Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft
File:                     bYD-tReA9_EG5hkNw-LufOdO77s.mft (raw, json)
Hash identifier:          WfxIPTkjminiwZGhXloAqiJIZj1bI6EPgCR6+2315Kw=
Subject key identifier:   20:D8:67:DC:F2:FA:43:01:73:42:7E:2A:6C:6F:4D:7C:01:C3:5B:9D
Authority key identifier: 6D:80:FE:B5:17:80:F7:F1:06:E6:19:0D:C3:E2:EE:7C:E7:4E:EF:BB
Certificate issuer:       /CN=A917624C/serialNumber=6D80FEB51780F7F106E6190DC3E2EE7CE74EEFBB
Certificate serial:       02D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft
Manifest number:          02D4
Signing time:             Fri 31 Jan 2025 01:28:21 +0000
Manifest this update:     Fri 31 Jan 2025 01:28:20 +0000
Manifest next update:     Fri 07 Feb 2025 01:28:20 +0000
Files and hashes:         1: bYD-tReA9_EG5hkNw-LufOdO77s.crl (hash: oH0b5HmM48eEH6EXQqcgtQtGfo3PkVl6ihuyc1qYCS8=)
                          2: 52801AD8D07111ECAF21A75DC4F9AE02.roa (hash: qF7Z9bCq6Bb/CjCCcxi/i5YpMx2Ig2rtU2KcJKtS8jU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 727 (0x2d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917624C/serialNumber=6D80FEB51780F7F106E6190DC3E2EE7CE74EEFBB
        Validity
            Not Before: Jan 31 01:28:20 2025 GMT
            Not After : Feb  7 01:28:20 2025 GMT
        Subject: CN=679c2734-067a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5c:91:b2:82:75:3a:91:89:17:38:b3:b1:8a:
                    81:c8:1d:41:d4:e7:b7:42:c6:c9:47:06:97:a4:97:
                    30:bd:30:ff:9b:89:e3:6a:f0:d8:38:0e:be:67:34:
                    6e:5b:8b:db:0c:ed:f4:d0:ba:85:2a:14:f0:30:a4:
                    bf:9a:e3:7d:5d:d5:34:5b:c9:5d:21:c5:18:a2:5f:
                    c4:1d:ac:33:8f:42:08:32:d5:3f:90:5d:53:62:49:
                    19:17:8b:e4:1f:34:d0:c1:6e:ca:ea:cd:7a:8c:d1:
                    cc:14:d0:fb:e5:9d:f4:c2:84:45:55:e3:00:75:68:
                    5d:be:a0:81:f6:9c:1f:ed:91:55:cb:03:db:9f:74:
                    be:68:97:c6:fa:b6:3c:b5:9b:af:2f:5b:b0:7a:72:
                    63:07:e6:f5:d0:e1:b8:a2:76:e1:ee:5e:65:0c:c8:
                    de:73:42:a1:fe:61:6a:ab:0b:10:a4:91:91:04:08:
                    68:30:59:52:64:71:4d:bf:74:b2:a3:4c:70:8e:7e:
                    02:c5:a2:7d:f7:8c:0c:7a:ac:b0:e3:74:22:bc:64:
                    ef:63:e9:2d:fe:c7:71:f8:2f:a6:7f:70:92:2c:d1:
                    1c:7b:2c:f0:f2:03:13:a1:72:68:45:4c:92:65:5d:
                    a1:24:7a:11:56:3b:2d:14:ff:96:c3:18:8e:0b:b6:
                    d7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:D8:67:DC:F2:FA:43:01:73:42:7E:2A:6C:6F:4D:7C:01:C3:5B:9D
            X509v3 Authority Key Identifier:
                keyid:6D:80:FE:B5:17:80:F7:F1:06:E6:19:0D:C3:E2:EE:7C:E7:4E:EF:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYD-tReA9_EG5hkNw-LufOdO77s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917624C/BB50D9D0D06C11ECB2AAAA37C4F9AE02/bYD-tReA9_EG5hkNw-LufOdO77s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:ba:b5:c6:b4:eb:0b:92:f8:9e:8d:ac:55:d9:f5:fb:a2:67:
         ac:e1:81:0f:44:1f:91:62:3d:89:7c:ad:7a:59:65:9e:b0:75:
         8e:ed:4b:d8:65:08:26:2a:6f:58:bb:1d:e1:12:8d:c7:e2:db:
         c6:62:74:2e:f4:f6:9f:71:40:49:5a:c6:30:bf:88:6e:1d:20:
         97:8e:84:2d:54:19:2e:9f:fc:6d:2a:01:3c:6b:23:51:2e:38:
         cc:5c:73:a9:2d:73:88:d4:9a:e2:11:d1:45:e4:5f:50:c3:4e:
         7a:19:ca:89:0b:45:33:81:36:6d:79:28:45:ef:3f:bd:2b:bc:
         ec:97:01:77:4f:f6:32:29:d1:de:07:5f:17:fb:5e:78:cb:c4:
         32:20:36:85:18:28:9b:b3:03:e3:2e:8e:ca:3b:2c:c5:a6:74:
         9b:29:b7:c4:99:f0:55:2e:13:16:4b:6f:60:80:0b:ff:17:4e:
         81:aa:ae:6e:ce:be:dd:a2:51:e8:2f:7e:e1:90:d4:2c:6d:ef:
         d5:59:40:66:01:43:ef:25:a1:1c:8b:dd:5a:81:9e:db:81:a8:
         df:13:ee:8c:7a:a1:dd:1a:75:6f:62:44:62:ee:31:b9:aa:b9:
         ee:f2:b5:59:2b:32:d6:f0:fb:4d:f7:3a:1d:67:7c:fb:51:2f:
         f1:6e:ec:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----