Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft
File:                     DEft4wSONabm6MsM5E_IQ3Jx6z0.mft (raw, json)
Hash identifier:          YgGcXw10a57T/EgZqWDIdBhUhxmkpJzp2kXumuClnT0=
Subject key identifier:   B5:B0:58:1A:80:E5:9A:7F:43:DB:4E:13:4D:4B:B8:EE:D8:F1:B9:64
Authority key identifier: 0C:47:ED:E3:04:8E:35:A6:E6:E8:CB:0C:E4:4F:C8:43:72:71:EB:3D
Certificate issuer:       /CN=A917B51E/serialNumber=0C47EDE3048E35A6E6E8CB0CE44FC8437271EB3D
Certificate serial:       0757
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEft4wSONabm6MsM5E_IQ3Jx6z0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft
Manifest number:          074E
Signing time:             Thu 30 Jan 2025 21:33:20 +0000
Manifest this update:     Thu 30 Jan 2025 21:33:19 +0000
Manifest next update:     Thu 06 Feb 2025 21:33:19 +0000
Files and hashes:         1: DEft4wSONabm6MsM5E_IQ3Jx6z0.crl (hash: pvjtQdJr5p+ahx6PNaKlFpy5hp/Dd677d5tRr9GIPfM=)
                          2: EFA17F260FEA11EB8FA8CB2AC4F9AE02.roa (hash: jLCgtQuVltt3/VZJ3eAvwdfbtQsE4HY8zDX+9B0R7hY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1879 (0x757)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B51E/serialNumber=0C47EDE3048E35A6E6E8CB0CE44FC8437271EB3D
        Validity
            Not Before: Jan 30 21:33:19 2025 GMT
            Not After : Feb  6 21:33:19 2025 GMT
        Subject: CN=679bf020-a9a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:38:a2:53:e2:50:65:90:4c:97:eb:8f:5f:c3:
                    c1:09:20:c5:1b:cb:4c:18:f9:1c:38:f2:09:3b:45:
                    99:63:10:d3:0d:f9:11:12:fe:97:6f:0e:2b:63:80:
                    2d:32:6c:d8:5b:c7:1d:2b:eb:a7:fe:c7:55:3c:2d:
                    1c:94:99:df:70:e7:15:26:63:5e:f4:9c:cc:39:86:
                    1b:ac:1c:64:4d:a2:e4:3a:76:16:47:f9:af:91:e5:
                    5e:21:fa:7b:7b:31:f6:b0:a6:58:02:26:89:89:32:
                    76:75:f1:4e:89:68:80:df:f2:1a:bb:fe:a6:05:6a:
                    66:49:96:49:01:0c:79:40:12:9e:0a:cd:85:51:5a:
                    72:04:fd:65:80:24:1d:03:87:a2:dd:e9:31:61:f0:
                    64:02:75:6d:6f:1b:72:3f:10:07:18:94:3c:94:5d:
                    6f:6f:41:78:f7:a2:d1:96:c2:4a:64:c4:f1:6a:c7:
                    b6:59:36:da:26:d5:ab:30:ff:e1:86:ca:b1:25:ee:
                    fe:1d:36:c8:e5:29:f4:53:cb:04:d4:de:d8:89:6c:
                    b3:aa:9b:94:2c:d9:d2:35:48:c9:70:5d:e1:bf:19:
                    da:69:c9:94:15:83:27:67:b8:af:02:f6:6f:6f:c0:
                    96:1f:2d:59:3d:93:b0:fa:7a:d1:0a:b0:df:d7:97:
                    e7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:B0:58:1A:80:E5:9A:7F:43:DB:4E:13:4D:4B:B8:EE:D8:F1:B9:64
            X509v3 Authority Key Identifier:
                keyid:0C:47:ED:E3:04:8E:35:A6:E6:E8:CB:0C:E4:4F:C8:43:72:71:EB:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEft4wSONabm6MsM5E_IQ3Jx6z0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:4f:92:29:3a:68:d9:3d:7d:ba:38:b9:2a:77:e2:77:32:9e:
         a8:9f:c8:d1:a5:37:53:80:cd:05:17:60:fa:6a:9d:9f:36:82:
         95:46:7b:02:83:da:38:79:39:81:e4:bf:c4:4a:ad:b4:e5:ba:
         62:cf:70:ac:df:5a:90:97:26:75:71:4a:47:25:af:4a:0d:69:
         75:29:29:2d:21:6c:51:28:7b:c5:a0:21:22:95:4f:35:dc:55:
         ed:21:1b:f7:2c:06:a6:45:d5:66:3c:e0:d6:00:f5:c4:3e:11:
         99:10:19:5e:f9:e4:ad:8e:b4:9e:a1:f9:c1:00:74:5b:62:09:
         d9:f3:87:5f:ff:f8:4d:68:55:ec:41:a0:01:8b:e9:94:00:b8:
         7a:ff:4f:8a:84:e0:61:0a:44:1e:6b:1a:74:ca:74:a9:1b:cf:
         3d:1e:05:b7:6a:dd:d9:33:2c:70:25:a3:2a:24:e2:34:9b:69:
         46:b5:f2:f4:54:ff:94:4d:a4:ec:50:09:2e:32:da:a9:d0:b0:
         ea:44:cc:3b:7e:08:4e:6b:14:8a:5b:9d:80:a2:8c:15:5c:ab:
         64:67:c8:ed:63:6e:5e:df:21:24:13:3e:72:32:80:08:1e:bd:
         02:50:6f:91:4a:76:92:11:d6:6f:82:2d:26:61:48:b7:ce:72:
         95:79:a3:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----