:9c:e2:03:05:a3:5c:5a:ca:8e:01:7c:5a:90:43:da:ad:c2:
         2a:6e:05:3d:1f:2f:a9:1b:29:d7:a4:0a:9c:6a:3b:74:f3:29:
         ba:7a:91:b7:99:9d:d2:9f:2f:10:d4:c8:b9:91:2c:2d:fd:af:
         7c:2e:49:38:3b:a0:7e:1e:ec:6c:e7:92:81:5d:3b:fc:08:f0:
         14:58:9d:8e:5b:d3:4d:1d:0a:e2:1a:9b:a0:95:aa:d8:c6:2e:
         30:0d:2e:d2:eb:16:19:e8:f7:7f:fd:47:ad:89:8c:73:f3:72:
         67:f0:0b:81:b6:93:72:66:d4:26:4a:91:5d:22:60:33:ab:a4:
         20:ba:23:99:0c:9e:28:b6:d8:77:ff:28:49:f1:dd:5d:7e:a3:
         a4:e2:60:78:5d:c0:2f:c5:2c:19:af:c7:8d:2c:9b:7b:70:9f:
         0e:f3:69:7f:ac:28:3c:92:85:b9:3e:d1:33:eb:2d:dd:d5:67:
         37:90:e2:d3:78:a0:e4:93:64:e1:06:c7:51:9b:2e:64:78:f7:
         67:87:95:f6:9f:c1:08:d3:56:a1:57:44:80:a0:04:6b:bb:e1:
         ef:31:16:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----