Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.mft
File:                     82dKiQfpsa6O4m-c88mcR_dUk0w.mft (raw, json)
Hash identifier:          a8jl/bWPW4bLPXz9VYRETrKhctbeZRvExt5lu7V8SYE=
Subject key identifier:   96:BA:D9:21:C2:0F:37:C7:77:3B:16:62:A3:05:67:E7:BC:FE:8F:DB
Authority key identifier: F3:67:4A:89:07:E9:B1:AE:8E:E2:6F:9C:F3:C9:9C:47:F7:54:93:4C
Certificate issuer:       /CN=A91910A8/serialNumber=F3674A8907E9B1AE8EE26F9CF3C99C47F754934C
Certificate serial:       0371
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/82dKiQfpsa6O4m-c88mcR_dUk0w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.mft
Manifest number:          0364
Signing time:             Fri 31 Jan 2025 01:01:25 +0000
Manifest this update:     Fri 31 Jan 2025 01:01:25 +0000
Manifest next update:     Fri 07 Feb 2025 01:01:25 +0000
Files and hashes:         1: 82dKiQfpsa6O4m-c88mcR_dUk0w.crl (hash: 3zyFzmoN02Sstp6v5wplfInEW43LPAoYpbzMZCtceFY=)
                          2: F47320C4E04111EE8F798E3DC4F9AE02.roa (hash: H6qqfecqAn+EsQvXqSr4TLQYZBf7MKRLbZVO0YcFkbs=)
                          3: 5C27D4DCB0DB11EC87206C69C4F9AE02.roa (hash: xITr09tsVeB3OxC/g+xRbXoBvfspUFpsR1Ly8NZTn5c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 881 (0x371)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91910A8/serialNumber=F3674A8907E9B1AE8EE26F9CF3C99C47F754934C
        Validity
            Not Before: Jan 31 01:01:25 2025 GMT
            Not After : Feb  7 01:01:25 2025 GMT
        Subject: CN=679c20e5-a554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f4:81:5b:28:37:77:f1:fe:c8:1d:00:90:1c:
                    14:0c:fb:8c:db:79:34:70:eb:51:5b:ee:60:87:bb:
                    c4:2b:95:7f:67:3c:b5:29:1a:b9:97:42:4a:a8:5c:
                    47:01:00:aa:1c:90:f5:da:2f:d7:9f:5f:33:cb:c7:
                    5d:f9:bd:80:57:73:93:c3:ba:94:c3:1b:72:2b:20:
                    82:7b:ec:bf:d1:10:f9:30:68:c1:52:82:66:1e:02:
                    65:83:b9:b3:71:56:bc:a8:05:f6:da:d1:c9:45:4e:
                    5c:00:e4:1b:bf:7c:aa:87:7f:0a:b0:4e:ed:53:19:
                    0b:c7:83:71:9e:76:82:63:cd:02:f3:3f:62:c4:ba:
                    03:7d:1a:35:b0:86:32:99:b9:69:06:d7:6b:f4:40:
                    c8:69:5c:9e:30:0f:b6:62:34:07:6d:62:7a:77:38:
                    f5:7b:a8:d7:43:de:df:00:9e:52:37:89:f0:c6:65:
                    6e:09:7d:2e:68:da:e1:0d:f0:80:40:03:97:45:da:
                    b8:1f:ae:cc:f1:47:b9:e2:19:cb:c8:06:b5:41:e1:
                    32:59:68:e1:9a:86:a0:7b:fd:f4:1e:14:b3:97:8a:
                    0c:6d:56:8a:82:fc:c6:64:17:81:f3:17:6d:2f:56:
                    74:75:16:6e:de:a9:0d:0b:e4:3f:f9:d9:8b:9f:b7:
                    43:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:BA:D9:21:C2:0F:37:C7:77:3B:16:62:A3:05:67:E7:BC:FE:8F:DB
            X509v3 Authority Key Identifier:
                keyid:F3:67:4A:89:07:E9:B1:AE:8E:E2:6F:9C:F3:C9:9C:47:F7:54:93:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/82dKiQfpsa6O4m-c88mcR_dUk0w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:c8:bd:f9:9b:a2:ac:68:e0:32:5e:4f:c9:0b:dc:cc:0f:f8:
         7b:45:56:06:4f:16:3d:98:87:32:3d:6c:fc:97:28:4d:d7:54:
         80:63:ca:7e:73:06:1b:63:68:83:49:56:5e:af:20:49:7e:f8:
         f4:5b:c7:14:4f:b7:9d:0e:87:43:d9:ba:9f:cb:d7:4f:26:51:
         3a:43:de:96:4b:01:2f:dd:fd:a6:0c:f9:84:1e:0d:eb:ed:5f:
         0f:1b:da:ab:2d:61:5a:53:f7:e6:41:64:d6:61:a4:36:00:ed:
         04:82:ab:72:69:57:c8:c0:2d:32:7c:e2:b2:5e:bc:3d:7f:dd:
         2c:03:93:13:dd:7c:36:53:45:26:e3:02:91:f8:d0:bf:70:e8:
         2e:11:03:9d:2d:62:65:3d:69:d6:93:b6:ff:00:30:61:51:ad:
         b9:95:79:15:ae:46:3a:42:da:15:62:8c:d1:fa:7b:c6:63:7c:
         4f:82:81:ff:d6:b5:58:cd:6a:d2:ef:c7:f7:70:9c:7b:85:3a:
         67:b8:89:bb:07:95:36:b7:34:b9:0e:15:80:32:08:cc:62:e4:
         7b:42:25:29:86:15:04:1f:48:95:c3:ec:c7:42:66:a5:c2:47:
         aa:7e:4c:62:2d:b3:8c:7f:c8:ee:59:80:91:76:57:70:5d:1a:
         c9:90:f7:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----