Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B165/6A3EB8B6C2B111EA920BB94AC4F9AE02/2gQijT7rRR_A8iM2aXFwV_irNmk.mft
File:                     2gQijT7rRR_A8iM2aXFwV_irNmk.mft (raw, json)
Hash identifier:          Jo7xuJMDvT4hKQ39fm3LrOOKGLui5UyRfN243NnrnvM=
Subject key identifier:   FA:C9:08:29:C0:99:96:97:EE:07:99:29:0D:2F:F3:36:77:8C:09:6A
Authority key identifier: DA:04:22:8D:3E:EB:45:1F:C0:F2:23:36:69:71:70:57:F8:AB:36:69
Certificate issuer:       /CN=A914B165/serialNumber=DA04228D3EEB451FC0F2233669717057F8AB3669
Certificate serial:       083E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gQijT7rRR_A8iM2aXFwV_irNmk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B165/6A3EB8B6C2B111EA920BB94AC4F9AE02/2gQijT7rRR_A8iM2aXFwV_irNmk.mft
Manifest number:          0838
Signing time:             Thu 30 Jan 2025 20:49:14 +0000
Manifest this update:     Thu 30 Jan 2025 20:49:13 +0000
Manifest next update:     Thu 06 Feb 2025 20:49:13 +0000
Files and hashes:         1: 2gQijT7rRR_A8iM2aXFwV_irNmk.crl (hash: UuDnRCKR/5aMt/lGnRY5OohAwZaxfHFv91zblkmiZ7E=)
                          2: 26AECD92C2B211EABBD0ED4AC4F9AE02.roa (hash: 8bFMS7lUFa5a04616nMhBCIyPXjI0vGFlv2YHmEk/tM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2110 (0x83e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B165/serialNumber=DA04228D3EEB451FC0F2233669717057F8AB3669
        Validity
            Not Before: Jan 30 20:49:13 2025 GMT
            Not After : Feb  6 20:49:13 2025 GMT
        Subject: CN=679be5c9-80b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:91:86:cc:4e:52:44:86:56:6a:0e:01:79:9b:
                    2b:61:d9:c9:ec:54:f0:24:d3:0b:e4:26:fc:8b:53:
                    93:4c:46:b8:d2:43:db:22:ac:f5:6b:56:ad:53:76:
                    b9:df:6d:0c:f1:45:7a:7e:d8:f2:8c:f2:4d:ff:41:
                    a6:f4:28:54:ad:2d:63:92:d4:9b:19:7b:f3:82:38:
                    eb:91:72:1d:56:7e:cd:38:6f:c4:0a:0a:c3:fd:9e:
                    c6:bf:32:92:5b:76:2a:ba:93:47:63:b1:09:f6:8e:
                    8b:fe:28:ed:4d:ca:25:a0:25:ad:0a:26:66:22:fb:
                    50:e6:c4:1a:6d:cf:b7:c4:86:41:5b:5b:8c:4d:b5:
                    3e:93:e6:11:cc:e5:bd:29:18:94:b0:1b:59:50:b0:
                    8b:c8:48:af:0e:6b:90:f6:7b:71:65:a1:d8:71:cf:
                    d4:0a:05:3c:26:2f:4d:b3:3e:1a:6b:09:9e:19:b2:
                    dd:6d:56:0a:22:ea:b2:ad:81:17:1d:19:a1:c9:9b:
                    bd:d1:39:81:f5:f0:29:6a:b7:ff:5d:65:6a:75:6a:
                    42:d3:b0:42:e3:0a:91:48:04:ec:f7:89:9c:77:36:
                    86:7f:b7:7c:40:65:98:04:ab:cc:d0:cc:92:fb:c6:
                    6a:94:a3:ea:4b:e2:20:74:f2:09:df:ba:8e:7b:76:
                    42:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:C9:08:29:C0:99:96:97:EE:07:99:29:0D:2F:F3:36:77:8C:09:6A
            X509v3 Authority Key Identifier:
                keyid:DA:04:22:8D:3E:EB:45:1F:C0:F2:23:36:69:71:70:57:F8:AB:36:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B165/6A3EB8B6C2B111EA920BB94AC4F9AE02/2gQijT7rRR_A8iM2aXFwV_irNmk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gQijT7rRR_A8iM2aXFwV_irNmk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B165/6A3EB8B6C2B111EA920BB94AC4F9AE02/2gQijT7rRR_A8iM2aXFwV_irNmk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:41:82:9c:d4:17:cb:92:3f:d2:0c:97:55:ca:b8:94:5a:5b:
         95:29:b5:41:b4:c7:36:1f:78:48:43:28:b1:89:11:fa:16:41:
         35:ec:f1:fb:54:5f:da:9a:ce:6e:10:75:fa:08:70:9b:c3:e4:
         07:51:9b:2f:24:71:14:53:a5:32:06:01:56:5e:b0:c3:87:02:
         1f:df:90:40:49:34:d2:f4:84:0c:4b:b5:08:15:40:62:c0:1e:
         bd:ee:9d:a6:9f:27:a4:cd:ae:d1:a2:e6:83:db:68:d1:a5:8b:
         ba:81:d4:87:e5:55:f1:ee:b2:99:44:30:31:5d:8e:28:d5:59:
         b2:85:a3:57:82:27:b8:64:3d:5e:61:30:50:cd:93:be:70:fe:
         10:6c:0d:3a:ae:34:d9:a7:6e:08:55:b5:e7:4e:16:72:69:c7:
         37:c1:93:28:14:7c:91:c8:4a:e2:24:55:73:1d:f1:fd:61:79:
         c8:d6:7f:16:45:e4:f5:43:80:6b:5f:d7:29:cd:0a:da:9e:3d:
         8a:5a:20:13:85:8d:d7:3e:7b:76:d2:17:4e:e4:f8:a4:8e:df:
         cf:aa:99:80:45:81:cd:30:99:d8:c9:c2:6b:98:c8:07:80:1c:
         77:a2:9a:b3:63:22:51:e4:ec:39:28:e2:ad:e8:ba:59:65:a9:
         8c:2c:7d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----