Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.mft
File:                     cM1M0T4uN35eXDervHl-7ea2Yhs.mft (raw, json)
Hash identifier:          F7yos+XMzBYQeyU5V4xXjvXIH4OO/Hg98LPuDb1HmKg=
Subject key identifier:   C0:E2:D9:32:2A:4D:19:A7:F8:98:58:1F:CB:AA:03:0B:7E:AB:93:6B
Authority key identifier: 70:CD:4C:D1:3E:2E:37:7E:5E:5C:37:AB:BC:79:7E:ED:E6:B6:62:1B
Certificate issuer:       /CN=A916F338/serialNumber=70CD4CD13E2E377E5E5C37ABBC797EEDE6B6621B
Certificate serial:       025B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM1M0T4uN35eXDervHl-7ea2Yhs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.mft
Manifest number:          0256
Signing time:             Fri 31 Jan 2025 01:51:44 +0000
Manifest this update:     Fri 31 Jan 2025 01:51:43 +0000
Manifest next update:     Fri 07 Feb 2025 01:51:43 +0000
Files and hashes:         1: cM1M0T4uN35eXDervHl-7ea2Yhs.crl (hash: A12wo8xEGHlTItx13qRYZh2SQRGskpEIRig2b91pof0=)
                          2: BA5354A4044211EDBB686665C4F9AE02.roa (hash: 5D+EMadPUYOYtPY3WxKsOuXfJZW+RJaKdKnGQtm9R6c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 603 (0x25b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916F338/serialNumber=70CD4CD13E2E377E5E5C37ABBC797EEDE6B6621B
        Validity
            Not Before: Jan 31 01:51:43 2025 GMT
            Not After : Feb  7 01:51:43 2025 GMT
        Subject: CN=679c2cb0-dd0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:29:33:f6:f0:81:9a:71:54:e4:c3:e1:40:3a:
                    fa:cd:3e:a1:1e:7b:d4:0a:db:6a:8d:0a:d8:d4:bc:
                    2c:1f:c9:1f:17:3f:4c:f2:06:33:54:ab:9f:f8:a3:
                    fb:9e:18:97:1c:bf:fe:a7:e9:ee:77:a2:fa:6f:67:
                    e2:a4:c2:d8:14:f4:9f:70:d5:7e:0e:5a:34:b6:09:
                    e5:93:70:d4:cc:69:4d:0b:1e:29:dc:a8:28:3d:2d:
                    4b:7f:60:e6:2f:8a:51:eb:5c:a4:77:2f:a2:4d:5a:
                    a1:4a:3f:f3:9a:a7:a6:4b:79:04:9b:bb:ae:38:f5:
                    9d:b7:c8:ab:db:4e:f8:dc:5c:ec:4e:5c:68:b8:c4:
                    9f:ae:74:7e:62:dd:3b:f1:8d:eb:e8:a6:7e:f1:36:
                    e2:1a:ae:1b:02:84:5a:f5:35:5f:4f:a2:39:5b:23:
                    69:af:c1:73:64:56:62:13:26:d9:df:a1:0a:93:51:
                    61:e1:55:5a:c4:f4:70:58:c9:3c:15:d0:a5:38:5f:
                    7d:7d:22:bb:09:2e:df:f1:10:7b:cd:33:30:32:6b:
                    57:86:d1:44:c2:0e:d0:c3:ad:90:5a:8a:4f:79:d3:
                    f3:a8:d2:dd:c4:25:61:bb:b4:cf:c4:a9:b6:8f:22:
                    25:5b:63:ce:03:80:37:6d:95:4d:e2:f1:08:24:fe:
                    89:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E2:D9:32:2A:4D:19:A7:F8:98:58:1F:CB:AA:03:0B:7E:AB:93:6B
            X509v3 Authority Key Identifier:
                keyid:70:CD:4C:D1:3E:2E:37:7E:5E:5C:37:AB:BC:79:7E:ED:E6:B6:62:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM1M0T4uN35eXDervHl-7ea2Yhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:77:f4:c5:57:9b:7c:6b:91:81:51:ae:5b:69:75:5c:16:16:
         fe:59:77:44:30:6d:cc:fa:c3:3f:fa:e1:bf:0f:9f:aa:c4:90:
         f4:d6:f7:de:68:40:b2:d9:b2:5b:90:26:3e:fd:c8:d7:91:93:
         58:30:de:34:0b:bd:c3:2f:5b:46:2a:1d:7e:da:d9:dc:5b:46:
         28:07:fd:6f:b8:77:3a:cb:0c:71:f3:39:db:86:37:d1:5e:2b:
         65:cb:6d:a0:ba:47:db:43:26:41:4f:cf:47:45:ef:73:f7:cb:
         65:42:20:56:e4:76:2f:be:47:9b:f4:8d:6f:72:a0:19:9e:f9:
         ba:ae:c1:0e:7c:1f:b8:21:da:8c:b9:91:d6:12:2e:eb:89:b3:
         60:b5:10:6f:f8:bf:83:6c:ca:b8:5f:be:a7:5a:66:ff:ad:27:
         d4:f5:52:20:81:1f:f0:95:80:da:03:c2:17:41:18:ea:11:94:
         b1:0d:17:f8:4d:35:e9:54:25:f6:45:55:33:30:83:b3:4a:75:
         73:f6:6c:51:7d:47:06:6b:a1:f9:37:1e:57:f0:49:25:b3:93:
         e8:7d:07:7e:da:11:7d:ff:f9:5f:ca:f3:00:47:e5:43:9b:18:
         63:f6:e1:b5:22:e1:39:d7:a9:53:72:83:7e:d8:f6:52:db:79:
         b4:30:02:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----