Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B0D8/07AABCDAFB1111EE9123391BC4F9AE02/AIsjUb6f1m04sRBQZ5c09E-l2X0.mft
File:                     AIsjUb6f1m04sRBQZ5c09E-l2X0.mft (raw, json)
Hash identifier:          +Tc5YHzrFsQ+dLJnubg+uSKsauRt6taxn6E92AY4+Hk=
Subject key identifier:   C1:47:3D:3D:D3:99:4C:2B:73:FE:95:92:FC:C1:14:1F:5B:1C:37:D1
Authority key identifier: 00:8B:23:51:BE:9F:D6:6D:38:B1:10:50:67:97:34:F4:4F:A5:D9:7D
Certificate issuer:       /CN=A914B0D8/serialNumber=008B2351BE9FD66D38B11050679734F44FA5D97D
Certificate serial:       97
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AIsjUb6f1m04sRBQZ5c09E-l2X0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B0D8/07AABCDAFB1111EE9123391BC4F9AE02/AIsjUb6f1m04sRBQZ5c09E-l2X0.mft
Manifest number:          95
Signing time:             Fri 31 Jan 2025 05:28:58 +0000
Manifest this update:     Fri 31 Jan 2025 05:28:57 +0000
Manifest next update:     Fri 07 Feb 2025 05:28:57 +0000
Files and hashes:         1: AIsjUb6f1m04sRBQZ5c09E-l2X0.crl (hash: OwwRM0Yqfz81noY8C4PUDJDJnsE0rHvgHXLsp/Xemt0=)
                          2: 66E93DA2FB1111EE81D7643BC4F9AE02.roa (hash: I6DRhaPjg94iaLUIAJP5juEv1Um/2EjAWiSx5qBJKPs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151 (0x97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B0D8/serialNumber=008B2351BE9FD66D38B11050679734F44FA5D97D
        Validity
            Not Before: Jan 31 05:28:57 2025 GMT
            Not After : Feb  7 05:28:57 2025 GMT
        Subject: CN=679c5f99-ea97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:be:37:79:f7:62:8f:9b:a3:5e:eb:f5:ce:1b:
                    c4:b0:fd:7f:64:c7:7f:3c:a4:94:e4:2b:c6:8c:5f:
                    7e:18:39:87:e5:6f:07:c5:f0:db:4e:3a:9c:49:1b:
                    f2:98:32:ff:a8:81:34:86:b6:a1:b1:8d:61:cb:46:
                    9f:40:bb:b9:df:6b:36:56:d2:8f:d5:60:b9:c2:57:
                    75:a3:94:73:b0:6f:4b:a8:b5:23:0d:67:b9:35:b7:
                    ec:74:25:e4:a6:07:bb:0f:eb:9e:c7:d3:bc:38:da:
                    e8:ed:84:17:fb:cf:e6:95:c3:2f:fb:e9:b7:86:38:
                    fe:a6:bd:cc:dc:06:ad:68:f2:b5:09:2e:c1:fb:68:
                    15:2f:8c:de:4f:c0:ad:6e:95:37:11:e5:9f:cf:02:
                    da:a4:6a:cc:7c:d8:52:da:58:1c:3c:eb:c9:1a:15:
                    2c:7a:af:6b:c4:01:1d:04:d9:4c:64:8e:b2:18:1f:
                    7b:78:39:6c:29:ec:b8:51:cb:6f:ef:b8:11:08:1a:
                    b3:67:20:d8:b1:82:c8:1c:35:ac:64:59:8a:bc:20:
                    d1:77:a1:fd:da:e9:6c:bd:bf:04:0b:37:37:71:28:
                    67:59:6f:7a:a3:76:33:3a:25:fe:50:44:f3:c1:47:
                    35:bf:9e:e4:ac:b4:2f:8c:bf:fa:df:61:00:d1:06:
                    07:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:47:3D:3D:D3:99:4C:2B:73:FE:95:92:FC:C1:14:1F:5B:1C:37:D1
            X509v3 Authority Key Identifier:
                keyid:00:8B:23:51:BE:9F:D6:6D:38:B1:10:50:67:97:34:F4:4F:A5:D9:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B0D8/07AABCDAFB1111EE9123391BC4F9AE02/AIsjUb6f1m04sRBQZ5c09E-l2X0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AIsjUb6f1m04sRBQZ5c09E-l2X0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B0D8/07AABCDAFB1111EE9123391BC4F9AE02/AIsjUb6f1m04sRBQZ5c09E-l2X0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:bb:1a:4e:c8:d2:cf:d4:ff:4f:1d:ed:39:ac:df:4a:83:38:
         1b:21:1b:fe:0e:49:c8:68:ca:c9:12:da:a4:e8:72:2c:34:20:
         e3:40:e4:52:67:0a:04:cd:3f:b0:d9:2a:ce:d7:ee:5e:46:ac:
         55:7b:05:c8:f4:6c:7c:04:3a:38:86:59:f7:8a:88:a5:de:c9:
         b0:0f:5d:ad:80:44:6d:d3:ae:de:9b:de:77:41:a9:9b:92:31:
         40:47:db:1d:92:c2:fd:e9:2b:ee:ae:78:3d:5f:23:29:a5:b4:
         d6:93:32:50:34:3e:e0:ea:c4:6b:eb:22:6e:c0:ac:a5:25:51:
         0b:de:2a:88:5b:8a:b5:db:51:71:fc:c5:7a:f4:2e:27:45:ee:
         23:2b:a5:cb:09:01:36:b6:84:68:05:3c:8f:87:bd:22:68:b6:
         10:44:60:c7:66:39:c3:00:8a:a7:64:45:a7:bb:5a:43:ff:a7:
         bb:46:b5:4b:08:a9:b7:c6:59:46:df:df:53:8e:94:cf:d4:73:
         18:7c:cd:38:17:b6:fb:97:c8:34:9e:11:ba:ab:e8:6e:47:d3:
         02:1e:f9:62:36:0b:99:ae:0a:db:c0:0c:eb:f2:02:ca:4c:d1:
         b7:68:aa:2d:16:76:88:53:45:c2:f8:76:1e:95:cf:09:61:50:
         b1:98:6c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----