Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft
File:                     I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft (raw, json)
Hash identifier:          /kVuiqYVRRBaXQX6Z3CBZnc7eAC0l1QHGyP+ZQrcGLs=
Subject key identifier:   7E:E0:E7:7D:98:92:02:97:3D:46:E2:24:E6:1C:79:39:F7:32:27:FE
Authority key identifier: 23:70:4D:59:2F:57:50:9E:DC:E5:A4:AD:7B:DE:ED:CF:7B:DB:AC:E4
Certificate issuer:       /CN=A9146A72/serialNumber=23704D592F57509EDCE5A4AD7BDEEDCF7BDBACE4
Certificate serial:       2D41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft
Manifest number:          2D26
Signing time:             Fri 31 Jan 2025 15:32:42 +0000
Manifest this update:     Fri 31 Jan 2025 15:32:41 +0000
Manifest next update:     Fri 07 Feb 2025 15:32:41 +0000
Files and hashes:         1: I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl (hash: KacvnX4dOb7H/VDcjDD5mXwxjMW5MGtax5ZMCkVLuZE=)
                          2: 3635C928CE3811EF878F6569C4F9AE02.roa (hash: qYH+0NoYqUVH/kICTwmC5FSWgYMcanxVuKqTuwnMQdk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11585 (0x2d41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146A72/serialNumber=23704D592F57509EDCE5A4AD7BDEEDCF7BDBACE4
        Validity
            Not Before: Jan 31 15:32:41 2025 GMT
            Not After : Feb  7 15:32:41 2025 GMT
        Subject: CN=679ced1a-aa42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4b:42:20:57:aa:58:a9:11:f8:9d:00:ec:7a:
                    b7:87:b0:96:ec:b8:96:81:8f:39:d6:8e:e4:c1:88:
                    de:c4:30:27:b2:8d:d0:84:05:a0:78:6c:be:b2:e0:
                    cd:55:d6:fa:eb:ea:35:0e:28:34:bd:e8:ec:98:d2:
                    40:05:99:7b:0e:7e:7b:40:3e:84:7a:21:23:16:95:
                    ea:99:a3:bf:e2:fe:37:1a:d9:1e:c3:3b:5d:b9:de:
                    84:12:87:0e:9f:df:d3:97:94:f0:c9:10:e1:20:75:
                    67:7e:f1:99:65:db:7c:4a:f5:44:8d:1e:f5:33:6d:
                    be:66:64:78:cc:62:4a:c6:1a:32:c5:ef:fa:7a:ee:
                    e8:cd:48:48:db:21:42:ba:ba:2f:1d:27:5b:a5:da:
                    60:fd:2c:d7:e7:84:00:f7:43:22:26:4e:58:5e:4b:
                    03:7e:ac:97:3c:db:ed:36:3a:ee:f1:e3:0b:87:99:
                    72:c2:9f:97:05:1f:c1:92:e8:b4:46:c7:28:fe:27:
                    97:c8:f2:76:71:09:1d:43:16:e7:e8:81:f9:9d:07:
                    e4:10:29:d3:08:91:25:a8:34:56:57:5c:d3:65:a1:
                    15:00:85:df:3c:bf:3b:fe:c7:5f:4c:49:78:74:ab:
                    9b:ef:7e:70:2f:9a:94:21:bd:e5:ba:f7:31:4f:0e:
                    f7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:E0:E7:7D:98:92:02:97:3D:46:E2:24:E6:1C:79:39:F7:32:27:FE
            X509v3 Authority Key Identifier:
                keyid:23:70:4D:59:2F:57:50:9E:DC:E5:A4:AD:7B:DE:ED:CF:7B:DB:AC:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:fc:5b:bd:a9:e7:0f:e5:bd:3b:c9:1d:36:0f:21:11:14:7c:
         0c:12:ae:11:09:08:e1:1d:ad:13:d4:3b:bf:d4:19:58:ee:17:
         10:82:12:71:7f:73:04:5c:f5:ca:32:6c:b0:8a:ce:7b:39:98:
         65:31:ee:ab:4e:92:4c:f4:fa:2e:62:23:f2:60:ac:b3:ba:e9:
         99:9f:1e:c1:b0:82:bf:ef:a4:5a:b9:e7:b2:89:0c:1c:c8:6d:
         7e:d4:c2:34:48:d8:52:17:a5:fb:bc:35:f8:da:e0:aa:6f:94:
         d4:54:8c:56:8b:99:96:ca:7f:72:01:fd:f0:8b:cf:30:9e:e3:
         28:a4:43:f8:f1:28:57:b4:32:31:be:c2:9b:e1:3d:bd:21:cb:
         5b:40:ea:2c:84:d4:d3:51:2e:c2:94:1b:74:35:78:8c:c3:7d:
         fe:b1:6a:a5:c3:68:69:ca:6b:2c:e9:76:a7:4f:c2:3d:58:bb:
         c9:07:01:52:3d:d8:39:3e:3b:2f:d5:c5:4e:de:ff:38:49:94:
         47:da:2d:5f:ea:d7:70:e9:ec:26:b8:6f:68:8f:8e:d4:17:23:
         1e:97:44:fd:92:3d:9d:6c:39:e9:dd:ca:57:64:34:20:e1:c0:
         03:37:6d:ac:6b:e9:e9:8c:3a:eb:3c:e1:d8:8c:8f:37:48:9c:
         09:e2:69:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----