Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.mft
File:                     5K6ANyqGeYe7Kgq74RCrgENw1eM.mft (raw, json)
Hash identifier:          rI4eT3ZbLVVk+shjatz7CUzQr3jbwmqvBU1a1LelvDI=
Subject key identifier:   25:AB:5C:D5:B9:6E:C2:72:97:16:00:22:DE:AC:1F:FF:F2:1B:96:69
Authority key identifier: E4:AE:80:37:2A:86:79:87:BB:2A:0A:BB:E1:10:AB:80:43:70:D5:E3
Certificate issuer:       /CN=A917452D/serialNumber=E4AE80372A867987BB2A0ABBE110AB804370D5E3
Certificate serial:       02CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5K6ANyqGeYe7Kgq74RCrgENw1eM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.mft
Manifest number:          025A
Signing time:             Fri 31 Jan 2025 02:12:13 +0000
Manifest this update:     Fri 31 Jan 2025 02:12:13 +0000
Manifest next update:     Fri 07 Feb 2025 02:12:13 +0000
Files and hashes:         1: 5K6ANyqGeYe7Kgq74RCrgENw1eM.crl (hash: 9m0HizqjjhwuEDiKf2F+nIJTcJ6+ArhuFTKyoaa5iBI=)
                          2: 10B04C9853D411EFB53AD61CC4F9AE02.roa (hash: Go+fcAH12BxWvxt8qaSo8+7Glvp6WIQoRE1nDrD2I4U=)
                          3: AA71F05C60EF11EF8D645D72C4F9AE02.roa (hash: tFX2mHpCejE1T1hhbkEHTKBu8FY85bbr60BmVvCm9y8=)
                          4: A43C91FC53D311EFBB77311CC4F9AE02.roa (hash: 4WSAf6xypZ5HWhgdXeCXvRjrHIEEGUTbiqnsvFNaCQ4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 715 (0x2cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917452D/serialNumber=E4AE80372A867987BB2A0ABBE110AB804370D5E3
        Validity
            Not Before: Jan 31 02:12:13 2025 GMT
            Not After : Feb  7 02:12:13 2025 GMT
        Subject: CN=679c317d-d86a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:7f:52:a1:94:98:fb:64:05:47:1c:1b:74:20:
                    07:ba:8a:31:74:ce:50:01:37:7e:1b:03:40:bd:10:
                    4d:36:2e:15:a7:33:3b:d3:e8:4d:49:a8:81:91:21:
                    11:af:28:6b:9f:82:ae:f5:6f:3c:66:91:7c:46:e4:
                    47:f3:af:50:4a:eb:5b:f1:d0:be:5b:17:80:75:f5:
                    58:99:85:4d:2b:8a:a9:9f:06:57:77:ed:4d:eb:d0:
                    f1:ba:d8:0d:28:c7:b0:bd:c4:7d:10:44:e4:fd:fd:
                    a9:88:8c:db:de:08:21:1e:86:02:2d:eb:44:4f:8f:
                    17:59:97:41:47:aa:51:9f:ad:3f:0b:94:24:cf:8e:
                    96:b7:95:14:58:80:31:fd:b3:b1:d1:78:a2:8d:12:
                    6b:29:79:89:84:a4:ec:2e:41:fd:ed:a8:d3:8a:58:
                    b3:d8:e6:7c:7f:b4:3e:97:70:b6:a6:72:14:95:b9:
                    e8:09:72:d9:ee:a8:78:f3:d8:28:cd:f5:8c:ea:c0:
                    18:2d:8c:b4:2c:54:31:93:e6:e6:87:79:c1:17:65:
                    0a:25:ac:de:5a:9c:a1:05:d2:e8:e0:f7:0b:f9:24:
                    25:6a:0c:21:af:0e:f1:8f:92:91:a8:a5:b6:e5:0a:
                    63:1e:ca:a6:78:53:ec:df:d0:05:68:5b:94:98:40:
                    c2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:AB:5C:D5:B9:6E:C2:72:97:16:00:22:DE:AC:1F:FF:F2:1B:96:69
            X509v3 Authority Key Identifier:
                keyid:E4:AE:80:37:2A:86:79:87:BB:2A:0A:BB:E1:10:AB:80:43:70:D5:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5K6ANyqGeYe7Kgq74RCrgENw1eM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:bb:3f:b9:04:bc:14:07:82:13:10:f0:af:05:05:a8:14:f9:
         9e:94:7f:82:59:ce:1a:01:b8:dc:73:43:90:63:4e:2b:f9:0c:
         9a:a1:35:8f:56:7a:fe:b2:9c:f2:2e:13:00:7b:d0:d5:45:0f:
         25:7a:ff:f6:b5:f5:84:ef:18:87:a6:9c:48:64:82:38:39:e7:
         cb:da:99:21:53:43:d3:c1:20:81:70:4a:47:fa:98:b9:97:94:
         13:3b:03:bc:94:a9:3c:e5:69:2e:91:63:f8:bc:dc:d2:18:f0:
         6f:51:c0:59:9e:9f:36:61:a3:c6:05:49:92:5e:d6:bd:1f:6a:
         79:9b:26:6f:02:9a:16:6f:8e:55:fd:f8:0e:74:2f:a2:58:ff:
         da:06:df:91:12:d4:ee:cf:c2:78:91:98:f7:1d:9e:14:d3:e0:
         f3:d4:5c:76:68:59:2d:79:b9:21:49:c3:89:68:fd:8b:77:59:
         df:eb:ca:dc:25:97:16:3b:fc:72:6a:90:ef:3d:f6:74:d8:6b:
         33:5c:c8:6b:40:02:61:21:f4:e8:15:08:f1:2d:53:21:09:a1:
         b1:bf:4e:0c:03:1a:45:04:33:f5:f3:fe:a5:51:10:7e:31:6b:
         50:50:9b:a5:49:6e:da:4b:0a:1f:22:6a:a0:b3:2a:18:cd:00:
         ab:0e:34:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----