Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.mft
File:                     Ic_hSZujbpQWt_68gTw8LqkWvEY.mft (raw, json)
Hash identifier:          atLe3VERwHMKDEYHuOmlcbKVKKybHw4+qna7+krhca0=
Subject key identifier:   D9:F3:CC:79:D1:08:76:E7:5A:5D:65:28:DE:F7:53:21:0E:49:F4:51
Authority key identifier: 21:CF:E1:49:9B:A3:6E:94:16:B7:FE:BC:81:3C:3C:2E:A9:16:BC:46
Certificate issuer:       /CN=A917B413/serialNumber=21CFE1499BA36E9416B7FEBC813C3C2EA916BC46
Certificate serial:       0A88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ic_hSZujbpQWt_68gTw8LqkWvEY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.mft
Manifest number:          0A7F
Signing time:             Thu 30 Jan 2025 20:09:23 +0000
Manifest this update:     Thu 30 Jan 2025 20:09:22 +0000
Manifest next update:     Thu 06 Feb 2025 20:09:22 +0000
Files and hashes:         1: Ic_hSZujbpQWt_68gTw8LqkWvEY.crl (hash: f+T06HrK5Li/I5gUvRSWLDxaBNNzpT/bYCblJTzKkaI=)
                          2: 498B6EFE942411EA816FC855C4F9AE02.roa (hash: AU3Frw6p1SnNaYVLPNPNSlHZdunuBupMTCIgXK+Ojng=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2696 (0xa88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B413/serialNumber=21CFE1499BA36E9416B7FEBC813C3C2EA916BC46
        Validity
            Not Before: Jan 30 20:09:22 2025 GMT
            Not After : Feb  6 20:09:22 2025 GMT
        Subject: CN=679bdc72-6252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:91:9c:c4:3e:d5:a9:c3:a2:45:fc:55:82:90:
                    af:e4:8a:e2:c8:19:61:e4:00:be:94:75:41:81:ed:
                    98:a4:2c:e9:ba:ee:75:97:47:32:2d:f0:d5:43:b2:
                    f6:db:5b:9f:99:4b:bd:93:c2:f7:cb:a5:00:20:20:
                    d6:c4:36:2c:fa:f9:30:c4:9d:cf:a4:58:87:4e:48:
                    84:e3:fd:66:00:c2:20:8b:4f:55:6c:3e:bd:75:1f:
                    8f:70:a9:3e:ae:5e:72:f4:c3:8b:ed:7a:1b:32:28:
                    fa:8b:ec:a3:48:1b:97:25:e4:c3:3e:00:fd:f7:35:
                    62:14:85:3e:f0:85:88:8f:a9:e7:fb:a3:b2:1f:30:
                    7d:94:3c:91:6f:7e:97:cd:8a:f4:ff:ee:7c:f9:c4:
                    93:c5:b5:c8:fb:ba:a0:2f:0f:da:b5:a4:7b:29:b0:
                    e5:01:27:44:92:74:33:b1:a5:91:7f:31:e0:57:1a:
                    12:f2:43:76:4e:b4:54:d2:7a:b4:20:33:0a:d6:9b:
                    a6:65:d5:e4:18:42:a1:1b:04:26:0a:47:b1:d9:87:
                    35:83:88:f4:cf:78:dc:b8:b4:15:44:4d:42:8f:63:
                    31:58:fa:b2:06:c3:9e:43:26:fa:df:dd:49:58:b1:
                    21:8a:51:ee:5f:16:78:64:90:da:42:0d:76:a1:35:
                    63:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:F3:CC:79:D1:08:76:E7:5A:5D:65:28:DE:F7:53:21:0E:49:F4:51
            X509v3 Authority Key Identifier:
                keyid:21:CF:E1:49:9B:A3:6E:94:16:B7:FE:BC:81:3C:3C:2E:A9:16:BC:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ic_hSZujbpQWt_68gTw8LqkWvEY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:3b:a4:08:dd:b8:10:dd:5b:20:3e:76:6e:2f:20:73:9f:82:
         2e:e1:b2:a7:fb:f8:75:22:4f:5e:b7:fe:56:92:ab:89:cc:6e:
         80:e4:e3:ca:19:88:d5:03:20:8e:39:4d:05:80:c9:93:dc:32:
         f1:37:c8:5a:52:fd:3f:a3:c1:fb:45:11:2b:21:f6:cd:4a:15:
         2b:8f:e8:ac:24:d0:32:98:ec:84:d5:b4:33:11:ba:bc:ef:f3:
         76:ed:e1:ad:bb:2b:3e:c4:64:a5:ae:0a:ce:e1:43:96:18:f7:
         8b:b2:13:b6:8d:7a:52:6c:00:ab:39:a8:23:13:a1:bc:f4:18:
         d2:39:69:66:02:99:f2:a2:ed:8d:ac:47:bd:1d:e5:11:ae:a2:
         e1:0d:e8:28:50:87:8e:dc:a1:08:74:f6:11:6c:d9:74:06:f4:
         9e:49:16:32:6c:82:ab:3a:8b:09:8e:aa:f9:c7:f9:45:8e:fb:
         86:bb:6b:b4:46:18:f4:c1:58:ce:84:43:14:9d:22:11:21:0c:
         d9:d7:5a:97:28:92:c1:5c:e2:0e:d0:5c:d4:f6:32:1c:21:8e:
         82:ae:e1:d6:7f:17:ca:69:ac:d5:80:80:9a:57:60:a5:44:0e:
         bb:9f:fa:ca:99:b3:6f:4c:04:ec:94:37:81:28:ef:2a:bd:fb:
         e5:9d:d6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----