Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167CB5/FA37C63E225611EFB7561F46C4F9AE02/-oEfUuUZWkKdcG0ZwAMjfDIJqjc.mft
File:                     -oEfUuUZWkKdcG0ZwAMjfDIJqjc.mft (raw, json)
Hash identifier:          /0GJdGY3FTLUNL8idvCxnKgJAnuKyQBpKfa/Dhq0Tuk=
Subject key identifier:   F0:FF:71:4F:14:14:88:AC:C2:DB:26:6A:FD:E6:92:95:D7:7C:94:17
Authority key identifier: FA:81:1F:52:E5:19:5A:42:9D:70:6D:19:C0:03:23:7C:32:09:AA:37
Certificate issuer:       /CN=A9167CB5/serialNumber=FA811F52E5195A429D706D19C003237C3209AA37
Certificate serial:       7D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-oEfUuUZWkKdcG0ZwAMjfDIJqjc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167CB5/FA37C63E225611EFB7561F46C4F9AE02/-oEfUuUZWkKdcG0ZwAMjfDIJqjc.mft
Manifest number:          7C
Signing time:             Fri 31 Jan 2025 05:45:14 +0000
Manifest this update:     Fri 31 Jan 2025 05:45:13 +0000
Manifest next update:     Fri 07 Feb 2025 05:45:13 +0000
Files and hashes:         1: -oEfUuUZWkKdcG0ZwAMjfDIJqjc.crl (hash: o3QpvLqtPwBzq4PDtodJYjeufzXKViso6m3cbh4L4VU=)
                          2: D16A1B5C225711EF975F6747C4F9AE02.roa (hash: 8wJfVmwicvQp5ybkXyvh/U8tiFP/mOR8lTRB18DXQ0w=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125 (0x7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167CB5/serialNumber=FA811F52E5195A429D706D19C003237C3209AA37
        Validity
            Not Before: Jan 31 05:45:13 2025 GMT
            Not After : Feb  7 05:45:13 2025 GMT
        Subject: CN=679c6369-052c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ab:87:ef:9e:8b:4c:8b:0f:16:92:2b:9d:23:
                    50:7a:f7:a7:0b:11:3c:39:70:3b:c5:b5:f4:2f:45:
                    38:0f:fd:fa:f2:8e:dd:96:cc:47:56:c5:66:69:73:
                    67:f5:85:ed:f1:b2:7c:9c:7c:05:5d:95:f2:c2:c8:
                    44:f5:bb:19:66:a5:27:02:44:d4:66:0c:fa:32:31:
                    e7:38:ba:ed:48:bf:6e:99:b8:cf:88:b6:2e:95:62:
                    61:a9:0a:0a:8f:08:38:6f:63:40:99:b2:ec:cd:bd:
                    88:41:a8:49:59:14:9c:86:55:95:dd:10:fd:00:59:
                    ef:1b:1b:ce:41:9e:1e:07:63:e3:ae:07:97:02:36:
                    bd:df:eb:84:b5:30:f6:07:8a:e3:51:3c:09:70:41:
                    1f:ac:fa:29:7e:15:9b:91:18:fb:77:db:0b:bb:4a:
                    98:96:62:e7:25:19:13:db:46:5c:3e:dd:4f:8d:e4:
                    6e:c0:bd:4d:f2:75:e5:8a:3d:c7:8b:05:84:e3:16:
                    14:88:87:0c:a6:cd:77:6a:f4:25:83:53:5c:6d:6d:
                    36:25:30:4a:d7:5a:96:dc:53:96:a6:24:7d:64:20:
                    2c:81:21:9a:54:ef:56:24:a7:1c:10:fe:05:83:d4:
                    40:5f:4f:75:87:dc:b3:01:f4:28:1d:d9:0c:06:af:
                    84:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:FF:71:4F:14:14:88:AC:C2:DB:26:6A:FD:E6:92:95:D7:7C:94:17
            X509v3 Authority Key Identifier:
                keyid:FA:81:1F:52:E5:19:5A:42:9D:70:6D:19:C0:03:23:7C:32:09:AA:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167CB5/FA37C63E225611EFB7561F46C4F9AE02/-oEfUuUZWkKdcG0ZwAMjfDIJqjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-oEfUuUZWkKdcG0ZwAMjfDIJqjc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167CB5/FA37C63E225611EFB7561F46C4F9AE02/-oEfUuUZWkKdcG0ZwAMjfDIJqjc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:51:04:91:04:3a:cf:ce:46:b9:90:95:c6:f3:b7:98:8c:01:
         2d:d1:35:ad:69:88:ee:ba:86:bf:59:3f:be:29:7a:38:cb:39:
         30:d5:07:a9:01:11:b7:fe:72:6e:ce:3f:b2:70:83:25:a7:03:
         b7:d7:56:d5:e9:19:dc:03:d4:8e:99:9b:ca:91:f2:bd:0e:52:
         19:d4:51:22:e3:1e:fd:dd:e0:fe:c3:89:d3:83:24:58:82:b5:
         06:9b:46:1d:19:59:18:69:9a:6c:d2:3e:37:de:99:fa:34:84:
         9e:86:f1:93:f4:b0:92:c1:61:f2:81:99:35:c2:f1:72:fd:8b:
         bc:d4:01:50:5a:83:eb:37:82:33:18:e4:2c:a8:c6:7c:ad:e7:
         14:78:12:42:1b:15:c0:26:27:91:17:86:a2:be:7f:89:d1:e4:
         2f:e0:c2:1b:85:e6:f4:b4:63:f7:4f:70:e1:49:fe:8f:fd:7c:
         1c:95:82:90:c2:f6:fb:cf:70:a6:45:6a:2e:dc:9c:87:35:b3:
         a3:8a:ad:13:85:e8:e0:6b:b3:ea:bc:6a:cf:f6:d0:1f:fa:03:
         46:78:65:92:f5:71:e4:4a:39:38:02:dd:5a:65:41:64:6b:79:
         7e:68:9f:90:c2:12:09:e0:42:c1:0e:eb:1c:de:1a:9c:56:96:
         6a:3c:a3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----