Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.mft
File:                     gqha_fMpJW9H4LcAstFHVqEEwRI.mft (raw, json)
Hash identifier:          jsheXY9zHNavtZX9UlVp9pn0dV1u9yNW++HXdHon7Sw=
Subject key identifier:   44:36:34:F4:4E:7C:B4:72:07:84:2B:78:03:7F:E0:F5:7F:6E:E8:BB
Authority key identifier: 82:A8:5A:FD:F3:29:25:6F:47:E0:B7:00:B2:D1:47:56:A1:04:C1:12
Certificate issuer:       /CN=A9171C23/serialNumber=82A85AFDF329256F47E0B700B2D14756A104C112
Certificate serial:       0549
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqha_fMpJW9H4LcAstFHVqEEwRI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.mft
Manifest number:          0541
Signing time:             Thu 30 Jan 2025 23:30:41 +0000
Manifest this update:     Thu 30 Jan 2025 23:30:41 +0000
Manifest next update:     Thu 06 Feb 2025 23:30:41 +0000
Files and hashes:         1: gqha_fMpJW9H4LcAstFHVqEEwRI.crl (hash: cZPqo8NSOAKn4jfGG1y+SKJpRS8zfNn4Ia7bn6motLs=)
                          2: 7CC19FBCDCAA11EBB87DAD44C4F9AE02.roa (hash: eALzuGTBIdO32t7InjPCWdnlihceQ6Ej+q9aOFO73+k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1353 (0x549)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171C23/serialNumber=82A85AFDF329256F47E0B700B2D14756A104C112
        Validity
            Not Before: Jan 30 23:30:41 2025 GMT
            Not After : Feb  6 23:30:41 2025 GMT
        Subject: CN=679c0ba1-2c08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e4:92:4f:cc:34:4c:21:93:f7:59:74:de:47:
                    33:39:07:8a:4d:07:27:49:fd:01:83:41:5a:1e:81:
                    08:c2:a7:1e:0e:62:4b:23:c2:a4:f6:6f:ea:2d:80:
                    fb:a0:01:a4:26:71:2d:aa:87:71:e8:17:c3:7d:68:
                    23:a4:21:12:66:e3:ec:e7:81:ae:cb:47:5c:b3:8b:
                    17:df:31:21:43:26:59:c7:0e:ee:d2:44:44:e2:65:
                    0f:94:14:67:d4:30:6b:e7:3a:72:bd:a6:f8:31:c7:
                    ae:87:a4:ed:fe:50:cd:7f:ab:e4:a5:b0:8f:42:8f:
                    5f:1d:1c:ae:33:63:77:c2:0d:95:83:65:df:76:14:
                    10:70:1c:2f:bb:52:4d:ef:86:41:48:f3:c5:8d:f9:
                    a2:35:d1:23:55:ff:3d:7b:73:12:54:67:9f:10:36:
                    cd:34:1c:f6:28:20:93:f5:cf:de:97:27:61:f9:96:
                    af:b9:cd:58:0b:11:69:85:6b:03:a7:9e:87:db:5c:
                    20:cf:ff:c4:45:85:c3:f9:b0:35:3e:dd:09:27:47:
                    71:49:38:ee:6f:6e:bf:39:21:53:3b:31:fc:c1:40:
                    b9:45:45:51:8e:da:11:a6:01:e6:e5:db:08:42:0e:
                    bb:bc:d4:0f:e0:c1:ac:ad:f0:11:ba:7d:19:cf:ff:
                    67:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:36:34:F4:4E:7C:B4:72:07:84:2B:78:03:7F:E0:F5:7F:6E:E8:BB
            X509v3 Authority Key Identifier:
                keyid:82:A8:5A:FD:F3:29:25:6F:47:E0:B7:00:B2:D1:47:56:A1:04:C1:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqha_fMpJW9H4LcAstFHVqEEwRI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:d1:d8:75:ee:bb:42:57:35:b8:e8:0e:36:d7:dd:bb:09:ea:
         87:99:f7:d7:3a:9e:3b:a7:af:2c:35:40:69:3c:5d:95:b0:46:
         62:21:49:90:b8:43:b0:55:24:67:18:9a:22:9f:1e:33:f4:62:
         ad:27:ce:9e:d0:e9:b0:1c:51:ec:a7:fd:e3:58:8d:ed:cb:a5:
         a1:02:3e:e8:6b:b8:56:47:0a:19:ef:a7:e5:95:0b:6b:c0:dd:
         a3:9b:d8:84:d2:60:b0:68:d7:57:80:5d:0c:83:87:40:30:8a:
         23:ba:3b:f8:c9:73:a3:80:84:6d:66:b6:f4:e9:eb:9b:85:2e:
         3b:fc:f0:e6:43:60:44:39:91:34:14:e2:82:98:ee:9b:39:03:
         99:ba:69:6f:77:bf:a4:aa:b4:67:a6:72:c4:88:4a:95:33:b9:
         f6:ab:cd:8c:39:b0:4b:c5:d8:cf:cc:6c:4d:f5:45:8d:6e:4d:
         42:b8:4c:bc:b7:f4:a4:e9:69:8f:43:c7:de:8d:c9:e7:a5:58:
         4c:4e:fb:0d:e1:69:36:72:39:71:a5:55:fd:31:7e:c9:04:cf:
         a5:f1:15:6a:af:1d:07:89:0a:f5:fa:55:cc:af:b4:4b:e0:b0:
         56:22:2b:89:6f:11:7c:8f:cc:2c:5f:b0:c3:4d:1c:05:a2:b6:
         52:c8:d5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----