Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft
File:                     cLDwRtLzp0OW6Cx56OPazyYLOe4.mft (raw, json)
Hash identifier:          261V2jGe/jXbsGJvsoeKj7U06VkY5JBcXElGHatqFKg=
Subject key identifier:   4A:C8:FA:4E:35:B2:6A:44:A5:90:30:AF:9C:A7:36:38:0F:26:E8:6E
Authority key identifier: 70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE
Certificate issuer:       /CN=A916B6AA/serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE
Certificate serial:       2457
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft
Manifest number:          241C
Signing time:             Fri 31 Jan 2025 15:49:01 +0000
Manifest this update:     Fri 31 Jan 2025 15:49:00 +0000
Manifest next update:     Fri 07 Feb 2025 15:49:00 +0000
Files and hashes:         1: cLDwRtLzp0OW6Cx56OPazyYLOe4.crl (hash: ZmoWfuDK2xNuM4653Rl3vIiHY801lNhEgif7JwHGQNM=)
                          2: 83684F548DF411E7A230506DC4F9AE02.roa (hash: AclspnZ8iw2tHm0IKz4UG4ixLk56q+FHizPSEyIU7Yg=)
                          3: 1A8324E28DF311E7B616ED66C4F9AE02.roa (hash: Xinmf1pF0nmD8G1dr/8oh0iZ6My9MutoBSmESSGjfhg=)
                          4: E080F3508DFC11E7A7F08785C4F9AE02.roa (hash: n5Den4WYpFKZqIXrlnguXiXrj/0j5bJGPd+BTJZJ0No=)
                          5: 19C92BC88DF311E7B616ED66C4F9AE02.roa (hash: jSQyyyapjlhB60qfeUaNeUQVSh1wYlF7bLfS517NK9o=)
                          6: B2ED9AEE913311E79B98C45BC4F9AE02.roa (hash: ay5i7tS86bmO9kaJDJPqeE4jRkBcKwVm9OWVagFYZoQ=)
                          7: 5C9B073691CD11E7AD932563C4F9AE02.roa (hash: qDvUpQ+pcBdp3oNoCaw3VUb20gdJh67KqNBk3Z1ztMU=)
                          8: 027532E6385F11EAA879692AC4F9AE02.roa (hash: wjHexyPvkPualq2gUM9+dQ9qJ+4Kj5YvVI5QrOdw33k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9303 (0x2457)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B6AA/serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE
        Validity
            Not Before: Jan 31 15:49:00 2025 GMT
            Not After : Feb  7 15:49:00 2025 GMT
        Subject: CN=679cf0ed-5628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:01:7d:c1:ef:ac:6e:c7:6a:20:f4:52:f3:df:
                    17:4a:5e:ca:49:19:6b:cf:df:22:07:3b:b4:b0:c9:
                    7e:ee:bb:6a:bf:22:df:24:0c:43:4d:03:1a:59:25:
                    fd:c2:83:d3:f3:fd:d6:09:e8:80:a4:91:55:48:b5:
                    8d:27:f1:b1:21:18:6b:46:b0:a0:e9:f6:27:76:8c:
                    5d:98:de:95:04:75:35:fa:40:ef:a7:c2:41:1c:f7:
                    77:8a:14:01:f2:44:a4:ac:04:b7:dc:94:ae:61:ba:
                    2b:da:0b:58:49:8d:8d:9d:8b:76:f1:f8:ab:bf:5c:
                    22:19:ad:ac:71:b6:26:83:0c:32:44:42:3e:0d:e9:
                    53:be:b8:7a:f8:57:4a:80:bb:10:75:cb:be:63:42:
                    f0:cc:37:fa:0a:21:b1:b7:48:4f:3c:ee:81:37:87:
                    8b:b6:e3:f6:ec:00:2f:9d:5a:a5:b0:52:12:e8:cf:
                    f8:2e:e9:8c:87:98:18:91:bd:36:25:82:61:a8:aa:
                    a4:75:79:de:55:d6:cb:3a:6a:e2:a3:0b:e3:65:a3:
                    3d:6a:ac:da:75:53:5a:2c:73:ba:9e:75:4b:87:0a:
                    ef:2d:d0:d9:d0:66:a1:e0:47:6c:64:f2:f4:5e:f2:
                    7b:1f:53:d3:97:be:a8:4d:40:a4:7c:f9:3f:37:68:
                    5a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:C8:FA:4E:35:B2:6A:44:A5:90:30:AF:9C:A7:36:38:0F:26:E8:6E
            X509v3 Authority Key Identifier:
                keyid:70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:bf:18:d6:0e:79:4a:19:fc:64:ab:20:9d:37:a7:bb:8e:dc:
         80:be:2d:6d:94:63:5d:29:08:00:3c:53:b9:37:c3:61:04:1d:
         5f:d3:64:b0:1b:94:64:06:d9:61:46:48:d0:7f:fb:b8:54:59:
         92:0f:68:83:52:42:39:13:24:76:59:21:53:3c:ec:b7:d1:3e:
         22:7e:7d:e3:cc:3c:c0:ba:7b:39:6b:5f:59:52:5e:e6:c7:b3:
         d1:ba:1b:f1:81:a3:19:d4:2f:05:6a:86:ef:03:1c:e9:8b:55:
         b5:16:c1:78:45:ec:b0:ab:28:e3:c3:49:c5:c7:d1:e8:16:33:
         ae:e7:be:2d:9f:cd:cf:eb:cb:4d:f5:88:d7:30:7b:54:42:21:
         99:4c:c7:72:1e:58:db:1c:8e:c8:8e:2f:fc:aa:7b:58:0b:d5:
         2b:9c:07:0f:90:86:07:38:e1:c9:15:39:36:a7:45:72:c6:3e:
         e7:93:a8:a0:10:4c:e7:5e:8f:b9:4c:33:46:c5:56:17:f5:89:
         c4:f7:60:e2:d3:36:0f:e0:86:43:09:cb:88:0c:96:56:56:5d:
         ce:84:69:f2:48:c5:39:48:8a:fa:11:96:92:3f:5d:bf:2a:bb:
         81:01:37:91:3e:98:23:19:74:c5:39:c9:a6:c8:cd:9d:59:ab:
         ec:f1:0c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----