Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.mft
File:                     KTzh3tGmQEsAssDM-z886vshpQg.mft (raw, json)
Hash identifier:          H3bEmg/HaGd0Up/dAtNqBe7qoXcSnaHOfBcPS5cLml0=
Subject key identifier:   84:B3:F5:20:DF:28:1D:EF:D6:8E:BC:C4:B3:D8:F9:5D:A7:1A:0C:DD
Authority key identifier: 29:3C:E1:DE:D1:A6:40:4B:00:B2:C0:CC:FB:3F:3C:EA:FB:21:A5:08
Certificate issuer:       /CN=A91790EC/serialNumber=293CE1DED1A6404B00B2C0CCFB3F3CEAFB21A508
Certificate serial:       6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTzh3tGmQEsAssDM-z886vshpQg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.mft
Manifest number:          6C
Signing time:             Fri 31 Jan 2025 05:57:35 +0000
Manifest this update:     Fri 31 Jan 2025 05:57:35 +0000
Manifest next update:     Fri 07 Feb 2025 05:57:35 +0000
Files and hashes:         1: KTzh3tGmQEsAssDM-z886vshpQg.crl (hash: W1L435h+8gfSP01nCkD37u5kGgC9A8FLGWrDGpf+tAs=)
                          2: 81AA7D1A3E5811EFAE13B943C4F9AE02.roa (hash: WIZmU+L0O9RcMZGa4g5/Y6rLFYKaR2VClhlEkEMS/7E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110 (0x6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91790EC/serialNumber=293CE1DED1A6404B00B2C0CCFB3F3CEAFB21A508
        Validity
            Not Before: Jan 31 05:57:35 2025 GMT
            Not After : Feb  7 05:57:35 2025 GMT
        Subject: CN=679c664f-e615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:12:31:10:d4:a7:f6:90:75:38:49:05:0a:f5:
                    35:2d:c1:d3:3e:20:1c:b0:5d:cf:39:92:a1:a3:95:
                    9f:cd:28:98:79:fc:42:83:06:b8:24:94:1b:5f:6d:
                    15:52:73:f7:cc:f7:1f:4e:b0:03:67:f5:2a:64:bf:
                    ef:b4:89:22:db:1c:34:6e:4d:0e:e9:25:96:1d:a1:
                    5b:4b:d6:c0:dc:5a:b5:52:af:89:f0:b9:1f:41:43:
                    00:7d:07:7a:9b:b0:7e:a0:60:3d:cb:46:03:da:fa:
                    fa:5c:f8:f3:0f:a7:85:21:9d:c4:3c:12:45:9c:ec:
                    1b:33:10:91:0a:3a:30:ca:77:4a:05:fd:0b:e7:2a:
                    ca:4b:0f:82:b6:c3:f0:99:cb:c4:be:70:5e:08:45:
                    3c:a3:59:dd:6a:31:a6:44:b9:c4:46:2b:c8:5e:54:
                    24:9f:e3:f7:a1:f7:fe:09:88:86:52:55:b3:55:96:
                    14:b5:c5:0d:ad:ee:12:3e:80:34:d6:24:6e:c2:0b:
                    06:de:fe:b7:c3:e9:3c:27:61:ab:34:08:8d:e3:9c:
                    f6:88:76:0c:37:d1:52:d4:ae:91:01:5d:ef:84:c3:
                    67:b2:a0:b2:c1:cd:5b:c5:74:34:06:d6:99:9a:3b:
                    d7:68:fe:25:2f:48:f5:9c:ad:4f:33:04:e5:94:72:
                    d6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:B3:F5:20:DF:28:1D:EF:D6:8E:BC:C4:B3:D8:F9:5D:A7:1A:0C:DD
            X509v3 Authority Key Identifier:
                keyid:29:3C:E1:DE:D1:A6:40:4B:00:B2:C0:CC:FB:3F:3C:EA:FB:21:A5:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTzh3tGmQEsAssDM-z886vshpQg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:ed:7b:e5:14:de:f7:60:96:a6:34:eb:44:0d:2c:4b:75:d1:
         5f:91:96:fc:c1:17:4f:8d:24:31:78:dd:fd:99:0b:bc:31:af:
         6a:8e:4b:8d:bf:89:b0:45:73:e1:16:b7:58:6f:69:25:10:b3:
         bb:04:cd:6c:8b:a6:bd:d4:f6:b9:7e:85:09:c8:35:18:c1:98:
         e6:35:f9:77:21:9e:91:2c:29:e1:91:32:d2:ed:68:7f:74:cc:
         55:f4:a9:5f:34:7c:de:56:a9:fe:f4:2f:a4:58:d7:3e:07:32:
         a6:a5:e1:df:aa:df:04:d1:85:e7:3a:69:af:4a:fd:cf:aa:08:
         f0:74:dd:27:5b:dc:6b:cf:68:15:26:df:db:5e:50:ef:27:50:
         18:0a:e6:8c:13:99:9f:de:bc:32:f5:5e:00:67:f8:0a:ee:02:
         06:7f:50:5d:af:0e:c7:cb:65:15:5a:7c:62:c2:c8:80:7d:31:
         6c:e3:5c:8e:e9:b2:16:5c:f6:33:ba:93:19:c6:37:8a:67:eb:
         bf:0c:f3:96:39:cc:75:ea:a9:26:7b:15:02:ef:f9:80:ba:f7:
         f0:b7:98:0b:29:b6:95:86:d9:42:17:94:35:aa:33:8d:b6:16:
         2a:a2:e8:af:74:c8:f6:11:0f:a5:cf:aa:3d:de:ec:ce:52:14:
         7f:3c:cf:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----