Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.mft
File:                     pWcIHaZpXdN7LCsbF6Abo95ZHss.mft (raw, json)
Hash identifier:          cx76WLIX/Lxl6l4dkcPBCbCafOIa5erIDMGuKnaDFjs=
Subject key identifier:   DB:94:6A:72:76:01:16:F1:31:4A:C4:91:4C:F1:10:2D:C5:B5:01:D3
Authority key identifier: A5:67:08:1D:A6:69:5D:D3:7B:2C:2B:1B:17:A0:1B:A3:DE:59:1E:CB
Certificate issuer:       /CN=A91A284E/serialNumber=A567081DA6695DD37B2C2B1B17A01BA3DE591ECB
Certificate serial:       0742
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWcIHaZpXdN7LCsbF6Abo95ZHss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.mft
Manifest number:          073D
Signing time:             Thu 30 Jan 2025 21:36:41 +0000
Manifest this update:     Thu 30 Jan 2025 21:36:40 +0000
Manifest next update:     Thu 06 Feb 2025 21:36:40 +0000
Files and hashes:         1: pWcIHaZpXdN7LCsbF6Abo95ZHss.crl (hash: JSu+Dy0s6lnz5RjKtmvTCdYattRVc9BeP//IxoZ5FE8=)
                          2: A3205106142511EB8FED0427C4F9AE02.roa (hash: VDZMZq0ravcenOYyOeGNgLAMJ2KdcwQBXJSf2fEc5SM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1858 (0x742)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A284E/serialNumber=A567081DA6695DD37B2C2B1B17A01BA3DE591ECB
        Validity
            Not Before: Jan 30 21:36:40 2025 GMT
            Not After : Feb  6 21:36:40 2025 GMT
        Subject: CN=679bf0e8-2bc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cb:8d:51:b4:15:ee:95:70:0c:50:84:a2:93:
                    96:ba:dd:3d:90:75:43:2a:a5:09:b6:e5:88:c5:da:
                    5f:b4:37:c8:3a:89:94:bc:f8:38:62:ec:c2:4d:33:
                    3d:d1:dd:e6:7c:cb:d7:d7:79:55:a9:df:44:7c:3e:
                    d9:3d:23:da:32:76:71:6b:76:de:c3:b9:c8:c7:c5:
                    54:13:c6:a6:be:a5:07:24:ba:e3:27:a4:85:b1:6c:
                    44:7c:9c:fb:9a:01:39:54:28:c7:ca:81:c2:35:3a:
                    d2:6c:58:1c:78:cd:f4:64:7d:8d:4d:4f:d6:e0:46:
                    94:80:de:71:a7:a8:b2:9a:cc:42:88:32:ac:4e:47:
                    15:e3:6d:07:fc:c4:ae:7f:a3:2a:75:bb:0d:d1:a4:
                    1c:24:da:a2:37:9d:72:d0:c4:0f:fa:be:b5:bd:1e:
                    9a:6b:4e:98:92:a7:87:4a:b2:9d:b4:07:57:1f:03:
                    b8:b2:71:4c:e6:45:bb:83:ea:e8:3e:d9:20:e5:d0:
                    fc:25:9b:ac:d5:0d:c5:74:da:94:58:1c:7b:25:75:
                    8d:9f:95:3d:3d:1c:cd:5b:60:4d:88:8f:d0:fa:35:
                    56:a8:3a:e9:f0:6e:d3:80:44:f3:ce:36:52:c5:33:
                    32:dc:fc:e5:3f:72:8a:1f:c9:d3:e1:3f:e4:d5:31:
                    d8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:94:6A:72:76:01:16:F1:31:4A:C4:91:4C:F1:10:2D:C5:B5:01:D3
            X509v3 Authority Key Identifier:
                keyid:A5:67:08:1D:A6:69:5D:D3:7B:2C:2B:1B:17:A0:1B:A3:DE:59:1E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWcIHaZpXdN7LCsbF6Abo95ZHss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:49:73:50:0e:87:5e:55:28:46:ad:58:1e:b3:a3:c6:ea:f5:
         e6:58:34:c1:99:51:9f:af:e9:a7:c1:53:67:bf:b4:3d:9d:e1:
         f3:d8:c9:90:5f:ac:75:3d:5a:9e:1b:9a:6b:9f:4c:ed:c6:6e:
         11:c3:c3:d5:0d:fc:89:b9:de:1f:fe:3c:b4:b8:91:e6:bf:41:
         95:d8:48:2f:d7:6f:35:6e:c0:37:57:b2:05:50:92:82:99:7b:
         10:06:e3:ec:eb:99:31:00:16:1a:cd:7c:fa:b4:f4:8d:40:35:
         8e:03:db:4a:72:9d:8c:3a:6d:57:da:27:e8:4b:e2:82:0f:96:
         80:f0:fc:3b:8d:90:25:c6:96:a7:74:42:b8:7c:fc:fa:27:ab:
         4d:a2:30:36:a1:45:89:a2:ae:61:39:a1:dc:54:be:df:81:37:
         6c:58:5e:02:c0:e3:fb:28:88:82:64:1d:3e:1d:04:15:d6:6b:
         c7:a3:be:4d:cd:da:90:89:37:fd:92:ff:7d:c0:01:73:67:5f:
         1f:16:b6:61:3a:9e:1e:b4:dc:2a:b6:5c:3e:2d:2c:10:a3:a6:
         bd:e6:c8:dd:4c:52:49:73:d4:ea:20:f9:1b:b6:0f:2d:e0:20:
         ec:35:d0:a6:36:b2:04:61:66:7e:eb:da:b3:6a:f1:73:ec:43:
         8a:07:c2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----