Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.mft
File:                     -IuXQE-dwQ9aqwL3TsSQ-YrQ07A.mft (raw, json)
Hash identifier:          I1nUEERMvTfkBV7nmwOuj+h0xw8b6i4c4kVTq2W82zQ=
Subject key identifier:   92:43:1A:08:F1:C3:92:FB:32:22:F9:B1:EC:E7:DD:6C:D5:93:11:F2
Authority key identifier: F8:8B:97:40:4F:9D:C1:0F:5A:AB:02:F7:4E:C4:90:F9:8A:D0:D3:B0
Certificate issuer:       /CN=A91854B7/serialNumber=F88B97404F9DC10F5AAB02F74EC490F98AD0D3B0
Certificate serial:       062F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.mft
Manifest number:          061E
Signing time:             Thu 30 Jan 2025 22:41:20 +0000
Manifest this update:     Thu 30 Jan 2025 22:41:20 +0000
Manifest next update:     Thu 06 Feb 2025 22:41:20 +0000
Files and hashes:         1: -IuXQE-dwQ9aqwL3TsSQ-YrQ07A.crl (hash: dkiXqiZAhze44d6IuuVIRb1UfsWVR05Z+en6GSx7/RM=)
                          2: 3EACF95EEBB511ECA410BF6DC4F9AE02.roa (hash: xFmg051Irl3QGxSaxPh5/PYgXOOm8roreRqol3Gv8es=)
                          3: 57D28CCA853E11EB9D9E2D39C4F9AE02.roa (hash: goZ7BQs8FCZwkLeH44QNaXxFhzltbICpUZt+GahLEkQ=)
                          4: 5892BB44853E11EB9D9E2D39C4F9AE02.roa (hash: pCDQvhpjTdtiJ3zqTDHJUEvIuviY7SsjRZSRovU8uCc=)
                          5: 1D526B2E5DB311EEA8990E1BC4F9AE02.roa (hash: SXTVWJ2PMrAIqDEbXazZSPAGB7rgkYD55HYA8ZjO4Yw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1583 (0x62f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91854B7/serialNumber=F88B97404F9DC10F5AAB02F74EC490F98AD0D3B0
        Validity
            Not Before: Jan 30 22:41:20 2025 GMT
            Not After : Feb  6 22:41:20 2025 GMT
        Subject: CN=679c0010-c289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:da:fe:6c:e2:ad:d9:31:60:13:28:ab:1b:34:
                    57:61:f0:d8:bb:b9:22:a4:5e:b4:69:64:e1:25:7c:
                    5c:a7:91:ca:30:ed:ad:94:5c:76:fd:dd:df:b1:c0:
                    bf:21:6a:72:6b:dd:d4:19:c0:6a:01:fa:0c:63:89:
                    ed:15:e9:29:0b:eb:59:41:fd:8c:e3:17:5f:26:fd:
                    73:a2:bb:32:dd:db:38:a2:3f:b3:37:67:37:f8:3c:
                    5a:d4:48:0f:d8:46:ce:fa:ee:5d:bc:88:e3:31:67:
                    f4:86:dc:1f:ce:f0:62:58:be:78:78:a1:28:79:dd:
                    10:89:ba:4a:3b:1f:68:c7:a6:01:8e:ac:3d:b2:a2:
                    35:93:de:db:09:83:6e:3f:43:77:c7:bd:1c:4c:40:
                    12:42:bc:fb:44:50:f5:54:eb:9c:e1:b3:05:5a:c9:
                    9b:6e:14:28:9d:ed:73:7e:10:ca:26:54:f5:5c:15:
                    2d:78:dc:cc:ad:a5:9c:5e:a6:76:38:f7:c3:77:49:
                    84:a8:14:11:e3:1b:10:45:81:77:80:ab:1a:30:3e:
                    ae:8c:af:47:0b:8c:f1:5b:85:f2:36:f6:b1:fa:bc:
                    39:3a:65:d9:a5:72:4b:2f:f2:4d:92:3e:f4:b6:3d:
                    9f:78:a7:77:cc:52:be:76:f0:8b:64:e2:ba:91:c8:
                    b5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:43:1A:08:F1:C3:92:FB:32:22:F9:B1:EC:E7:DD:6C:D5:93:11:F2
            X509v3 Authority Key Identifier:
                keyid:F8:8B:97:40:4F:9D:C1:0F:5A:AB:02:F7:4E:C4:90:F9:8A:D0:D3:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:c2:f1:41:76:a8:fa:0a:b7:c1:84:14:97:7a:80:4d:39:89:
         23:b2:74:75:0a:84:ca:3e:8f:d6:a5:79:2b:64:5b:22:2c:6d:
         8b:de:45:8c:7a:32:c8:c9:43:04:2a:99:43:e2:1b:79:b7:4b:
         99:fe:b2:d9:21:e4:92:e8:7f:f4:4e:1d:00:bf:c9:7e:c8:cb:
         cd:5b:26:3a:8d:68:5e:9e:0e:c1:50:3c:3c:94:e5:20:94:00:
         a3:7f:24:f2:99:2a:7d:1a:8f:a2:5e:6f:1f:0e:a2:3c:d1:a5:
         df:81:f8:ba:5f:87:3b:14:59:eb:d4:34:29:9f:66:5f:1d:a2:
         9f:af:39:47:df:63:a8:62:8b:3e:4b:eb:b0:76:60:03:04:f5:
         94:c4:b1:58:4d:86:b5:24:bb:2e:ce:a0:20:22:a2:f8:04:f8:
         1e:f9:40:5d:26:1f:52:e0:f3:eb:91:30:84:3c:f5:1a:77:33:
         c7:fc:f5:3a:02:b1:4a:ae:11:c4:8f:62:b0:63:ce:a9:f9:08:
         4d:2e:c0:e0:42:c9:5f:49:ff:cb:5b:2f:c6:0d:b4:51:20:11:
         83:b8:8e:2c:1d:9e:5f:57:29:16:41:a5:3e:78:f0:fa:b8:98:
         6d:4e:9c:79:ef:ea:0f:35:dc:5e:29:6c:8e:43:d5:09:75:83:
         e2:0f:60:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----