Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.mft
File:                     BKAnX1srXBgOfg0Slu7WC8DPY0c.mft (raw, json)
Hash identifier:          XFwhxaHfI18H5F7EiChAWtBCzjYBl7LXNFwKZwdEjQc=
Subject key identifier:   25:41:8D:DA:E3:A0:37:01:5F:7B:31:98:2A:F0:C9:2B:AD:C3:F7:06
Authority key identifier: 04:A0:27:5F:5B:2B:5C:18:0E:7E:0D:12:96:EE:D6:0B:C0:CF:63:47
Certificate issuer:       /CN=A919C563/serialNumber=04A0275F5B2B5C180E7E0D1296EED60BC0CF6347
Certificate serial:       10D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKAnX1srXBgOfg0Slu7WC8DPY0c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.mft
Manifest number:          10C6
Signing time:             Fri 31 Jan 2025 17:19:13 +0000
Manifest this update:     Fri 31 Jan 2025 17:19:13 +0000
Manifest next update:     Fri 07 Feb 2025 17:19:13 +0000
Files and hashes:         1: BKAnX1srXBgOfg0Slu7WC8DPY0c.crl (hash: UTmVQKlpRu09K/PIpJnu+fKhS5gfANeZIpLo3+/LcxQ=)
                          2: 2B2B06B2401E11EBB0588F5FC4F9AE02.roa (hash: njXqnLM6vnU07txVMRRTX8IPNMY9z1UdckP2aMY3pBQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4305 (0x10d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C563/serialNumber=04A0275F5B2B5C180E7E0D1296EED60BC0CF6347
        Validity
            Not Before: Jan 31 17:19:13 2025 GMT
            Not After : Feb  7 17:19:13 2025 GMT
        Subject: CN=679d0611-1387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:98:e5:ab:09:ac:a2:27:41:a9:db:60:f2:e0:
                    f9:b2:82:66:9d:4e:a8:a7:bb:16:62:23:12:c7:39:
                    4e:70:4e:88:16:97:e5:26:34:79:25:3c:bd:1f:61:
                    c4:77:b0:2e:fd:cc:88:c5:f3:bb:27:4f:91:b0:97:
                    22:88:1d:c3:37:14:09:65:3e:56:b8:be:57:da:49:
                    89:8c:b4:5e:d4:c8:8e:e5:9b:4b:53:35:be:1c:4a:
                    26:89:4b:b6:14:01:b4:ea:6d:cd:14:1f:0a:ef:77:
                    30:0c:2e:72:44:71:a6:eb:9f:f1:f0:11:77:c6:77:
                    3b:d6:91:51:75:85:62:62:57:a9:33:12:bd:98:7c:
                    5d:df:d8:dd:7e:cb:06:4c:26:37:6f:5f:cf:05:3a:
                    56:04:6d:58:ee:54:5f:dd:0f:5d:99:6e:f3:15:ae:
                    b7:56:19:d0:17:9f:66:96:68:63:1a:de:17:ad:ef:
                    72:a0:85:9b:ca:d8:d7:70:b0:f8:9a:af:dd:83:25:
                    73:4a:ef:75:64:4c:a5:2e:92:ab:e4:1b:b4:11:95:
                    6f:cc:93:3a:10:03:aa:01:58:28:f9:2e:f6:d3:cc:
                    63:e7:e2:ba:62:f8:cb:3c:e2:77:1e:06:97:ec:d0:
                    d6:a4:a0:81:87:bd:c4:55:9c:d4:ff:28:49:5c:67:
                    95:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:41:8D:DA:E3:A0:37:01:5F:7B:31:98:2A:F0:C9:2B:AD:C3:F7:06
            X509v3 Authority Key Identifier:
                keyid:04:A0:27:5F:5B:2B:5C:18:0E:7E:0D:12:96:EE:D6:0B:C0:CF:63:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKAnX1srXBgOfg0Slu7WC8DPY0c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:63:8b:0e:0f:39:c7:9e:92:30:d5:e7:4f:6b:de:f3:f9:f1:
         dd:ef:81:55:54:1f:5d:12:b0:21:a4:b7:7b:72:3c:70:15:b0:
         dd:50:58:7f:4d:be:c8:62:04:c7:94:5c:f9:04:a9:ed:89:06:
         e6:df:59:d7:96:e4:19:f1:da:ca:74:50:ff:c3:b7:dc:06:10:
         48:b2:e7:af:c3:d8:1f:fa:9c:59:2f:d5:27:ab:88:50:79:5f:
         9b:ef:04:74:84:7c:ea:6b:1a:1c:81:76:e5:7b:ce:2b:77:fc:
         10:2d:15:48:56:91:b1:b0:40:ad:10:9a:4b:3e:04:78:3d:dd:
         ed:56:1b:df:03:f4:57:0b:2e:d4:d8:03:af:ff:d7:bc:2f:7c:
         a3:f3:07:f3:54:ad:42:05:55:53:86:62:eb:db:8e:cc:c9:43:
         93:eb:77:4c:0e:41:ff:8a:bc:e0:f6:12:39:78:0c:b1:97:a6:
         dd:a7:2b:19:df:20:27:1b:cd:93:1a:7a:35:99:66:61:f8:38:
         a5:c5:68:d2:e8:b3:5f:e4:7d:53:ef:6f:9d:f0:79:05:16:fa:
         ca:12:cc:3f:b0:52:c4:bb:37:65:e0:00:94:e8:8c:da:2a:77:
         21:10:ba:5b:24:8a:e9:6d:e2:ec:9f:01:df:c7:86:c1:9b:43:
         95:3e:67:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----