Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B0A3/71ADE1FED82811E4AA7C8A47C4F9AE02/2o28OwmXQtOr0qiV3RM5iTuaj18.mft
File:                     2o28OwmXQtOr0qiV3RM5iTuaj18.mft (raw, json)
Hash identifier:          mEJR/oW3fpv4soXkAz1R/egdcInAN8xrMFU0WY/iKoM=
Subject key identifier:   C7:B1:2A:FC:3B:33:96:31:77:F5:12:C1:CA:57:36:9B:A3:52:42:7F
Authority key identifier: DA:8D:BC:3B:09:97:42:D3:AB:D2:A8:95:DD:13:39:89:3B:9A:8F:5F
Certificate issuer:       /CN=A916B0A3/serialNumber=DA8DBC3B099742D3ABD2A895DD1339893B9A8F5F
Certificate serial:       0B3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2o28OwmXQtOr0qiV3RM5iTuaj18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B0A3/71ADE1FED82811E4AA7C8A47C4F9AE02/2o28OwmXQtOr0qiV3RM5iTuaj18.mft
Manifest number:          31A9
Signing time:             Fri 31 Jan 2025 15:42:18 +0000
Manifest this update:     Fri 31 Jan 2025 15:42:17 +0000
Manifest next update:     Fri 07 Feb 2025 15:42:17 +0000
Files and hashes:         1: 2o28OwmXQtOr0qiV3RM5iTuaj18.crl (hash: WcwNP43vUp58acTZzpc/L9u4tormM3eBcAZd+fXxlSw=)
                          2: 0B6054BA851E11EA86E0DF24C4F9AE02.roa (hash: MgTUngCCzikGCV51wBox1XfJC+wHmw6xDYqUAEuxnEk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2879 (0xb3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B0A3/serialNumber=DA8DBC3B099742D3ABD2A895DD1339893B9A8F5F
        Validity
            Not Before: Jan 31 15:42:17 2025 GMT
            Not After : Feb  7 15:42:17 2025 GMT
        Subject: CN=679cef59-c486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:75:0c:ea:ee:43:2c:1b:82:c4:c6:c9:12:d8:
                    59:35:47:96:4d:e1:60:e7:5d:27:1a:f4:55:ea:5a:
                    af:0b:ed:9f:bc:7e:5a:5d:0d:41:db:c2:32:0d:c8:
                    d0:cd:ff:d5:c7:00:98:c0:0c:a3:aa:8f:9f:8a:f5:
                    73:7a:47:c1:6e:fe:a0:1b:a5:49:71:f6:cb:8c:1f:
                    b3:81:9d:0f:61:44:39:80:6b:37:ea:01:bb:50:d6:
                    2d:13:cf:67:75:be:31:25:71:c6:5f:86:42:1a:9a:
                    43:06:67:4d:73:9a:42:7e:32:e1:fb:85:04:e5:c7:
                    d3:18:49:33:30:0e:97:a4:20:35:f3:73:5c:ba:62:
                    c4:6b:e9:aa:f2:3a:28:26:11:3d:11:e8:7b:4d:2d:
                    2c:14:37:9e:fe:c7:d4:17:2d:1c:d1:a7:cc:c0:9d:
                    e2:5d:f4:13:30:52:d2:03:9f:0c:8d:c8:6e:8f:97:
                    b7:70:9c:c5:68:15:56:bf:0b:4a:3d:9f:17:19:0d:
                    84:48:b4:e3:d4:d2:61:27:23:43:bd:f6:e1:2e:d1:
                    9a:15:65:06:f2:dd:94:20:c2:ec:74:df:8e:34:04:
                    2d:e2:d6:28:b9:e8:32:8f:e8:29:a4:81:e8:55:e2:
                    52:2b:5b:08:0f:cd:d5:ed:d9:b6:42:b4:6b:7e:70:
                    eb:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B1:2A:FC:3B:33:96:31:77:F5:12:C1:CA:57:36:9B:A3:52:42:7F
            X509v3 Authority Key Identifier:
                keyid:DA:8D:BC:3B:09:97:42:D3:AB:D2:A8:95:DD:13:39:89:3B:9A:8F:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B0A3/71ADE1FED82811E4AA7C8A47C4F9AE02/2o28OwmXQtOr0qiV3RM5iTuaj18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2o28OwmXQtOr0qiV3RM5iTuaj18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B0A3/71ADE1FED82811E4AA7C8A47C4F9AE02/2o28OwmXQtOr0qiV3RM5iTuaj18.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:e7:97:67:bd:47:a0:5c:17:25:4d:6a:1e:52:c7:57:9c:80:
         37:d9:ae:16:6d:0b:0f:6d:bd:4d:fa:f2:79:55:5f:5f:2e:78:
         70:c9:14:93:a2:3d:d6:2b:07:43:0a:11:7e:47:31:5f:5c:2b:
         ad:34:4c:89:ce:d7:c2:6e:74:71:48:52:4a:92:9e:80:81:8b:
         94:74:f3:15:5b:2c:6b:77:f9:b4:2d:bb:8e:0d:3e:3c:30:b8:
         c4:5d:98:09:48:da:1d:68:7e:92:f1:70:e0:12:ce:9d:4e:5e:
         a3:87:73:33:8b:d7:e8:06:38:df:e5:90:b2:e3:5e:6f:4e:dc:
         53:cf:98:38:9e:d4:28:55:28:f5:f8:7b:2f:2c:01:e4:a3:47:
         cc:eb:0a:59:88:38:c5:ec:61:28:70:a2:0a:7d:97:b3:1b:6a:
         da:cb:30:f1:01:42:29:1e:c4:a2:bc:ad:df:91:6c:24:29:2e:
         24:63:4e:76:94:37:f8:d3:f2:5e:3c:9c:75:2d:ad:a2:12:19:
         dd:ad:93:1e:62:ca:a2:41:51:60:c9:66:78:2c:41:b7:45:a9:
         65:db:15:6f:4f:7a:16:a9:1c:03:9c:65:ef:1c:01:62:fc:07:
         a7:cd:bd:97:f5:55:c5:cb:57:77:38:0d:20:b4:9a:4a:d1:98:
         fa:b2:b3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----