Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft
File:                     CjScg-ftMh2jsISUxPjwv9u2L3o.mft (raw, json)
Hash identifier:          MPYnDQnsvsfs9IhSFZHh8dYy7Lqt4WsJLxORXlUmuDQ=
Subject key identifier:   68:3E:21:34:C3:09:C6:39:81:7F:08:2F:9E:F9:B7:3E:57:51:FF:2C
Authority key identifier: 0A:34:9C:83:E7:ED:32:1D:A3:B0:84:94:C4:F8:F0:BF:DB:B6:2F:7A
Certificate issuer:       /CN=A91342C5/serialNumber=0A349C83E7ED321DA3B08494C4F8F0BFDBB62F7A
Certificate serial:       0350
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft
Manifest number:          034B
Signing time:             Fri 31 Jan 2025 01:07:13 +0000
Manifest this update:     Fri 31 Jan 2025 01:07:12 +0000
Manifest next update:     Fri 07 Feb 2025 01:07:12 +0000
Files and hashes:         1: CjScg-ftMh2jsISUxPjwv9u2L3o.crl (hash: zLBjs+cw/QblvXXq7RCpl/EASuoowpAQOg6Zvj29A9w=)
                          2: E9F94792A5CC11EC85A86A1FC4F9AE02.roa (hash: L06G5zhFCO9MeNvA+zmysMr9Z+WhY3SxKgFZgoOfL9g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 848 (0x350)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91342C5/serialNumber=0A349C83E7ED321DA3B08494C4F8F0BFDBB62F7A
        Validity
            Not Before: Jan 31 01:07:12 2025 GMT
            Not After : Feb  7 01:07:12 2025 GMT
        Subject: CN=679c2240-e369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c9:d8:7a:74:46:11:b2:67:b7:5c:6e:01:99:
                    0f:10:94:8b:ef:47:8f:7f:f7:a4:77:e1:5b:45:74:
                    4b:7b:14:81:ca:09:aa:98:e9:b8:d1:dc:84:d5:5a:
                    53:6d:73:de:6f:6b:9a:50:12:1d:92:4e:f0:75:3e:
                    8d:b8:ed:5d:3b:aa:f0:7a:dc:a3:8c:49:9f:0b:ec:
                    39:5b:4c:ce:35:67:ec:b7:cc:4a:cf:ee:4b:18:e0:
                    6c:19:33:63:12:df:c9:e0:f1:e6:22:ea:1d:68:3e:
                    5a:3d:6b:7c:a5:0c:c4:19:72:fb:27:3d:a9:83:cf:
                    d1:73:d0:9f:5c:73:df:80:af:e7:25:a5:d3:d8:fe:
                    96:3c:46:ac:8e:9d:75:46:0a:ae:44:0a:c6:be:c5:
                    86:1f:2b:9d:9d:7c:41:7d:af:73:76:3d:34:67:f8:
                    df:8f:87:36:39:14:0b:7d:ea:96:f6:85:d1:db:26:
                    5d:bd:7e:7a:fb:50:45:df:1d:1f:2c:e9:cd:d9:3a:
                    74:1b:08:f8:9c:b5:0e:d7:35:ab:0a:e3:8c:f3:90:
                    dd:b2:6b:c8:48:42:9a:cf:40:ad:40:fa:dd:0f:9a:
                    67:1d:d2:52:17:95:d8:22:e2:46:1c:b2:2f:a4:de:
                    62:c1:f1:e2:d1:59:43:ce:9a:9f:ca:fc:6f:4f:92:
                    8d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:3E:21:34:C3:09:C6:39:81:7F:08:2F:9E:F9:B7:3E:57:51:FF:2C
            X509v3 Authority Key Identifier:
                keyid:0A:34:9C:83:E7:ED:32:1D:A3:B0:84:94:C4:F8:F0:BF:DB:B6:2F:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:05:ac:c3:1a:26:b0:bd:15:ab:d6:19:84:40:14:39:3b:50:
         ec:ed:10:c6:1a:48:bc:d7:35:5b:21:08:30:58:8e:7c:5d:cc:
         cf:1c:e6:ec:39:ca:4e:b6:21:85:bf:70:3d:55:2d:c1:41:4e:
         5a:6b:c1:6c:79:e9:0d:42:f2:6b:57:3b:df:e6:91:9f:5f:82:
         74:5c:ae:b0:1c:a8:aa:1c:f1:08:7c:6c:7c:cc:d6:cb:e7:71:
         b2:8d:46:5e:6f:ad:3d:03:cd:87:d3:e4:69:69:c9:9c:6f:1a:
         76:8d:83:d0:c5:6e:bf:76:8b:73:ca:ae:0b:e8:67:4e:4f:25:
         58:f4:88:df:bb:cc:2c:a1:60:38:85:06:d5:5f:13:29:22:dc:
         2f:a0:ec:bb:f4:3d:3b:d8:54:6b:81:4c:9b:09:15:6a:f9:14:
         16:5b:27:f7:d5:41:ab:b0:8b:f5:dd:1e:dc:45:c9:e8:c8:fc:
         fb:54:4a:85:b3:2c:57:eb:88:2e:27:a0:f9:f1:99:69:b7:ca:
         18:d8:9b:43:af:83:12:28:02:d2:2c:12:de:43:32:56:f2:7b:
         b2:55:20:e5:83:4e:4d:be:1f:57:16:c8:86:0e:82:bb:55:d6:
         a3:de:49:b2:6e:c0:9f:a3:d3:0b:c7:f8:20:4a:09:47:e3:af:
         68:99:fc:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----