Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.mft
File:                     4W5PZeLjl-n84FeFomXGGXyCIMk.mft (raw, json)
Hash identifier:          C3fRHlSmooxIed1/bblb3abtYQPwcKWzgflU9vOZUs8=
Subject key identifier:   DE:B9:29:CE:D8:91:18:AA:D6:65:A6:C2:C4:02:4C:96:F1:0B:DF:CA
Authority key identifier: E1:6E:4F:65:E2:E3:97:E9:FC:E0:57:85:A2:65:C6:19:7C:82:20:C9
Certificate issuer:       /CN=A916DED9/serialNumber=E16E4F65E2E397E9FCE05785A265C6197C8220C9
Certificate serial:       E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4W5PZeLjl-n84FeFomXGGXyCIMk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.mft
Manifest number:          E2
Signing time:             Fri 31 Jan 2025 04:34:26 +0000
Manifest this update:     Fri 31 Jan 2025 04:34:25 +0000
Manifest next update:     Fri 07 Feb 2025 04:34:25 +0000
Files and hashes:         1: 4W5PZeLjl-n84FeFomXGGXyCIMk.crl (hash: DPYPSLlgTSNi7HwECj9sx4dvlM2e4Kl2+NcxwazQ+rc=)
                          2: 880E53BC852A11EE8B988A85C4F9AE02.roa (hash: SuIwbjVFIiO//MYlkWAI7JLL+Gi6my0EIFtFpMkp/oM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 228 (0xe4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DED9/serialNumber=E16E4F65E2E397E9FCE05785A265C6197C8220C9
        Validity
            Not Before: Jan 31 04:34:25 2025 GMT
            Not After : Feb  7 04:34:25 2025 GMT
        Subject: CN=679c52d1-31ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fa:65:f7:82:c0:fe:d0:fd:fb:f4:7d:4c:74:
                    38:1b:60:66:25:36:9d:ad:aa:51:43:85:e0:65:b1:
                    d8:78:b4:6f:bb:3c:9e:d3:67:87:59:48:7b:c9:42:
                    0d:9c:b6:4e:51:fe:44:d9:8a:8b:18:dd:9f:1d:0d:
                    2f:d8:e3:e8:47:4c:ce:f6:f8:ed:02:3a:da:31:1d:
                    de:f1:51:b4:f9:0b:1c:65:18:7a:96:99:a8:9c:cc:
                    03:24:bf:47:9e:55:9e:6b:f1:e5:06:8b:39:24:85:
                    cd:33:6a:82:ee:b9:74:a3:76:31:d0:7c:a6:06:63:
                    5d:ad:0d:6a:2c:1a:8b:7b:d3:d5:e3:79:25:0f:09:
                    d9:3b:a0:e1:f3:6c:70:02:11:b3:2f:2d:ab:cc:f5:
                    a1:5b:15:9c:eb:d6:22:a6:ac:08:59:65:4d:ea:93:
                    eb:58:e3:ad:77:43:ad:f1:b1:1c:5b:05:84:b7:ed:
                    22:27:e1:ba:d4:03:07:53:d3:2b:99:99:19:b5:04:
                    be:2d:1c:e9:dc:77:6c:6d:8a:ae:5b:e5:1d:a8:48:
                    48:82:bc:28:ae:a0:38:c5:e1:f8:98:d5:18:f9:43:
                    e0:30:96:76:5c:bf:d1:95:51:2f:7a:c4:79:b6:c2:
                    5d:7e:1a:4c:49:59:3d:92:98:af:a2:7f:38:b4:fc:
                    60:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:B9:29:CE:D8:91:18:AA:D6:65:A6:C2:C4:02:4C:96:F1:0B:DF:CA
            X509v3 Authority Key Identifier:
                keyid:E1:6E:4F:65:E2:E3:97:E9:FC:E0:57:85:A2:65:C6:19:7C:82:20:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4W5PZeLjl-n84FeFomXGGXyCIMk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:cf:27:98:0f:1b:73:bc:57:a9:87:2b:7f:26:8b:28:b6:2e:
         a6:31:ee:6f:34:17:fe:3a:aa:61:1e:e9:71:c4:d0:d0:a2:a3:
         60:27:e7:a8:e2:5f:fa:98:83:01:e3:aa:f8:03:0a:fb:65:b9:
         8e:a4:d8:83:e2:27:a8:0b:dc:bc:d3:31:0a:e0:88:f9:a8:5d:
         91:31:6f:c7:33:7b:bb:d5:78:e4:00:6e:ac:c9:b1:30:a7:42:
         40:7d:e3:fb:54:cd:4b:7a:72:cf:cf:1b:71:3c:1e:9a:79:ff:
         4c:1d:44:9a:24:20:91:92:1a:c2:ea:11:14:e9:d8:82:b5:04:
         15:f1:46:ff:5a:4e:7b:cb:c9:62:2e:ec:f9:e0:65:22:12:ae:
         b6:d6:42:d7:ee:5e:86:6c:bf:be:ca:ef:29:7a:76:76:d4:3b:
         45:9a:d9:55:44:a5:ef:aa:cb:47:e4:cc:dc:82:81:16:f4:a1:
         79:08:93:0c:35:25:08:4b:c5:95:e1:04:7e:9b:f5:20:13:06:
         11:89:b5:95:3f:5f:c9:11:b8:db:5c:51:da:d8:de:d2:5e:9f:
         53:f0:d5:0a:33:65:df:a0:da:9a:96:ed:63:e4:0f:9b:31:a3:
         7e:0b:57:fa:e2:55:a3:15:5b:c1:77:1f:44:a0:c3:3f:a2:88:
         7d:b4:95:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----