Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft
File:                     Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft (raw, json)
Hash identifier:          hXOx1Af5o7ZaiEG6YxVgD9rf/Xkc8DiRQC30PgTZ03k=
Subject key identifier:   E4:32:1E:C8:B1:A5:35:BF:18:65:3C:3A:6F:8A:A2:38:0D:94:95:6B
Authority key identifier: 41:F8:B6:B4:7B:AD:B0:0F:6F:8F:E8:E7:E0:13:FF:55:A1:8E:74:28
Certificate issuer:       /CN=A913D6C9/serialNumber=41F8B6B47BADB00F6F8FE8E7E013FF55A18E7428
Certificate serial:       044A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qfi2tHutsA9vj-jn4BP_VaGOdCg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft
Manifest number:          0440
Signing time:             Fri 31 Jan 2025 00:21:49 +0000
Manifest this update:     Fri 31 Jan 2025 00:21:49 +0000
Manifest next update:     Fri 07 Feb 2025 00:21:49 +0000
Files and hashes:         1: Qfi2tHutsA9vj-jn4BP_VaGOdCg.crl (hash: qkQFE2aiig+2yVK3SYJ40DgBRNWGW9wccI0HqHzVM50=)
                          2: 54AC9B64C3B411EEBF90C180C4F9AE02.roa (hash: BPstFCUC7r4sqZcas3tBZS1NiGfkeUG5bomyvOkC2W0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1098 (0x44a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D6C9/serialNumber=41F8B6B47BADB00F6F8FE8E7E013FF55A18E7428
        Validity
            Not Before: Jan 31 00:21:49 2025 GMT
            Not After : Feb  7 00:21:49 2025 GMT
        Subject: CN=679c179d-db2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:03:c2:51:61:a1:6d:10:93:94:a7:af:1f:a5:
                    b8:e3:49:f4:1f:46:ed:92:1c:85:9b:92:37:c6:e3:
                    d3:d0:89:bc:56:4d:ed:49:df:c2:7a:c6:bb:5b:18:
                    ce:f0:cc:0c:70:01:f2:e7:ce:5d:67:94:74:ad:0a:
                    14:1d:e6:e3:32:65:f2:25:80:48:3b:12:41:32:51:
                    b9:70:aa:2a:a8:e4:3c:50:fd:11:36:f5:0a:ee:c1:
                    20:75:b3:9d:01:1d:f8:4d:94:f5:0d:73:cc:0c:4a:
                    5d:13:75:92:32:20:fb:a7:b3:da:b8:47:5c:dc:26:
                    43:37:c1:11:5d:59:5b:e1:0a:57:87:37:90:f8:32:
                    1f:a2:2e:78:06:39:25:48:9e:a4:80:51:51:92:ab:
                    4a:22:f8:6a:58:20:be:a1:e8:58:88:4e:d8:ca:c6:
                    61:84:09:1e:5e:b0:3a:a3:f5:2b:7a:7e:f3:17:cf:
                    84:f2:47:11:d3:2c:70:2b:fb:ea:bf:11:04:32:ad:
                    44:cd:ce:bb:fe:94:7d:63:1f:0e:e4:66:29:a5:ce:
                    09:c3:c6:62:d6:b8:77:07:63:9a:59:7a:e9:90:43:
                    23:bb:e7:f5:5e:f6:70:43:95:ab:9b:57:0a:98:fb:
                    fe:67:8b:b1:64:2c:5e:80:dc:16:0a:44:ee:c4:71:
                    e7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:32:1E:C8:B1:A5:35:BF:18:65:3C:3A:6F:8A:A2:38:0D:94:95:6B
            X509v3 Authority Key Identifier:
                keyid:41:F8:B6:B4:7B:AD:B0:0F:6F:8F:E8:E7:E0:13:FF:55:A1:8E:74:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qfi2tHutsA9vj-jn4BP_VaGOdCg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:b3:33:d5:03:64:4a:b6:e3:67:01:0f:3b:91:23:95:83:23:
         c2:42:81:c1:ce:9b:7f:e9:ca:44:ce:c9:9e:ae:6a:b2:66:2d:
         3e:c7:c2:f9:35:b3:40:14:42:12:82:dc:39:6b:83:6c:33:f0:
         cc:ed:e2:17:01:c7:f7:df:49:15:d2:cc:f9:16:ca:c2:71:59:
         c8:09:9a:5b:c7:5c:43:4e:fb:d6:c9:56:76:a7:ec:4f:a2:fc:
         e0:7d:e1:5b:c0:43:b1:41:14:8d:95:63:98:51:78:f8:3e:d8:
         ee:be:c8:df:7a:17:af:ae:51:a5:5e:bf:2e:82:fd:f6:ea:43:
         a5:f8:1e:6b:37:af:b0:68:25:cb:12:17:e7:22:64:c2:18:3c:
         d3:cd:ea:6d:3f:b6:f7:64:53:9d:18:dd:d7:5b:b1:f8:c2:01:
         7c:92:2f:95:e7:58:0c:68:0b:fb:e1:b0:9d:25:ac:cb:86:6a:
         e1:63:3e:19:c5:a9:99:36:20:27:99:92:1c:9a:90:21:eb:b2:
         ba:09:49:16:3c:f9:34:ca:28:79:45:34:a8:11:c3:ff:75:7a:
         7a:16:d1:c5:06:ca:be:94:7c:41:20:0d:d6:c5:c3:8a:39:21:
         f0:0d:67:31:f0:5c:1c:bf:ce:bc:18:94:c8:e4:fb:c0:c5:d2:
         96:4b:50:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----