Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171634/942B83BC1D9011E2A36166F008B02CD2/P8lxKSzpGlkajN-n0a4JykbgPoc.mft
File:                     P8lxKSzpGlkajN-n0a4JykbgPoc.mft (raw, json)
Hash identifier:          ByfEW42Tp7KkTzF0vsV0Xp3U7DAd9DGANmz59/+P05g=
Subject key identifier:   EB:43:72:11:04:11:93:27:4A:B4:62:12:BA:D8:91:EB:0C:E0:F3:EE
Authority key identifier: 3F:C9:71:29:2C:E9:1A:59:1A:8C:DF:A7:D1:AE:09:CA:46:E0:3E:87
Certificate issuer:       /CN=A9171634/serialNumber=3FC971292CE91A591A8CDFA7D1AE09CA46E03E87
Certificate serial:       349F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8lxKSzpGlkajN-n0a4JykbgPoc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171634/942B83BC1D9011E2A36166F008B02CD2/P8lxKSzpGlkajN-n0a4JykbgPoc.mft
Manifest number:          3471
Signing time:             Fri 31 Jan 2025 14:43:30 +0000
Manifest this update:     Fri 31 Jan 2025 14:43:29 +0000
Manifest next update:     Fri 07 Feb 2025 14:43:29 +0000
Files and hashes:         1: P8lxKSzpGlkajN-n0a4JykbgPoc.crl (hash: YKIwYkiRzjBnXc0lQKkcFt8n8rdP9MDk6CsZgaWkGxA=)
                          2: 727368486F1F11EDA34CF049C4F9AE02.roa (hash: NZbs45t8XXl/tBdxXy7mih7R8Y+MNfTCo2/0Q6D+AY8=)
                          3: 28B45FE86AF411EDB328EF4BC4F9AE02.roa (hash: YOeMT2ch94llljjtSxDRfpwVxGJgR5Hy6UG9iTs2yno=)
                          4: 989ED314FDCB11EDA52DCB45C4F9AE02.roa (hash: 7Gr5+LKQZg71Xe7aRTwT76gb+Vnjm/TSiDDJs1rwm1o=)
                          5: AFA4CF3E606F11EFB9FCCC59C4F9AE02.roa (hash: LFZEMiEZWVGVhw073oJZ6a3acteubVePOhbEcX4Y/2o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13471 (0x349f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171634/serialNumber=3FC971292CE91A591A8CDFA7D1AE09CA46E03E87
        Validity
            Not Before: Jan 31 14:43:29 2025 GMT
            Not After : Feb  7 14:43:29 2025 GMT
        Subject: CN=679ce191-5172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:73:58:72:cc:73:0c:a4:4c:e9:5f:41:7e:e8:
                    d6:1a:60:76:25:25:5e:ef:7f:13:4a:27:70:03:eb:
                    94:5e:2f:ab:54:b0:24:64:76:53:98:5c:fa:2d:37:
                    6f:0e:31:c5:c5:36:d0:72:1f:9b:0a:7d:4d:65:11:
                    a8:18:d3:b8:f2:f7:1f:d0:6d:c6:00:99:bb:84:9d:
                    fc:65:ac:ea:15:a3:8b:96:c7:61:e5:83:fb:b0:50:
                    57:0c:04:02:1d:46:e4:aa:c5:95:88:c1:11:85:70:
                    ef:d3:28:ff:df:2a:ba:c8:a9:f8:94:ea:fd:a1:1b:
                    19:f3:7e:fe:48:be:81:2d:20:84:0c:a0:d8:4b:6a:
                    96:18:be:e4:f1:4b:ff:a1:5c:16:14:f8:5a:df:4f:
                    c7:8a:ba:76:05:ea:a0:70:dd:fa:57:df:e6:2b:c1:
                    88:1a:2e:a1:40:4a:b3:41:c5:30:39:f2:83:25:f1:
                    fc:af:28:e3:ef:0a:a3:c7:12:ee:2b:63:d1:dc:ea:
                    6e:15:6a:4b:77:24:17:73:96:16:f8:8e:7f:bd:d9:
                    63:db:44:44:97:64:fa:5e:3b:83:4e:fd:af:f0:e7:
                    4e:0d:6a:23:8c:93:31:bd:fa:23:19:40:a4:e1:78:
                    23:da:8e:62:d6:14:f9:39:d2:4d:17:00:77:30:70:
                    da:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:43:72:11:04:11:93:27:4A:B4:62:12:BA:D8:91:EB:0C:E0:F3:EE
            X509v3 Authority Key Identifier:
                keyid:3F:C9:71:29:2C:E9:1A:59:1A:8C:DF:A7:D1:AE:09:CA:46:E0:3E:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171634/942B83BC1D9011E2A36166F008B02CD2/P8lxKSzpGlkajN-n0a4JykbgPoc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8lxKSzpGlkajN-n0a4JykbgPoc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171634/942B83BC1D9011E2A36166F008B02CD2/P8lxKSzpGlkajN-n0a4JykbgPoc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:6f:ba:5e:47:ce:b6:99:14:f0:4c:dd:e1:5b:21:de:f9:e1:
         61:c7:b6:f4:65:6b:21:b6:70:02:d0:61:b8:91:d1:78:cf:26:
         bb:14:cd:67:6f:52:a2:bb:b3:15:4d:94:99:7c:3e:09:18:ad:
         7a:a8:bc:62:db:83:39:ed:17:35:cc:3e:c6:31:11:58:f5:14:
         ab:b8:fc:77:9e:4d:56:03:1c:53:2b:4d:46:4a:82:13:18:7a:
         b4:ee:35:11:f3:fd:d0:3f:ec:8c:9f:ea:f2:54:5d:e0:e4:25:
         fc:49:44:40:57:68:39:e6:64:75:b7:1a:25:0d:64:ee:5e:d9:
         e5:a1:9b:86:df:ce:d3:4c:c7:61:bf:9d:4d:b7:4f:e0:31:53:
         2e:77:7c:b1:bc:f3:8c:15:24:f0:a7:3c:3b:e5:38:79:f4:ee:
         1f:fb:08:1d:d3:2a:f6:fa:a6:91:76:88:f1:1c:ed:73:9b:94:
         c0:3b:f7:f6:14:52:52:9d:0f:be:e9:4a:29:63:7e:d5:ba:d9:
         44:b9:10:71:8a:7e:8e:86:4a:7b:aa:35:ba:67:ab:30:2b:5f:
         46:7f:e8:cd:ae:03:be:db:be:f3:d9:ab:21:25:47:bc:1a:00:
         65:cb:ec:57:f0:34:8b:27:ab:0e:fe:86:ed:29:58:f9:e8:13:
         22:98:e6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----