Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft
File:                     qKOD5jSR4Rute14s0kFBYh9NtBY.mft (raw, json)
Hash identifier:          sSvkikzpS60miFMF31QBX+z5TdDrmWcTyfOIPYTzAmg=
Subject key identifier:   F4:5F:67:B4:AC:0E:50:27:87:E4:D0:F4:B2:88:59:95:D7:E8:26:12
Authority key identifier: A8:A3:83:E6:34:91:E1:1B:AD:7B:5E:2C:D2:41:41:62:1F:4D:B4:16
Certificate issuer:       /CN=A913BB9E/serialNumber=A8A383E63491E11BAD7B5E2CD24141621F4DB416
Certificate serial:       0583
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qKOD5jSR4Rute14s0kFBYh9NtBY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft
Manifest number:          057B
Signing time:             Thu 30 Jan 2025 23:19:37 +0000
Manifest this update:     Thu 30 Jan 2025 23:19:36 +0000
Manifest next update:     Thu 06 Feb 2025 23:19:36 +0000
Files and hashes:         1: qKOD5jSR4Rute14s0kFBYh9NtBY.crl (hash: NDtncDeTDyUbfa9PNSuOmQvx5YVBkVeNFSPwwYZ2htU=)
                          2: FD62B046DF1611ED81C1BE7CC4F9AE02.roa (hash: g89YmoUlNGoW7vM9eZWI3Zges2WlbrLyhloBI6u/31Q=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1411 (0x583)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913BB9E/serialNumber=A8A383E63491E11BAD7B5E2CD24141621F4DB416
        Validity
            Not Before: Jan 30 23:19:36 2025 GMT
            Not After : Feb  6 23:19:36 2025 GMT
        Subject: CN=679c0908-926f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f4:1e:18:c6:15:63:02:92:8e:d7:48:f6:04:
                    ce:f1:f3:b4:4f:95:44:7e:81:79:23:c1:39:74:c4:
                    22:1f:3e:92:77:9f:d7:10:fc:7d:d9:b5:91:71:dc:
                    7b:16:c0:b2:79:a5:10:72:c7:0a:69:8a:c5:fd:9c:
                    7d:a6:f0:04:dc:b7:df:12:fe:f2:95:6f:2f:74:ba:
                    f3:cd:6d:76:d7:8c:66:d0:f8:d5:89:19:3e:5c:de:
                    09:39:9b:c3:fb:df:1c:9a:ac:68:cb:67:07:4b:76:
                    e1:95:a6:49:86:0b:17:3d:c0:ad:4a:61:b2:02:6e:
                    90:d4:b0:c3:dc:c1:d1:cc:bb:b1:9c:be:d2:ed:8e:
                    94:d2:67:5d:46:5a:ff:42:9c:73:60:d9:11:76:69:
                    53:e8:86:d3:c9:3c:44:0a:c0:15:57:97:ef:93:23:
                    62:7d:31:b4:5f:5f:1f:ad:e5:66:38:d7:77:63:1b:
                    36:ef:5c:6d:4f:fa:1b:d4:76:fc:8e:b9:08:df:05:
                    8d:2f:76:74:82:9d:68:69:e4:9c:88:49:ae:16:61:
                    b3:b9:80:f8:05:f8:29:a7:12:9e:18:ae:bc:e2:57:
                    18:7e:b1:52:5c:06:e1:2a:5f:d9:3a:c7:69:4e:ae:
                    71:af:b2:ca:87:4a:ff:9a:91:0a:86:f0:a3:30:36:
                    90:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:5F:67:B4:AC:0E:50:27:87:E4:D0:F4:B2:88:59:95:D7:E8:26:12
            X509v3 Authority Key Identifier:
                keyid:A8:A3:83:E6:34:91:E1:1B:AD:7B:5E:2C:D2:41:41:62:1F:4D:B4:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qKOD5jSR4Rute14s0kFBYh9NtBY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:02:c9:f2:84:1d:a8:c4:18:6f:a5:e5:e7:c8:f1:8f:35:da:
         b0:ab:75:41:06:f4:03:c2:13:2a:92:3a:7b:2f:d8:9e:10:4d:
         fd:9e:d1:96:2a:4a:b5:08:7f:97:44:3c:75:d0:13:91:c1:0a:
         42:03:f1:5b:8f:12:6e:a5:68:79:0e:59:67:2b:34:f8:07:64:
         5b:56:16:cd:1d:16:6c:8e:36:32:1b:7d:c6:16:04:62:57:d1:
         bb:c7:91:1c:70:fc:4a:f0:9e:b9:bb:f5:d0:c1:6a:8a:86:b9:
         a8:3a:a6:fd:3a:35:c1:3d:a0:79:a8:fe:7a:77:b8:27:86:5e:
         38:39:8e:65:43:ff:06:91:01:24:4d:a9:04:15:9e:ea:02:65:
         86:0f:23:90:99:42:3d:75:0c:3f:6a:cf:01:31:6f:99:e0:08:
         8c:93:7b:b3:3b:cf:6b:ff:1a:80:c7:15:53:90:18:42:63:9e:
         68:87:82:be:b2:ab:e6:f2:95:77:f2:8a:3e:74:ad:1b:55:c2:
         c9:10:57:6c:16:0a:40:c6:2b:6b:97:b3:76:9f:0a:2d:2b:53:
         32:ab:41:88:1b:53:30:b3:bd:e7:a7:07:20:7b:b3:75:47:3a:
         9a:8b:aa:0a:d6:85:45:e3:9e:5f:ba:e1:2e:e8:e7:51:15:db:
         f4:56:7f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----