Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91288D9/BA59535E425711EA8F838A43C4F9AE02/VB4KZv5g86rAJQLO8eSOYnpi90E.mft
File:                     VB4KZv5g86rAJQLO8eSOYnpi90E.mft (raw, json)
Hash identifier:          3Q4CmNiNM/ctI0JehL0l6UiwjlIe8P2G1Eo1WTos3uo=
Subject key identifier:   21:31:B3:CF:6D:CA:6D:C6:91:C5:11:07:20:17:43:ED:66:00:B2:D1
Authority key identifier: 54:1E:0A:66:FE:60:F3:AA:C0:25:02:CE:F1:E4:8E:62:7A:62:F7:41
Certificate issuer:       /CN=A91288D9/serialNumber=541E0A66FE60F3AAC02502CEF1E48E627A62F741
Certificate serial:       0ACF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB4KZv5g86rAJQLO8eSOYnpi90E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91288D9/BA59535E425711EA8F838A43C4F9AE02/VB4KZv5g86rAJQLO8eSOYnpi90E.mft
Manifest number:          0AC8
Signing time:             Thu 30 Jan 2025 19:30:13 +0000
Manifest this update:     Thu 30 Jan 2025 19:30:12 +0000
Manifest next update:     Thu 06 Feb 2025 19:30:12 +0000
Files and hashes:         1: VB4KZv5g86rAJQLO8eSOYnpi90E.crl (hash: ydK+vD8vyt9zO4WLqS7uXiIKmAqJFMIcRWP9xUjGoXM=)
                          2: E0FCE614425811EAADEA3B45C4F9AE02.roa (hash: uo0CqqDq1LW4OE16oHJh3v7l3D+UDenz/raY8uxIHFA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2767 (0xacf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91288D9/serialNumber=541E0A66FE60F3AAC02502CEF1E48E627A62F741
        Validity
            Not Before: Jan 30 19:30:12 2025 GMT
            Not After : Feb  6 19:30:12 2025 GMT
        Subject: CN=679bd344-77d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:30:0a:2f:aa:0b:c5:95:63:c7:27:04:06:ed:
                    22:72:57:6f:6d:a1:61:d8:ba:cb:7c:bb:d3:df:e1:
                    f2:7a:3b:3d:99:01:ae:c5:0d:50:a9:7b:ea:5e:87:
                    0a:7e:48:17:d7:52:93:7e:c8:11:81:72:94:7f:be:
                    04:36:1f:0d:20:f7:bb:ae:a7:d9:b2:5e:ce:b0:a8:
                    56:0f:92:52:37:93:cd:47:e9:ee:81:c1:59:62:58:
                    e8:f5:4b:1e:43:e9:14:65:f8:1e:13:d8:a2:96:94:
                    04:d3:45:6b:4a:3b:ed:b8:bc:99:96:28:35:c8:d9:
                    c7:94:b7:ed:0d:e2:c7:7e:bb:88:6e:88:cd:52:b7:
                    50:4a:e2:33:fa:2e:17:c9:e6:b3:08:52:3a:98:70:
                    1a:d4:5a:d1:19:86:a4:b1:fd:3f:1a:d2:30:d5:35:
                    24:f6:12:0d:74:b5:e0:6d:a2:dc:3c:3f:8f:c5:12:
                    92:9f:3a:35:61:99:83:38:b8:e5:19:2b:03:df:94:
                    1b:3a:2e:e5:5f:3b:01:5d:6c:79:74:80:fa:4f:18:
                    9d:57:b1:ff:b9:43:f0:ad:1d:1d:0c:1d:a5:ee:34:
                    38:79:ce:78:f4:45:4d:f7:4c:65:9a:4b:a4:9b:56:
                    44:fa:4c:33:7c:40:57:cb:e9:f2:1a:7e:b0:0a:fb:
                    dd:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:31:B3:CF:6D:CA:6D:C6:91:C5:11:07:20:17:43:ED:66:00:B2:D1
            X509v3 Authority Key Identifier:
                keyid:54:1E:0A:66:FE:60:F3:AA:C0:25:02:CE:F1:E4:8E:62:7A:62:F7:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91288D9/BA59535E425711EA8F838A43C4F9AE02/VB4KZv5g86rAJQLO8eSOYnpi90E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB4KZv5g86rAJQLO8eSOYnpi90E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91288D9/BA59535E425711EA8F838A43C4F9AE02/VB4KZv5g86rAJQLO8eSOYnpi90E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:95:84:a2:ca:ce:55:4a:96:bb:12:55:6d:06:b5:0e:a4:06:
         24:87:24:9e:db:2a:e1:05:43:d0:8f:ff:68:16:3b:9c:75:f2:
         f9:a7:a1:c8:9b:d8:df:73:0b:55:ea:d5:2b:39:13:08:04:09:
         32:4c:e4:3f:b2:e4:91:3a:07:a8:85:1d:f7:ef:70:91:0a:42:
         4e:d4:1f:27:fa:c8:31:28:5f:1a:29:56:68:46:a5:30:39:63:
         fe:c1:d8:e2:81:58:7b:3e:d7:92:5f:6e:5d:4e:df:bf:be:65:
         19:4e:86:a3:ed:db:e2:e1:9b:5c:20:e9:89:75:fe:fe:f2:87:
         2f:94:f9:ea:ad:49:96:c7:5d:9e:8d:90:4c:c6:c5:b4:92:07:
         ea:f0:b2:c1:6c:6d:1d:35:af:a6:87:fa:15:a2:fb:ea:2d:c3:
         de:f3:e7:1e:de:98:43:ac:3a:94:29:05:d2:ec:35:b3:35:6e:
         2c:32:68:30:2b:44:20:86:20:1c:c8:d0:00:27:29:dd:9a:82:
         7d:6f:d4:b4:db:9d:11:c7:83:d3:5e:2e:b9:37:8e:9f:14:60:
         67:82:e6:3b:22:ae:09:b9:e0:41:14:63:6d:49:a6:c4:fc:a5:
         f6:97:d3:ab:f5:c2:e1:92:0f:f5:d0:8f:80:b2:26:78:27:a7:
         dc:b4:bd:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----