Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.mft
File:                     ELQL29GDlBfXrRIzKwvm-fxugQU.mft (raw, json)
Hash identifier:          qFyGmTf7NPd5lkzxD09ruVsefVTdtaOXeaaAmECq8BM=
Subject key identifier:   58:E2:0F:D5:5F:9B:61:1B:3B:F1:0A:29:DC:E9:F8:7B:89:F1:CB:B9
Authority key identifier: 10:B4:0B:DB:D1:83:94:17:D7:AD:12:33:2B:0B:E6:F9:FC:6E:81:05
Certificate issuer:       /CN=A914189D/serialNumber=10B40BDBD1839417D7AD12332B0BE6F9FC6E8105
Certificate serial:       03B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ELQL29GDlBfXrRIzKwvm-fxugQU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.mft
Manifest number:          03A7
Signing time:             Fri 31 Jan 2025 00:48:36 +0000
Manifest this update:     Fri 31 Jan 2025 00:48:35 +0000
Manifest next update:     Fri 07 Feb 2025 00:48:35 +0000
Files and hashes:         1: ELQL29GDlBfXrRIzKwvm-fxugQU.crl (hash: +8a9nqU0xaX5lUE8V9S9kBOKa7ej+pvZ7/RzIAY494A=)
                          2: 05A179C2B02E11ECA990305CC4F9AE02.roa (hash: yxgOM7Alp9+Etb0L7ZdDdvPfWsF/rS6M3JXXFnzbA5U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 945 (0x3b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914189D/serialNumber=10B40BDBD1839417D7AD12332B0BE6F9FC6E8105
        Validity
            Not Before: Jan 31 00:48:35 2025 GMT
            Not After : Feb  7 00:48:35 2025 GMT
        Subject: CN=679c1de4-1a39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f7:3a:ec:1d:ac:f5:80:ed:d1:2e:f0:e3:ea:
                    56:e5:96:8a:5b:bc:07:a3:08:a0:6e:cd:14:80:41:
                    cf:07:48:37:b2:d1:26:a3:a0:01:4b:7c:3c:1c:f5:
                    de:67:57:6c:06:21:b2:78:18:5b:1b:f7:a6:71:97:
                    bb:2a:30:fe:53:7d:c6:19:d8:48:e9:b6:15:32:b2:
                    22:4b:9d:0d:e8:23:26:31:ab:fb:63:a7:5e:10:73:
                    60:cb:20:8e:a2:51:e3:af:84:d1:65:30:ce:d5:b3:
                    18:07:3c:73:b3:c6:ec:64:bc:4a:6b:4b:4c:97:71:
                    73:0b:1f:c3:db:c1:10:5c:f6:aa:a2:59:64:60:34:
                    81:05:83:cc:e1:d4:6c:2c:06:3f:d1:08:68:da:cb:
                    2f:9e:96:16:18:4e:a3:82:7e:de:4c:39:e5:f4:1a:
                    a3:53:59:c7:d5:db:90:79:47:dc:ed:18:eb:6f:67:
                    56:e6:02:63:52:4a:6c:f9:5d:09:0d:8f:bd:29:c6:
                    b2:13:8a:c2:5c:40:9e:b6:f9:98:8d:ab:87:4d:2b:
                    1a:d9:ab:a9:c8:f7:3c:7a:c5:ec:9b:80:01:89:08:
                    cb:8a:da:c6:06:e3:43:55:10:40:19:be:55:91:74:
                    da:f8:18:c6:70:45:35:f3:39:a2:10:30:41:01:4f:
                    60:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E2:0F:D5:5F:9B:61:1B:3B:F1:0A:29:DC:E9:F8:7B:89:F1:CB:B9
            X509v3 Authority Key Identifier:
                keyid:10:B4:0B:DB:D1:83:94:17:D7:AD:12:33:2B:0B:E6:F9:FC:6E:81:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ELQL29GDlBfXrRIzKwvm-fxugQU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:cc:c9:03:86:d7:30:4f:c5:3b:44:61:a2:12:45:b7:2b:a6:
         24:a6:42:22:dc:06:89:34:da:e2:67:24:6d:e1:1e:ad:e6:1a:
         91:c2:7c:dd:2a:f5:76:52:d1:0d:5b:55:5d:6f:ca:df:4c:fc:
         3a:44:a1:eb:3b:a0:de:92:fb:70:c7:68:1c:5a:16:75:51:5d:
         74:a0:0a:44:e8:84:a9:f4:89:33:66:f4:5f:d7:fb:36:fd:45:
         ef:d3:cb:72:85:31:3e:38:e2:cd:ca:0f:a8:ae:2a:96:99:72:
         fd:2d:40:53:94:35:a7:52:6c:2e:75:2c:1a:1d:d4:2b:9b:ce:
         7b:62:d3:32:78:5e:b0:b5:d0:94:c9:b0:d2:49:f4:74:d3:27:
         5b:41:24:e5:51:9d:f3:38:02:11:dc:c4:65:ef:c3:44:cb:2a:
         8c:da:c2:65:0c:2c:df:b6:1a:14:02:65:bf:ef:84:7a:24:02:
         11:58:ad:53:3b:43:3f:8a:44:91:17:32:6a:42:c5:06:c5:14:
         91:e5:fc:c2:76:22:62:d5:32:79:c4:9d:97:55:69:43:f6:cc:
         a1:66:9f:80:be:b4:d2:76:95:f4:06:0a:e4:79:bb:69:d5:c2:
         65:28:0b:54:54:75:9a:f2:86:75:ad:89:df:7e:5c:2b:81:d1:
         13:9d:92:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----