Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft
File:                     Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft (raw, json)
Hash identifier:          FFaoFFSBSGH3lS39DtIaty5rP5Ow9Xv4VDpVEdh2klk=
Subject key identifier:   5E:4C:6D:E7:24:1F:E0:27:3B:F9:8F:EA:11:A4:8A:DF:1D:61:9B:91
Authority key identifier: 29:CD:8D:F8:80:6E:11:67:4C:BC:5F:9D:F4:DB:F8:D2:3E:0C:22:83
Certificate issuer:       /CN=A917F241/serialNumber=29CD8DF8806E11674CBC5F9DF4DBF8D23E0C2283
Certificate serial:       98
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft
Manifest number:          92
Signing time:             Fri 31 Jan 2025 05:35:13 +0000
Manifest this update:     Fri 31 Jan 2025 05:35:13 +0000
Manifest next update:     Fri 07 Feb 2025 05:35:13 +0000
Files and hashes:         1: Kc2N-IBuEWdMvF-d9Nv40j4MIoM.crl (hash: 0h8iEfwZY0D1kZ310VVgzL6aXC9dlN8LKb+r+hjTSt4=)
                          2: A0B44D9C60E211EFB1283930C4F9AE02.roa (hash: We+bh/dPouK8NlGju2k+lFoIHBb/HkpPfF89DMkSLSg=)
                          3: 7434811060E211EFBAE0C52FC4F9AE02.roa (hash: OvtEst3O8Yb7GSI88hSTYs6uncMGZjm+NzSGzxQ2axk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 152 (0x98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F241/serialNumber=29CD8DF8806E11674CBC5F9DF4DBF8D23E0C2283
        Validity
            Not Before: Jan 31 05:35:13 2025 GMT
            Not After : Feb  7 05:35:13 2025 GMT
        Subject: CN=679c6111-33d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1c:dc:49:b0:8a:ad:b9:78:15:68:bf:18:52:
                    22:71:13:06:66:93:7a:67:12:4b:a8:74:a7:9c:7a:
                    1f:5d:0f:0b:b9:cd:83:70:0e:53:f7:6d:22:85:d7:
                    ae:46:d1:da:72:51:68:6c:3b:de:8f:79:84:45:07:
                    aa:2d:08:6a:c8:33:c8:31:b9:38:4f:12:ce:e6:f5:
                    8e:c8:12:b3:87:ff:c7:8d:43:e1:73:e3:98:f3:ef:
                    bb:87:6c:89:c2:06:56:2d:70:cf:07:c0:20:27:69:
                    99:22:bd:a3:ff:f3:f3:1d:ab:3b:27:50:d8:83:fd:
                    8e:2a:4f:f7:fd:8d:d0:f3:2a:b1:6c:40:82:ca:51:
                    94:e0:30:d7:a1:ff:07:7d:2a:d0:8c:f2:56:bf:01:
                    c9:50:68:18:2d:60:2f:c5:f8:6b:ad:5b:18:8b:fc:
                    25:22:ec:88:0d:cd:cc:e1:94:08:18:41:dd:7c:1e:
                    85:ae:99:64:61:9e:2c:54:fa:47:61:09:6e:97:8d:
                    15:5b:c5:fe:0f:f0:31:10:fe:10:85:1c:31:db:49:
                    64:54:c1:e5:1b:1b:0c:d7:1a:1a:d6:d7:f8:5d:ea:
                    14:cb:fd:04:48:a0:51:2d:df:77:dd:34:4b:11:c7:
                    67:ea:c9:49:24:66:b9:07:70:20:fa:5c:fa:49:04:
                    78:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:4C:6D:E7:24:1F:E0:27:3B:F9:8F:EA:11:A4:8A:DF:1D:61:9B:91
            X509v3 Authority Key Identifier:
                keyid:29:CD:8D:F8:80:6E:11:67:4C:BC:5F:9D:F4:DB:F8:D2:3E:0C:22:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:af:23:3b:d6:61:b3:74:9a:12:88:69:c7:cc:f9:d5:36:4f:
         90:a8:a6:f9:48:d9:4d:c0:6f:ec:6a:cd:cb:3c:4d:14:d7:00:
         44:0a:81:10:46:f8:b6:c1:76:82:3e:98:8d:62:17:aa:e0:a0:
         4b:4c:fe:82:c5:e7:be:7a:ae:97:2e:39:89:1f:41:5f:0e:36:
         33:ed:ff:3b:47:2d:39:bf:79:0d:2d:96:0e:c0:4b:7b:74:c6:
         d1:1c:c5:3e:0f:36:4d:8e:8a:f9:84:ff:74:68:9b:f1:92:e6:
         58:cb:1c:02:31:ef:3a:1a:47:08:00:28:49:f3:29:e0:4f:4a:
         65:2b:77:cb:77:96:39:2d:ff:e8:5e:e2:1f:76:1b:b8:f0:8a:
         05:f3:6a:5f:3f:f7:6e:96:bc:e7:de:00:0c:03:47:fb:96:b1:
         28:8f:ae:ea:1e:ce:20:a7:65:13:0a:b7:cc:0a:24:c1:5c:57:
         32:c9:50:98:50:5d:f4:fe:5a:c2:10:ea:e3:5e:af:a8:68:8f:
         49:7d:be:69:57:77:d3:cd:e9:0d:de:ec:30:55:20:55:d5:6a:
         e9:29:23:21:dc:57:be:61:30:74:7f:7a:69:38:03:3c:41:91:
         57:a3:8c:11:eb:db:fd:2f:43:18:78:da:95:e1:dd:66:05:14:
         17:36:96:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----