Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft
File:                     4kPzvoJVabsWrLN0vJjavmkLF8E.mft (raw, json)
Hash identifier:          IruvCFP1OzAi1tbbkwTv/Zvznwr0aRdJsMmR9E2DXuc=
Subject key identifier:   40:23:60:C3:34:2A:B7:F0:34:C6:2F:52:FF:19:0A:6E:E4:2B:AE:71
Authority key identifier: E2:43:F3:BE:82:55:69:BB:16:AC:B3:74:BC:98:DA:BE:69:0B:17:C1
Certificate issuer:       /CN=A917E678/serialNumber=E243F3BE825569BB16ACB374BC98DABE690B17C1
Certificate serial:       0655
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/4kPzvoJVabsWrLN0vJjavmkLF8E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft
Manifest number:          0638
Signing time:             Fri 31 Jan 2025 16:55:25 +0000
Manifest this update:     Fri 31 Jan 2025 16:55:25 +0000
Manifest next update:     Fri 07 Feb 2025 16:55:25 +0000
Files and hashes:         1: 4kPzvoJVabsWrLN0vJjavmkLF8E.crl (hash: A4OjiQr5Vo9WWbiY4X8VM4v4VZcVO7RqzEo3c78dNUY=)
                          2: 91E868D4902B11EF87435A54C4F9AE02.roa (hash: hlDssLyDweoJI1CWdf6PXWRb2ocZAW1+Z7Bn8Rhx/94=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1621 (0x655)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E678/serialNumber=E243F3BE825569BB16ACB374BC98DABE690B17C1
        Validity
            Not Before: Jan 31 16:55:25 2025 GMT
            Not After : Feb  7 16:55:25 2025 GMT
        Subject: CN=679d007d-dab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:12:38:26:f4:d9:a7:00:ad:01:8a:b3:35:2c:
                    49:26:9e:87:1c:36:61:c5:16:ee:fc:f2:72:fd:dd:
                    7a:c6:67:b4:1e:2c:96:34:4c:3d:1d:e5:11:4f:81:
                    f9:d2:02:3f:bb:62:d5:1b:f6:43:63:aa:03:7c:23:
                    14:b4:6d:5b:cc:db:57:d9:b6:88:d1:0d:3b:8c:db:
                    a4:83:bb:50:6d:e3:84:98:4b:24:57:75:9b:5d:da:
                    c7:a1:e9:fb:f8:2e:aa:29:a5:f8:47:2d:d1:24:15:
                    5d:4c:6e:d0:79:4f:d4:0f:6e:9b:d4:fa:a8:e0:53:
                    1e:b6:d4:62:bf:6d:83:1a:7f:88:94:99:67:7f:24:
                    be:74:b3:13:0a:56:ba:15:aa:b3:2b:04:a2:a0:b2:
                    6c:ab:b9:0d:87:33:bd:d5:77:df:dc:56:d7:d5:d6:
                    f3:50:e2:32:e2:82:8e:5f:72:1a:f0:bf:6b:55:78:
                    16:2e:25:7f:ec:a5:7b:0c:92:55:06:32:f2:ca:a3:
                    90:9f:b7:60:56:58:df:5a:b2:c6:35:19:b0:5c:09:
                    30:99:52:47:4f:5b:f9:da:53:dd:65:63:82:a9:5f:
                    54:19:f2:7f:49:ea:e4:56:ef:38:de:0f:4a:e4:af:
                    6b:27:ba:62:55:c8:8e:1f:c2:9f:79:87:b5:e0:ef:
                    02:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:23:60:C3:34:2A:B7:F0:34:C6:2F:52:FF:19:0A:6E:E4:2B:AE:71
            X509v3 Authority Key Identifier:
                keyid:E2:43:F3:BE:82:55:69:BB:16:AC:B3:74:BC:98:DA:BE:69:0B:17:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/4kPzvoJVabsWrLN0vJjavmkLF8E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:30:be:11:f6:a9:1a:43:72:dd:40:bd:a0:6c:07:74:52:e1:
         14:64:76:db:98:aa:95:a0:42:b5:16:d8:93:36:f8:15:6e:ce:
         51:98:80:f0:1b:db:0d:aa:5b:6e:89:fb:20:78:59:8a:91:1c:
         80:5e:6d:c9:2b:6d:f5:76:1e:e3:df:d6:c1:12:3f:0d:ee:1c:
         ea:73:e0:da:79:f7:ef:cc:96:1a:21:47:49:76:33:76:19:83:
         ce:92:9f:82:d4:8b:cd:07:0d:d1:ce:74:da:77:7b:eb:35:26:
         7a:3c:20:f9:cb:83:f0:fb:d1:f6:3c:f6:a5:ad:56:57:c1:53:
         86:23:3c:e5:ec:e6:81:ce:b4:03:78:84:6d:2a:74:74:b5:b2:
         ee:8d:be:5a:07:92:62:ff:05:1a:f4:d0:99:7c:be:1f:04:9c:
         07:d3:2f:61:6b:18:32:d3:93:cf:d8:28:c3:55:22:1a:c4:30:
         3e:a6:d3:05:da:1c:94:cf:64:2d:f5:26:af:bc:89:e9:b9:b4:
         8d:52:5f:fe:d7:b3:c6:75:fd:4f:01:ae:25:1f:2b:5b:c4:7d:
         35:68:e9:2e:95:bb:a6:3d:43:7c:83:b5:b7:c9:95:91:b6:9f:
         dc:6e:92:1c:cb:49:00:a1:bd:59:5c:4e:f4:4f:55:10:c1:84:
         50:bf:16:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----