Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190057/57B92148F85C11EDA7E8FE74C4F9AE02/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.mft
File:                     rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.mft (raw, json)
Hash identifier:          BBz7RPg1J6Lm73Q3Z8rDgm/JZzsACclK8y5A73J97iI=
Subject key identifier:   C2:E4:9C:0C:B2:C3:4C:4C:0E:C3:E4:B9:AA:F9:7E:18:A2:25:01:F3
Authority key identifier: AD:B2:7A:CA:B6:59:FD:4E:41:67:45:57:3B:45:D7:B0:2B:D8:B8:02
Certificate issuer:       /CN=A9190057/serialNumber=ADB27ACAB659FD4E416745573B45D7B02BD8B802
Certificate serial:       0143
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190057/57B92148F85C11EDA7E8FE74C4F9AE02/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.mft
Manifest number:          0141
Signing time:             Fri 31 Jan 2025 03:33:55 +0000
Manifest this update:     Fri 31 Jan 2025 03:33:55 +0000
Manifest next update:     Fri 07 Feb 2025 03:33:55 +0000
Files and hashes:         1: rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.crl (hash: 60PNtFRvIx2ycVzvTAwukS8QB4zTbnWngtezEYMYiF0=)
                          2: 1EE23948F8F411ED96463014C4F9AE02.roa (hash: Yx8IlqCtySeQtMNeiWpjMxSZbvRo8nOwBbeBlMAmJkM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 323 (0x143)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190057/serialNumber=ADB27ACAB659FD4E416745573B45D7B02BD8B802
        Validity
            Not Before: Jan 31 03:33:55 2025 GMT
            Not After : Feb  7 03:33:55 2025 GMT
        Subject: CN=679c44a3-e9ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c4:72:a7:b1:1c:7d:3e:96:52:7c:45:ce:a6:
                    1f:6f:0b:ee:77:65:99:1c:8e:a0:52:0c:a1:52:9c:
                    4b:1f:04:06:27:81:68:98:f9:7b:23:22:0f:41:a9:
                    cd:4f:2b:13:31:f3:b9:26:68:94:ff:02:85:c5:77:
                    38:96:59:7a:8a:32:07:ca:2d:31:4d:98:ac:13:af:
                    73:e5:21:ba:0f:83:c1:a4:2f:d8:80:93:46:c6:87:
                    02:30:a5:bf:69:77:dc:d3:c3:f3:c6:bd:7f:2b:80:
                    ed:db:71:56:74:8e:10:5b:38:2a:61:0b:4a:f0:7e:
                    2d:a6:1b:7d:99:20:55:5a:ef:4a:c8:05:3b:fc:7c:
                    86:4f:ee:fc:6b:2c:7f:31:1d:46:40:b5:8b:9f:6a:
                    47:63:a4:1c:cc:86:9f:e5:33:3d:24:32:15:8c:68:
                    39:95:c4:71:71:ba:e1:51:ad:fc:6d:9e:b6:d2:8a:
                    74:3a:dc:d4:f8:a3:d4:23:63:87:8c:a4:4b:e9:b0:
                    ca:14:5a:d2:ac:41:f0:13:03:db:40:79:e7:6d:96:
                    12:8d:cb:ba:99:65:97:e6:9c:7e:4c:8c:67:a1:49:
                    24:ed:75:6a:46:1e:d9:29:62:a5:01:5a:39:59:81:
                    98:52:5c:fb:c7:56:52:1e:1b:50:f4:8d:1f:8e:3f:
                    e8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E4:9C:0C:B2:C3:4C:4C:0E:C3:E4:B9:AA:F9:7E:18:A2:25:01:F3
            X509v3 Authority Key Identifier:
                keyid:AD:B2:7A:CA:B6:59:FD:4E:41:67:45:57:3B:45:D7:B0:2B:D8:B8:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190057/57B92148F85C11EDA7E8FE74C4F9AE02/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190057/57B92148F85C11EDA7E8FE74C4F9AE02/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:9e:9a:81:f2:4a:2f:f1:c8:6e:93:94:05:27:d0:5e:11:22:
         0d:93:35:fe:c3:c2:a3:f3:5a:41:44:a7:bc:55:5f:2b:53:72:
         34:2e:7e:b1:52:52:9a:eb:34:64:3c:8a:6c:c6:ea:e3:7f:70:
         b7:66:df:75:73:1a:8c:f6:b5:fc:0c:69:29:bf:fc:f1:ed:ae:
         97:db:97:ca:43:c8:6a:f4:86:4e:4b:89:23:fe:25:76:91:c4:
         15:05:53:3d:09:0e:2b:31:c7:6c:7e:f0:17:1a:a9:82:bd:77:
         00:f9:7f:96:af:20:27:76:1b:bf:37:6b:05:0b:66:16:ae:6e:
         60:d4:14:71:83:f0:1f:de:11:d8:69:19:8e:d5:20:ab:fb:b3:
         c7:6d:a4:50:03:da:01:1c:32:76:51:2a:18:56:dd:ac:ff:da:
         35:82:0f:dd:01:30:29:c2:69:8d:e8:0c:ac:2a:87:b4:63:ee:
         20:02:31:e4:76:32:c2:b4:7d:da:07:d7:be:f9:42:55:87:9a:
         ac:5a:ef:fa:02:a7:94:78:f3:e4:33:6d:88:1e:3c:8e:58:36:
         ed:79:05:bf:6d:47:09:74:93:69:42:1f:cd:eb:9e:2c:78:82:
         62:2f:6b:76:be:ee:09:6a:de:31:b9:9b:ab:a6:ea:fa:75:b2:
         ac:18:e5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----