Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.mft
File:                     9MBkE3SXWli1TsAsEElzLsinCss.mft (raw, json)
Hash identifier:          c9VGSLYNeg/d8udJsblja5bvylFxbsb4NPwD9UOiX/I=
Subject key identifier:   C3:33:46:8A:E9:D3:73:CE:AE:72:EE:EF:24:0E:CF:97:88:85:8B:C8
Authority key identifier: F4:C0:64:13:74:97:5A:58:B5:4E:C0:2C:10:49:73:2E:C8:A7:0A:CB
Certificate issuer:       /CN=A914EF21/serialNumber=F4C0641374975A58B54EC02C1049732EC8A70ACB
Certificate serial:       EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MBkE3SXWli1TsAsEElzLsinCss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.mft
Manifest number:          05CB
Signing time:             Thu 30 Jan 2025 23:48:23 +0000
Manifest this update:     Thu 30 Jan 2025 23:48:23 +0000
Manifest next update:     Thu 06 Feb 2025 23:48:23 +0000
Files and hashes:         1: 9MBkE3SXWli1TsAsEElzLsinCss.crl (hash: RQSFgJaL8KkqNRBi78X0pItAix93ozuWlQc0SKRxAt0=)
                          2: 7740AE687F8A11EE89807F7CC4F9AE02.roa (hash: fvo1aPGM+n05nvJm6qW9Z2hmGhNw4J6QEIdDkjbjrFk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 234 (0xea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EF21/serialNumber=F4C0641374975A58B54EC02C1049732EC8A70ACB
        Validity
            Not Before: Jan 30 23:48:23 2025 GMT
            Not After : Feb  6 23:48:23 2025 GMT
        Subject: CN=679c0fc7-d9e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:15:ff:4a:62:a3:75:8a:59:e6:7f:d0:0c:18:
                    87:d2:bf:6c:91:53:ec:9a:e3:e3:6a:d7:e1:f1:93:
                    36:66:f2:f7:10:0c:62:82:4a:90:39:2b:5b:1b:36:
                    c0:2e:a7:f1:20:23:ab:fa:5d:88:43:23:fe:50:46:
                    59:aa:43:be:6b:bc:3c:86:bb:91:14:ad:0f:3d:c4:
                    93:52:dc:09:9c:d3:58:9c:c6:ab:ed:43:d0:3d:04:
                    2c:7d:1e:1c:e9:5b:f4:46:59:4e:da:9c:c9:9b:0c:
                    7b:fe:ce:f8:e1:84:f4:29:4f:33:1a:cc:1c:6e:b0:
                    8f:a8:c8:42:95:01:6a:8b:67:40:98:69:8b:4f:e1:
                    b0:6d:84:97:ba:03:f5:f8:57:7d:81:cd:b4:60:c9:
                    db:23:56:b3:67:2c:19:ab:3a:f8:80:34:10:b6:9c:
                    83:f1:11:53:83:dd:21:79:1f:28:fa:0d:b2:1c:bd:
                    21:84:2e:4b:d2:23:eb:94:c2:4a:09:dc:fd:cd:ac:
                    97:1a:4a:42:01:8a:31:0b:88:10:77:df:3f:5c:7f:
                    2e:36:0c:81:cb:01:76:e8:36:a1:a6:15:ef:6f:9f:
                    a5:96:7d:28:fb:a4:ad:50:5e:05:cb:27:ef:0a:55:
                    a4:42:bd:45:6d:46:d4:0e:d3:9c:80:7f:90:f4:d6:
                    ac:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:33:46:8A:E9:D3:73:CE:AE:72:EE:EF:24:0E:CF:97:88:85:8B:C8
            X509v3 Authority Key Identifier:
                keyid:F4:C0:64:13:74:97:5A:58:B5:4E:C0:2C:10:49:73:2E:C8:A7:0A:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MBkE3SXWli1TsAsEElzLsinCss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:83:20:60:47:9b:d7:19:59:8c:67:2d:44:53:b0:f1:70:e1:
         b0:29:95:85:f1:4c:09:86:a8:7e:d4:01:5c:66:27:22:9e:f6:
         b2:ea:ae:01:27:44:8d:81:b0:2e:fd:6c:4e:0f:c6:c2:0e:a5:
         97:3c:78:c9:43:29:51:60:21:da:69:8f:0e:0d:34:3b:69:73:
         95:77:79:c8:9b:fc:14:82:25:63:69:a9:fd:b4:86:27:44:f4:
         86:6d:f3:90:ec:69:52:9b:19:fb:75:db:e7:97:a0:0b:fd:a9:
         68:5a:f8:35:09:4d:68:5a:51:8d:73:ed:ef:e2:70:dc:f5:c5:
         c4:17:6f:6e:c1:93:ac:e4:f1:bb:4d:8e:d9:48:c0:de:ac:7c:
         f0:d4:57:83:b6:25:aa:8f:74:28:ff:07:4c:96:e4:ba:06:00:
         76:e3:c9:72:52:a6:05:29:39:9b:3f:ad:bf:36:ca:e5:cf:bf:
         0e:f4:c2:99:bb:36:38:91:77:c6:85:e3:84:25:b2:55:05:d4:
         f3:66:48:c4:74:66:bf:97:bd:b6:8b:fe:5b:f8:21:37:d2:32:
         bb:e8:99:27:09:13:39:18:80:75:86:b5:37:2b:e5:f1:88:7a:
         de:5d:4b:8e:28:f9:bc:95:fa:af:27:09:79:26:6b:c6:66:f9:
         a4:79:5a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----