Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft
File:                     kap3g_sCeBmDjEqRyRxg1B-z7qs.mft (raw, json)
Hash identifier:          o+/LcQJc1MHUXl9lVdBDG9Ifawru7XzJBKlOkaWgVpM=
Subject key identifier:   4F:69:3E:36:D5:4D:82:2C:AC:2E:8B:6D:E0:A9:27:94:D7:0A:F0:DC
Authority key identifier: 91:AA:77:83:FB:02:78:19:83:8C:4A:91:C9:1C:60:D4:1F:B3:EE:AB
Certificate issuer:       /CN=A9179672/serialNumber=91AA7783FB027819838C4A91C91C60D41FB3EEAB
Certificate serial:       6E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft
Manifest number:          62
Signing time:             Fri 31 Jan 2025 06:14:28 +0000
Manifest this update:     Fri 31 Jan 2025 06:14:27 +0000
Manifest next update:     Fri 07 Feb 2025 06:14:27 +0000
Files and hashes:         1: kap3g_sCeBmDjEqRyRxg1B-z7qs.crl (hash: F9wNZXw5SgQ/z7kcU9ZKkJF347Evp78KAt5QVW41sO8=)
                          2: 8B92BEBE5F6411EFA6B37A52C4F9AE02.roa (hash: gsmwp4OHnwC8hYSd2METX/aBne78nHhg+4ChJNmzP2M=)
                          3: 4B5B64C25F6411EFBC739B4FC4F9AE02.roa (hash: VYna6cWYFndEMpqakjNTMdAcPe4hQVZ6c7OGBrC7QsU=)
                          4: 71685FB25F6411EFB16D4552C4F9AE02.roa (hash: swi4PXSK/F+KN97GlDzhN7O3Kmz0645WUAiVa8gtnyQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110 (0x6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179672/serialNumber=91AA7783FB027819838C4A91C91C60D41FB3EEAB
        Validity
            Not Before: Jan 31 06:14:27 2025 GMT
            Not After : Feb  7 06:14:27 2025 GMT
        Subject: CN=679c6a44-dca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f1:a1:c7:04:07:2a:71:d7:98:67:77:86:02:
                    8a:e1:b7:cc:46:c3:7f:3b:cb:3c:23:64:e0:3b:fe:
                    a3:71:de:4d:84:bc:d7:46:3e:12:0f:61:03:6c:6e:
                    43:01:6f:bc:39:58:78:9f:b7:ba:8a:a1:c0:67:8d:
                    cd:d1:f1:8e:9d:96:f0:02:64:c2:af:a3:20:04:ad:
                    59:4c:dd:54:17:9d:76:ae:ec:c4:66:51:d4:ef:12:
                    56:97:9c:bb:87:9a:fa:05:2f:97:f6:63:e3:05:4d:
                    63:b5:97:f1:32:f7:f6:18:cb:a8:6e:65:0b:9a:98:
                    47:15:c7:8b:ff:27:a0:de:b1:1d:bb:f4:84:e6:05:
                    10:41:b7:46:ed:1a:f7:42:a3:46:a8:3c:55:bb:53:
                    51:f5:a6:d4:75:9a:61:64:5e:34:4c:40:82:0b:98:
                    52:65:57:33:ac:3d:83:b6:92:41:25:1b:1b:c3:ac:
                    1e:e2:2c:4d:03:f5:11:ef:af:ef:92:88:d6:8e:3a:
                    fc:df:98:71:45:8f:ad:99:18:6b:b0:40:cf:42:5d:
                    ab:af:43:e4:96:f4:28:a7:17:5b:22:e4:24:95:e7:
                    aa:03:75:29:fb:c8:24:3b:45:cb:d2:ce:e8:0e:50:
                    e0:44:17:b3:5d:47:9e:3b:db:18:42:7b:e7:45:9c:
                    5b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:69:3E:36:D5:4D:82:2C:AC:2E:8B:6D:E0:A9:27:94:D7:0A:F0:DC
            X509v3 Authority Key Identifier:
                keyid:91:AA:77:83:FB:02:78:19:83:8C:4A:91:C9:1C:60:D4:1F:B3:EE:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:d9:9e:61:a9:72:aa:2f:b5:83:5a:07:c1:cd:8b:39:1e:19:
         70:fd:3d:96:b7:c4:22:9b:79:98:e0:61:37:31:06:28:d5:6c:
         07:06:4e:13:9d:fd:95:98:db:84:80:8f:09:59:90:14:6d:5b:
         92:b4:96:6a:1c:15:4e:d2:47:74:bd:e7:b0:db:2e:f5:aa:77:
         74:6e:08:f4:27:94:36:c6:d4:26:a1:43:a9:e5:83:c6:1c:69:
         cf:9a:c7:78:a0:be:a2:ec:1f:04:12:4f:45:4f:eb:b0:b0:f1:
         5c:00:f5:1d:a6:12:e2:42:ae:73:88:8e:9a:8f:8d:c4:c7:3d:
         ab:ef:1f:5c:26:f4:67:7b:f4:23:fe:4b:9c:16:1b:b2:fc:74:
         0f:1b:8a:96:40:a9:40:87:3c:7f:f9:ad:7f:39:03:87:c5:95:
         1f:6e:d6:73:0b:44:fa:64:37:3b:b3:2f:c5:96:52:7d:89:be:
         bf:98:9a:a7:d5:e1:5e:56:8e:c5:40:a2:2f:97:b7:52:66:b1:
         db:e2:6e:be:87:c4:99:59:82:58:fc:7a:6a:83:e2:44:a5:01:
         2c:e9:bd:7f:8f:66:dd:e9:8c:cd:1c:3d:84:6f:4a:96:40:b9:
         30:f8:d9:b4:71:1c:51:bb:e6:3f:85:97:b6:31:ad:3c:92:c5:
         e7:c9:d0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----