Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.mft
File:                     lFmgev60b3mSRf7CNW08usm-2Ig.mft (raw, json)
Hash identifier:          ipbWUfanwfsdnXFxCSdaAM2jgmxJAdbbwPqo4TxViFA=
Subject key identifier:   E1:84:BE:E6:58:83:D5:70:44:4F:B2:5D:EB:DC:B2:DE:ED:FE:88:5D
Authority key identifier: 94:59:A0:7A:FE:B4:6F:79:92:45:FE:C2:35:6D:3C:BA:C9:BE:D8:88
Certificate issuer:       /CN=A912EE4D/serialNumber=9459A07AFEB46F799245FEC2356D3CBAC9BED888
Certificate serial:       E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFmgev60b3mSRf7CNW08usm-2Ig.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.mft
Manifest number:          E3
Signing time:             Fri 31 Jan 2025 04:36:55 +0000
Manifest this update:     Fri 31 Jan 2025 04:36:54 +0000
Manifest next update:     Fri 07 Feb 2025 04:36:54 +0000
Files and hashes:         1: lFmgev60b3mSRf7CNW08usm-2Ig.crl (hash: XVAVb/2BQtyqHM4cNyD5Rag0L2cLtVrgphjWJlrWfxg=)
                          2: 81A901FA8A0411EEA251F746C4F9AE02.roa (hash: JHvhSwDOyCbk05zvE3c35/2oeXE8ikJi+kxwUoPeaf4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 231 (0xe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912EE4D/serialNumber=9459A07AFEB46F799245FEC2356D3CBAC9BED888
        Validity
            Not Before: Jan 31 04:36:54 2025 GMT
            Not After : Feb  7 04:36:54 2025 GMT
        Subject: CN=679c5367-f871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c0:46:84:38:ff:84:47:d3:0e:2e:7f:31:4b:
                    4f:b9:18:f9:ae:2b:4e:16:12:29:f5:55:de:20:db:
                    75:a3:ad:cc:f6:7c:d7:6e:aa:24:ab:60:06:a5:67:
                    0f:13:94:9d:3f:be:85:d5:9c:42:7d:0f:09:78:f2:
                    52:08:47:6a:e6:c1:6c:91:a7:b2:46:c7:db:b1:14:
                    06:ff:d5:4e:ed:47:e4:b1:80:1b:c2:bc:40:04:51:
                    d8:18:72:4c:a3:58:7b:1d:b1:7f:75:81:bc:be:9f:
                    fe:ac:c2:00:1a:24:c5:68:bd:32:ee:1c:a2:b2:96:
                    3e:e0:6e:c1:9f:21:9a:49:45:52:c1:db:a1:82:15:
                    5b:e8:fc:75:02:17:34:5d:8d:c7:77:df:be:a4:a1:
                    e9:93:81:8f:6d:bf:8a:c5:8b:1c:f5:a1:c7:2a:2d:
                    09:1f:ca:7c:75:b4:6c:cb:19:9b:2b:32:db:88:31:
                    58:c3:97:35:d0:4c:f9:0f:34:4e:02:41:9f:5b:38:
                    84:62:47:0e:fb:f9:7d:4c:8e:c9:77:73:80:e3:23:
                    21:db:b3:e2:75:e4:13:99:9a:4b:22:e0:53:43:f5:
                    7d:5d:02:37:f1:2d:0b:fc:08:b1:b6:35:bd:d6:cd:
                    5c:9b:fb:20:b8:2b:93:ee:b5:4c:73:c9:ff:90:0c:
                    5c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:84:BE:E6:58:83:D5:70:44:4F:B2:5D:EB:DC:B2:DE:ED:FE:88:5D
            X509v3 Authority Key Identifier:
                keyid:94:59:A0:7A:FE:B4:6F:79:92:45:FE:C2:35:6D:3C:BA:C9:BE:D8:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFmgev60b3mSRf7CNW08usm-2Ig.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:a5:b5:55:9f:dc:aa:01:b1:c6:e9:8b:e3:c8:f5:20:07:7e:
         de:8b:a5:26:e7:19:26:37:c8:cc:15:0b:53:5e:1b:8a:0c:f2:
         73:19:87:19:17:e7:f7:e3:ae:eb:88:59:65:e8:13:ca:20:9b:
         9f:76:b6:75:9e:24:76:e7:91:46:0b:b5:24:b0:78:07:33:bb:
         e6:b4:5f:ab:19:18:84:d1:56:ee:9e:89:5a:27:60:fa:8b:11:
         15:61:92:d0:f0:62:a6:3b:8a:06:bd:74:f5:22:d0:e8:13:3b:
         51:13:51:be:64:cd:12:21:e3:01:3d:e7:07:88:4e:d3:a1:40:
         72:2e:dc:ae:db:94:34:a3:c7:4d:4f:cf:f7:06:62:15:78:18:
         88:ab:6b:8a:14:bf:03:17:b1:57:96:9e:c5:79:b6:3e:4e:da:
         db:7b:2c:04:b5:21:dd:a2:76:ad:3b:6a:72:c0:69:33:eb:d7:
         bc:db:46:55:df:39:a0:d8:b9:20:b3:81:28:75:4d:da:60:44:
         6b:bb:df:b0:77:c2:4a:d7:f0:ee:fb:64:e8:6f:87:0c:50:a5:
         eb:de:91:e7:1e:1e:87:08:7b:79:7f:bb:a0:6a:19:1d:cc:8c:
         0c:ad:34:dc:13:63:25:3d:60:c4:2c:ea:be:ad:81:f2:ab:f3:
         ae:2f:7c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----