Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.mft
File:                     PHaPDCMj1G0yHorJk-dbCxuCHlQ.mft (raw, json)
Hash identifier:          GktkR641s8fdoH4eLlVqwMNhggm5cuDBr7OSD64RUAw=
Subject key identifier:   DF:A4:79:7C:01:40:E0:8E:12:DF:49:F3:DB:35:BD:A2:B6:A8:95:C4
Authority key identifier: 3C:76:8F:0C:23:23:D4:6D:32:1E:8A:C9:93:E7:5B:0B:1B:82:1E:54
Certificate issuer:       /CN=A919089B/serialNumber=3C768F0C2323D46D321E8AC993E75B0B1B821E54
Certificate serial:       20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHaPDCMj1G0yHorJk-dbCxuCHlQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.mft
Manifest number:          20
Signing time:             Fri 31 Jan 2025 06:56:21 +0000
Manifest this update:     Fri 31 Jan 2025 06:56:21 +0000
Manifest next update:     Fri 07 Feb 2025 06:56:21 +0000
Files and hashes:         1: PHaPDCMj1G0yHorJk-dbCxuCHlQ.crl (hash: k97TrkCAn9BIEIzyuhHvunppjxrcgva2ObELQtEO9Dk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919089B/serialNumber=3C768F0C2323D46D321E8AC993E75B0B1B821E54
        Validity
            Not Before: Jan 31 06:56:21 2025 GMT
            Not After : Feb  7 06:56:21 2025 GMT
        Subject: CN=679c7415-c620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:8a:23:c8:42:ee:67:85:1f:c5:50:32:eb:0d:
                    40:4c:43:15:19:3f:bf:31:67:03:a9:2e:04:f6:71:
                    2b:2b:42:b8:15:19:95:37:4c:7d:41:11:fd:f3:f7:
                    b1:b8:b6:d1:e1:18:8c:7c:f5:82:56:b8:64:5b:84:
                    fa:23:43:50:ea:83:96:6d:7f:4b:8d:a5:ed:f5:95:
                    ad:73:51:fe:55:e4:95:f1:24:3d:33:f2:82:27:92:
                    59:24:d4:aa:49:6c:ef:b8:e9:6e:96:a2:c1:d7:27:
                    82:f4:4b:db:39:c4:09:f5:74:3e:03:fd:22:4a:68:
                    16:18:62:93:4f:ce:42:ea:0b:bb:96:60:20:fe:d7:
                    97:57:fd:0f:74:fd:48:6e:30:32:a9:2b:57:ad:23:
                    af:da:66:15:cb:0c:6f:9e:86:47:fd:70:45:d8:d1:
                    ff:cf:75:8b:e9:af:08:47:8e:66:4a:86:df:3c:f3:
                    6c:b4:44:b4:76:16:f9:d8:5b:dd:11:19:9c:0b:75:
                    e5:fd:ab:61:36:51:aa:23:94:16:87:9a:56:92:a6:
                    4d:0d:af:ec:83:26:ab:68:5f:85:be:36:07:d5:18:
                    c7:4f:3b:5e:30:e7:44:87:66:f8:b5:8f:0b:19:13:
                    05:2d:f4:77:9c:94:6c:6a:b8:06:99:a8:d7:a6:d7:
                    76:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:A4:79:7C:01:40:E0:8E:12:DF:49:F3:DB:35:BD:A2:B6:A8:95:C4
            X509v3 Authority Key Identifier:
                keyid:3C:76:8F:0C:23:23:D4:6D:32:1E:8A:C9:93:E7:5B:0B:1B:82:1E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHaPDCMj1G0yHorJk-dbCxuCHlQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:7b:85:64:f1:a3:94:a0:84:f2:0b:b6:1b:7c:f8:a7:e5:af:
         94:2b:2c:41:a4:8f:f9:d6:ec:37:78:a1:91:54:ed:39:a1:98:
         cf:4b:e4:32:e0:b2:d4:35:81:56:63:c8:ec:9d:be:d1:c8:6a:
         c8:9f:28:92:37:56:e3:0b:82:a6:5e:b3:bc:4f:9d:c2:99:97:
         ce:f9:03:fc:09:28:50:ea:4e:94:69:7f:77:65:c9:ce:11:53:
         5e:e4:32:16:e6:99:e4:94:dc:9a:77:72:c4:b1:1e:73:e7:77:
         1d:6b:d2:15:10:d1:98:0c:81:4d:ec:d2:21:de:95:26:9c:7a:
         89:70:41:9c:fe:e6:66:ac:64:f6:55:db:bd:58:b0:06:d6:4d:
         56:c2:0d:c5:57:f1:20:04:84:02:80:98:e1:0b:7d:08:ff:45:
         56:ff:39:29:97:4a:26:dd:42:9e:ae:bc:34:0e:21:6f:20:18:
         0d:4c:4d:41:66:24:d8:b6:78:29:c2:8e:4f:88:a4:61:28:47:
         5a:a5:c6:f2:a3:0f:17:67:21:3b:45:e7:80:48:84:d8:cf:51:
         27:50:06:6a:aa:19:96:c4:79:df:47:be:93:a0:80:ad:4f:a5:
         f6:e1:01:f5:8a:4e:93:6b:53:89:01:95:da:ad:da:4e:db:f5:
         39:8d:a1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----