Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.mft
File:                     et5Ak1oAfgtb4XYUBQZOyUOv4ME.mft (raw, json)
Hash identifier:          yHomC0lbfmCY/WPBkkdY/Sc1+XlWfND7pGfuyT16EuU=
Subject key identifier:   1A:B2:EC:87:6C:A7:D3:39:07:D6:F6:B9:DF:57:D1:A5:E8:5B:9A:F2
Authority key identifier: 7A:DE:40:93:5A:00:7E:0B:5B:E1:76:14:05:06:4E:C9:43:AF:E0:C1
Certificate issuer:       /CN=A918E1CC/serialNumber=7ADE40935A007E0B5BE1761405064EC943AFE0C1
Certificate serial:       067C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/et5Ak1oAfgtb4XYUBQZOyUOv4ME.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.mft
Manifest number:          0676
Signing time:             Thu 30 Jan 2025 22:22:15 +0000
Manifest this update:     Thu 30 Jan 2025 22:22:14 +0000
Manifest next update:     Thu 06 Feb 2025 22:22:14 +0000
Files and hashes:         1: et5Ak1oAfgtb4XYUBQZOyUOv4ME.crl (hash: rAJ4kQF27gZt5kFk+QTKN1/D+dfU/DirFD33Jm1x8UA=)
                          2: 210E6234639E11EB81185C31C4F9AE02.roa (hash: klti8QmIaGN+WiHCDDLPd4nUSBr6DU2JWtB/rkLW9Bk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1660 (0x67c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E1CC/serialNumber=7ADE40935A007E0B5BE1761405064EC943AFE0C1
        Validity
            Not Before: Jan 30 22:22:14 2025 GMT
            Not After : Feb  6 22:22:14 2025 GMT
        Subject: CN=679bfb97-46af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4e:2a:ed:be:68:eb:15:e7:20:b7:26:28:93:
                    b5:90:d5:e5:e0:85:60:87:35:90:2c:32:b5:fd:fe:
                    67:32:61:5c:dc:b4:28:9b:26:57:b4:ee:d4:e6:89:
                    0b:b7:80:21:4f:a7:a7:e0:2a:b2:19:7c:ac:0f:c9:
                    89:90:7a:a9:7e:49:2c:24:f2:92:2e:e4:70:fa:72:
                    2d:6d:14:e9:c3:eb:57:66:c6:9e:83:6f:35:b2:10:
                    b4:89:69:0c:d1:1e:5e:64:20:bb:16:d2:65:a9:3d:
                    0c:ef:46:80:e1:dc:b8:ef:5c:24:28:ba:d8:e6:14:
                    e4:f5:d7:10:9f:6a:3d:8d:c1:41:a3:79:15:a8:ee:
                    03:b4:37:77:78:c6:9d:0f:20:d1:76:9f:ec:c8:81:
                    dc:53:b1:32:02:cc:2d:c5:8a:a1:7c:39:56:c2:79:
                    c2:9b:c5:c8:e2:d2:4f:9c:9b:ae:37:25:f0:1b:bb:
                    0a:04:99:5f:8e:97:c4:10:6b:81:b6:34:87:29:95:
                    7b:4a:ce:8e:e7:cf:71:ec:c1:19:08:94:52:60:25:
                    6a:78:58:39:84:7a:76:fc:cb:3d:23:19:57:de:5d:
                    4c:76:c2:cd:ed:b6:b7:dc:95:b6:b5:6c:4b:8b:09:
                    99:88:80:e3:03:93:08:e8:c7:2f:43:c9:4f:d7:d4:
                    d6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B2:EC:87:6C:A7:D3:39:07:D6:F6:B9:DF:57:D1:A5:E8:5B:9A:F2
            X509v3 Authority Key Identifier:
                keyid:7A:DE:40:93:5A:00:7E:0B:5B:E1:76:14:05:06:4E:C9:43:AF:E0:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/et5Ak1oAfgtb4XYUBQZOyUOv4ME.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:f2:7f:55:c1:83:68:62:f6:c0:fc:21:5a:a1:2b:31:91:c5:
         60:33:38:b1:e9:2b:88:62:91:30:3d:40:70:d6:27:3a:e2:c6:
         68:01:08:86:a5:1f:ff:ea:3f:5b:66:17:a7:3d:7d:71:c1:94:
         4f:88:28:b8:43:3e:57:22:6a:fc:c6:82:70:9d:9c:9d:68:75:
         ef:5a:24:55:57:b1:da:ee:f9:e0:9d:ac:0a:1b:13:36:0f:96:
         f7:e4:58:95:9b:23:08:39:6a:8d:11:1f:35:13:1f:cf:7b:21:
         a1:9f:5f:7a:ab:8e:38:62:41:cd:78:4a:8e:05:34:fe:ec:20:
         dc:0a:fe:22:d5:14:4c:2a:2a:65:c9:f7:59:15:56:a9:8b:c6:
         a7:b6:03:54:2c:88:eb:6f:89:ec:de:17:62:b3:92:d4:11:96:
         39:1b:5c:16:08:33:70:1a:25:e1:16:15:05:df:62:6b:dc:2d:
         fb:0a:ea:7c:a9:b4:f1:07:a3:ad:0b:cb:8c:d7:e0:23:2b:37:
         d2:4e:27:50:15:e3:88:8f:fd:b2:54:8d:82:8d:43:bf:c0:27:
         2d:27:32:e8:14:74:5d:97:f3:3a:b8:fe:1e:25:8e:d1:57:57:
         0b:e1:6b:03:cf:13:05:0b:a9:17:80:6f:80:66:b6:dc:7d:33:
         52:b9:fe:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----