Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.mft
File:                     Tf7DQ3yQv0FNBRiLSCx4SObzFhs.mft (raw, json)
Hash identifier:          AesvNs3eU2TAm1SQ2oyArVBAWrZeYeRwCteubrkygXw=
Subject key identifier:   D3:D6:7D:9E:DC:E3:7B:E6:D2:36:65:E9:CE:52:05:08:DF:FC:8D:F9
Authority key identifier: 4D:FE:C3:43:7C:90:BF:41:4D:05:18:8B:48:2C:78:48:E6:F3:16:1B
Certificate issuer:       /CN=A916C4BC/serialNumber=4DFEC3437C90BF414D05188B482C7848E6F3161B
Certificate serial:       041F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.mft
Manifest number:          041B
Signing time:             Fri 31 Jan 2025 00:26:01 +0000
Manifest this update:     Fri 31 Jan 2025 00:26:00 +0000
Manifest next update:     Fri 07 Feb 2025 00:26:00 +0000
Files and hashes:         1: Tf7DQ3yQv0FNBRiLSCx4SObzFhs.crl (hash: 4reey/g8dJFHSKLFpxGsXZ+PAOn4OyWTTL+wtdEr5ls=)
                          2: F593443851B011ECB5188E24C4F9AE02.roa (hash: CA35rH85+j+YJMr1xe8QwPujExClO3AIGNQ5xuf0vDw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1055 (0x41f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C4BC/serialNumber=4DFEC3437C90BF414D05188B482C7848E6F3161B
        Validity
            Not Before: Jan 31 00:26:00 2025 GMT
            Not After : Feb  7 00:26:00 2025 GMT
        Subject: CN=679c1898-ef5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b9:83:e0:9e:62:37:51:66:f1:ec:58:d4:38:
                    86:0f:9a:39:18:e1:fc:76:ed:e1:bc:f5:2e:4f:51:
                    8a:89:b9:e0:31:15:82:ce:bf:19:a4:5f:80:b7:4b:
                    2c:16:67:fe:e8:f1:f1:3d:61:d5:dd:e8:86:f1:9b:
                    52:8d:dd:a2:10:0e:79:0b:b3:c1:0b:7c:3a:96:74:
                    82:b8:89:5c:a8:c7:fc:d0:c4:9f:87:76:a5:8f:87:
                    95:38:61:64:d1:9d:c6:5f:7e:c5:cd:bd:a3:7f:85:
                    63:3b:6b:16:fe:4b:9d:d8:f2:b8:ac:67:e9:14:5a:
                    00:1b:0d:5c:be:ae:ad:36:b3:34:10:f2:e7:88:51:
                    3a:9e:16:71:69:f6:66:20:f1:1d:65:4f:ee:74:4b:
                    a6:19:63:c8:20:7a:91:6d:b1:7f:e5:74:6c:97:6b:
                    9b:38:c8:a6:a7:ad:35:59:05:23:64:33:a2:c8:0b:
                    a1:d1:49:17:90:82:08:20:27:70:8b:e6:6a:d7:83:
                    b3:47:af:b6:f2:a1:db:7e:f4:53:d5:00:70:b3:4f:
                    2b:1e:e8:63:9d:50:c7:76:db:34:ad:12:c6:7c:2b:
                    de:62:4a:f0:1a:90:f7:c9:3d:68:b2:34:39:96:f7:
                    f0:60:0a:96:0d:21:85:50:d0:a0:12:87:b9:fb:9b:
                    75:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:D6:7D:9E:DC:E3:7B:E6:D2:36:65:E9:CE:52:05:08:DF:FC:8D:F9
            X509v3 Authority Key Identifier:
                keyid:4D:FE:C3:43:7C:90:BF:41:4D:05:18:8B:48:2C:78:48:E6:F3:16:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:98:f8:5d:01:b6:29:f5:a3:34:8e:57:86:52:13:0e:53:61:
         3b:27:97:ce:86:d8:3b:37:59:0e:0f:8e:b0:d2:40:4b:de:be:
         4b:c1:24:f6:83:e6:56:db:23:dc:96:e7:8a:bc:aa:c2:90:e0:
         0a:ce:f8:47:bb:85:9a:e1:9c:bd:09:f2:ac:5c:e9:63:0f:65:
         89:96:69:3c:95:2a:e8:c9:de:4e:d6:9d:3d:fe:73:e0:d8:40:
         b8:80:3d:63:aa:00:8f:d7:0d:91:5a:41:55:34:0d:cb:68:65:
         4a:3b:7e:99:e0:12:13:5d:bf:e1:09:96:13:b8:91:61:71:9a:
         ac:25:fd:33:a6:26:3c:57:cd:dd:73:83:2c:61:47:1e:57:c8:
         17:9b:bb:57:0b:5e:f5:64:a4:59:ba:81:bd:54:2a:4d:47:32:
         16:ee:df:3f:ae:67:a6:d4:cc:05:d3:f1:01:f2:4f:50:df:5f:
         02:c4:b7:94:07:81:c2:ea:3c:11:7a:84:9d:5e:2d:eb:f8:a3:
         ae:1d:17:d7:9a:79:52:1e:d4:07:11:91:22:d9:3d:c2:6b:25:
         46:90:3c:10:d0:b9:bc:ab:3f:ac:e5:66:03:60:f8:29:49:bd:
         cf:b3:59:7b:63:36:71:68:cd:e6:3c:0b:69:8a:26:95:b6:f9:
         7d:e0:d0:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----