Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A0F3/4171B70404A811E8B23A9A18C4F9AE02/hNKQTEi_9V2argiHuCwzDxubKaw.mft
File:                     hNKQTEi_9V2argiHuCwzDxubKaw.mft (raw, json)
Hash identifier:          wqTPk1Z1xFaLVXgOY7X/3Cg2ek20bVMhCyYyKTsUHDo=
Subject key identifier:   AA:26:1B:42:84:80:F9:D8:AA:5F:64:B2:F4:7E:D0:35:92:97:92:7A
Authority key identifier: 84:D2:90:4C:48:BF:F5:5D:9A:AE:08:87:B8:2C:33:0F:1B:9B:29:AC
Certificate issuer:       /CN=A913A0F3/serialNumber=84D2904C48BFF55D9AAE0887B82C330F1B9B29AC
Certificate serial:       1646
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNKQTEi_9V2argiHuCwzDxubKaw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A0F3/4171B70404A811E8B23A9A18C4F9AE02/hNKQTEi_9V2argiHuCwzDxubKaw.mft
Manifest number:          163C
Signing time:             Fri 31 Jan 2025 16:43:04 +0000
Manifest this update:     Fri 31 Jan 2025 16:43:03 +0000
Manifest next update:     Fri 07 Feb 2025 16:43:03 +0000
Files and hashes:         1: hNKQTEi_9V2argiHuCwzDxubKaw.crl (hash: owS8GbbYYzYRvZ8uUF+2TwQiZvkwF67FrfGUiDdLVy8=)
                          2: 0682A6A03DC411EBBFE0EA13C4F9AE02.roa (hash: l/QXhkP0PiImWOQFu3VwXh2hTS7h1F0aUkdMN0JWiZQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5702 (0x1646)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A0F3/serialNumber=84D2904C48BFF55D9AAE0887B82C330F1B9B29AC
        Validity
            Not Before: Jan 31 16:43:03 2025 GMT
            Not After : Feb  7 16:43:03 2025 GMT
        Subject: CN=679cfd98-03e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e2:c6:71:91:d6:f4:2c:4f:c6:79:89:87:72:
                    e0:b5:6d:b0:65:c4:0c:cf:7a:27:8b:f1:58:e9:ce:
                    b8:d7:b3:0d:24:ed:1b:de:66:e6:7b:37:ea:fc:c9:
                    bd:67:8a:0e:1e:51:9c:86:bd:0a:d9:f7:0e:df:8f:
                    21:fb:84:50:33:43:cc:5e:f5:09:a7:1f:13:db:74:
                    00:f0:e0:37:34:58:91:6f:b9:54:f1:b6:e0:6f:51:
                    80:69:4a:fa:55:62:c0:30:6d:de:10:aa:40:56:e7:
                    3c:43:a8:97:37:3b:e3:ce:59:85:91:e2:35:eb:0c:
                    ce:90:96:99:72:13:f2:44:9c:b8:85:e6:5c:3c:4e:
                    5b:3f:32:de:90:fd:52:6f:01:34:d7:0a:1d:2d:98:
                    6d:f6:40:eb:4d:c6:a7:8e:a7:a4:75:d5:fa:9d:b1:
                    ac:5a:46:9c:f8:1a:09:9e:39:88:b2:81:5d:a1:e3:
                    2c:61:6b:60:39:97:27:b8:4f:80:3d:98:f5:74:e5:
                    f3:83:ca:59:1f:e9:58:ff:8c:0e:ac:d7:0b:9c:47:
                    72:d5:4c:42:35:3b:fd:95:1e:d6:5c:53:39:82:0c:
                    56:5c:c4:9a:ad:1a:ac:61:a7:b2:94:32:db:32:e4:
                    4e:99:90:73:63:ad:4b:80:e8:50:af:70:79:f7:62:
                    ee:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:26:1B:42:84:80:F9:D8:AA:5F:64:B2:F4:7E:D0:35:92:97:92:7A
            X509v3 Authority Key Identifier:
                keyid:84:D2:90:4C:48:BF:F5:5D:9A:AE:08:87:B8:2C:33:0F:1B:9B:29:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A0F3/4171B70404A811E8B23A9A18C4F9AE02/hNKQTEi_9V2argiHuCwzDxubKaw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNKQTEi_9V2argiHuCwzDxubKaw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A0F3/4171B70404A811E8B23A9A18C4F9AE02/hNKQTEi_9V2argiHuCwzDxubKaw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:c8:8b:d2:66:eb:c3:47:5c:83:99:68:a7:d8:ac:6f:68:e9:
         57:5e:84:3d:b5:56:46:60:9b:84:2c:52:5a:5f:43:87:a9:5b:
         07:ca:95:10:12:c5:f8:25:6b:ab:d3:0f:8a:bd:b7:e1:9f:bd:
         b9:66:3e:1b:ec:0b:43:94:93:a1:e5:47:83:44:2e:0b:c3:62:
         42:c8:e7:1e:1b:11:c8:0a:af:f3:d1:8f:f7:ee:af:c1:ab:e2:
         0a:3f:d5:c5:c2:63:fd:a9:40:01:74:42:36:d0:1d:ab:57:71:
         0a:1f:ce:2f:53:1a:40:cb:59:01:15:74:1f:51:fb:36:9b:91:
         a1:f6:fb:3d:c6:8c:e0:db:15:72:3e:3f:1b:23:95:aa:dc:fb:
         be:83:60:6b:31:f9:ce:52:c7:50:55:e8:28:51:0f:2e:06:45:
         3f:9d:26:04:06:5c:66:4b:90:40:ff:4b:18:ed:80:24:47:ec:
         df:11:00:2c:36:09:69:f2:aa:58:72:ab:f0:f0:a0:34:0c:a7:
         25:41:2d:af:19:e5:0f:05:ea:f0:2b:91:e3:18:82:40:d7:94:
         9a:2a:0f:70:6a:ca:ae:ec:04:cd:4b:a5:a1:c4:7e:45:1a:17:
         12:49:cd:f3:8a:ea:14:18:b7:10:3a:c3:0b:ba:46:b0:e7:4d:
         05:7c:91:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----