Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft
File:                     vxobyMAsIDYtD9n5K8AGoolejIA.mft (raw, json)
Hash identifier:          w3uoIKm0zHKXm7Yb5kwr0NNzvQ8o4OQ+6yp+fysJD3Q=
Subject key identifier:   37:4D:83:4F:BE:09:C2:0C:D3:A7:10:C6:16:BB:F5:B7:08:84:61:10
Authority key identifier: BF:1A:1B:C8:C0:2C:20:36:2D:0F:D9:F9:2B:C0:06:A2:89:5E:8C:80
Certificate issuer:       /CN=A91A423B/serialNumber=BF1A1BC8C02C20362D0FD9F92BC006A2895E8C80
Certificate serial:       0761
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft
Manifest number:          075C
Signing time:             Thu 30 Jan 2025 21:27:09 +0000
Manifest this update:     Thu 30 Jan 2025 21:27:08 +0000
Manifest next update:     Thu 06 Feb 2025 21:27:08 +0000
Files and hashes:         1: vxobyMAsIDYtD9n5K8AGoolejIA.crl (hash: dQj0ork2UIKtbQOvH9e0YwCb/MJMn8WKyWzQ9vFurls=)
                          2: ABD5003E079C11EBA7C04832C4F9AE02.roa (hash: 1LIqaLcLd8sIbPgwe6w2+ZfDiBIad4OGJXBnSw3QIfc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1889 (0x761)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A423B/serialNumber=BF1A1BC8C02C20362D0FD9F92BC006A2895E8C80
        Validity
            Not Before: Jan 30 21:27:08 2025 GMT
            Not After : Feb  6 21:27:08 2025 GMT
        Subject: CN=679beeac-0c0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:11:84:96:87:c8:c2:ab:33:33:06:5d:c9:a1:
                    ea:7e:fe:f0:36:0d:e4:7f:dd:a3:8f:67:1c:0e:bd:
                    7e:a0:36:32:36:ed:b1:aa:d1:33:43:25:77:8d:3c:
                    15:c7:25:fd:74:6a:8c:48:55:81:d6:b1:7f:11:97:
                    92:ce:5a:e1:d4:45:d5:9d:7d:05:d2:81:34:ab:15:
                    ca:5a:fc:0d:e5:f0:b9:37:68:48:40:09:d1:21:1d:
                    e4:8a:10:25:19:87:36:4e:b0:4c:c2:31:35:8e:84:
                    c0:f3:2d:a2:8a:48:73:e3:dc:8c:d8:1f:c8:35:ce:
                    f8:32:43:03:21:ef:fa:71:72:58:aa:42:bd:bf:57:
                    30:d6:59:23:15:0a:49:6d:fc:02:eb:2f:ca:de:d9:
                    e9:c4:78:eb:fb:c7:23:2c:61:3c:e0:07:7f:73:a7:
                    a1:c7:8c:01:9d:0e:3d:a1:0e:66:7f:97:32:52:b2:
                    35:a4:d4:ae:6f:88:d9:2c:ac:92:e8:e5:61:f4:ea:
                    f7:99:43:6c:41:e7:ba:9d:4f:7a:0e:ac:74:5b:60:
                    a7:32:fc:8a:91:d4:ff:a7:27:75:6d:d8:f1:70:e1:
                    7a:1c:e4:cf:f1:a1:c5:07:eb:81:62:ce:5d:b0:9b:
                    2a:bf:4b:7b:28:95:25:22:11:6d:f3:cc:27:5c:60:
                    5d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:4D:83:4F:BE:09:C2:0C:D3:A7:10:C6:16:BB:F5:B7:08:84:61:10
            X509v3 Authority Key Identifier:
                keyid:BF:1A:1B:C8:C0:2C:20:36:2D:0F:D9:F9:2B:C0:06:A2:89:5E:8C:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:09:1d:e7:c9:93:4e:78:6a:40:78:11:20:74:81:57:ac:34:
         5b:da:4c:d4:71:be:38:94:ec:ca:d3:73:5e:dd:c1:13:9f:1e:
         56:19:ae:16:e8:f1:32:e2:00:a9:07:b5:01:05:89:71:18:ac:
         4e:ee:47:b2:45:19:a2:dc:20:e5:db:d6:81:90:42:48:83:a5:
         de:d9:36:ef:12:e3:1a:c3:59:4b:7e:b8:86:9d:79:42:a3:c0:
         47:3e:b0:3d:b9:1b:c2:97:8c:f0:87:ed:fb:13:08:1a:f9:7d:
         53:76:38:df:45:c2:bb:20:b6:62:cd:b9:e8:81:b8:95:de:59:
         68:59:5a:53:23:bc:4a:8f:d7:aa:77:77:c2:ad:e7:78:04:2d:
         db:2e:ec:9c:00:70:39:99:49:f5:4c:b9:16:e5:25:d2:65:62:
         a0:40:ae:cd:fd:2f:a5:06:e4:33:eb:45:e0:09:b9:b3:12:ee:
         24:e5:da:13:8b:23:83:91:f6:68:84:0a:7a:54:22:37:ce:12:
         c8:e1:0a:2d:39:f5:0b:f1:57:74:20:5a:41:04:99:ff:1d:df:
         b6:4a:fc:7c:89:f5:4a:26:ed:87:dc:8f:a5:fe:11:17:a0:da:
         ba:69:65:68:0d:0d:16:87:0e:8b:fd:f2:d3:4e:56:05:1e:4a:
         a1:49:cf:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----