Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft
File:                     M_iOrx5M4PGhh31J75fA5_7cA5o.mft (raw, json)
Hash identifier:          T4rhzOsdcXZudWobGGkOnqUKwVEIgdR1L/h36rIJRPM=
Subject key identifier:   10:7C:32:FB:1A:01:DB:32:33:DD:88:55:C4:59:AA:E0:5F:4C:0C:B3
Authority key identifier: 33:F8:8E:AF:1E:4C:E0:F1:A1:87:7D:49:EF:97:C0:E7:FE:DC:03:9A
Certificate issuer:       /CN=A91758DF/serialNumber=33F88EAF1E4CE0F1A1877D49EF97C0E7FEDC039A
Certificate serial:       044C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft
Manifest number:          0443
Signing time:             Thu 30 Jan 2025 21:02:19 +0000
Manifest this update:     Thu 30 Jan 2025 21:02:19 +0000
Manifest next update:     Thu 06 Feb 2025 21:02:19 +0000
Files and hashes:         1: M_iOrx5M4PGhh31J75fA5_7cA5o.crl (hash: I8R5ocEaJyhp1YnI4P1EGq97269di78VFlspeeZLGSk=)
                          2: E763AA76A3E811EC8665D621C4F9AE02.roa (hash: iO0CtDJ9qFmzu7ZUksz7jk8uMnxxqilOr/Tb50/fP1E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1100 (0x44c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91758DF/serialNumber=33F88EAF1E4CE0F1A1877D49EF97C0E7FEDC039A
        Validity
            Not Before: Jan 30 21:02:19 2025 GMT
            Not After : Feb  6 21:02:19 2025 GMT
        Subject: CN=679be8db-1414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4f:d3:d2:d5:46:70:f2:fe:d7:21:ca:5f:d9:
                    34:f0:62:bb:7a:12:f0:a8:27:e7:76:50:c4:ab:e5:
                    bf:c1:09:d8:a3:2d:89:1f:69:f9:21:23:c0:90:a8:
                    e6:eb:6f:02:30:1b:51:3c:86:3f:cf:16:5d:20:41:
                    f1:14:d0:a3:c5:e8:11:1e:5f:cd:06:f7:67:23:e1:
                    23:aa:c9:00:3c:d8:e7:28:98:93:fd:e3:31:53:e6:
                    3e:a1:ff:6a:b6:87:14:55:66:ea:4b:4b:4d:d2:8a:
                    9a:f4:d1:6c:ae:c3:de:93:74:0d:d6:1a:17:27:44:
                    42:be:7e:ea:41:30:7b:2f:ea:ba:7a:67:e5:f8:27:
                    9b:31:89:18:49:e9:c7:f7:86:ee:54:79:ba:ae:7e:
                    1b:3e:e9:f0:f5:ca:58:71:5b:9c:cf:2f:43:3d:36:
                    53:16:b8:6a:24:23:9e:cf:e1:bf:15:66:33:cc:ed:
                    32:48:ed:a8:74:db:b3:79:ce:6a:10:dc:0f:9e:2a:
                    c9:7b:8c:8d:73:80:3b:96:c1:89:28:0a:93:d3:00:
                    56:e5:a3:6a:1d:46:4a:6f:25:98:50:7c:06:89:b3:
                    c0:40:20:2e:40:59:7a:b1:16:c1:10:8b:9a:ad:2d:
                    80:67:08:a2:36:ad:06:9f:3d:a0:7b:49:35:74:7e:
                    1e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:7C:32:FB:1A:01:DB:32:33:DD:88:55:C4:59:AA:E0:5F:4C:0C:B3
            X509v3 Authority Key Identifier:
                keyid:33:F8:8E:AF:1E:4C:E0:F1:A1:87:7D:49:EF:97:C0:E7:FE:DC:03:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:2b:2e:9d:fb:19:ed:2a:12:a1:d4:4e:00:f0:eb:d5:65:07:
         59:98:8e:47:07:f3:da:5f:9c:70:62:67:28:08:54:07:33:ca:
         05:5d:e6:33:01:3a:3d:01:75:fc:7f:39:9c:65:17:42:b0:4f:
         13:0c:ef:17:cb:89:39:4c:0f:6e:70:e6:ea:85:ca:bc:3e:4f:
         76:b1:3c:a3:1c:39:95:ba:19:36:7a:32:52:2c:16:dc:55:08:
         ff:34:1f:b4:a4:2b:33:40:43:75:35:f1:6e:4c:9b:16:b3:3c:
         d9:ad:46:06:81:22:de:d8:a2:aa:cc:e3:60:44:08:df:fb:ae:
         6d:3c:ce:9a:9e:d3:a8:61:c1:65:43:82:e6:da:4d:0d:76:79:
         ae:b8:11:e1:c0:82:6f:48:a1:62:ea:d3:fe:55:89:e5:a0:a8:
         54:b4:da:27:06:41:1d:3b:fb:d9:a6:b3:ad:56:4a:ac:71:a3:
         85:a1:66:ab:fe:67:c2:45:a8:9a:2a:eb:6e:1d:64:2a:8c:2f:
         95:a2:f8:c1:d6:d6:cf:62:49:74:d9:53:b5:b8:89:b8:fa:33:
         70:71:e5:87:aa:3a:6a:3c:f5:ec:53:02:73:3b:98:90:82:28:
         7e:81:62:bd:73:d3:28:3e:75:b4:b8:16:93:6b:fd:72:08:cd:
         82:16:43:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----