Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.mft
File:                     TPa6KUJsvCB032LFH683jELTuK8.mft (raw, json)
Hash identifier:          u4YV3Pi0RsbIjRpWpIwbnNLEJBg2bZEWK3nyOeLBAq8=
Subject key identifier:   90:4E:E3:22:96:DE:24:B3:3F:97:CA:7C:F7:66:5B:10:65:A7:AC:F8
Authority key identifier: 4C:F6:BA:29:42:6C:BC:20:74:DF:62:C5:1F:AF:37:8C:42:D3:B8:AF
Certificate issuer:       /CN=A9148F50/serialNumber=4CF6BA29426CBC2074DF62C51FAF378C42D3B8AF
Certificate serial:       06D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPa6KUJsvCB032LFH683jELTuK8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.mft
Manifest number:          06CB
Signing time:             Thu 30 Jan 2025 22:03:13 +0000
Manifest this update:     Thu 30 Jan 2025 22:03:12 +0000
Manifest next update:     Thu 06 Feb 2025 22:03:12 +0000
Files and hashes:         1: TPa6KUJsvCB032LFH683jELTuK8.crl (hash: wkHhztOMfBOKi13jNw3Q84qveuqcjTmRm+eM0gwQQvM=)
                          2: B6A436A8411F11EBA45D5857C4F9AE02.roa (hash: COBPm0g4nlJAOhrh0hQYrpWCggmct2exc7fAFXJ645A=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1745 (0x6d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148F50/serialNumber=4CF6BA29426CBC2074DF62C51FAF378C42D3B8AF
        Validity
            Not Before: Jan 30 22:03:12 2025 GMT
            Not After : Feb  6 22:03:12 2025 GMT
        Subject: CN=679bf720-e8a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d1:c4:5d:78:52:38:ad:38:7a:3e:47:19:47:
                    9c:7f:eb:c9:08:7b:d7:23:18:01:fa:94:d0:7e:d9:
                    6d:19:ac:49:8b:63:e7:fa:69:c1:bd:f2:8c:15:2d:
                    66:8d:ef:3c:72:19:91:17:05:5f:21:4e:72:b6:ee:
                    27:06:75:71:b7:1c:82:19:ed:36:98:0f:26:36:2d:
                    88:8f:e2:52:7f:64:e9:07:27:ee:26:d5:1c:fa:2f:
                    de:af:0c:98:4f:00:cd:a7:e8:4d:19:5a:f0:00:e2:
                    d5:f5:39:4e:77:7b:26:0b:eb:83:ce:d1:b5:1b:b6:
                    ef:44:bc:48:0c:74:41:d1:2f:25:2b:61:32:0f:9e:
                    fb:81:e1:7a:ef:0f:88:f7:b7:d0:8e:19:3a:ed:ed:
                    28:7e:b0:79:f6:f3:bc:c7:d9:90:03:03:bb:b5:45:
                    12:73:40:6c:bd:b5:7a:d6:8e:33:c3:af:d9:d4:a4:
                    be:a9:8e:2f:05:51:d7:5c:b8:ee:72:7c:8d:60:b8:
                    45:4d:90:e8:9e:bb:4f:b9:0e:b7:36:a0:2e:a0:b6:
                    18:13:88:37:eb:2f:3a:72:b0:3a:66:4a:90:f7:4a:
                    b3:98:ee:6f:95:15:50:48:0a:f1:a4:6d:b9:76:13:
                    7d:9e:55:d9:bf:b6:17:6a:31:ff:64:01:95:1f:fb:
                    9e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:4E:E3:22:96:DE:24:B3:3F:97:CA:7C:F7:66:5B:10:65:A7:AC:F8
            X509v3 Authority Key Identifier:
                keyid:4C:F6:BA:29:42:6C:BC:20:74:DF:62:C5:1F:AF:37:8C:42:D3:B8:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPa6KUJsvCB032LFH683jELTuK8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:0f:d4:a6:05:24:11:b5:d4:d0:d6:94:71:30:7d:e9:cd:42:
         ef:71:16:e2:bc:bd:43:15:a7:1a:f4:6a:0a:c3:52:87:39:2a:
         5e:a3:98:4c:7a:c0:15:92:72:1b:3b:c8:14:65:11:09:95:7f:
         e3:aa:a9:ab:20:e6:5a:c6:8a:c5:ea:c9:23:59:3c:c2:6a:b0:
         04:e4:53:65:67:0f:87:15:8f:42:85:a5:4a:3a:d8:97:69:83:
         38:5f:81:11:12:8e:5d:8c:2f:63:28:1f:15:c8:71:42:dd:6c:
         4a:45:79:58:6b:4a:f9:f5:7a:40:52:98:bc:c8:fb:dd:b8:ca:
         43:31:f5:24:0f:f5:93:57:4c:16:31:4a:c4:ea:d7:10:1e:a6:
         c1:44:80:ea:ef:5d:5c:5a:ea:a7:6c:a7:15:1f:a1:0d:03:d2:
         9b:36:f0:5c:f1:31:44:58:cc:57:a5:ed:74:15:4a:99:da:26:
         4d:10:c7:ce:df:56:3e:d2:58:f7:2f:73:68:a8:9d:7a:93:2e:
         26:23:ee:61:aa:95:78:3a:de:81:a7:37:91:4b:74:ae:a3:ca:
         24:62:3a:e5:a2:72:92:eb:15:3c:ca:74:ae:c6:1f:d4:a7:cc:
         be:a2:d9:26:75:f1:88:5e:6c:7c:76:93:54:52:cf:e8:71:c7:
         c9:24:68:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----