Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A132/1F4AC61EE72511EEA830D62AC4F9AE02/AWVpw8-OcAky8U5ILFaqZruvK2E.mft
File:                     AWVpw8-OcAky8U5ILFaqZruvK2E.mft (raw, json)
Hash identifier:          ey05IwUspNIevh8KC4YmKsqi2jlYP5ifi6r3ez4Te4A=
Subject key identifier:   BF:10:31:7B:C5:4A:D5:78:44:6A:C1:6E:75:01:BD:72:54:07:09:9E
Authority key identifier: 01:65:69:C3:CF:8E:70:09:32:F1:4E:48:2C:56:AA:66:BB:AF:2B:61
Certificate issuer:       /CN=A918A132/serialNumber=016569C3CF8E700932F14E482C56AA66BBAF2B61
Certificate serial:       A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWVpw8-OcAky8U5ILFaqZruvK2E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A132/1F4AC61EE72511EEA830D62AC4F9AE02/AWVpw8-OcAky8U5ILFaqZruvK2E.mft
Manifest number:          A5
Signing time:             Fri 31 Jan 2025 05:21:06 +0000
Manifest this update:     Fri 31 Jan 2025 05:21:05 +0000
Manifest next update:     Fri 07 Feb 2025 05:21:05 +0000
Files and hashes:         1: AWVpw8-OcAky8U5ILFaqZruvK2E.crl (hash: lnqpM7ZjMBtcoZtJnRTNZ60t71mX2v9rzZqN8Anc6lE=)
                          2: 1CDA8D8A613A11EF81FCD418C4F9AE02.roa (hash: QQs8h4jdTkNaQT5337oxXY+eSQhm5umaOiBO/ygxY+w=)
                          3: 29779172DD2311EF87F5EC47C4F9AE02.roa (hash: N0q+ZJOEcziJF4fAUxz3kOldFXpv4SfEft+wL2hbxEI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169 (0xa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A132/serialNumber=016569C3CF8E700932F14E482C56AA66BBAF2B61
        Validity
            Not Before: Jan 31 05:21:05 2025 GMT
            Not After : Feb  7 05:21:05 2025 GMT
        Subject: CN=679c5dc2-74b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d6:f8:ba:e2:19:0a:de:81:6a:7d:f4:21:d0:
                    14:c0:d4:40:51:77:5f:da:45:ed:44:9d:57:f5:d0:
                    3e:df:55:84:fc:eb:3c:88:46:04:2d:17:44:47:50:
                    65:a2:04:e5:60:42:da:e8:b3:13:46:a2:d5:12:72:
                    81:e9:cd:6a:82:69:66:a9:4d:42:46:8f:de:f3:15:
                    c9:03:8f:87:b9:1f:76:17:d9:cc:53:e0:82:60:a9:
                    cc:3d:51:af:e3:56:8b:bd:85:e7:7a:ce:31:c7:03:
                    09:05:74:a5:fb:80:89:ea:f3:f2:ca:22:99:49:7a:
                    af:63:28:47:92:e9:3e:ef:f7:b7:af:40:45:44:b8:
                    a4:9f:f9:aa:37:f4:c0:68:61:f6:53:e8:d3:88:cf:
                    c6:63:76:38:e6:02:de:d6:7a:52:4a:b0:97:74:eb:
                    a5:c2:bd:2d:d5:21:f8:ca:b5:8f:43:94:72:4a:cd:
                    f3:b8:e5:71:cb:c5:e4:af:ad:cd:d6:81:b6:62:c6:
                    53:1d:53:d6:15:e3:02:e1:e3:b5:7f:39:6f:2e:e8:
                    76:5c:f9:a6:8b:fc:59:4a:61:0c:67:3c:9a:b8:ca:
                    f6:92:2e:9c:b0:74:96:66:52:2f:10:78:37:47:cc:
                    4d:2f:08:04:79:fd:6a:2d:76:e3:c5:2e:d7:ac:1f:
                    3f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:10:31:7B:C5:4A:D5:78:44:6A:C1:6E:75:01:BD:72:54:07:09:9E
            X509v3 Authority Key Identifier:
                keyid:01:65:69:C3:CF:8E:70:09:32:F1:4E:48:2C:56:AA:66:BB:AF:2B:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A132/1F4AC61EE72511EEA830D62AC4F9AE02/AWVpw8-OcAky8U5ILFaqZruvK2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWVpw8-OcAky8U5ILFaqZruvK2E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A132/1F4AC61EE72511EEA830D62AC4F9AE02/AWVpw8-OcAky8U5ILFaqZruvK2E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:02:8c:8b:16:cb:bb:a2:48:c4:bf:dc:a6:ff:1f:1d:d4:ad:
         04:e2:ef:4b:a5:43:82:88:65:24:0d:56:e2:d7:7d:7e:b2:1c:
         b2:1d:07:88:af:a5:7e:77:5c:ef:b7:da:39:87:c2:78:0e:35:
         01:54:1c:9e:d7:05:a0:07:bb:c8:3c:ca:eb:53:70:7c:d3:05:
         22:f5:ca:61:9f:1d:e1:a3:4d:8b:d7:85:4a:2d:68:74:2a:c0:
         74:3b:9a:0e:30:24:69:20:a2:06:e3:07:23:3d:82:f8:bc:8f:
         34:70:93:b4:07:ec:d1:20:b9:19:f0:22:3c:7a:a6:46:88:27:
         97:80:c9:4c:23:97:92:92:44:3a:69:24:68:a4:5b:b4:17:3b:
         ed:f0:64:2f:44:c1:b7:6a:1d:0c:b9:cb:53:64:c8:74:32:96:
         66:d0:a9:6b:b8:94:d1:3e:9f:e0:5a:2b:e3:61:68:b1:a6:5c:
         dd:2d:58:89:70:a3:b7:4f:c3:20:c8:24:9c:6c:76:a0:c0:3b:
         32:0b:22:f2:3a:6a:8d:c9:c0:69:65:97:04:af:f2:52:2e:6b:
         84:1c:55:46:8d:87:b4:5e:17:a8:8b:95:d5:50:c1:fe:e9:dc:
         f6:1e:aa:97:8c:24:76:9a:34:fa:7e:ab:b3:2c:e6:f6:1e:2f:
         1b:34:bc:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----