Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/A6PIek8tglWUdvcc-u5ST_URNXk.mft
File:                     A6PIek8tglWUdvcc-u5ST_URNXk.mft (raw, json)
Hash identifier:          K2bI2tn9gK4GgqvjzdDGsaDx2ewcFogSspZeErDWWSE=
Subject key identifier:   E2:02:3F:13:11:E2:2C:70:BF:72:29:D5:DC:78:02:A3:7B:E4:CA:F0
Authority key identifier: 03:A3:C8:7A:4F:2D:82:55:94:76:F7:1C:FA:EE:52:4F:F5:11:35:79
Certificate issuer:       /CN=A91A4CAD/serialNumber=03A3C87A4F2D82559476F71CFAEE524FF5113579
Certificate serial:       0AC1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6PIek8tglWUdvcc-u5ST_URNXk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/A6PIek8tglWUdvcc-u5ST_URNXk.mft
Manifest number:          0AB9
Signing time:             Thu 30 Jan 2025 19:34:01 +0000
Manifest this update:     Thu 30 Jan 2025 19:34:01 +0000
Manifest next update:     Thu 06 Feb 2025 19:34:01 +0000
Files and hashes:         1: A6PIek8tglWUdvcc-u5ST_URNXk.crl (hash: tcMv3EvD5gtfQnjg9XuD48DqexvDHcpckAfPR9c8Shw=)
                          2: 6553D6106C2B11EA87ED1160C4F9AE02.roa (hash: BZiEWDD0IL9/iTmQj4cpibFzXusaM/aZuvYBDfGJDK8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2753 (0xac1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4CAD/serialNumber=03A3C87A4F2D82559476F71CFAEE524FF5113579
        Validity
            Not Before: Jan 30 19:34:01 2025 GMT
            Not After : Feb  6 19:34:01 2025 GMT
        Subject: CN=679bd429-19a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3f:ef:ec:a6:36:64:45:f8:08:d7:21:b6:3c:
                    af:4f:d3:18:ad:9a:e5:0e:2a:4e:a8:0a:24:da:d5:
                    45:0a:b3:ec:ea:61:16:3e:22:b6:c6:09:df:bc:8c:
                    bc:b8:ab:61:86:c3:ae:7e:a9:a2:3d:81:a1:66:21:
                    64:b4:86:ca:dd:af:b2:e9:59:62:94:72:f7:33:85:
                    0c:ce:1e:6b:4f:10:c7:fb:a5:76:cc:4e:8d:4d:8f:
                    48:bd:39:e5:7c:55:5e:ed:b3:47:3b:37:8f:a3:bf:
                    fc:ec:40:0a:66:46:6e:14:b2:1c:27:4a:fb:4d:e9:
                    5d:d3:6a:a8:26:58:cc:c8:e0:22:98:70:4a:07:27:
                    48:76:56:ca:36:57:ac:98:c1:47:4b:d7:4f:76:64:
                    b1:f5:5c:f2:46:46:ed:50:a2:88:fe:19:dc:7b:fe:
                    80:ec:7d:a1:b0:eb:ad:c3:aa:6c:20:09:d1:61:6a:
                    a3:a2:09:a8:7e:d6:c0:8c:86:c3:69:c9:ef:ff:51:
                    59:a9:b3:0e:6a:d6:7c:73:69:65:05:5a:2d:a9:09:
                    fd:77:9f:9c:14:b5:c9:9d:70:b8:57:04:30:54:eb:
                    c6:10:e9:5c:6c:08:9d:80:32:88:b8:dd:47:2c:5d:
                    53:55:aa:68:4d:79:7a:9e:51:42:3c:49:eb:02:c6:
                    fb:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:02:3F:13:11:E2:2C:70:BF:72:29:D5:DC:78:02:A3:7B:E4:CA:F0
            X509v3 Authority Key Identifier:
                keyid:03:A3:C8:7A:4F:2D:82:55:94:76:F7:1C:FA:EE:52:4F:F5:11:35:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/A6PIek8tglWUdvcc-u5ST_URNXk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6PIek8tglWUdvcc-u5ST_URNXk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/A6PIek8tglWUdvcc-u5ST_URNXk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:c4:40:8a:7b:52:b1:a5:13:4e:2e:0f:83:be:f4:40:fa:0b:
         24:f8:2a:95:b5:b5:7e:39:0b:24:9c:24:95:71:5c:62:f1:91:
         7d:c0:b8:8f:98:71:4d:25:b3:df:ce:2a:7a:25:12:09:70:8c:
         41:37:69:f6:98:bc:96:de:85:3d:84:bf:d3:0f:18:08:f8:f8:
         4e:7e:52:bf:f9:1c:9e:e2:b8:f3:24:45:e1:60:cb:1a:99:b9:
         7b:d7:7b:4d:37:25:c1:19:47:88:f9:3b:f7:3e:6c:7d:a2:42:
         ff:e6:2e:0d:38:a1:30:e1:11:41:b3:cb:aa:32:c6:2e:dd:be:
         7a:fc:59:f7:4f:b2:c6:bc:cb:02:3a:cc:96:3d:53:c4:56:c6:
         f5:d7:2c:bc:af:46:5b:bf:01:32:b8:aa:46:2f:da:ef:b1:fd:
         52:4b:fb:d9:37:6c:6d:63:60:12:b0:a8:78:ac:c1:22:f3:2d:
         bf:00:32:60:b4:3f:2d:e2:2b:a8:54:37:d1:80:15:b0:b8:55:
         5e:9d:22:5d:fc:a5:31:6f:91:cc:ce:26:34:f0:ec:90:ed:f0:
         ea:ae:97:9c:bf:06:32:8a:38:0a:29:fe:c7:4c:3b:02:b7:93:
         e3:e6:48:99:1f:9c:b4:47:42:e8:71:f1:31:7a:a6:05:03:dc:
         2e:6d:5a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----