Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/bc5S-aIoy_bzDNVdQzhNEmhIe2U.mft
File:                     bc5S-aIoy_bzDNVdQzhNEmhIe2U.mft (raw, json)
Hash identifier:          2wfYnoHOx4dCIH36m4DbTvSsMA3gAl8qSZ+oHmSr2MU=
Subject key identifier:   2A:10:59:4F:D8:21:31:BD:9B:94:6D:36:37:29:3D:B3:67:1D:0E:4A
Authority key identifier: 6D:CE:52:F9:A2:28:CB:F6:F3:0C:D5:5D:43:38:4D:12:68:48:7B:65
Certificate issuer:       /CN=A91240E6/serialNumber=6DCE52F9A228CBF6F30CD55D43384D1268487B65
Certificate serial:       25DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bc5S-aIoy_bzDNVdQzhNEmhIe2U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/bc5S-aIoy_bzDNVdQzhNEmhIe2U.mft
Manifest number:          25C6
Signing time:             Fri 31 Jan 2025 15:43:44 +0000
Manifest this update:     Fri 31 Jan 2025 15:43:43 +0000
Manifest next update:     Fri 07 Feb 2025 15:43:43 +0000
Files and hashes:         1: bc5S-aIoy_bzDNVdQzhNEmhIe2U.crl (hash: 1Au0hT4D9aprfTvzGJkCMNG70e0DgG8n9QNfeMd61qQ=)
                          2: 8A721F4EB10C11E5BB6B2A16C4F9AE02.roa (hash: mvyjt+3dRIE1/Krz/XL4fNVu3c2fcm82NTuO/MfHBcQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9695 (0x25df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91240E6/serialNumber=6DCE52F9A228CBF6F30CD55D43384D1268487B65
        Validity
            Not Before: Jan 31 15:43:43 2025 GMT
            Not After : Feb  7 15:43:43 2025 GMT
        Subject: CN=679cefb0-a157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f8:b8:14:00:b9:4c:29:43:19:21:fa:f7:4a:
                    df:bd:0b:35:02:14:62:9f:7b:2c:db:0e:c2:13:cd:
                    26:07:35:f2:d5:97:42:da:ec:7d:ef:bf:e6:df:7a:
                    39:1e:24:86:28:b6:62:d6:f1:c7:05:4c:aa:d6:b6:
                    df:8b:7f:9e:c2:3c:ce:a7:2e:18:d6:3e:8b:63:39:
                    36:4c:c0:fb:f0:0a:8d:c8:a2:52:8f:26:b2:d6:6b:
                    a4:83:b4:d6:7a:c2:1c:02:cc:41:f5:3f:66:1a:40:
                    62:c4:d0:d5:09:bb:a8:4c:59:22:fa:f6:4f:b5:8d:
                    88:6b:1e:be:30:7b:7d:ac:5a:ec:fc:f8:5e:60:71:
                    1d:d4:8c:9d:79:25:67:43:c6:5e:1a:79:b5:6a:c0:
                    78:96:fc:27:0b:d9:f7:eb:64:ba:c9:46:14:1d:a0:
                    83:7a:f3:bc:6d:16:a5:4a:31:cc:1c:20:0c:24:df:
                    02:49:23:02:b2:75:f6:48:fd:27:fa:00:7f:47:5a:
                    ea:42:e6:0e:88:63:4d:33:90:26:a3:c0:b3:c5:c0:
                    e9:38:a0:2c:de:c7:a5:b7:50:15:98:f5:ea:5e:f2:
                    02:4c:11:40:38:77:05:4c:4d:88:8d:3b:d6:be:d9:
                    47:2f:00:d6:f9:38:73:9f:9e:cb:b6:00:f5:26:90:
                    a5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:10:59:4F:D8:21:31:BD:9B:94:6D:36:37:29:3D:B3:67:1D:0E:4A
            X509v3 Authority Key Identifier:
                keyid:6D:CE:52:F9:A2:28:CB:F6:F3:0C:D5:5D:43:38:4D:12:68:48:7B:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/bc5S-aIoy_bzDNVdQzhNEmhIe2U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bc5S-aIoy_bzDNVdQzhNEmhIe2U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/bc5S-aIoy_bzDNVdQzhNEmhIe2U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:c6:54:83:cf:63:0d:d0:96:dc:b3:9e:7a:9f:42:18:88:7a:
         bb:e3:76:a2:8f:3c:89:6c:ab:e0:bf:71:90:bf:97:32:6f:50:
         77:80:62:88:6c:2e:36:5f:90:5a:2c:fb:e5:86:8a:e4:ca:e8:
         00:86:65:20:a4:40:4b:88:8e:15:c2:0f:6d:f3:5a:a9:4f:48:
         0c:56:75:a1:87:44:99:0a:d6:b3:0c:ae:fa:40:fa:ba:f0:d4:
         3c:3d:e3:87:2e:db:7a:2e:94:70:bd:2f:96:a5:1e:cf:3f:68:
         1f:8d:22:f5:82:52:bd:dc:65:00:b6:d3:84:b9:9c:e0:e2:06:
         86:63:57:6e:a4:6e:c0:03:f7:a5:62:70:c1:2b:14:48:55:7f:
         38:0b:19:f8:6f:90:96:de:a7:4b:a3:87:c7:65:ed:bb:a1:d8:
         58:bf:fa:57:54:b5:2c:86:2c:22:31:ef:9b:c0:13:62:d4:f4:
         35:59:74:99:59:89:2f:f7:d8:e2:f8:65:61:8a:cc:10:b7:4c:
         8c:e3:97:81:a8:4b:76:c6:75:ea:07:a1:48:9b:5a:79:a0:24:
         f6:ac:be:bd:71:ed:a5:12:6b:35:29:f7:7d:16:8e:12:07:22:
         1d:86:bd:51:45:13:4b:e9:d2:2a:66:c9:54:82:cc:64:3f:5b:
         e3:23:fd:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----