Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft
File:                     IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft (raw, json)
Hash identifier:          RMfuFeLWFE5s3YsYZgslMQokwBWgCdXB1xVexo6tyfw=
Subject key identifier:   7A:FD:74:29:A4:C2:0C:BA:06:12:DF:AD:CB:96:AF:F9:A5:19:AF:8C
Authority key identifier: 22:25:E3:FA:2C:6F:E2:EF:B6:76:65:E5:3C:E9:FE:0C:DF:9C:9B:A7
Certificate issuer:       /CN=A91A42A4/serialNumber=2225E3FA2C6FE2EFB67665E53CE9FE0CDF9C9BA7
Certificate serial:       0136
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiXj-ixv4u-2dmXlPOn-DN-cm6c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft
Manifest number:          0134
Signing time:             Fri 31 Jan 2025 03:38:20 +0000
Manifest this update:     Fri 31 Jan 2025 03:38:19 +0000
Manifest next update:     Fri 07 Feb 2025 03:38:19 +0000
Files and hashes:         1: IiXj-ixv4u-2dmXlPOn-DN-cm6c.crl (hash: bg0JdmuTJWSdNM80JtU3NCqEZ1mceykcC5fLvykbzfw=)
                          2: 73E56336069E11EE9D687712C4F9AE02.roa (hash: 5G3UaqvRN/OiyPJztyDHavW6CqyUdsMIsiidpfCXP7Y=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 310 (0x136)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A42A4/serialNumber=2225E3FA2C6FE2EFB67665E53CE9FE0CDF9C9BA7
        Validity
            Not Before: Jan 31 03:38:19 2025 GMT
            Not After : Feb  7 03:38:19 2025 GMT
        Subject: CN=679c45ac-3888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c2:ac:c4:a9:b0:13:50:c5:90:12:49:df:a9:
                    ae:1e:27:6e:52:cc:6c:a0:e0:7f:a9:8c:fe:23:ec:
                    93:13:32:9c:c8:39:20:4b:06:ec:7b:c5:e1:ba:63:
                    c4:e0:f0:6a:45:8d:e9:1e:c2:dc:24:90:79:6a:9c:
                    b1:8e:14:f2:3c:49:6e:32:5b:9d:a0:d3:6d:57:6f:
                    66:0e:68:a1:25:df:15:ec:51:af:03:46:f2:1a:bd:
                    96:d1:9c:e2:4c:dd:5a:ec:0b:75:a0:29:d5:c1:07:
                    55:36:97:6b:5a:85:8b:62:e1:25:92:51:3f:0d:5b:
                    7c:17:46:8e:bc:99:fd:45:42:7a:5c:8a:b0:b5:49:
                    54:d9:32:49:5b:ce:07:58:df:91:48:92:bf:35:67:
                    11:d0:57:08:7e:92:08:52:ba:96:45:7f:1d:d7:22:
                    53:70:8d:67:a7:f2:af:ff:12:69:dc:5c:a5:59:f7:
                    38:41:2c:74:fb:13:eb:50:08:14:52:ff:1e:83:c7:
                    3f:15:25:ed:e5:be:8e:70:6b:56:29:5e:90:2d:fc:
                    a2:39:05:98:b9:40:fb:ce:be:3a:2a:15:79:9e:8e:
                    7a:70:4e:8b:37:d8:a3:39:79:95:c7:b4:70:46:34:
                    74:8e:ed:43:85:95:fb:8c:9c:b1:3b:38:f3:47:78:
                    53:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:FD:74:29:A4:C2:0C:BA:06:12:DF:AD:CB:96:AF:F9:A5:19:AF:8C
            X509v3 Authority Key Identifier:
                keyid:22:25:E3:FA:2C:6F:E2:EF:B6:76:65:E5:3C:E9:FE:0C:DF:9C:9B:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiXj-ixv4u-2dmXlPOn-DN-cm6c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:3a:3a:6b:93:00:d8:5d:cf:c0:3e:c1:4f:70:68:27:b0:57:
         7f:fd:e3:17:4d:ab:77:ca:00:71:fa:e2:a2:fd:e9:c6:48:c7:
         2b:e8:7c:61:51:44:8d:8f:af:28:37:f1:96:c8:ce:fe:80:9c:
         be:ca:a9:27:37:af:24:6d:f3:c4:77:36:b6:56:85:36:c2:6a:
         47:7a:8a:78:cc:d4:1c:0a:1d:27:ad:32:31:b1:d7:cc:49:82:
         67:08:6d:13:8c:0f:55:1e:7e:a8:64:95:0d:20:5f:51:b7:46:
         cb:bf:b5:c4:90:67:ca:c8:93:23:5c:3d:a4:67:1f:03:1d:48:
         a2:07:bd:4f:55:17:22:a2:8f:fb:9c:91:39:5b:db:2f:2b:19:
         a8:73:62:1e:f7:53:9f:7f:e2:ab:c3:0b:22:fb:83:af:99:06:
         c8:52:91:14:2b:a0:6e:6d:8f:42:e7:53:61:d6:8b:cd:47:c7:
         55:f2:74:6e:01:0b:ca:27:78:fd:62:e3:13:02:bd:69:70:bd:
         3e:c9:8b:16:a5:aa:f3:bf:b0:d5:d1:d2:dd:1d:20:c6:b4:32:
         87:88:06:7b:43:7d:c5:0d:0b:e6:30:fe:cb:2c:2b:5a:a0:a6:
         c9:52:e3:75:08:d6:c7:be:03:53:e3:9f:70:09:9e:1d:51:8c:
         06:4e:d0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----