Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.mft
File:                     HhI4RWNx50SJRiLpisHuVbQUXhA.mft (raw, json)
Hash identifier:          h2AbXyMw6mFPCSKs0kiTaAvZLRiOfD26x9yEF1uqIzU=
Subject key identifier:   11:D1:16:19:BD:75:F5:CB:5F:55:DF:4C:9B:96:4A:7F:68:56:58:16
Authority key identifier: 1E:12:38:45:63:71:E7:44:89:46:22:E9:8A:C1:EE:55:B4:14:5E:10
Certificate issuer:       /CN=A917E678/serialNumber=1E1238456371E744894622E98AC1EE55B4145E10
Certificate serial:       14DC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HhI4RWNx50SJRiLpisHuVbQUXhA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.mft
Manifest number:          14AB
Signing time:             Fri 31 Jan 2025 16:55:28 +0000
Manifest this update:     Fri 31 Jan 2025 16:55:27 +0000
Manifest next update:     Fri 07 Feb 2025 16:55:27 +0000
Files and hashes:         1: HhI4RWNx50SJRiLpisHuVbQUXhA.crl (hash: hfGkiZgn8ho2fgQpAs7Sqv28b99Fw8vvZgUDcB+pEbs=)
                          2: 1E7AFF46066811ED8098BF45C4F9AE02.roa (hash: 4rZ4x1J9st0IASz4FMPc7Gy5z0RBF2FHsamXY4WhzUs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5340 (0x14dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E678/serialNumber=1E1238456371E744894622E98AC1EE55B4145E10
        Validity
            Not Before: Jan 31 16:55:27 2025 GMT
            Not After : Feb  7 16:55:27 2025 GMT
        Subject: CN=679d007f-ddd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:99:ed:cb:3b:3d:86:5c:94:aa:1e:f2:e7:3a:
                    6a:90:f7:e2:b7:c4:bd:54:91:91:f4:41:72:41:fc:
                    03:d7:8a:4d:67:e6:b7:0c:37:62:70:ad:80:9e:32:
                    f7:58:88:15:3a:94:63:2f:d7:9c:b1:0c:8e:84:fd:
                    a3:fb:67:b8:0f:d0:f0:8b:59:fe:17:a6:9c:fc:0b:
                    6f:75:57:2e:06:ef:7c:b5:e7:03:e1:44:83:1d:01:
                    7b:7e:2a:83:20:83:8f:bb:ae:3d:6d:96:2c:e9:5a:
                    e1:48:0f:63:8c:5c:ba:a8:48:6d:06:50:ce:2d:1d:
                    44:19:22:b5:65:a3:6f:ad:64:8e:a3:56:9f:cf:fd:
                    25:10:6b:53:84:22:14:ca:64:b2:40:f8:f7:82:ae:
                    c1:28:27:7e:86:41:ba:86:71:b7:c0:b0:e4:f1:14:
                    7c:16:97:3f:d5:e1:c0:39:07:cc:55:4d:80:14:99:
                    0b:cb:ba:4e:b3:0d:eb:65:56:9a:1f:be:3a:38:e8:
                    34:e3:b4:c0:5d:0d:a3:be:0f:4b:66:ce:31:d0:29:
                    9c:85:f1:06:f0:77:b5:2c:16:6c:c2:36:ec:ca:48:
                    30:13:ec:b9:46:31:31:65:fd:e6:30:2b:37:01:a7:
                    77:ef:62:32:87:ad:b8:10:57:7c:6c:55:2f:5d:c7:
                    0a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D1:16:19:BD:75:F5:CB:5F:55:DF:4C:9B:96:4A:7F:68:56:58:16
            X509v3 Authority Key Identifier:
                keyid:1E:12:38:45:63:71:E7:44:89:46:22:E9:8A:C1:EE:55:B4:14:5E:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HhI4RWNx50SJRiLpisHuVbQUXhA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/697E356A695711E8A42BE680C4F9AE02/HhI4RWNx50SJRiLpisHuVbQUXhA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:f0:2c:ce:f1:ba:fb:68:f5:3a:09:84:c3:54:34:75:b2:84:
         14:d6:7e:3a:57:16:7f:66:80:0d:a6:1f:55:87:c4:00:51:c6:
         87:b5:b3:c7:42:41:e3:f6:d6:00:bf:53:c3:bf:2c:b2:8b:2e:
         50:4f:a1:03:c8:3c:30:4f:93:9e:62:6a:57:d3:12:0f:8d:1b:
         6d:98:59:90:1d:8a:d5:fa:ff:c6:f4:94:c2:24:55:b4:af:c9:
         b4:59:7f:b8:4d:2a:9f:73:8b:a8:6f:08:e9:18:14:6c:03:2d:
         27:18:fa:8e:3d:ce:31:35:e7:df:09:46:7f:d7:d6:ae:91:39:
         65:c6:ce:2c:37:90:f6:b4:a3:25:de:09:48:5b:fe:ed:5c:a7:
         0d:f3:05:49:19:71:cd:01:07:73:95:fe:f1:67:4a:ce:ba:8b:
         e1:3e:1f:92:7b:44:77:43:19:9b:b1:48:75:ed:75:eb:85:bc:
         85:75:ed:b7:9f:6e:c1:f8:9f:54:f7:cd:c1:13:64:c2:60:b9:
         7a:91:dd:6e:c2:a2:97:8f:9b:c4:11:75:a7:48:3d:1a:a7:a1:
         a5:63:d2:cb:cd:3b:f5:f0:2a:4d:4b:fd:ab:0c:b4:d2:73:cb:
         b2:37:9e:45:ad:57:15:6f:17:6f:91:ba:ef:fa:df:a8:31:11:
         41:90:de:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----