Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.mft
File:                     lvYxs3stzK--57Cb_fRxXhocUFs.mft (raw, json)
Hash identifier:          G0PMirlPIqs1C8BtSSuJu/brwkHXhP2hd7iq4nuUJ/w=
Subject key identifier:   A7:9C:9D:BC:43:0C:EC:80:06:61:95:86:25:94:8E:E1:76:4B:1B:E2
Authority key identifier: 96:F6:31:B3:7B:2D:CC:AF:BE:E7:B0:9B:FD:F4:71:5E:1A:1C:50:5B
Certificate issuer:       /CN=A9171DB9/serialNumber=96F631B37B2DCCAFBEE7B09BFDF4715E1A1C505B
Certificate serial:       0448
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvYxs3stzK--57Cb_fRxXhocUFs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.mft
Manifest number:          0444
Signing time:             Fri 31 Jan 2025 00:19:27 +0000
Manifest this update:     Fri 31 Jan 2025 00:19:26 +0000
Manifest next update:     Fri 07 Feb 2025 00:19:26 +0000
Files and hashes:         1: lvYxs3stzK--57Cb_fRxXhocUFs.crl (hash: pxYSVVcjC9e/UUgz1L/05g8Yb28cfcUqS4IEEru+w7g=)
                          2: 6EC5F1A8420611ECB8345E7DC4F9AE02.roa (hash: 5T7dToRNDFlOZIMhz0V1aN3lG6JivnfiSfUrF62C9Es=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1096 (0x448)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171DB9/serialNumber=96F631B37B2DCCAFBEE7B09BFDF4715E1A1C505B
        Validity
            Not Before: Jan 31 00:19:26 2025 GMT
            Not After : Feb  7 00:19:26 2025 GMT
        Subject: CN=679c170e-5994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c8:0c:fd:3c:01:8f:34:d2:df:7a:e0:7a:70:
                    5e:ae:2c:6b:ba:d3:59:2b:f5:cd:ec:77:42:3d:24:
                    0d:0e:33:d0:62:90:c7:88:93:83:85:f7:0a:92:cf:
                    3a:82:37:52:e9:f1:63:88:b1:e3:0b:98:17:f4:4a:
                    90:4e:8a:94:d8:fb:c8:49:ec:e2:47:2a:23:65:82:
                    be:f2:9b:ef:a0:d0:3d:9f:72:57:15:a7:25:ba:9b:
                    17:c9:c2:bb:d1:e0:99:42:d5:9f:54:1a:ac:e3:a9:
                    89:3c:b9:f3:5b:83:f4:a1:41:8a:7a:20:c2:e5:9d:
                    25:fe:cc:c0:e2:65:1f:78:39:1a:95:2a:46:15:70:
                    24:8c:e1:7e:1d:0f:b0:e4:4f:a1:82:1b:bf:e3:3c:
                    c5:72:e1:ba:40:56:54:30:1d:9f:26:6e:ac:72:56:
                    92:2f:72:91:c2:5f:cc:46:70:39:4f:e6:db:02:51:
                    5b:12:2c:a5:08:0f:69:5b:e8:d1:95:3f:c8:31:94:
                    70:d4:f5:1e:c8:56:5a:c6:74:c3:80:25:02:fe:a0:
                    1e:71:03:d6:49:39:68:a5:59:e7:94:a2:3c:bb:59:
                    f8:18:d7:49:88:fa:45:92:23:34:6d:d0:9b:b9:52:
                    29:c0:a9:34:54:c5:bc:f3:09:7a:a2:df:3f:22:e8:
                    fd:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:9C:9D:BC:43:0C:EC:80:06:61:95:86:25:94:8E:E1:76:4B:1B:E2
            X509v3 Authority Key Identifier:
                keyid:96:F6:31:B3:7B:2D:CC:AF:BE:E7:B0:9B:FD:F4:71:5E:1A:1C:50:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvYxs3stzK--57Cb_fRxXhocUFs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:09:68:bb:3d:4e:dd:24:92:30:b9:55:1d:20:c1:f8:ca:ba:
         12:c0:10:e3:f7:9a:d0:05:74:7b:33:7c:78:d4:de:5a:75:b1:
         e8:55:d9:df:3d:93:ad:f2:28:49:5e:0d:c7:1c:a6:31:1b:8f:
         96:ac:d0:32:68:6f:be:06:7f:cf:e5:43:84:5f:40:b3:6f:a2:
         d9:03:49:7d:5a:28:ae:5a:1c:ff:2e:4c:2f:06:2a:51:ac:52:
         d8:c6:eb:7d:72:76:2e:a6:04:fb:e6:e7:cf:b4:fe:c0:dd:1a:
         70:a8:6a:80:f7:88:ea:78:ad:58:3c:9b:91:2c:49:b9:fe:56:
         e2:36:36:44:03:74:a6:99:96:a6:51:b5:ad:9a:ac:23:51:8b:
         08:c4:5e:d1:bf:08:e7:f8:ab:2c:39:70:18:3a:0f:02:64:86:
         f0:63:51:54:26:90:26:6b:15:55:1b:fe:8e:f9:05:4c:22:b3:
         01:f0:0f:5e:5a:52:fa:df:e0:ef:73:a2:d2:83:28:c3:f0:2c:
         47:03:07:58:29:5a:03:b7:a3:62:11:64:08:ec:39:56:ba:b4:
         7e:19:ef:6f:60:a8:a7:52:07:cc:fa:cf:5e:2b:77:6a:d3:4e:
         aa:ec:b4:b4:52:a6:b7:64:0b:6f:eb:d4:44:c1:84:07:c6:99:
         58:ff:9c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----