Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916EB73/B88FDE8C1DAA11E2A5C890A608B02CD2/34UAobIJAKu39Z62mwcBjfgEXF4.mft
File:                     34UAobIJAKu39Z62mwcBjfgEXF4.mft (raw, json)
Hash identifier:          OeO+I4PNvf1C2jbt4uKOV8HBMD1n2hm/ReJ8HpmfsWU=
Subject key identifier:   5E:EE:4F:7E:84:37:5D:9E:31:0E:DC:A1:5F:59:CA:62:73:75:3A:33
Authority key identifier: DF:85:00:A1:B2:09:00:AB:B7:F5:9E:B6:9B:07:01:8D:F8:04:5C:5E
Certificate issuer:       /CN=A916EB73/serialNumber=DF8500A1B20900ABB7F59EB69B07018DF8045C5E
Certificate serial:       3453
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34UAobIJAKu39Z62mwcBjfgEXF4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916EB73/B88FDE8C1DAA11E2A5C890A608B02CD2/34UAobIJAKu39Z62mwcBjfgEXF4.mft
Manifest number:          344B
Signing time:             Fri 31 Jan 2025 15:21:40 +0000
Manifest this update:     Fri 31 Jan 2025 15:21:39 +0000
Manifest next update:     Fri 07 Feb 2025 15:21:39 +0000
Files and hashes:         1: 34UAobIJAKu39Z62mwcBjfgEXF4.crl (hash: reZBbMWbtulCpbtJo9Px+tNaQdtRUzB+V5Ab6BLXaQ4=)
                          2: B92D2816064311EAAFD3B416C4F9AE02.roa (hash: snskZTPzgdK1oFEckPC5HgyDQRzXftf0PJQ8L4j0QcQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13395 (0x3453)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916EB73/serialNumber=DF8500A1B20900ABB7F59EB69B07018DF8045C5E
        Validity
            Not Before: Jan 31 15:21:39 2025 GMT
            Not After : Feb  7 15:21:39 2025 GMT
        Subject: CN=679cea84-ae5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a2:9c:2a:34:50:1a:54:aa:ed:c0:d8:a1:29:
                    35:e5:05:08:12:77:4f:5c:c1:fc:7b:77:f9:a8:ba:
                    aa:94:11:07:39:c8:4a:c1:4c:5b:c9:7e:37:09:64:
                    df:e3:2d:5f:ce:b5:95:96:03:41:91:d5:9d:62:a6:
                    e7:b0:99:1f:ca:c5:82:ce:c1:47:19:bf:83:42:56:
                    80:bb:e0:ac:f0:d6:bf:9c:22:ce:38:9c:69:d8:01:
                    1a:f4:2d:d7:9b:2e:d8:4a:50:76:68:3a:ce:ac:bb:
                    44:ca:a8:23:fb:20:ca:a5:b2:d2:ad:d6:ac:76:87:
                    c0:ef:78:75:7e:77:e9:05:a3:03:a4:38:63:0a:d2:
                    48:bc:58:03:8b:f3:8e:fa:3d:d1:43:ec:c6:e1:fa:
                    0c:c7:33:ca:27:f6:06:18:2c:aa:8b:05:4e:78:24:
                    f0:8a:d7:54:bb:97:70:5f:50:69:29:6a:23:22:98:
                    6f:3e:72:40:ed:8b:fc:ee:c9:00:42:ca:77:02:ab:
                    36:7f:97:33:87:a2:7b:bb:8a:3b:84:30:dc:30:04:
                    7e:3b:48:f7:af:12:54:9e:cc:c9:c8:cf:0f:9d:74:
                    9c:fe:c8:62:be:b6:4d:97:04:14:3b:c9:a4:e0:a6:
                    50:e6:9a:35:e6:2f:94:c3:bb:6f:9f:66:e3:66:7e:
                    a8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:EE:4F:7E:84:37:5D:9E:31:0E:DC:A1:5F:59:CA:62:73:75:3A:33
            X509v3 Authority Key Identifier:
                keyid:DF:85:00:A1:B2:09:00:AB:B7:F5:9E:B6:9B:07:01:8D:F8:04:5C:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916EB73/B88FDE8C1DAA11E2A5C890A608B02CD2/34UAobIJAKu39Z62mwcBjfgEXF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34UAobIJAKu39Z62mwcBjfgEXF4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EB73/B88FDE8C1DAA11E2A5C890A608B02CD2/34UAobIJAKu39Z62mwcBjfgEXF4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:75:a1:d7:48:95:fd:29:de:e4:38:f0:8d:b5:cf:d7:f0:27:
         03:19:08:49:4b:98:09:50:ab:5f:30:73:57:6e:e6:b0:3b:9c:
         4d:74:d8:84:1a:6a:34:0c:6c:48:91:b0:64:af:f4:c9:99:9d:
         dc:e1:83:3c:24:ea:99:53:00:d0:df:96:0e:f9:61:c8:72:66:
         ce:c8:2d:55:35:9b:5e:88:a0:90:a7:66:b8:67:00:29:bf:a6:
         81:0e:2d:b9:0b:88:5b:5d:ed:40:e5:e9:a2:57:3b:d4:52:70:
         54:be:ca:6d:ed:6f:c1:68:5c:bb:fe:b0:57:dc:f3:8d:20:f2:
         9a:68:a1:c7:9a:66:65:14:aa:75:5e:d2:79:65:f2:37:86:22:
         bd:2a:aa:5b:40:0f:0b:a9:63:da:6b:ae:ef:74:89:8c:11:46:
         e5:54:be:c4:6f:b9:50:90:4d:fe:46:d0:b9:04:39:d5:24:41:
         fd:e5:6a:ec:4d:52:04:fc:7f:7b:e8:1b:08:ff:fc:9b:c5:95:
         8a:6c:51:bd:8e:0f:da:07:3a:37:e2:1b:98:0e:c2:0d:7c:51:
         58:a0:21:c9:9c:a0:a6:2e:10:a0:6b:fe:6d:d8:47:fa:54:53:
         70:cf:32:9d:78:56:55:9a:20:26:58:23:6b:52:67:f8:ad:ae:
         0f:65:0a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----