Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft
File:                     N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft (raw, json)
Hash identifier:          Cpp0Te2xWMZlIY7ny1Uxd+TSGIP0tPOC3mkeQYk0s7g=
Subject key identifier:   F1:3A:D7:7C:56:14:30:8F:A8:4D:E6:CF:00:5A:C7:04:AD:76:35:32
Authority key identifier: 37:E6:78:92:EB:C2:B7:C2:41:02:E8:52:7E:90:7C:FE:AE:F5:C9:50
Certificate issuer:       /CN=A916DA1F/serialNumber=37E67892EBC2B7C24102E8527E907CFEAEF5C950
Certificate serial:       1540
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-Z4kuvCt8JBAuhSfpB8_q71yVA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft
Manifest number:          1539
Signing time:             Fri 31 Jan 2025 16:48:46 +0000
Manifest this update:     Fri 31 Jan 2025 16:48:45 +0000
Manifest next update:     Fri 07 Feb 2025 16:48:45 +0000
Files and hashes:         1: N-Z4kuvCt8JBAuhSfpB8_q71yVA.crl (hash: 4+GOih4hclq7yMXMMDgj9CHUGWfDCtXZwWDGkeIXxpI=)
                          2: 2036C856362911E8B6C37C78C4F9AE02.roa (hash: JDVg5EtOYvgHX+RYsdLp49o/Rnp72J5uVVL6OYjEcqc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5440 (0x1540)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DA1F/serialNumber=37E67892EBC2B7C24102E8527E907CFEAEF5C950
        Validity
            Not Before: Jan 31 16:48:45 2025 GMT
            Not After : Feb  7 16:48:45 2025 GMT
        Subject: CN=679cfeee-5c20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:59:77:2a:14:b7:a8:6c:b2:b1:28:92:b6:0e:
                    b2:e1:2d:b2:d5:63:b6:07:c3:ff:5f:36:41:d1:a4:
                    3c:bd:50:d1:61:f9:4c:02:04:4f:38:d5:ee:90:09:
                    bb:7b:d8:a4:8b:df:2d:7f:a5:4c:7e:75:e7:91:8f:
                    db:88:70:a3:65:85:45:ce:2a:e8:59:80:b8:20:a8:
                    86:3d:48:42:a9:0c:9b:68:2a:3a:2a:7a:a1:84:63:
                    f2:d5:29:52:a9:1f:85:6c:07:56:12:4d:46:3a:9e:
                    41:00:b6:9a:90:00:56:60:a8:30:3c:5c:c4:8a:3f:
                    f2:65:a0:14:2d:dc:46:3f:be:ab:d4:7c:b0:8e:24:
                    8d:95:ea:a2:a9:f8:93:02:12:78:11:41:71:08:9b:
                    ba:f3:78:cc:83:d2:c2:38:3d:aa:1f:29:73:0c:d3:
                    fc:fe:41:d4:db:67:b1:53:a9:5f:aa:31:9e:be:2d:
                    df:8b:c6:ce:29:8d:bb:15:08:1b:55:49:af:57:30:
                    b5:fd:e3:d5:d3:2d:fa:3b:b2:65:01:fc:ef:ba:e3:
                    ac:ae:9b:30:4c:78:73:38:e0:4a:66:a2:db:cb:91:
                    f2:c4:ae:dc:a0:ac:f2:9b:c7:ac:c7:a0:8a:ee:bc:
                    12:53:be:67:5b:78:c5:2e:95:25:67:fe:3e:c7:70:
                    c3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:3A:D7:7C:56:14:30:8F:A8:4D:E6:CF:00:5A:C7:04:AD:76:35:32
            X509v3 Authority Key Identifier:
                keyid:37:E6:78:92:EB:C2:B7:C2:41:02:E8:52:7E:90:7C:FE:AE:F5:C9:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-Z4kuvCt8JBAuhSfpB8_q71yVA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:68:09:fd:d4:58:c0:07:66:fd:e2:9d:8b:54:9d:92:6e:ab:
         2f:c2:76:f8:21:ec:cb:db:03:50:f5:61:cb:f7:c0:60:85:12:
         18:06:7a:af:62:fb:55:e3:39:21:19:4f:b2:4b:82:b2:43:0b:
         6f:2b:d9:e1:eb:13:8c:c2:b4:4c:a8:df:b1:92:3d:91:f3:42:
         15:62:63:b0:d1:da:56:97:9c:1f:db:19:89:a1:10:33:ae:de:
         a3:1d:46:2d:7c:75:c4:c2:36:ad:13:db:2a:32:92:20:62:7d:
         c0:45:f8:ff:94:dd:bb:f4:73:d2:12:a4:b7:fc:fa:55:f9:0e:
         45:ea:43:57:35:e4:cb:bb:41:e8:5f:f6:81:ea:93:ee:82:51:
         61:0c:0c:8d:90:89:82:04:2d:d6:06:58:e3:28:05:eb:bf:dc:
         fb:31:1c:e6:31:9e:5a:ec:15:d3:77:97:09:ee:c1:a4:53:6a:
         a7:fd:53:ad:da:03:1c:83:fb:18:ec:4a:98:d3:7b:8f:75:57:
         75:f1:88:55:ca:9c:de:4d:a3:d3:6c:17:b8:0a:29:2e:96:8a:
         1d:52:c9:2e:8b:61:6a:7b:e4:82:72:c5:1e:eb:98:a0:5b:42:
         6f:1a:5d:12:15:c4:57:4b:37:f4:7d:73:2c:04:c8:15:1f:d3:
         9e:6c:07:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----