Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft
File:                     B-7MRCaowz1FkLzaEtl1DEkEhX0.mft (raw, json)
Hash identifier:          HIoZ1hZoWtylmFeAZu7Q7PSA1Hq0rFTVgLuZqZBGU8Q=
Subject key identifier:   AB:D9:A4:00:7C:44:55:D6:44:1B:C0:BC:AD:E4:83:07:9A:74:EA:91
Authority key identifier: 07:EE:CC:44:26:A8:C3:3D:45:90:BC:DA:12:D9:75:0C:49:04:85:7D
Certificate issuer:       /CN=A914C90B/serialNumber=07EECC4426A8C33D4590BCDA12D9750C4904857D
Certificate serial:       A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-7MRCaowz1FkLzaEtl1DEkEhX0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft
Manifest number:          A1
Signing time:             Fri 31 Jan 2025 05:20:57 +0000
Manifest this update:     Fri 31 Jan 2025 05:20:56 +0000
Manifest next update:     Fri 07 Feb 2025 05:20:56 +0000
Files and hashes:         1: B-7MRCaowz1FkLzaEtl1DEkEhX0.crl (hash: RHPth8ZIdPeXAED63n8d8r/gjzhl+HSlqWhTfxBLG4M=)
                          2: 52BD65B4E7D511EE8C353D2AC4F9AE02.roa (hash: zFf97/9MWDJ1OuFa86jOAQdYZPSbsznuzGtJuPn2650=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162 (0xa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C90B/serialNumber=07EECC4426A8C33D4590BCDA12D9750C4904857D
        Validity
            Not Before: Jan 31 05:20:56 2025 GMT
            Not After : Feb  7 05:20:56 2025 GMT
        Subject: CN=679c5db9-a7eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:25:a1:04:30:5a:8b:1b:d7:2b:f8:9d:1d:ed:
                    d2:2d:3f:de:92:d0:40:3e:05:5c:f0:73:cc:41:f8:
                    90:e4:bb:5b:f0:e6:53:ed:3b:45:e6:e0:16:b4:e7:
                    c5:2d:33:72:3e:64:7f:43:0f:06:36:21:a4:4f:0a:
                    27:48:9a:f8:13:b4:f2:23:ae:a0:9f:df:54:35:ce:
                    fa:fa:3d:d4:da:1f:d3:6f:e7:1d:8e:86:68:be:1d:
                    5e:8d:06:50:16:a5:39:41:54:b4:c5:eb:e1:a9:6d:
                    77:d2:db:7e:8d:5f:86:60:a9:ed:49:0d:3b:ef:c3:
                    bc:2a:e7:29:0b:32:47:7e:7b:2f:d7:e8:76:fc:cc:
                    00:10:f7:a7:07:16:a3:1b:2f:55:ae:6b:ce:b6:d8:
                    39:ee:27:7e:84:56:99:cc:6e:0b:4e:b6:d3:56:72:
                    7a:6e:11:a6:64:b0:39:79:b2:e6:6f:ba:a3:cf:e4:
                    fd:0c:b1:bc:0d:f9:0e:90:78:fe:fa:b4:be:1e:2d:
                    9d:45:03:08:31:c1:51:30:f3:fd:6f:d7:98:46:50:
                    f4:c3:7e:be:e6:a9:0c:f8:db:b9:5a:91:09:32:de:
                    cd:fd:f4:db:d0:04:27:70:81:8c:0e:2b:eb:7a:e6:
                    d6:60:b4:0b:15:29:49:9a:f4:54:c2:21:80:c2:c6:
                    df:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:D9:A4:00:7C:44:55:D6:44:1B:C0:BC:AD:E4:83:07:9A:74:EA:91
            X509v3 Authority Key Identifier:
                keyid:07:EE:CC:44:26:A8:C3:3D:45:90:BC:DA:12:D9:75:0C:49:04:85:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-7MRCaowz1FkLzaEtl1DEkEhX0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:1d:dd:82:a1:5a:15:56:ba:63:55:08:d5:de:74:78:c8:f6:
         00:24:f3:31:8d:f2:f1:4a:e0:d6:67:5e:f5:c1:c0:15:f3:12:
         b8:e1:4e:9f:1b:32:34:5d:b1:f5:88:46:f8:f1:6f:a4:58:0e:
         21:31:2b:b0:6a:b4:42:1a:af:e6:0e:9c:06:f0:56:20:0c:fa:
         09:41:e4:5c:4d:e4:9b:35:b6:cf:b7:89:56:be:60:66:aa:92:
         c6:b1:d9:7f:db:57:4a:4a:62:0d:5a:2a:c6:32:2b:98:b9:57:
         9d:bd:8d:a6:61:ea:44:0a:8a:57:6d:5f:65:dc:22:b5:a2:b2:
         8c:08:f1:ee:08:19:23:df:8e:ff:6a:d6:7b:b3:98:35:8d:99:
         c2:c3:7e:8d:f8:0f:28:c4:8e:4b:76:20:e6:e8:0e:bc:80:bd:
         d0:2e:37:2e:7b:c8:59:e8:3c:50:f5:32:7d:3f:11:17:bb:43:
         a5:87:ac:f7:d4:9f:73:b1:f2:01:48:e4:d2:f4:ea:40:3f:a7:
         d8:9e:6a:74:de:fa:44:b7:23:e2:9c:ec:65:a4:cc:a8:bc:89:
         0d:66:f6:e2:02:e6:09:00:7c:88:80:bb:6f:fc:5c:41:39:db:
         9d:de:07:1f:58:7a:04:f9:8d:93:76:84:87:25:2b:a9:62:b9:
         11:38:39:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----