Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6104/E7E9336428B911EA9B7EAB31C4F9AE02/myW9LONVkDK160RX4FyBCui4qqw.mft
File:                     myW9LONVkDK160RX4FyBCui4qqw.mft (raw, json)
Hash identifier:          uCdM7ndV/Wumdb6VsvMWAqf8pBtAQvNYXrkkWqRJAZk=
Subject key identifier:   25:6E:05:C2:14:54:9E:93:77:25:9E:02:9F:55:78:99:98:B5:8D:5A
Authority key identifier: 9B:25:BD:2C:E3:55:90:32:B5:EB:44:57:E0:5C:81:0A:E8:B8:AA:AC
Certificate issuer:       /CN=A91A6104/serialNumber=9B25BD2CE3559032B5EB4457E05C810AE8B8AAAC
Certificate serial:       0B62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/myW9LONVkDK160RX4FyBCui4qqw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6104/E7E9336428B911EA9B7EAB31C4F9AE02/myW9LONVkDK160RX4FyBCui4qqw.mft
Manifest number:          0B53
Signing time:             Thu 30 Jan 2025 19:11:14 +0000
Manifest this update:     Thu 30 Jan 2025 19:11:13 +0000
Manifest next update:     Thu 06 Feb 2025 19:11:13 +0000
Files and hashes:         1: myW9LONVkDK160RX4FyBCui4qqw.crl (hash: UjMBqL4o35RSKZ3EkJpgZAxM/bNZ/5BMtxis3S0tAnk=)
                          2: 917B8C862A0311ED8539CA81C4F9AE02.roa (hash: 4MRlpVbZKZW64GXFwQgYSAsDowy4D1+v1bfXe/aXjdQ=)
                          3: 64C2A71ABDA111EDBD64FF45C4F9AE02.roa (hash: RWBo5b8XQlRVCoXjCZVdpUp7PeBvJmT3YOjXlyKIO8Q=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2914 (0xb62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6104/serialNumber=9B25BD2CE3559032B5EB4457E05C810AE8B8AAAC
        Validity
            Not Before: Jan 30 19:11:13 2025 GMT
            Not After : Feb  6 19:11:13 2025 GMT
        Subject: CN=679bced2-f6f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4b:85:e9:38:36:14:bb:09:76:19:ce:2f:e6:
                    de:fd:68:d5:15:51:9d:a3:e1:d0:07:e0:5e:0d:2f:
                    d2:31:d2:6f:98:82:0b:28:58:ce:8c:f0:1a:b0:d3:
                    f3:26:f0:ed:15:8b:3e:c7:c7:5a:55:d8:08:56:8c:
                    a0:11:ec:aa:43:5e:b2:48:38:bd:28:11:b3:68:8e:
                    32:4c:d6:c8:e9:f2:6e:eb:10:d6:f7:1a:40:b1:0a:
                    33:b9:b6:0a:13:b9:0c:c5:91:ff:21:89:72:b4:f9:
                    da:4c:a1:a4:ae:7b:c1:73:90:5a:93:45:11:1c:2f:
                    62:f6:ce:5f:23:b8:01:2d:ee:45:dc:83:e4:df:2f:
                    0d:b9:7e:73:c5:d6:c1:79:16:7d:86:ae:0f:d9:eb:
                    bc:36:c6:fb:2d:8c:90:9f:08:91:cf:2f:10:ae:90:
                    cc:e8:b2:ed:bf:39:68:c4:5f:15:ac:d3:15:8c:1b:
                    23:3b:a8:9b:0d:ce:a7:b6:66:49:d1:78:18:f7:25:
                    e5:23:31:4a:31:0f:c6:36:f4:36:1a:c4:75:d0:fa:
                    cc:5d:2d:d0:17:43:43:b1:8d:6c:0e:d2:a7:66:19:
                    4f:e5:8f:c5:3c:ef:0e:87:08:25:04:13:39:02:b4:
                    b6:d3:80:f9:52:c3:f3:3d:0b:ce:ea:12:d9:c9:84:
                    67:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:6E:05:C2:14:54:9E:93:77:25:9E:02:9F:55:78:99:98:B5:8D:5A
            X509v3 Authority Key Identifier:
                keyid:9B:25:BD:2C:E3:55:90:32:B5:EB:44:57:E0:5C:81:0A:E8:B8:AA:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6104/E7E9336428B911EA9B7EAB31C4F9AE02/myW9LONVkDK160RX4FyBCui4qqw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/myW9LONVkDK160RX4FyBCui4qqw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6104/E7E9336428B911EA9B7EAB31C4F9AE02/myW9LONVkDK160RX4FyBCui4qqw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:72:a6:51:93:52:3f:98:e3:22:ac:cd:5a:37:80:56:64:a4:
         ee:de:6a:90:b1:93:a7:ba:71:06:a8:ac:b9:1c:2c:8c:70:74:
         c2:24:0c:84:5d:fe:2f:16:6a:2a:35:67:b9:ee:d7:b2:1e:4e:
         50:b4:e0:2f:09:73:ff:47:69:f0:09:e0:3c:7b:5d:65:8d:72:
         a8:7e:82:c1:01:82:8b:15:e6:f9:d1:97:a2:cb:72:58:58:24:
         0a:45:2e:36:10:fc:e9:67:06:ee:26:ae:8a:7f:a3:4e:fa:e5:
         55:50:0a:15:36:ab:f3:7b:2e:c6:81:00:fb:ce:87:dc:28:d9:
         bc:64:9a:21:80:c1:6b:5b:ff:0a:c1:9f:cf:f3:e6:71:a6:4b:
         f4:db:77:65:b3:78:a2:bc:4a:a9:59:a4:87:ee:26:e8:9a:28:
         ea:59:20:0e:38:d4:69:5d:b2:d4:cc:e6:60:a5:15:12:51:c6:
         6b:78:bb:ba:34:74:56:94:5f:13:ae:31:46:3b:c9:d7:0a:f6:
         65:82:83:eb:9d:9e:1f:24:c9:96:38:33:c2:63:48:95:0f:30:
         ce:b4:ae:73:d4:7a:92:82:73:42:9c:9d:91:fb:e4:86:24:c5:
         89:90:da:e3:4f:75:be:29:29:55:59:3a:ca:d3:38:f5:87:d8:
         e9:67:b8:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----