Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft
File:                     a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft (raw, json)
Hash identifier:          vsFQyJqJcKFRCfDCd+D5tu32nNF5NgDXYpKIR+U1bQU=
Subject key identifier:   96:33:5E:55:41:59:74:11:2F:7E:CE:92:10:F1:04:24:C1:C4:8F:48
Authority key identifier: 6B:F9:63:7C:58:1C:53:4B:4B:A6:38:CD:C8:79:C0:A7:EA:7A:4F:02
Certificate issuer:       /CN=A91931EA/serialNumber=6BF9637C581C534B4BA638CDC879C0A7EA7A4F02
Certificate serial:       0833
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft
Manifest number:          082D
Signing time:             Thu 30 Jan 2025 20:49:55 +0000
Manifest this update:     Thu 30 Jan 2025 20:49:54 +0000
Manifest next update:     Thu 06 Feb 2025 20:49:54 +0000
Files and hashes:         1: a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl (hash: 71t2mODkNwH+9rS4r0BwimQprXAO8tan7C5FKSMsNmU=)
                          2: D0BC8E28C4B511EA8323912BC4F9AE02.roa (hash: qM1JVSXdUTQJnIVxaVxQsaSGw94EgaLnOqmc/M2SNDY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2099 (0x833)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91931EA/serialNumber=6BF9637C581C534B4BA638CDC879C0A7EA7A4F02
        Validity
            Not Before: Jan 30 20:49:54 2025 GMT
            Not After : Feb  6 20:49:54 2025 GMT
        Subject: CN=679be5f3-981e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:74:d1:67:bd:fd:66:03:83:06:bb:9e:01:8e:
                    fc:41:a3:88:67:ee:03:85:c1:d1:f1:00:3b:f3:fb:
                    1e:dc:f2:df:92:cf:1e:b9:48:a4:c7:ab:7e:7d:44:
                    23:9d:d3:cc:6e:57:54:84:f7:88:c5:53:0f:f8:b7:
                    eb:c4:2c:ef:69:0b:ae:7e:3b:77:f0:96:f4:30:24:
                    75:90:48:f4:13:09:50:cf:60:0a:06:af:96:dd:59:
                    d8:e0:c7:df:3a:a6:de:9c:98:e5:cb:8b:33:b9:41:
                    80:f0:43:ca:c0:13:b0:d1:9b:4b:68:12:f1:ea:f1:
                    46:b1:5d:ba:ce:00:bc:8f:9b:ea:a1:ce:a3:60:0c:
                    e4:e9:38:48:de:96:28:9c:68:f8:64:f6:ad:6d:b2:
                    18:f8:a0:6d:20:b5:38:38:a1:5e:76:89:bf:2e:12:
                    5d:61:fc:77:53:c1:4e:b5:19:44:6f:28:64:cd:57:
                    a7:e4:82:61:06:2b:78:5c:9e:5d:28:c8:36:1a:8d:
                    4a:66:e0:aa:22:8b:8b:c5:7d:f0:45:3a:a3:c1:ea:
                    87:c6:c5:af:c8:d4:ae:b4:15:7e:1b:13:55:fc:e5:
                    69:8d:73:b0:41:32:22:30:47:4b:fe:b6:53:1f:39:
                    af:d0:e1:ca:2e:a4:32:3b:d8:c2:39:08:3f:75:29:
                    0b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:33:5E:55:41:59:74:11:2F:7E:CE:92:10:F1:04:24:C1:C4:8F:48
            X509v3 Authority Key Identifier:
                keyid:6B:F9:63:7C:58:1C:53:4B:4B:A6:38:CD:C8:79:C0:A7:EA:7A:4F:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:cd:92:d4:58:51:7f:b3:a7:d9:93:09:a4:3e:9e:ae:66:64:
         17:5f:12:2e:8e:cd:a4:75:fe:6e:a4:1f:ce:55:15:c5:ee:17:
         f6:75:64:d0:8d:8e:d3:b0:91:be:84:7d:81:71:c6:82:08:8c:
         2f:76:f2:41:c2:fa:3b:21:ae:67:33:5a:7e:b3:69:c5:f9:39:
         e8:df:0d:d2:e1:de:f2:4d:62:46:bc:59:76:2b:14:9c:04:df:
         73:c6:2e:d7:d5:47:50:7d:0e:d5:81:64:3b:00:be:1c:00:ec:
         ae:a5:2e:11:ff:c5:7f:16:7b:7f:7e:3b:4a:4d:47:dd:16:76:
         c9:61:21:64:1c:f5:ba:94:6b:a6:c1:a3:9e:09:58:72:d2:5f:
         fa:03:af:63:28:e2:75:28:82:5e:58:8c:83:49:24:b4:0a:d7:
         2d:36:63:a6:a8:a0:9a:d0:28:b5:16:a8:31:be:1d:48:4b:a4:
         4e:7e:59:5f:97:ba:c2:2a:75:e9:f7:77:cf:ac:3a:0d:a7:ae:
         cc:fc:06:ae:ef:26:3f:05:9d:3b:af:13:da:92:ca:a2:2a:8c:
         d3:ea:fd:c7:45:67:09:a2:c6:94:3c:4e:b9:e5:cb:f8:eb:34:
         f5:19:8f:44:fc:f2:b0:ec:a4:2c:9e:7a:ed:ae:66:ad:ff:11:
         bd:8e:91:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----