Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft
File:                     M3ujEf33twUntX7AOA8fu_o1iu8.mft (raw, json)
Hash identifier:          rPCWjsIggWYxJL/I3OA1aqL5i94FHpLOmUeZXYvZe+A=
Subject key identifier:   13:75:22:DB:33:C0:16:8B:E7:4E:51:D3:54:54:54:E4:7E:10:C8:4B
Authority key identifier: 33:7B:A3:11:FD:F7:B7:05:27:B5:7E:C0:38:0F:1F:BB:FA:35:8A:EF
Certificate issuer:       /CN=A918497E/serialNumber=337BA311FDF7B70527B57EC0380F1FBBFA358AEF
Certificate serial:       CA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft
Manifest number:          C7
Signing time:             Fri 31 Jan 2025 04:57:12 +0000
Manifest this update:     Fri 31 Jan 2025 04:57:12 +0000
Manifest next update:     Fri 07 Feb 2025 04:57:12 +0000
Files and hashes:         1: M3ujEf33twUntX7AOA8fu_o1iu8.crl (hash: e50PuAaZIJHWv+1IzTIWLAkEpkg8j1zcm3d230kzj2Y=)
                          2: F0674762B6B611EE8EF4443AC4F9AE02.roa (hash: FaOon3incGL44fXWsUh5gm5uuJKLqWRTOR+SCwv9JuY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 202 (0xca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918497E/serialNumber=337BA311FDF7B70527B57EC0380F1FBBFA358AEF
        Validity
            Not Before: Jan 31 04:57:12 2025 GMT
            Not After : Feb  7 04:57:12 2025 GMT
        Subject: CN=679c5828-1127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9a:48:6d:20:8c:8e:8d:eb:57:d6:d0:18:d9:
                    bb:0c:91:93:49:a9:d2:3d:6e:64:1d:96:a7:c8:ba:
                    40:ed:27:95:52:14:14:7d:da:50:9b:a0:f5:6d:a7:
                    92:1c:ee:08:23:61:16:30:42:d8:a6:22:f1:68:35:
                    d8:80:9a:c3:e6:91:cc:f1:2e:46:69:05:25:a1:37:
                    18:5d:95:70:28:8f:a3:03:2a:a8:0a:98:34:12:dd:
                    a0:5e:19:77:de:39:72:31:44:c7:33:b6:80:45:20:
                    b1:36:5e:39:a4:37:c1:f9:25:63:41:aa:8d:6c:6c:
                    8b:c5:c4:93:91:40:a9:69:49:e7:07:70:9b:db:b9:
                    a5:21:aa:a8:91:6a:5d:d1:30:16:01:71:d5:2a:76:
                    3e:f8:35:e6:43:61:e4:2d:92:89:61:c8:e8:14:ef:
                    8e:0a:81:3b:46:f9:b9:f9:6b:3d:56:73:44:fb:84:
                    f8:6b:85:2b:f9:28:49:53:1e:5a:60:81:d3:46:5f:
                    4e:28:5f:6a:76:d0:88:1d:19:1c:36:35:10:fd:44:
                    31:10:06:9d:84:f7:46:3d:b2:51:da:d6:b5:3d:15:
                    0a:09:0f:5e:eb:a4:bc:eb:83:cf:db:16:3b:39:52:
                    ad:a6:c5:7e:9b:b5:7c:9f:f0:50:69:8b:8d:ba:53:
                    9d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:75:22:DB:33:C0:16:8B:E7:4E:51:D3:54:54:54:E4:7E:10:C8:4B
            X509v3 Authority Key Identifier:
                keyid:33:7B:A3:11:FD:F7:B7:05:27:B5:7E:C0:38:0F:1F:BB:FA:35:8A:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:6a:3c:21:a0:d1:8c:7b:6a:91:47:f0:5c:0c:fb:3f:59:79:
         90:75:42:81:0f:0e:6b:4b:df:5c:c5:59:7b:1b:c4:94:04:c5:
         d1:8c:3d:8a:23:a4:e1:26:0d:51:cb:2e:4d:69:2f:12:8e:90:
         76:81:d1:2e:c5:7a:df:60:e3:91:7f:ac:75:7e:5d:d3:fe:9d:
         52:d4:64:68:ed:76:85:d7:94:74:44:39:32:d4:0f:b1:bd:78:
         9b:20:33:16:2d:2f:d9:e7:ac:12:72:db:18:2c:25:0f:4d:ff:
         52:a5:d3:da:05:bd:b7:26:7c:c0:4a:d6:27:22:80:69:24:f2:
         3f:3b:fb:fd:e6:b8:64:8a:99:49:e1:68:82:76:9b:5f:9f:63:
         f3:88:2f:78:ff:ff:bf:7e:a7:f6:9d:97:9e:48:f1:ba:91:e7:
         dc:ce:e2:58:bb:fc:85:64:27:59:51:3c:91:66:0d:57:54:a4:
         c4:5f:16:91:b1:d0:8d:2b:b0:fe:c4:2d:ed:c9:59:2d:b6:48:
         3e:01:1c:91:58:77:00:4c:ef:30:37:50:aa:e1:be:a0:3a:29:
         55:8b:d0:72:66:69:cc:90:55:c9:51:75:92:2b:3b:fa:13:9f:
         b9:80:b6:1e:ef:3a:22:73:d3:7a:48:ae:bc:df:6b:a9:fe:dc:
         d2:f2:f7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----