Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft
File:                     ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft (raw, json)
Hash identifier:          PlTBG6H2a0m6O/kIXNkcueJ5x2J51pS+v0e0Hpixbrs=
Subject key identifier:   00:96:85:E2:11:E1:0F:75:89:26:C6:A7:36:58:60:A3:2A:AA:E6:8F
Authority key identifier: 6A:12:19:72:6D:23:9C:82:F5:A4:46:01:12:7D:1A:F8:72:5C:E0:ED
Certificate issuer:       /CN=A91944AB/serialNumber=6A1219726D239C82F5A44601127D1AF8725CE0ED
Certificate serial:       058D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahIZcm0jnIL1pEYBEn0a-HJc4O0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft
Manifest number:          0587
Signing time:             Thu 30 Jan 2025 23:17:47 +0000
Manifest this update:     Thu 30 Jan 2025 23:17:47 +0000
Manifest next update:     Thu 06 Feb 2025 23:17:47 +0000
Files and hashes:         1: ahIZcm0jnIL1pEYBEn0a-HJc4O0.crl (hash: tUKvchhEi4D06su+1pVu7gbORqRwqc8JIzEst4cVtFo=)
                          2: BB01CFB0723811EEA39E0042C4F9AE02.roa (hash: Wmsh7cLIzhswuDyOVOYJZDVZYFQtMqV8cI7HOX5SCRU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1421 (0x58d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91944AB/serialNumber=6A1219726D239C82F5A44601127D1AF8725CE0ED
        Validity
            Not Before: Jan 30 23:17:47 2025 GMT
            Not After : Feb  6 23:17:47 2025 GMT
        Subject: CN=679c089b-6138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ea:a4:ab:74:f8:24:12:48:34:10:ce:d4:bd:
                    9a:5f:e8:e4:df:bd:ab:e7:f8:60:1d:ce:1c:e3:0c:
                    33:dc:cb:98:3f:4b:8e:3a:94:95:0a:48:b7:6c:bb:
                    1d:2e:42:27:ec:da:fe:5d:09:5e:1e:6e:00:99:c1:
                    5b:4d:3c:52:7f:24:0d:81:ea:6b:30:fb:4b:ff:45:
                    a1:d3:15:ed:42:7d:e9:9f:4f:4a:9b:36:df:58:58:
                    ae:22:f4:30:8f:21:bd:b2:08:7f:5e:f4:30:f5:f0:
                    a7:1c:c0:48:f2:37:a1:f3:b7:89:39:49:8e:b1:31:
                    1e:6e:b8:da:0c:26:5a:33:b8:fc:e9:9b:6a:71:c9:
                    79:0f:0d:15:03:f6:fc:0c:bb:5c:a9:8a:79:9f:8f:
                    7e:5f:eb:58:39:30:93:e1:5e:c8:b3:e3:73:4f:aa:
                    6a:23:00:99:d5:2b:b0:9e:c6:b6:8e:6e:e8:9f:a8:
                    8c:8f:d0:26:32:2d:f0:9d:cc:b2:51:f2:7e:92:57:
                    36:5d:6e:81:95:ac:29:f0:9e:6a:2b:18:72:ff:e9:
                    90:03:18:5c:3e:bb:c0:bd:28:3c:ef:db:9e:d7:91:
                    6f:ef:03:4c:14:bb:05:79:cf:40:7c:33:b1:a0:ea:
                    ba:62:e7:38:cd:91:b1:89:3e:64:50:68:94:9d:e4:
                    96:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:96:85:E2:11:E1:0F:75:89:26:C6:A7:36:58:60:A3:2A:AA:E6:8F
            X509v3 Authority Key Identifier:
                keyid:6A:12:19:72:6D:23:9C:82:F5:A4:46:01:12:7D:1A:F8:72:5C:E0:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahIZcm0jnIL1pEYBEn0a-HJc4O0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:98:b3:25:2f:fc:49:f2:f6:bd:be:f7:af:f8:5a:b6:fa:34:
         69:f6:28:59:c1:e7:57:da:8f:1a:29:de:f0:fc:64:93:b9:77:
         23:e9:00:82:de:91:ae:f2:f0:9b:b2:23:67:5f:fd:e0:24:f7:
         97:59:d2:50:06:7b:98:2f:d4:73:ea:09:4d:53:fc:88:f3:59:
         8d:8f:ce:0c:ec:db:29:c5:e1:02:ca:75:0f:c2:24:6d:4c:5e:
         96:89:3b:8b:6c:b0:7e:c3:bb:10:89:c3:f6:45:b6:25:cd:17:
         cf:56:e4:aa:80:f2:30:33:ac:46:fd:cc:6a:bb:91:7e:80:e1:
         df:e1:8c:56:f9:8f:57:b2:93:a7:d1:30:38:d2:e7:94:08:da:
         b7:39:6b:5c:9d:03:6d:0a:0c:e6:ca:0a:e8:aa:e8:24:ce:bd:
         a9:f9:78:81:e5:db:b0:b6:53:33:c1:ad:79:5d:fe:02:88:d5:
         44:cc:9c:d0:17:3a:83:96:7e:a2:a5:43:f6:37:67:16:ff:51:
         37:f3:3b:6a:1b:df:2e:ad:70:14:58:9b:47:98:82:91:36:53:
         1b:ca:d8:ca:83:cd:3c:95:0f:08:fb:dd:71:ae:fa:6e:64:1f:
         2d:4f:f1:08:fc:2c:ed:b5:b3:f6:ee:c4:05:36:64:93:e1:f2:
         1b:8d:78:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----