Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft
File:                     EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft (raw, json)
Hash identifier:          oS1DePot5zWiY1wfbzLcfQknzZSC+Nj1yxBnqa+d9uc=
Subject key identifier:   D6:E9:5B:DC:3A:E7:7C:13:D3:ED:5B:83:BA:6A:D4:72:25:22:C6:06
Authority key identifier: 13:24:04:30:21:BB:45:D7:FF:66:F2:0A:FC:68:39:34:31:30:C3:F2
Certificate issuer:       /CN=A917FFB0/serialNumber=1324043021BB45D7FF66F20AFC6839343130C3F2
Certificate serial:       34C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft
Manifest number:          348D
Signing time:             Fri 31 Jan 2025 14:46:39 +0000
Manifest this update:     Fri 31 Jan 2025 14:46:38 +0000
Manifest next update:     Fri 07 Feb 2025 14:46:38 +0000
Files and hashes:         1: EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.crl (hash: b+swSy9hUGwb7izlkGpU/faVjKxOfBKJIHzEKUF64Rs=)
                          2: 80B30FA48F5611EA9C04912BC4F9AE02.roa (hash: pAR1FgGTlUIXKdXPzl2g83tghG6tiadwAtJ5qGgzg7c=)
                          3: 19CCFBDE6F0911ED8A7BD268C4F9AE02.roa (hash: JTK51f8dfP+bxciKZy6FgqfkHpvTyTd0gqBndr+pK/M=)
                          4: A88A36D0003A11EEB8430127C4F9AE02.roa (hash: S9c42K/e6Cb4RZkOmU2A+Wc3g/Elgh6iQKBCJml/etM=)
                          5: 187F92966F0911ED8A7BD268C4F9AE02.roa (hash: WY+AEtZNGfOw12yKOfvg/F8cjo6zbb8RMRrGslASsW0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13511 (0x34c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917FFB0/serialNumber=1324043021BB45D7FF66F20AFC6839343130C3F2
        Validity
            Not Before: Jan 31 14:46:38 2025 GMT
            Not After : Feb  7 14:46:38 2025 GMT
        Subject: CN=679ce24e-d756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2f:eb:64:8e:64:07:e2:51:bb:60:48:21:df:
                    5a:4a:8c:85:8e:35:6c:2c:cf:1c:d9:ae:91:eb:56:
                    20:7b:68:dd:07:65:bf:64:25:b0:44:53:bd:de:89:
                    a1:52:06:67:af:4a:77:cd:c5:07:ab:87:eb:96:d3:
                    9b:77:0e:14:81:27:ea:3c:75:a9:a3:43:b7:8d:21:
                    4a:bb:30:cf:19:e8:84:3b:d1:75:9f:a7:79:f6:ad:
                    66:5d:ac:1c:ba:36:60:fc:9e:b0:79:0c:b2:5b:34:
                    18:e7:d6:e7:b2:38:ef:37:54:b2:57:7d:51:2b:4c:
                    ae:b6:ba:45:52:0e:6f:76:87:3a:27:69:22:73:e0:
                    bc:e1:60:59:09:1e:66:a9:15:6d:21:25:ff:bf:09:
                    2f:3a:cd:e2:e8:ec:42:51:b1:1a:b0:d4:0d:6d:21:
                    08:25:34:87:ba:0a:3c:a6:2d:a8:73:e2:82:e2:6e:
                    d9:fb:c3:13:9c:f7:ca:19:a8:a6:e5:f9:d4:8b:af:
                    b7:55:4e:26:78:e4:97:a6:b1:73:8f:f7:f6:15:a9:
                    3b:7a:92:f5:44:1e:02:96:65:a7:b3:01:10:ef:64:
                    65:1a:11:05:f0:2c:37:97:74:f6:5f:3a:cf:90:bd:
                    5b:a7:25:e9:4e:0c:c0:03:03:98:c1:de:52:c9:88:
                    e4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:E9:5B:DC:3A:E7:7C:13:D3:ED:5B:83:BA:6A:D4:72:25:22:C6:06
            X509v3 Authority Key Identifier:
                keyid:13:24:04:30:21:BB:45:D7:FF:66:F2:0A:FC:68:39:34:31:30:C3:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:16:2b:8c:c0:c4:3c:ec:b1:68:7c:f3:75:c3:e4:bd:74:99:
         93:96:41:63:8b:da:7f:18:b9:d8:39:05:e1:d4:bf:dc:4d:c8:
         2d:da:63:09:fd:2e:33:ff:b5:02:7f:04:20:7e:68:cc:5b:1a:
         9d:6b:f1:bf:48:be:07:ab:42:17:11:bd:29:dd:cc:ce:1d:c8:
         be:61:2c:a1:ad:47:d2:3d:d9:f5:b6:f5:a2:b3:09:2a:b1:9e:
         14:a4:84:26:fb:68:50:5b:52:c4:3a:da:81:81:07:45:3d:2f:
         89:b8:40:ba:79:4e:1f:e5:dd:78:a3:af:82:f1:e5:89:a1:f5:
         4c:cd:e7:1f:0b:e2:f5:58:8c:c3:38:30:9d:2d:d0:bc:06:9d:
         87:60:67:18:69:53:3a:e5:11:d3:3a:a0:cf:04:35:70:f3:78:
         f0:d5:b0:15:fb:06:e4:16:ac:d9:c5:9a:b8:2c:ba:f5:55:e7:
         7b:1a:45:13:e9:53:ff:be:8d:a9:e5:79:a9:6b:70:14:82:b8:
         b4:ee:74:04:14:ab:02:4f:31:9e:af:18:0c:82:a8:90:70:c9:
         e2:dd:31:87:cd:f9:89:29:b3:04:dd:3e:7d:bf:04:15:7b:a7:
         ae:e2:a4:92:d9:b1:49:60:18:87:bf:41:ac:99:b3:51:ef:5a:
         16:cd:47:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----