Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft
File:                     QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft (raw, json)
Hash identifier:          N5xqUZz8v8CM2E+UaF5LvlJyaCr5qosINh27cqZP4MQ=
Subject key identifier:   F1:BB:BB:B1:32:A1:5F:0A:EA:E8:00:E5:B2:2E:0F:B5:14:1D:9A:49
Authority key identifier: 42:6B:62:0C:04:0C:83:94:6A:4B:75:86:43:6E:CB:D0:FC:45:46:CF
Certificate issuer:       /CN=A91758DF/serialNumber=426B620C040C83946A4B7586436ECBD0FC4546CF
Certificate serial:       0801
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmtiDAQMg5RqS3WGQ27L0PxFRs8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft
Manifest number:          07ED
Signing time:             Thu 30 Jan 2025 21:02:21 +0000
Manifest this update:     Thu 30 Jan 2025 21:02:21 +0000
Manifest next update:     Thu 06 Feb 2025 21:02:21 +0000
Files and hashes:         1: QmtiDAQMg5RqS3WGQ27L0PxFRs8.crl (hash: GN50Byhd3S5Hj/aiZgceFMc371gENZjg9PrEaAzMOx0=)
                          2: 4F6913406BBF11EFA2832A74C4F9AE02.roa (hash: +e8I8Bn+e9DYeBtqHQQ6KWWC7iXcvB3bn0K/EgTSp6U=)
                          3: 4EA76BD26BBF11EFA2832A74C4F9AE02.roa (hash: SoizhIfWfVMFzbaPsRoPSJl0+AjhRi2T5wIECRdN0sY=)
                          4: F5E65C96FD6C11ECB2384E64C4F9AE02.roa (hash: jruCV8o7M+K9hoZkMPNs3l4bUYZ+XPug7o900UdOtso=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2049 (0x801)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91758DF/serialNumber=426B620C040C83946A4B7586436ECBD0FC4546CF
        Validity
            Not Before: Jan 30 21:02:21 2025 GMT
            Not After : Feb  6 21:02:21 2025 GMT
        Subject: CN=679be8dd-d903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a0:9a:bf:b0:13:7b:0f:9b:64:c0:2e:95:88:
                    d6:ca:9a:38:a2:68:b3:2d:c9:61:e7:e2:51:4e:8a:
                    54:b0:58:3c:30:f2:42:b7:bc:6b:75:24:4c:4a:c4:
                    84:e7:f8:0f:26:bc:58:d5:58:e5:cb:60:68:9e:30:
                    3c:fc:de:ff:28:91:a6:41:37:98:7a:6c:1f:28:38:
                    ad:a0:dc:35:79:d5:1a:0a:c4:ea:0a:f2:eb:2c:49:
                    32:39:4e:b1:60:8d:56:b2:cd:24:90:4b:59:d5:f2:
                    ab:2a:7d:7c:b6:38:f6:77:38:17:ed:39:e6:75:6a:
                    74:e6:93:10:75:68:58:ee:6a:08:10:5c:12:f3:22:
                    75:a8:05:e2:53:1e:13:69:da:2a:d4:00:57:a8:ff:
                    73:42:92:6d:da:9a:15:f0:d3:7a:5d:2b:04:35:ad:
                    8a:71:98:c8:92:64:1d:c5:bb:7d:cb:61:10:26:79:
                    e2:e3:6c:35:2d:d4:a0:a9:2a:d0:18:95:dc:8f:89:
                    2b:37:1e:6a:ec:21:72:3d:bb:e2:75:c6:dd:2e:8e:
                    fe:ec:15:c2:11:f2:d0:b4:69:d3:2c:72:1d:7c:f5:
                    94:72:83:2a:ec:0a:a3:7b:45:d5:a9:b9:27:12:19:
                    d1:36:c2:45:90:79:12:6d:03:21:54:c5:e2:18:e4:
                    65:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:BB:BB:B1:32:A1:5F:0A:EA:E8:00:E5:B2:2E:0F:B5:14:1D:9A:49
            X509v3 Authority Key Identifier:
                keyid:42:6B:62:0C:04:0C:83:94:6A:4B:75:86:43:6E:CB:D0:FC:45:46:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmtiDAQMg5RqS3WGQ27L0PxFRs8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:9d:cd:c8:d3:d0:3f:6d:43:63:bc:4a:51:ae:f3:05:0f:bc:
         19:18:17:6d:33:cb:b5:52:9f:81:66:aa:44:f3:02:70:97:63:
         b0:9c:9b:0b:14:41:3b:27:84:a9:b4:2d:49:1a:65:20:dc:ba:
         15:e0:31:cd:3b:92:dc:bd:6b:71:34:5b:e1:77:4b:38:8a:21:
         1b:f8:11:6c:7c:d1:0c:1e:85:ef:60:c3:1a:9b:0f:f1:26:40:
         ec:08:18:ef:a5:44:9a:ca:b7:f4:f2:4d:89:d9:d6:d0:12:f6:
         35:47:58:de:e7:1d:90:e0:77:37:09:5d:f4:b6:87:b4:01:52:
         aa:0f:6c:47:33:a1:4e:99:90:95:e3:f0:a0:d2:c5:64:b3:85:
         a6:e4:82:7b:d1:fa:23:03:6f:6e:fe:11:25:32:39:e3:54:69:
         31:4c:94:d2:8c:3c:b3:9b:2f:70:d6:85:97:96:c9:7d:d0:4e:
         fa:a1:94:d7:32:93:d5:3b:95:dd:11:12:67:91:88:66:19:05:
         f6:e8:d8:83:80:0e:c5:54:5f:f8:f6:e4:f0:f0:98:b4:a7:14:
         eb:9e:49:8f:b6:5d:6a:ed:e6:bb:f3:54:eb:97:bf:7a:52:c4:
         04:a5:f4:ee:e9:8d:73:12:3d:24:b6:51:a6:fa:e1:0e:c4:bc:
         35:6a:e0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----