Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft
File:                     C41jj_04sfd-SOG7XfKZKc59eLU.mft (raw, json)
Hash identifier:          HbPh4wuIKihan362wDaszGl3hVuU1enUY+x5qz/vU4k=
Subject key identifier:   4F:5D:07:3C:E3:7E:C3:71:3B:2A:D6:39:D9:8C:12:D0:2A:64:F3:F4
Authority key identifier: 0B:8D:63:8F:FD:38:B1:F7:7E:48:E1:BB:5D:F2:99:29:CE:7D:78:B5
Certificate issuer:       /CN=A917BEA7/serialNumber=0B8D638FFD38B1F77E48E1BB5DF29929CE7D78B5
Certificate serial:       015E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft
Manifest number:          0149
Signing time:             Fri 31 Jan 2025 03:42:50 +0000
Manifest this update:     Fri 31 Jan 2025 03:42:50 +0000
Manifest next update:     Fri 07 Feb 2025 03:42:50 +0000
Files and hashes:         1: C41jj_04sfd-SOG7XfKZKc59eLU.crl (hash: /12ZuRoMsMhc1aMNHBuAwJO8YPtMXpYAf2h61eWHrZM=)
                          2: AA398864B96611EF8161BF51C4F9AE02.roa (hash: yQGHba0iCVzmQ+TLDipv2BWri6rwZPqD4eW8ATIlvo4=)
                          3: 8FD9EFB21C4B11EFA5B6383EC4F9AE02.roa (hash: Smb8FVURFKC3m7o10r8QWyGcKvfaOvh1xY2tx4Qk4ok=)
                          4: 899BFC6C533C11EF8B23DB12C4F9AE02.roa (hash: tmuz3PtTyclXWsH3tOxgjNzOWrm2oq8qXZwVq4xv3Xg=)
                          5: 99DA0A4C533C11EF92170913C4F9AE02.roa (hash: 6poyajPR3BIFUtAmbqebq4DXNDPl9+dp2rS2zBsWMPs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 350 (0x15e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BEA7/serialNumber=0B8D638FFD38B1F77E48E1BB5DF29929CE7D78B5
        Validity
            Not Before: Jan 31 03:42:50 2025 GMT
            Not After : Feb  7 03:42:50 2025 GMT
        Subject: CN=679c46ba-40b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a4:41:83:52:cd:9b:fa:32:c3:59:fe:a1:a3:
                    b7:27:9f:f7:3d:a8:fc:25:ee:77:99:ce:7a:d9:c7:
                    3f:00:47:d0:a0:7d:ea:ff:1a:79:c5:45:ad:72:27:
                    24:3e:51:db:66:e8:e3:94:d5:70:21:6e:46:43:0d:
                    34:98:6d:f7:12:18:43:19:89:eb:f3:56:93:24:5e:
                    20:8a:bb:fc:fd:4d:5f:db:bf:98:26:07:47:6d:8d:
                    13:49:56:dd:1b:c9:3c:d8:9e:fe:e9:c4:ab:be:ee:
                    ca:0f:3a:ed:d0:25:c2:d5:a3:9e:57:0d:9f:7e:5c:
                    c2:56:35:0e:78:f2:22:ef:27:da:31:79:21:22:4c:
                    51:4f:c2:49:80:e0:8b:68:ab:fa:55:03:8a:77:ae:
                    ab:ce:d0:27:eb:67:cb:3c:41:02:ef:4b:e1:19:2c:
                    1d:83:55:57:2f:b2:8b:2f:94:08:95:ce:88:65:86:
                    4b:6d:71:52:1b:ef:6e:70:27:40:6f:b4:cc:b9:6e:
                    0c:00:31:e2:06:17:74:79:c8:fd:c2:eb:29:04:cb:
                    28:ea:39:0a:85:cc:b7:f8:1f:ed:db:55:65:ba:8a:
                    06:14:e2:01:18:50:26:ec:b5:fd:d4:fc:36:de:ed:
                    8e:67:6f:f8:48:e5:a9:54:d8:44:e1:d1:22:83:db:
                    ac:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:5D:07:3C:E3:7E:C3:71:3B:2A:D6:39:D9:8C:12:D0:2A:64:F3:F4
            X509v3 Authority Key Identifier:
                keyid:0B:8D:63:8F:FD:38:B1:F7:7E:48:E1:BB:5D:F2:99:29:CE:7D:78:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:49:b0:2a:0e:61:ba:e2:ca:3f:7b:82:dc:b5:2b:da:c6:bb:
         44:a4:f8:40:1b:51:cf:12:44:9d:a2:a4:42:90:27:6e:85:41:
         2f:e9:9e:ad:33:5b:a2:fc:b9:75:4c:25:4f:2c:b8:f5:b1:42:
         d5:03:67:20:c0:fb:9c:0f:22:bf:6f:a4:cc:9e:7d:3a:03:0b:
         d2:54:e3:62:74:ef:76:c9:30:da:b7:06:4e:ec:65:fb:d5:7b:
         2a:75:43:41:c4:da:11:6b:42:4f:0b:ba:d0:e4:42:f3:64:12:
         f6:67:7d:0e:0f:8e:bb:6b:63:36:87:18:7b:99:6b:03:d2:c7:
         ce:fb:f2:91:55:95:9b:07:ac:a1:6b:d6:63:76:05:f6:b2:f6:
         32:81:79:85:4c:21:23:52:c7:54:84:1f:61:3c:09:f1:f2:b0:
         29:c7:81:28:b9:33:cf:b0:f9:b1:7d:7a:54:66:95:a2:f6:f1:
         0f:1e:ba:82:ae:09:2c:35:fa:d8:9b:0c:64:30:84:26:76:fa:
         0d:f0:22:43:68:a0:74:47:77:7d:aa:14:3a:53:75:49:63:fd:
         6d:52:ff:49:b3:ac:b9:30:91:2e:7c:bf:59:2b:4b:50:eb:21:
         4f:ea:74:7f:04:d8:cb:21:d6:cd:4b:52:d6:fa:8c:70:45:fc:
         4e:36:fc:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----