Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.mft
File:                     PfacqYyxMelltbxKM_znG50156g.mft (raw, json)
Hash identifier:          uDWmDjLXTvNp7RTJRSMD9RaTh/bCxyk5gWMFsDpY8nk=
Subject key identifier:   2B:4F:0E:6A:38:0E:42:54:F7:A7:EE:1D:CC:D0:CB:D6:F6:D5:57:01
Authority key identifier: 3D:F6:9C:A9:8C:B1:31:E9:65:B5:BC:4A:33:FC:E7:1B:9D:35:E7:A8
Certificate issuer:       /CN=A917AF13/serialNumber=3DF69CA98CB131E965B5BC4A33FCE71B9D35E7A8
Certificate serial:       071E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfacqYyxMelltbxKM_znG50156g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.mft
Manifest number:          0710
Signing time:             Thu 30 Jan 2025 21:49:18 +0000
Manifest this update:     Thu 30 Jan 2025 21:49:18 +0000
Manifest next update:     Thu 06 Feb 2025 21:49:18 +0000
Files and hashes:         1: PfacqYyxMelltbxKM_znG50156g.crl (hash: fdemu40786G56h9BTERJ08SMvfJL7WHQxjRMqG0Njtk=)
                          2: F1C686AA1D5811EFA8D26E3EC4F9AE02.roa (hash: TkoNa9ji5ztcG7b34KFx+YNM0+7Oo5t7XfdNpMfZbEo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1822 (0x71e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917AF13/serialNumber=3DF69CA98CB131E965B5BC4A33FCE71B9D35E7A8
        Validity
            Not Before: Jan 30 21:49:18 2025 GMT
            Not After : Feb  6 21:49:18 2025 GMT
        Subject: CN=679bf3de-824a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1e:93:28:c4:91:13:92:52:29:a1:8b:32:e0:
                    27:db:0e:1b:ca:06:04:d0:6d:b8:c5:de:f0:f2:44:
                    c6:ac:4b:8c:47:ad:bc:e3:70:7b:55:0d:de:6e:ad:
                    ae:3e:00:c8:6b:3c:52:8d:54:d9:78:b3:39:51:7a:
                    7e:77:b8:3e:12:fb:84:12:c7:fb:66:83:7a:b8:35:
                    4b:d8:4a:f2:0c:73:03:40:47:c1:22:98:65:36:f9:
                    4a:82:60:d3:bb:1e:c2:0e:7e:cd:45:c6:08:87:74:
                    90:78:ca:59:d1:d1:b9:22:f2:e1:20:fe:2f:a6:f3:
                    c0:d0:72:2a:c3:65:d7:e9:e0:b0:83:e8:0a:55:27:
                    74:00:0d:c9:d6:19:dc:23:fc:06:e6:8e:8f:a9:4d:
                    3e:1c:a3:0f:ff:ee:32:6b:28:e8:ed:e7:c9:7a:84:
                    30:fc:55:89:74:80:a4:71:e6:94:75:2f:ea:43:96:
                    ce:fd:d2:4f:b7:10:eb:9c:d3:db:91:11:da:63:f3:
                    33:6e:6f:25:31:e1:ea:9a:00:39:6e:d1:61:6a:64:
                    f5:a5:09:2f:83:fa:9d:1b:99:aa:00:c5:a4:66:7c:
                    ff:f0:30:5d:36:9c:ab:74:40:65:02:19:72:51:00:
                    68:3c:31:43:47:50:86:b9:7f:d1:95:a5:af:ca:f1:
                    c3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:4F:0E:6A:38:0E:42:54:F7:A7:EE:1D:CC:D0:CB:D6:F6:D5:57:01
            X509v3 Authority Key Identifier:
                keyid:3D:F6:9C:A9:8C:B1:31:E9:65:B5:BC:4A:33:FC:E7:1B:9D:35:E7:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfacqYyxMelltbxKM_znG50156g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:25:ea:5b:75:18:40:10:11:91:d3:9d:66:e2:5c:85:c3:c0:
         ba:76:ec:26:79:0c:2d:1f:af:64:44:f5:18:10:66:8f:29:25:
         b4:44:79:4c:80:78:83:58:8e:2d:d4:c0:d8:d8:96:5a:4c:5a:
         3b:fc:10:73:6d:76:b9:7c:4c:8f:63:ad:56:d7:25:54:60:3a:
         f6:9c:07:56:c9:aa:67:96:e0:5d:4c:98:cb:9a:21:d0:0c:d0:
         cc:c5:3d:08:5d:d2:3f:4e:9f:b0:16:cb:6d:5b:94:6f:3c:1c:
         f1:86:7d:b0:69:3a:36:71:98:50:ea:d5:b2:53:d9:05:63:0a:
         b6:bd:22:c6:c0:3c:1f:68:b3:01:8f:50:00:a0:9a:ae:67:a5:
         61:b7:8b:84:fe:df:84:17:52:90:d6:81:f2:7b:9f:57:5f:c5:
         1d:59:05:97:ff:4e:5c:3f:a6:70:f8:b8:9f:57:fe:13:e6:e2:
         11:6a:5b:bc:86:ea:86:2a:75:38:58:f4:af:1f:bf:cd:9d:e6:
         63:f6:17:da:c8:4e:a0:b0:22:e7:21:be:25:29:6f:a8:74:00:
         e7:b3:bc:25:68:3a:fe:41:1a:ee:ab:8f:e5:1f:fa:dd:66:df:
         fd:8f:bb:70:be:2e:7c:f2:1d:1e:da:6d:bc:a5:96:ff:f5:ac:
         ba:86:fb:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----