Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft
File:                     Cc_-Rn87CcPQbySRnPrH4APku3U.mft (raw, json)
Hash identifier:          tQcwlCnfJGECR6yYdzNxdcvl0p2OvBYr121qOZbAQPU=
Subject key identifier:   E7:0B:B8:36:0A:95:7D:46:D1:49:A9:E1:B9:D3:5C:63:E3:AB:5B:B2
Authority key identifier: 09:CF:FE:46:7F:3B:09:C3:D0:6F:24:91:9C:FA:C7:E0:03:E4:BB:75
Certificate issuer:       /CN=A918AA78/serialNumber=09CFFE467F3B09C3D06F24919CFAC7E003E4BB75
Certificate serial:       1BB2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft
Manifest number:          1B94
Signing time:             Fri 31 Jan 2025 16:17:01 +0000
Manifest this update:     Fri 31 Jan 2025 16:17:00 +0000
Manifest next update:     Fri 07 Feb 2025 16:17:00 +0000
Files and hashes:         1: Cc_-Rn87CcPQbySRnPrH4APku3U.crl (hash: PbiVKx32HbWKUEY+OB0hK9PM2zdhxAvgJ70rS9+y/rk=)
                          2: F7CC52C45DF611EC8F523217C4F9AE02.roa (hash: wmloY0/V0QnXq/tRdOtLaVNhTM6eRFEy6zw5vyLq6tc=)
                          3: 398C15006B8711EF96847F5FC4F9AE02.roa (hash: qaCSlpo76LT56u2iFV1SovGKaha1B4MeUrPqr0rFVDo=)
                          4: 6996CEB84E7011EFA4A32D5CC4F9AE02.roa (hash: 2XE3S5KbeNDqdCHX2GsEpBeeuPkzYL7gxFBZ/2xM48o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7090 (0x1bb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918AA78/serialNumber=09CFFE467F3B09C3D06F24919CFAC7E003E4BB75
        Validity
            Not Before: Jan 31 16:17:00 2025 GMT
            Not After : Feb  7 16:17:00 2025 GMT
        Subject: CN=679cf77c-4897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:3e:b6:ac:79:36:91:f3:08:27:0e:ab:aa:53:
                    57:68:c9:96:d0:1e:db:c2:c6:3e:3d:57:d0:16:b9:
                    1b:42:18:95:39:97:67:b6:21:b9:2b:4c:b9:b9:db:
                    85:6d:a6:28:ab:48:1f:fb:b5:d3:2a:12:86:40:1d:
                    fb:0b:fa:3f:a7:f6:e2:96:d4:8f:7f:9a:34:73:3e:
                    8e:5f:bf:3e:aa:7f:61:33:5e:8b:18:4e:57:64:67:
                    d4:58:01:3a:79:88:b0:2d:a8:12:af:56:df:36:d2:
                    d8:8f:62:cd:90:49:42:a2:42:62:d9:94:bb:e0:3f:
                    40:32:5d:cb:8d:9a:91:80:fd:e7:45:71:1e:13:a4:
                    9f:53:93:c3:67:53:62:09:cc:73:18:5c:ce:3c:9e:
                    7c:d5:46:52:5b:68:e0:09:77:63:3d:c8:2b:6c:f1:
                    8f:15:f2:48:b1:8e:27:dd:0a:17:4e:f5:6b:f1:9f:
                    63:8d:7a:3c:58:a4:90:71:85:4f:8c:cb:cb:2f:6c:
                    1c:19:cd:38:6e:d7:78:33:f2:29:ee:d6:eb:c7:d2:
                    6d:14:9c:12:68:74:01:f6:3c:ce:f1:37:5d:86:4c:
                    ce:e5:32:d8:ba:b3:c5:6b:cb:14:ff:3d:62:95:4b:
                    0d:87:4c:f9:1c:67:bd:96:90:61:04:c7:ee:8a:cd:
                    22:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:0B:B8:36:0A:95:7D:46:D1:49:A9:E1:B9:D3:5C:63:E3:AB:5B:B2
            X509v3 Authority Key Identifier:
                keyid:09:CF:FE:46:7F:3B:09:C3:D0:6F:24:91:9C:FA:C7:E0:03:E4:BB:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:6f:36:fc:1d:3b:71:07:fe:27:f7:b8:a6:f1:fd:cd:fb:da:
         06:1f:e6:28:4f:2b:31:26:d1:31:79:10:2e:5f:0a:f2:ce:ed:
         76:04:79:11:d3:93:db:a2:63:13:7f:20:d9:dc:73:14:76:f4:
         fd:13:a1:93:5f:ec:41:44:f1:15:91:f3:2e:bf:d3:90:3e:9a:
         16:af:2d:34:a3:74:b7:dc:95:ac:a1:5e:cf:63:aa:f1:bc:16:
         5a:43:3b:2a:d3:9a:b7:38:1f:c9:db:78:75:4c:1a:d8:9c:5c:
         14:9c:a5:9a:a3:ab:fb:91:f6:4e:cc:aa:64:38:a1:3a:75:86:
         08:22:bc:66:65:fb:c4:6e:f2:a1:d0:c5:9d:71:e4:74:ad:a3:
         df:65:1b:3b:1c:47:4e:e3:1d:88:aa:20:3b:69:c0:4a:be:73:
         13:1c:b4:7d:a3:44:89:a3:dd:20:c0:95:2d:71:41:76:81:0f:
         68:0a:c6:f7:65:6e:fa:20:ae:3a:0f:9d:f8:49:fe:3f:2c:45:
         29:f2:6c:9e:78:9f:85:39:4d:1e:61:6e:f5:00:7d:65:29:01:
         b5:11:fe:7a:38:75:f6:88:89:3b:95:5a:02:17:f4:3e:0d:9c:
         38:db:db:7b:87:4e:a1:a2:bb:d5:b7:49:25:05:3e:6c:6b:b3:
         29:f5:f4:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----