Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft
File:                     QJOHCXJ0OMjB3r_9BBWQWEggxug.mft (raw, json)
Hash identifier:          jhLwizNHjMrtWjpxxi6/GyCVhuq6DaAmRvk7VpM2CHk=
Subject key identifier:   34:9B:0B:D3:E4:90:5E:F1:43:84:6E:D7:0D:CB:47:D9:CF:62:13:7E
Authority key identifier: 40:93:87:09:72:74:38:C8:C1:DE:BF:FD:04:15:90:58:48:20:C6:E8
Certificate issuer:       /CN=A917618F/serialNumber=40938709727438C8C1DEBFFD041590584820C6E8
Certificate serial:       1278
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJOHCXJ0OMjB3r_9BBWQWEggxug.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft
Manifest number:          126F
Signing time:             Fri 31 Jan 2025 17:05:57 +0000
Manifest this update:     Fri 31 Jan 2025 17:05:57 +0000
Manifest next update:     Fri 07 Feb 2025 17:05:57 +0000
Files and hashes:         1: QJOHCXJ0OMjB3r_9BBWQWEggxug.crl (hash: MF9/PZOmClabfZ1N4CEvM91lMca/+PqgTMUPQXu5Z1A=)
                          2: 2FE4DA1EC2E111E8A19CB72FC4F9AE02.roa (hash: HkQW1ELmD+iLXWXgNsuJGsFujvrmVSrBFXmyCQkIzxA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4728 (0x1278)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917618F/serialNumber=40938709727438C8C1DEBFFD041590584820C6E8
        Validity
            Not Before: Jan 31 17:05:57 2025 GMT
            Not After : Feb  7 17:05:57 2025 GMT
        Subject: CN=679d02f5-6b8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:2d:c4:05:dc:e6:d4:bf:b0:ea:70:ef:ff:fe:
                    52:be:f8:c0:e3:62:44:bd:07:ba:a6:ed:f4:70:37:
                    85:f8:59:0f:42:9f:d2:73:a8:c6:32:a9:ad:1d:92:
                    fc:d7:bd:ed:b3:51:1d:9d:7e:d1:ea:79:c3:30:c3:
                    d0:2d:bc:79:31:58:68:8e:40:4f:eb:1c:58:c8:66:
                    84:3d:e7:78:e2:d6:b0:76:de:34:3e:3d:fa:80:1c:
                    97:42:5e:b6:80:b2:36:1b:0d:08:e1:f1:b7:41:35:
                    77:06:6f:fd:b8:6b:2b:96:df:4d:e7:4e:ad:d3:f1:
                    68:24:4c:08:70:07:8d:97:61:b2:f0:0b:90:9d:aa:
                    47:83:35:1c:76:8c:8f:3d:8a:5a:dd:d5:f5:0d:41:
                    8c:77:bf:af:e1:9d:c3:c8:ea:e4:f4:da:1b:3e:2b:
                    e7:79:77:f2:f0:18:00:e6:37:0b:8d:c5:56:f3:b1:
                    b4:29:8a:38:bb:d9:b7:df:fd:3a:a1:76:79:99:1c:
                    48:6b:7d:33:2e:c1:b1:eb:10:64:10:f3:fb:65:0f:
                    26:7b:0e:81:31:b4:ae:d3:70:1f:20:e0:ed:47:44:
                    69:e6:62:0e:27:db:fd:51:83:e9:cc:ae:f8:39:31:
                    e6:b1:6f:25:03:67:da:db:57:9f:fc:a5:77:e7:57:
                    f8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:9B:0B:D3:E4:90:5E:F1:43:84:6E:D7:0D:CB:47:D9:CF:62:13:7E
            X509v3 Authority Key Identifier:
                keyid:40:93:87:09:72:74:38:C8:C1:DE:BF:FD:04:15:90:58:48:20:C6:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJOHCXJ0OMjB3r_9BBWQWEggxug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:57:33:17:01:9a:a9:41:08:bf:50:8b:f0:8a:04:99:46:c8:
         a4:c7:61:a9:e0:4c:6f:22:ed:a2:49:27:d3:28:30:84:49:f5:
         87:f9:36:a5:c6:5b:88:3f:27:bd:86:b2:70:c9:97:48:f6:9e:
         0e:73:24:b0:5f:03:29:20:1e:d7:6e:82:09:07:f9:00:86:85:
         e9:59:7b:1c:bc:ae:37:03:3f:5b:ad:dd:cd:13:ac:42:18:72:
         f7:59:20:bc:d1:99:d6:32:7a:3e:1c:6b:2c:ef:89:8d:ee:75:
         ea:73:17:ce:3c:c8:fb:c2:95:d0:14:7d:3d:c6:31:e2:db:e3:
         80:4e:b2:f5:ca:6b:f2:96:c0:b1:df:20:07:af:52:c3:41:65:
         ee:af:76:ef:14:65:3a:77:68:ec:0c:eb:89:c9:38:b2:67:da:
         d7:22:ae:ab:97:d7:a7:cd:b7:cd:27:1b:ad:af:6c:b2:dc:2e:
         61:6d:0d:c6:2b:68:0b:a3:38:96:b2:12:0d:4e:7f:07:92:29:
         11:a5:b0:7a:c2:69:05:88:18:73:8b:7c:41:62:92:47:f6:00:
         4b:de:88:b8:c8:2f:0e:86:e0:3c:9d:b9:d3:ee:86:6a:99:fa:
         2f:82:e9:13:fd:70:1b:bb:4c:32:37:34:8e:f5:37:26:55:10:
         e3:d9:8f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----