Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft
File:                     0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft (raw, json)
Hash identifier:          ReQVEFEf8top5Z0SdifbJ1VKMkd1656/n9U60XzRqr0=
Subject key identifier:   07:01:46:A3:11:62:8B:F9:D7:3C:06:78:32:3E:38:17:6A:A2:5E:8A
Authority key identifier: D0:94:D2:47:14:35:2E:0E:BC:D3:F8:82:75:23:28:27:BC:6A:C8:90
Certificate issuer:       /CN=A9123E38/serialNumber=D094D24714352E0EBCD3F88275232827BC6AC890
Certificate serial:       0A71
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft
Manifest number:          0A71
Signing time:             Fri 31 Jan 2025 16:42:46 +0000
Manifest this update:     Fri 31 Jan 2025 16:42:46 +0000
Manifest next update:     Fri 07 Feb 2025 16:42:46 +0000
Files and hashes:         1: 0JTSRxQ1Lg680_iCdSMoJ7xqyJA.crl (hash: V/KHwqNJdI9WW90HjPFM3eEWL4rwLftKINnLXeW432Q=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2673 (0xa71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123E38/serialNumber=D094D24714352E0EBCD3F88275232827BC6AC890
        Validity
            Not Before: Jan 31 16:42:46 2025 GMT
            Not After : Feb  7 16:42:46 2025 GMT
        Subject: CN=679cfd86-c101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:58:72:40:4e:22:c1:b4:af:a8:0b:cd:93:c6:
                    17:d7:c7:77:a1:c2:6d:d4:27:56:c5:61:ce:b9:39:
                    a6:18:42:fd:76:72:80:a8:eb:4a:ef:87:7e:1f:69:
                    74:0c:5c:b1:40:ad:72:57:84:b8:fe:66:98:e2:11:
                    c4:4a:17:25:9d:e0:79:33:96:96:c7:ab:1a:f1:cb:
                    34:73:16:df:b3:03:97:fb:26:ea:ef:03:99:16:d8:
                    e8:14:e1:be:63:47:d1:a5:1f:3e:75:d7:6f:03:e3:
                    7e:97:92:26:53:8c:19:b0:d6:8e:2f:6a:b9:3e:fa:
                    c3:5c:1c:67:aa:29:b8:e9:90:29:2d:4b:f6:81:39:
                    36:f7:45:17:9a:24:3b:b8:35:65:74:32:58:68:cd:
                    a9:4b:a4:61:c4:de:aa:b0:ad:f4:3f:c6:79:4d:dc:
                    2a:03:d3:04:e7:45:f0:bb:e1:6c:91:03:50:a4:5a:
                    56:a0:5a:cf:7d:58:be:be:6e:5d:c1:8e:cf:6c:84:
                    ee:96:35:40:78:23:11:1b:cb:1a:05:e3:0a:18:31:
                    2c:8a:21:f1:fd:91:41:48:3a:d0:32:09:6e:de:4c:
                    b8:e9:88:db:28:13:cf:a8:94:92:dc:10:6e:b2:20:
                    6e:26:8a:54:f2:ea:8f:c6:20:a9:0b:ad:ea:c6:d8:
                    87:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:01:46:A3:11:62:8B:F9:D7:3C:06:78:32:3E:38:17:6A:A2:5E:8A
            X509v3 Authority Key Identifier:
                keyid:D0:94:D2:47:14:35:2E:0E:BC:D3:F8:82:75:23:28:27:BC:6A:C8:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:df:e9:08:42:d3:7b:67:f9:7e:d5:eb:7d:90:0b:bd:8a:47:
         09:53:ba:4b:cc:01:4f:af:d3:c3:3b:d9:25:04:e7:13:bf:55:
         07:e9:c5:ac:20:5d:47:e2:f1:36:03:ef:03:14:6d:ed:b7:e5:
         f1:fc:d8:8c:13:a4:e1:5f:8f:fd:a1:61:3d:d5:ba:1e:c0:66:
         81:34:ba:bf:cc:80:15:49:42:d9:06:dd:6a:3f:4c:09:5a:85:
         40:d0:81:11:e4:4b:2a:16:14:4b:dc:6e:c2:1a:b8:ac:74:e6:
         5a:72:4e:2b:f2:12:ed:b4:4a:94:33:4f:d1:63:1f:7a:8b:bf:
         27:3f:27:84:d7:5b:74:86:92:ff:29:78:b8:a5:fc:cd:5a:bf:
         4e:71:7c:21:3f:80:bc:63:b7:08:85:06:90:1c:6b:30:5b:53:
         7e:d5:8a:d6:0c:97:fa:61:ad:d6:b6:c9:45:3d:6b:4a:76:87:
         76:e6:8e:3f:07:db:2e:3a:a2:fa:f9:87:31:ab:3d:9b:ab:3f:
         dc:18:8b:d7:db:7d:e3:f7:31:63:c1:e2:e8:b9:5f:1f:11:02:
         7a:1f:0a:23:2b:c7:65:3d:29:ba:91:b3:77:e3:9d:f4:58:63:
         8a:03:a9:c3:b2:8e:e6:95:45:31:e3:f8:85:d3:3a:34:2d:78:
         e2:30:d5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----