Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.mft
File:                     2RBlAbU10PfK1XyOenR8oGnQTVk.mft (raw, json)
Hash identifier:          INHKNRNBXdvD1Rt1K+zDT9r8pwXB7mDtWNihXJhQC0Q=
Subject key identifier:   BB:8C:92:8F:17:F4:7B:9A:79:8C:C0:EA:E8:9C:C2:AD:5C:94:AD:0C
Authority key identifier: D9:10:65:01:B5:35:D0:F7:CA:D5:7C:8E:7A:74:7C:A0:69:D0:4D:59
Certificate issuer:       /CN=A916FACB/serialNumber=D9106501B535D0F7CAD57C8E7A747CA069D04D59
Certificate serial:       037A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2RBlAbU10PfK1XyOenR8oGnQTVk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.mft
Manifest number:          0376
Signing time:             Fri 31 Jan 2025 00:56:47 +0000
Manifest this update:     Fri 31 Jan 2025 00:56:47 +0000
Manifest next update:     Fri 07 Feb 2025 00:56:47 +0000
Files and hashes:         1: 2RBlAbU10PfK1XyOenR8oGnQTVk.crl (hash: RSNwnB2rjz+j/eHmnsjiha1uejNnVlwxKR7iEWxAddM=)
                          2: 97D35382924311EC927C972FC4F9AE02.roa (hash: F5cT4m4LGvhZopgIl7MS1o33/eaQaKX2bSwBB1GnJYA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 890 (0x37a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916FACB/serialNumber=D9106501B535D0F7CAD57C8E7A747CA069D04D59
        Validity
            Not Before: Jan 31 00:56:47 2025 GMT
            Not After : Feb  7 00:56:47 2025 GMT
        Subject: CN=679c1fcf-6b8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e7:d4:cb:a5:2c:3a:a4:11:19:a3:61:e9:b1:
                    34:9d:c6:d2:3e:c6:7e:9d:32:e9:8e:a6:fe:64:ea:
                    93:9d:f7:ae:57:5e:69:ef:fc:2d:cf:8f:b7:aa:5d:
                    df:27:a9:12:8b:23:cf:08:03:18:a4:ee:b5:33:6e:
                    17:50:57:77:27:1a:e3:76:ca:b9:be:36:3d:97:f9:
                    8f:76:01:25:58:a0:88:d4:bd:0f:e6:fc:43:05:85:
                    17:8d:10:37:74:b8:02:0a:56:19:17:0f:e8:8e:d3:
                    b2:fa:20:a8:aa:1c:99:92:9e:96:ae:44:27:c3:44:
                    49:9a:69:dc:26:cd:de:fe:7b:5a:06:fb:65:c1:5b:
                    6b:48:fd:9c:82:8d:a4:a7:57:1e:3c:5c:62:79:c9:
                    89:94:85:75:0f:1f:29:fc:51:42:b3:e2:c7:92:c1:
                    b7:02:ca:f7:90:80:ce:aa:58:0f:55:19:18:63:7b:
                    d0:20:50:b5:37:bb:9e:f3:68:36:d5:9a:79:77:5e:
                    43:a7:4e:f4:e9:b8:c2:ec:7d:59:d1:da:63:12:59:
                    f4:bf:e2:b7:fa:93:4d:df:6c:f0:c6:f2:45:52:c3:
                    ff:43:ca:8f:db:01:d0:ce:a4:a0:a8:cf:d7:0f:16:
                    e0:98:2e:1f:5a:c0:08:fe:a6:63:ed:62:a7:7f:fb:
                    6f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:8C:92:8F:17:F4:7B:9A:79:8C:C0:EA:E8:9C:C2:AD:5C:94:AD:0C
            X509v3 Authority Key Identifier:
                keyid:D9:10:65:01:B5:35:D0:F7:CA:D5:7C:8E:7A:74:7C:A0:69:D0:4D:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2RBlAbU10PfK1XyOenR8oGnQTVk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:a9:68:67:df:a0:43:84:8c:e2:74:d0:44:81:8d:16:32:56:
         ce:91:18:18:2b:f0:e4:f3:ea:90:ff:83:01:68:81:bc:64:47:
         3a:d6:62:4a:b7:13:4c:f4:bf:d3:61:ab:40:5d:bf:cc:85:c9:
         b2:a2:15:33:58:49:d8:1a:87:e2:3d:ed:9b:ce:c8:f7:d4:e3:
         08:b9:80:0e:09:ad:d0:c0:ce:68:4f:0b:23:58:64:d4:f3:8e:
         ca:95:4e:da:b8:99:0d:81:d6:51:e2:2a:bd:17:80:8f:ca:75:
         a1:98:b0:22:0d:10:0d:68:2b:be:af:0e:52:72:5d:c1:3d:51:
         47:f5:e1:69:ca:0e:a5:a9:de:9e:14:f3:68:4d:1f:92:33:63:
         43:02:0a:60:c4:20:f6:05:1b:26:dc:23:f6:8e:98:7a:8f:38:
         5c:2b:99:ca:59:3d:1a:84:02:2c:88:b5:83:fa:33:4d:b8:ea:
         6a:70:b6:6c:84:c2:a2:ea:da:6b:81:19:e2:a9:4f:2e:f2:78:
         d1:42:04:42:cb:de:25:96:87:5a:1d:8b:7a:d1:dd:21:42:6e:
         bb:1f:75:ac:23:e9:ca:03:61:7c:eb:f5:c6:f3:6e:c9:49:c2:
         17:b6:dd:83:5e:d8:76:3a:11:1f:2d:f2:15:ca:97:ff:7b:99:
         28:8c:90:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----