Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/IW4UMOXDDg0jp10HDbeJi5CEl5k.mft
File:                     IW4UMOXDDg0jp10HDbeJi5CEl5k.mft (raw, json)
Hash identifier:          Z6d/0UJy0XlzzV643apIjrRt5v6bgZD/JgUmJC23770=
Subject key identifier:   70:E8:BC:87:4B:B8:B5:69:08:EC:C2:EC:50:03:D7:D1:FB:BC:01:EB
Authority key identifier: 21:6E:14:30:E5:C3:0E:0D:23:A7:5D:07:0D:B7:89:8B:90:84:97:99
Certificate issuer:       /CN=A919A5B5/serialNumber=216E1430E5C30E0D23A75D070DB7898B90849799
Certificate serial:       076B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IW4UMOXDDg0jp10HDbeJi5CEl5k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/IW4UMOXDDg0jp10HDbeJi5CEl5k.mft
Manifest number:          0766
Signing time:             Thu 30 Jan 2025 21:24:26 +0000
Manifest this update:     Thu 30 Jan 2025 21:24:25 +0000
Manifest next update:     Thu 06 Feb 2025 21:24:25 +0000
Files and hashes:         1: IW4UMOXDDg0jp10HDbeJi5CEl5k.crl (hash: 5HYN1/nhMHz8/HLRxa3+KXvWWM9lgO0RwDzUOeNmyZs=)
                          2: ACD444282EC911EB99EC263DC4F9AE02.roa (hash: wbhiBTffYsutIFvVL6vDZuOV2ZB4edfZWKxQBEku9Tc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1899 (0x76b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A5B5/serialNumber=216E1430E5C30E0D23A75D070DB7898B90849799
        Validity
            Not Before: Jan 30 21:24:25 2025 GMT
            Not After : Feb  6 21:24:25 2025 GMT
        Subject: CN=679bee0a-1100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:08:58:f2:58:89:74:87:11:b9:72:e2:37:a6:
                    a9:ff:38:35:6d:2b:e9:de:03:cd:15:4c:5a:d7:a5:
                    43:de:a5:44:e6:c1:09:59:0e:0e:fa:90:49:b0:f3:
                    29:db:48:fa:b9:d1:fc:33:2f:15:d3:3e:31:1d:90:
                    3a:e0:7d:3b:d0:d3:14:6f:79:b6:6e:ec:19:da:71:
                    8d:d3:56:c9:46:ae:f1:47:37:7f:4a:ed:91:3e:f4:
                    96:d0:5f:1e:d2:bb:26:b2:7b:45:f4:74:03:e5:22:
                    5f:b9:e6:17:dd:e6:ef:55:63:48:7b:d6:e4:fb:85:
                    1b:da:56:23:7a:a1:2f:c0:35:7e:8f:56:06:c9:48:
                    cc:54:fc:21:ec:95:c2:e1:20:36:bd:69:f9:86:1f:
                    83:97:3a:28:68:64:a7:6c:d0:fa:df:18:85:b3:d8:
                    20:44:0b:20:2e:aa:c9:ae:a9:e8:02:f2:3c:f9:c4:
                    48:8f:94:7f:4a:8c:ca:ca:28:d6:9c:a2:1c:99:08:
                    10:2d:08:fe:07:1b:d9:07:ba:25:33:15:69:6d:99:
                    6a:b3:4e:cc:f9:9c:2b:88:8b:a3:80:a4:25:84:28:
                    9d:bd:83:97:35:0a:c8:a2:2c:09:f3:3e:65:0f:af:
                    46:82:30:4d:07:d0:06:d8:6b:89:96:c0:be:df:32:
                    35:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E8:BC:87:4B:B8:B5:69:08:EC:C2:EC:50:03:D7:D1:FB:BC:01:EB
            X509v3 Authority Key Identifier:
                keyid:21:6E:14:30:E5:C3:0E:0D:23:A7:5D:07:0D:B7:89:8B:90:84:97:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/IW4UMOXDDg0jp10HDbeJi5CEl5k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IW4UMOXDDg0jp10HDbeJi5CEl5k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/IW4UMOXDDg0jp10HDbeJi5CEl5k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:70:63:e6:24:e2:0e:0d:da:2a:dd:56:84:15:d8:61:f1:62:
         53:0d:19:3c:5e:28:70:c8:dc:e1:5d:6c:8b:1e:fd:8c:f8:b9:
         6d:2e:41:f9:d4:b5:f6:99:28:75:a1:48:67:43:11:96:18:99:
         a7:b7:f8:bf:d0:11:7c:ee:70:94:5f:3b:9a:34:76:86:9b:89:
         e7:41:f9:fb:7d:23:b3:f4:e4:1e:d0:9c:1e:4b:1b:2c:0c:1b:
         8d:27:95:61:ff:3a:b5:70:fa:aa:f3:2c:04:06:cf:d0:82:3d:
         1b:c3:b8:4d:de:05:ac:3a:b7:02:40:0b:89:1c:8e:ec:fb:b7:
         0c:08:e5:1e:b7:3a:bd:ff:0f:85:9f:ee:88:38:96:75:79:33:
         83:e3:58:52:a1:d9:05:69:09:da:57:46:20:e9:59:bf:e0:34:
         ff:2f:89:66:55:65:8a:03:8b:4d:21:f2:5d:c7:b6:73:7c:a5:
         90:cd:39:00:4f:e0:93:86:df:ab:92:96:af:bf:15:6e:73:a0:
         55:6f:66:d2:a5:50:19:b3:32:7f:11:16:10:78:b2:18:36:2c:
         bc:a4:81:38:41:d0:f2:76:da:a6:8a:a8:b1:de:69:6c:54:1f:
         33:5d:29:d6:f1:e6:9b:46:e9:a2:3e:ef:38:b0:cc:fc:83:e1:
         41:bc:01:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----