Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft
File:                     YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft (raw, json)
Hash identifier:          EViqXnRUyNXLvb4EXEJ5nQXXrdLBATjdHLZlGNZohYQ=
Subject key identifier:   75:3E:5E:16:7D:DD:4B:F4:82:CA:7F:FE:94:C3:6E:11:37:91:5C:AF
Authority key identifier: 62:4B:96:E1:D6:65:ED:78:E7:8D:FA:F6:C2:20:19:10:73:DB:66:CC
Certificate issuer:       /CN=A91685E9/serialNumber=624B96E1D665ED78E78DFAF6C220191073DB66CC
Certificate serial:       37
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft
Manifest number:          26
Signing time:             Fri 31 Jan 2025 07:11:06 +0000
Manifest this update:     Fri 31 Jan 2025 07:11:06 +0000
Manifest next update:     Fri 07 Feb 2025 07:11:06 +0000
Files and hashes:         1: YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl (hash: 8jIOHqJTyn9powkwIOQK7S9Mel7dW9ulOp7yvRUwB6A=)
                          2: E3239FCAD48C11EFA27EEC37C4F9AE02.roa (hash: fYzwGdwCqYZskymy95U02CPM2CRp+XXOXIkMFaQRIIM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91685E9/serialNumber=624B96E1D665ED78E78DFAF6C220191073DB66CC
        Validity
            Not Before: Jan 31 07:11:06 2025 GMT
            Not After : Feb  7 07:11:06 2025 GMT
        Subject: CN=679c778a-4625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:62:4e:b5:40:41:eb:b2:42:01:3b:45:af:7a:
                    5c:80:84:17:97:a9:75:c2:c9:01:5d:c7:1d:c3:d2:
                    9f:01:86:8d:92:59:13:ae:76:a1:22:16:2b:2b:d1:
                    44:a5:c3:f4:53:29:38:03:ba:02:62:f8:1d:07:e6:
                    73:e4:60:9b:a8:9b:93:c2:77:3d:6f:0e:4d:89:53:
                    1e:fb:00:49:0c:57:a7:af:ec:62:d6:ff:2c:1b:4e:
                    0b:70:eb:12:b3:d4:5c:2f:fb:01:1d:42:d4:8c:d8:
                    a7:aa:7c:6e:8d:1b:33:06:4e:3a:15:ea:c1:d2:a1:
                    25:48:96:e3:e6:c5:6c:82:77:c9:92:7f:aa:97:9b:
                    e6:b4:2f:88:71:6f:7e:ad:36:c9:e1:6a:53:7a:87:
                    e3:3d:63:8c:0f:25:77:9b:3c:5d:d8:be:8e:08:42:
                    15:d8:db:fe:db:6c:f8:56:d4:92:f2:8a:09:f9:a6:
                    a0:d7:4e:52:b7:bc:87:9a:54:b5:1a:f0:d8:79:fd:
                    32:10:76:e3:22:ac:04:42:fb:a9:e7:dd:ea:8c:7d:
                    12:8c:aa:4e:dc:dc:8a:d3:60:d4:7d:83:b5:92:bd:
                    b9:85:5d:c3:e6:79:5a:ff:aa:e5:d2:67:57:9a:0d:
                    e8:a2:12:9b:4a:0f:f7:f6:23:60:a0:28:94:5c:5c:
                    e8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:3E:5E:16:7D:DD:4B:F4:82:CA:7F:FE:94:C3:6E:11:37:91:5C:AF
            X509v3 Authority Key Identifier:
                keyid:62:4B:96:E1:D6:65:ED:78:E7:8D:FA:F6:C2:20:19:10:73:DB:66:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:a7:b8:d4:66:b0:12:e4:a3:3c:b7:28:04:4c:c9:12:d7:89:
         cf:14:a9:78:f4:39:50:6d:88:b1:3f:5a:01:9c:39:d4:81:12:
         82:28:28:57:a5:fb:b2:bc:4e:3e:97:b3:51:8e:16:9f:65:c7:
         c3:5d:d9:c1:5c:88:78:4c:42:c3:58:50:33:b1:60:c9:93:eb:
         f3:ec:a3:2b:62:2b:f5:b4:d7:92:ce:07:fc:b1:47:67:0a:b7:
         8a:47:e8:db:07:ee:a9:ad:86:69:59:77:b4:c3:58:ef:28:25:
         ef:bc:f9:da:03:c3:8e:78:60:00:46:4a:83:c4:33:af:2d:0c:
         d1:25:68:dc:85:14:b5:d7:c3:60:15:78:1e:13:4b:9f:19:a6:
         34:4f:09:f1:ca:f1:09:23:87:fb:f8:00:fc:37:5c:93:ec:bc:
         fc:58:0f:fe:30:1d:6f:2c:d5:61:bd:e5:3c:80:ac:f1:79:8a:
         8b:c9:28:17:7b:bf:20:cf:36:f8:fe:09:bb:d7:55:0e:58:13:
         73:29:62:59:dc:66:9f:67:92:8f:84:26:75:e9:da:be:79:9b:
         ba:74:61:f5:47:cd:a2:a7:3b:e5:b4:4a:71:02:37:c2:2e:2e:
         a0:6f:71:c0:91:4d:94:55:04:f7:8f:7b:ee:65:43:a0:ba:4e:
         30:b2:fb:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----