Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A45A0/BF31471256F011EAA6E98D42C4F9AE02/gwig5Q7SdrauEaNIK8K70EDlnxo.mft
File:                     gwig5Q7SdrauEaNIK8K70EDlnxo.mft (raw, json)
Hash identifier:          44wR9UF2ogjKxLGVr6lxO6lhJ/AJzQxGN2vxzpDV5Ro=
Subject key identifier:   47:89:70:87:E2:B9:83:A5:8F:E6:A9:37:65:87:16:B6:1A:1B:FC:64
Authority key identifier: 83:08:A0:E5:0E:D2:76:B6:AE:11:A3:48:2B:C2:BB:D0:40:E5:9F:1A
Certificate issuer:       /CN=A91A45A0/serialNumber=8308A0E50ED276B6AE11A3482BC2BBD040E59F1A
Certificate serial:       0A67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwig5Q7SdrauEaNIK8K70EDlnxo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A45A0/BF31471256F011EAA6E98D42C4F9AE02/gwig5Q7SdrauEaNIK8K70EDlnxo.mft
Manifest number:          0A61
Signing time:             Thu 30 Jan 2025 19:47:04 +0000
Manifest this update:     Thu 30 Jan 2025 19:47:03 +0000
Manifest next update:     Thu 06 Feb 2025 19:47:03 +0000
Files and hashes:         1: gwig5Q7SdrauEaNIK8K70EDlnxo.crl (hash: +Z/9gqoyUT6ibZTCiMXimcrKegCeWCuN/rj8ebuDA7E=)
                          2: 439C75C021ED11ED945CE952C4F9AE02.roa (hash: dAxhVmKdUzxjyuhMI1B6G6rZR2kFZRrMrstnUBVwWn0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2663 (0xa67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A45A0/serialNumber=8308A0E50ED276B6AE11A3482BC2BBD040E59F1A
        Validity
            Not Before: Jan 30 19:47:03 2025 GMT
            Not After : Feb  6 19:47:03 2025 GMT
        Subject: CN=679bd738-0dcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:44:af:e8:96:70:4a:ea:31:de:e2:dc:23:bc:
                    0c:f8:1e:7b:61:2c:1a:cc:e0:94:81:ce:72:7f:4f:
                    fd:06:0f:8f:6e:c1:c9:b6:80:3f:a5:e0:98:4f:9d:
                    96:d5:fc:22:f1:af:6f:47:f9:18:92:1e:58:ab:4d:
                    6b:31:80:ef:3b:40:d3:5f:dd:21:64:58:a9:14:74:
                    48:5b:2b:5b:6a:68:e1:e8:e9:80:45:09:fc:c4:bc:
                    c2:62:3d:a2:69:67:07:87:94:d4:05:13:1e:69:28:
                    18:26:30:a3:a4:21:68:14:3b:2b:6b:a1:61:35:36:
                    c6:f0:b7:d9:c6:ef:e1:5b:b8:46:ba:d3:9b:c2:c2:
                    a8:9d:2e:f9:65:08:6a:12:75:83:48:f2:b6:13:39:
                    19:5c:67:15:9c:84:fb:18:2b:50:df:3b:9b:e9:80:
                    dc:7b:e0:30:b4:78:f2:c8:90:71:a3:be:f5:8c:25:
                    82:24:81:27:05:82:a6:13:88:09:9b:3a:27:85:26:
                    7a:e7:40:5e:91:d1:7a:71:8e:9d:3d:25:97:7a:f6:
                    02:66:ee:72:d4:7b:f4:48:74:b6:5d:fe:1d:b9:47:
                    91:dd:22:2a:f6:e4:12:4a:0b:67:1f:ce:79:e4:ff:
                    ab:c6:83:08:dd:a6:31:18:3d:8f:d9:1d:4e:00:1c:
                    2c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:89:70:87:E2:B9:83:A5:8F:E6:A9:37:65:87:16:B6:1A:1B:FC:64
            X509v3 Authority Key Identifier:
                keyid:83:08:A0:E5:0E:D2:76:B6:AE:11:A3:48:2B:C2:BB:D0:40:E5:9F:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A45A0/BF31471256F011EAA6E98D42C4F9AE02/gwig5Q7SdrauEaNIK8K70EDlnxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwig5Q7SdrauEaNIK8K70EDlnxo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A45A0/BF31471256F011EAA6E98D42C4F9AE02/gwig5Q7SdrauEaNIK8K70EDlnxo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:e3:03:cb:b0:d8:d1:ea:6e:be:3c:22:9a:85:ab:01:f5:9c:
         db:a9:d2:e6:cd:23:75:73:b2:24:75:36:90:99:26:c9:f5:1d:
         77:38:95:d0:32:4d:40:d9:38:0c:3c:4c:c6:9d:9c:02:9a:c3:
         7b:65:fb:7c:63:73:16:2a:34:a6:7a:aa:66:15:e0:8d:b0:67:
         78:fb:c2:a3:f3:88:58:37:84:02:67:49:33:68:7e:3c:17:2d:
         06:91:8e:32:0a:18:ac:f7:25:c4:5d:7a:05:41:b2:47:a4:6a:
         fb:cd:75:94:1d:d4:7c:e3:b6:9b:e8:4d:b8:45:37:f9:ec:f8:
         60:d9:9a:dd:2b:4c:b6:e0:bf:5c:74:88:df:b0:11:3b:8e:81:
         c7:e4:ce:75:95:98:ea:e4:46:cd:70:0a:8c:3c:df:61:eb:e5:
         bd:bc:1a:0c:a5:be:ec:d9:bb:7d:16:bb:27:67:a4:7a:a1:5f:
         34:d8:64:6c:d8:94:72:80:b0:d4:f2:a1:9d:55:d8:c8:4d:47:
         c5:40:ef:20:d6:fc:55:98:01:2a:81:60:70:d8:6e:a1:7c:62:
         67:fa:11:83:72:61:e6:0e:0b:a6:8f:92:4a:03:4b:f5:e1:f8:
         f0:04:ba:ee:77:08:72:53:d0:1d:a1:87:96:a4:7c:8e:03:9d:
         f6:0e:59:0d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTQ1QTAxMTAvBgNVBAUTKDgzMDhBMEU1MEVEMjc2QjZBRTExQTM0ODJCQzJCQkQw
NDBFNTlGMUEwHhcNMjUwMTMwMTk0NzAzWhcNMjUwMjA2MTk0NzAzWjAYMRYwFAYD
VQQDEw02NzliZDczOC0wZGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAokSv6JZwSuox3uLcI7wM+B57YSwazOCUgc5yf0/9Bg+PbsHJtoA/peCYT52W
1fwi8a9vR/kYkh5Yq01rMYDvO0DTX90hZFipFHRIWytbamjh6OmARQn8xLzCYj2i
aWcHh5TUBRMeaSgYJjCjpCFoFDsra6FhNTbG8LfZxu/hW7hGutObwsKonS75ZQhq
EnWDSPK2EzkZXGcVnIT7GCtQ3zub6YDce+AwtHjyyJBxo771jCWCJIEnBYKmE4gJ
mzonhSZ650BekdF6cY6dPSWXevYCZu5y1Hv0SHS2Xf4duUeR3SIq9uQSSgtnH855
5P+rxoMI3aYxGD2P2R1OABwsNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEeJcIfi
uYOlj+apN2WHFrYaG/xkMB8GA1UdIwQYMBaAFIMIoOUO0na2rhGjSCvCu9BA5Z8a
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDVBMC9CRjMxNDcxMjU2
RjAxMUVBQTZFOThENDJDNEY5QUUwMi9nd2lnNVE3U2RyYXVFYU5JSzhLNzBFRGxu
eG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3aWc1UTdTZHJhdUVhTklLOEs3MEVEbG54by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NDVBMC9CRjMxNDcxMjU2RjAxMUVBQTZFOThENDJDNEY5QUUwMi9nd2lnNVE3U2Ry
YXVFYU5JSzhLNzBFRGxueG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCM4wPLsNjR6m6+PCKahasB9ZzbqdLmzSN1c7IkdTaQmSbJ9R13OJXQ
Mk1A2TgMPEzGnZwCmsN7Zft8Y3MWKjSmeqpmFeCNsGd4+8Kj84hYN4QCZ0kzaH48
Fy0GkY4yChis9yXEXXoFQbJHpGr7zXWUHdR847ab6E24RTf57Phg2ZrdK0y24L9c
dIjfsBE7joHH5M51lZjq5EbNcAqMPN9h6+W9vBoMpb7s2bt9FrsnZ6R6oV802GRs
2JRygLDU8qGdVdjITUfFQO8g1vxVmAEqgWBw2G6hfGJn+hGDcmHmDgumj5JKA0v1
4fjwBLrudwhyU9AdoYeWpHyOA532DlkN
-----END CERTIFICATE-----