Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91348DF/E6BF830CC1DD11ECB97B9C7FC4F9AE02/EJRq-RG2VUYsGl7wHWhGiOGWh9M.mft
File:                     EJRq-RG2VUYsGl7wHWhGiOGWh9M.mft (raw, json)
Hash identifier:          edW0k3HN48gCqNIgqApMv2NCus844MdnOrfSlZOHanE=
Subject key identifier:   C0:C2:BA:78:87:02:3A:2D:48:98:EA:FB:A8:49:40:C5:03:75:F7:B8
Authority key identifier: 10:94:6A:F9:11:B6:55:46:2C:1A:5E:F0:1D:68:46:88:E1:96:87:D3
Certificate issuer:       /CN=A91348DF/serialNumber=10946AF911B655462C1A5EF01D684688E19687D3
Certificate serial:       02FE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJRq-RG2VUYsGl7wHWhGiOGWh9M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91348DF/E6BF830CC1DD11ECB97B9C7FC4F9AE02/EJRq-RG2VUYsGl7wHWhGiOGWh9M.mft
Manifest number:          02FB
Signing time:             Fri 31 Jan 2025 01:20:42 +0000
Manifest this update:     Fri 31 Jan 2025 01:20:41 +0000
Manifest next update:     Fri 07 Feb 2025 01:20:41 +0000
Files and hashes:         1: EJRq-RG2VUYsGl7wHWhGiOGWh9M.crl (hash: Ox3kUTPeb54WBS/BG0Op/5hq5/Tvaakeab6mA7OMeXI=)
                          2: 9F8BF452C1E711EC97315146C4F9AE02.roa (hash: k6JWZEcqAHK7iXIk5qcPFOjxidKP93iseKIRI4Du2jw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 766 (0x2fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91348DF/serialNumber=10946AF911B655462C1A5EF01D684688E19687D3
        Validity
            Not Before: Jan 31 01:20:41 2025 GMT
            Not After : Feb  7 01:20:41 2025 GMT
        Subject: CN=679c2569-445b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f6:72:6a:57:b2:1b:43:df:2b:20:6a:87:57:
                    64:e1:cb:68:46:a4:d4:47:79:e7:9d:0f:4b:12:ac:
                    ff:b4:fe:92:c3:f5:d4:a5:d3:c2:45:ac:38:ac:b9:
                    48:60:e4:fc:9c:00:ec:f8:0a:c3:41:15:3f:d7:78:
                    3b:72:9b:c3:60:3d:55:21:06:57:b5:a1:58:89:0d:
                    44:01:33:ce:2d:94:39:a8:21:e9:24:f1:99:e0:f2:
                    e8:b3:7c:b6:b6:f8:65:d1:4a:cb:b6:87:7f:6f:fc:
                    b5:cf:87:30:68:38:49:8d:ef:1f:00:d5:a2:9c:f7:
                    d3:5e:d4:fc:11:48:ef:8b:fb:67:34:c6:06:fe:77:
                    76:b8:84:f2:0a:34:ff:5b:3d:1f:4d:b0:b0:63:ec:
                    6f:c6:2a:77:cb:5a:6c:5e:49:36:5d:37:79:da:b2:
                    86:b0:d0:9f:43:99:df:56:49:5e:72:01:ed:8d:96:
                    85:0a:94:82:07:f4:86:c6:13:f6:8e:ab:b1:33:c8:
                    18:b5:42:a5:2e:45:c9:85:0d:3e:e4:cd:5c:8d:1a:
                    f2:e5:22:21:60:f9:c7:ca:dc:97:d3:13:0f:09:ad:
                    4b:9d:24:e5:f2:01:cd:a9:b6:4e:65:68:c5:76:5a:
                    4f:d6:4a:63:8f:92:f5:34:4e:28:a8:93:b7:b3:e9:
                    3d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:C2:BA:78:87:02:3A:2D:48:98:EA:FB:A8:49:40:C5:03:75:F7:B8
            X509v3 Authority Key Identifier:
                keyid:10:94:6A:F9:11:B6:55:46:2C:1A:5E:F0:1D:68:46:88:E1:96:87:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91348DF/E6BF830CC1DD11ECB97B9C7FC4F9AE02/EJRq-RG2VUYsGl7wHWhGiOGWh9M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJRq-RG2VUYsGl7wHWhGiOGWh9M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91348DF/E6BF830CC1DD11ECB97B9C7FC4F9AE02/EJRq-RG2VUYsGl7wHWhGiOGWh9M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:72:c1:70:2c:c2:fb:17:5c:6e:17:c9:17:c4:e9:89:d3:c9:
         06:6e:77:bf:2d:55:e1:66:a1:10:d8:8d:ec:f9:a8:99:8c:0f:
         83:47:40:d3:9a:92:07:6f:a2:93:fc:3f:0e:eb:93:19:0f:fb:
         88:14:80:86:67:a2:2d:7d:82:e2:f0:84:7b:c1:c0:d6:e1:74:
         a3:f8:fa:33:cf:2f:bb:96:78:10:35:9b:1f:90:52:0d:cc:b1:
         3a:35:42:a9:42:09:36:1f:0c:89:cb:d2:e5:c5:6d:0f:c7:a1:
         3b:4a:63:8c:9a:00:96:a5:86:37:bc:fb:0d:80:33:51:aa:a7:
         4b:65:51:91:96:99:84:5b:89:19:85:37:2a:cc:9d:5b:64:a5:
         ae:f6:7e:b6:f2:13:5d:20:c2:8e:8f:13:bc:1f:d5:bc:75:6b:
         a5:6f:a5:82:c0:98:08:20:4d:7d:e7:dd:5a:88:cb:5d:72:69:
         37:e6:06:94:ad:3f:ec:53:9b:11:74:6b:c8:0c:bb:d8:64:6b:
         03:3a:a9:9c:0e:8a:1d:46:d5:42:e2:da:29:0d:0b:fd:ac:8c:
         2d:e2:8d:f4:28:42:c9:70:c2:f7:6d:80:25:6f:ac:ac:02:3b:
         7a:d3:b6:68:d0:d5:d1:ac:08:3e:75:fa:98:84:ca:fd:9b:b6:
         84:1a:a3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----