Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft
File:                     GzpBGgdaXbGixkL41KG8PLW8uxw.mft (raw, json)
Hash identifier:          h7/4DZ8SWX5u+9B0XPYQ5BIpnHDwOrlU77kl+P3FSCI=
Subject key identifier:   2C:E4:65:DF:92:2E:82:1D:E0:5E:9C:BC:E0:4B:D2:57:9A:57:75:8A
Authority key identifier: 1B:3A:41:1A:07:5A:5D:B1:A2:C6:42:F8:D4:A1:BC:3C:B5:BC:BB:1C
Certificate issuer:       /CN=A916C3CC/serialNumber=1B3A411A075A5DB1A2C642F8D4A1BC3CB5BCBB1C
Certificate serial:       01BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft
Manifest number:          01B8
Signing time:             Fri 31 Jan 2025 02:21:53 +0000
Manifest this update:     Fri 31 Jan 2025 02:21:53 +0000
Manifest next update:     Fri 07 Feb 2025 02:21:53 +0000
Files and hashes:         1: GzpBGgdaXbGixkL41KG8PLW8uxw.crl (hash: eeLFYCq25IiTwmO4lRlmFSf2AkoAbTG85KnIY6tJURM=)
                          2: F1F8A98442D811ED854B9670C4F9AE02.roa (hash: 77+2jyZbjFuOwQaQ18eSMUiIbLupIdmVr2AiPrnK1EI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 445 (0x1bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C3CC/serialNumber=1B3A411A075A5DB1A2C642F8D4A1BC3CB5BCBB1C
        Validity
            Not Before: Jan 31 02:21:53 2025 GMT
            Not After : Feb  7 02:21:53 2025 GMT
        Subject: CN=679c33c1-8448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ad:4d:57:72:86:f0:0a:a9:35:9f:12:45:fb:
                    d0:39:ea:14:f6:b9:68:f0:22:bc:81:d9:d6:e7:88:
                    8d:3b:9a:37:4c:56:6b:c2:65:d5:fe:a6:64:b1:15:
                    04:2e:6f:e1:dd:e1:5d:c3:a3:2d:e0:86:b0:85:73:
                    b0:d8:fa:05:61:5b:fd:32:b4:b3:cd:a9:d4:7c:05:
                    7b:5b:16:e4:74:5b:04:62:54:d4:20:cb:83:d0:95:
                    71:dc:8a:2c:21:d2:6e:5d:b6:87:e7:dc:e9:2b:18:
                    d9:13:0f:25:c1:66:79:2c:92:4e:f1:24:73:60:3b:
                    c8:a8:9b:a7:b4:7f:73:19:24:30:e5:d1:73:d9:da:
                    65:d1:cb:11:90:0c:3f:53:92:a6:ae:02:ca:26:f9:
                    fa:13:4e:43:8b:0a:78:ee:b0:ec:c6:01:b9:0c:27:
                    ee:ab:4f:18:59:4d:fa:2d:96:46:bf:f3:08:4e:48:
                    ca:cf:a9:56:57:5c:c8:52:5a:b7:77:a2:4e:7e:a5:
                    1f:2e:f7:3c:9a:96:73:08:50:ab:1e:dc:93:b1:45:
                    e7:df:7f:32:5a:22:0f:e6:e3:b2:b0:8e:ed:bb:dd:
                    f6:41:83:c4:19:ac:15:c5:d7:33:3a:24:fd:ee:19:
                    97:97:b5:d5:55:6d:44:aa:dc:53:81:38:49:8d:72:
                    eb:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:E4:65:DF:92:2E:82:1D:E0:5E:9C:BC:E0:4B:D2:57:9A:57:75:8A
            X509v3 Authority Key Identifier:
                keyid:1B:3A:41:1A:07:5A:5D:B1:A2:C6:42:F8:D4:A1:BC:3C:B5:BC:BB:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:d4:e3:b0:43:20:48:ab:8b:30:a1:46:1a:dd:36:84:76:0a:
         24:b7:0c:80:84:bd:7e:b1:5c:d0:d3:4a:88:6c:e4:ea:c4:b8:
         92:ce:1e:53:48:2f:28:72:2a:59:47:8a:7c:6e:e4:94:1d:80:
         f5:0e:08:18:92:a1:e4:b7:b8:4b:89:54:d0:24:1d:1a:fe:bb:
         79:1a:fc:b6:7a:61:f9:7a:e6:9f:59:87:88:11:e5:87:35:93:
         ba:76:82:60:c1:90:a0:13:8a:e2:fd:ef:e7:55:10:18:44:7a:
         a7:be:f5:27:78:32:b8:93:80:5a:78:64:47:0a:dd:1b:bb:73:
         76:0c:ac:e5:1f:ea:a2:6c:d3:f2:3d:3a:20:07:49:27:2a:b9:
         33:6c:be:df:56:ab:db:5d:08:b7:53:71:2b:a1:bb:06:4e:a0:
         14:24:41:30:84:49:5f:e3:cc:57:de:67:39:dd:69:a9:19:7a:
         1f:52:fc:c6:4b:73:14:57:57:a7:49:44:b7:60:83:8c:23:31:
         61:8e:64:eb:24:d5:70:c2:fc:40:a6:93:4a:a4:ac:6e:bd:f1:
         f1:d9:ed:f2:e3:ed:76:95:f3:34:6a:11:55:5d:82:0b:7c:45:
         98:32:7c:4d:2c:3f:7a:50:13:9a:61:01:a7:62:c8:b0:84:5e:
         3a:ea:1b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----