Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
File:                     4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft (raw, json)
Hash identifier:          yVOfV91wpBSfHC5HYGVE4uYxncUW7v8LUg5gQ5/viSY=
Subject key identifier:   86:4F:23:AB:0C:76:19:3D:C3:48:AE:8D:49:33:CD:A4:14:0C:33:3E
Authority key identifier: E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5
Certificate issuer:       /CN=A91A622F/serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5
Certificate serial:       26B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
Manifest number:          2688
Signing time:             Fri 31 Jan 2025 15:42:25 +0000
Manifest this update:     Fri 31 Jan 2025 15:42:24 +0000
Manifest next update:     Fri 07 Feb 2025 15:42:24 +0000
Files and hashes:         1: 4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl (hash: qiG2KMjx9TmrmzyQTM8k7Dwd0hpdU/4RbPNnp1EugSI=)
                          2: 253C821A388611ECBE8F7725C4F9AE02.roa (hash: h0WayUQjkIc+1k3KSDTUW0WJMm7/vM6nH4tLae6DlNo=)
                          3: A9756862B14111E5A3B46B15C4F9AE02.roa (hash: FuYmEvmcv/GUMD00P1zQM5lWXTNd1+nMlLmjGKSqeHM=)
                          4: 54F4ED62A4D511EA863BC00AC4F9AE02.roa (hash: rxGK9ShGMruxcWfCnGcDXjtTVQToBCiiwGyhhjyHhAQ=)
                          5: BCAE5314F75C11EB95BE8C87C4F9AE02.roa (hash: 0j4qXjmpQjaICT1LO2qciryz+Oskgntzqwfwnl8SXbw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9911 (0x26b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A622F/serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5
        Validity
            Not Before: Jan 31 15:42:24 2025 GMT
            Not After : Feb  7 15:42:24 2025 GMT
        Subject: CN=679cef61-d3b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bb:de:6e:d8:4b:18:56:33:92:b5:46:26:13:
                    11:07:da:d3:ff:ff:ce:94:68:94:dd:8c:f0:ef:3c:
                    82:34:e8:b6:1f:06:bf:54:51:b8:60:0d:c4:93:87:
                    f8:68:3c:50:0f:d7:25:53:95:8e:63:4e:dc:15:f0:
                    09:28:89:9e:94:38:0f:c3:2a:ea:87:60:10:60:47:
                    75:9b:e0:85:b6:a5:8e:66:22:79:0c:a2:a1:fb:2d:
                    11:7c:6c:8f:2e:1b:b2:9f:3a:f2:51:00:9b:f5:9a:
                    c8:51:5c:89:85:8d:cd:9e:5f:51:72:e0:f6:40:2e:
                    2b:5b:e1:b8:5e:be:9c:af:8b:f2:70:43:0c:ed:fe:
                    10:1f:03:b1:2c:de:6e:90:25:84:aa:6d:fe:32:d7:
                    36:89:92:16:cb:b9:5e:b1:20:79:8f:52:a7:19:ab:
                    4a:d3:10:35:c1:5b:77:c3:46:2f:09:18:e8:6c:4d:
                    81:92:2c:11:6b:f4:27:9a:e3:66:84:07:5e:41:3b:
                    4b:51:22:73:7f:4d:c9:1d:17:3b:3b:d3:21:2c:6c:
                    0b:b2:bd:9a:79:9f:fa:2d:05:1e:25:20:18:04:85:
                    50:bc:3d:9d:d3:c2:04:b4:b9:d1:ab:55:be:ad:da:
                    bc:57:1c:59:48:98:69:86:e1:e5:59:74:2c:60:0e:
                    81:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:4F:23:AB:0C:76:19:3D:C3:48:AE:8D:49:33:CD:A4:14:0C:33:3E
            X509v3 Authority Key Identifier:
                keyid:E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:70:cf:7f:62:7a:9a:f9:4d:75:a4:25:c3:b3:74:bc:71:fb:
         a3:1e:8e:c1:67:74:97:b6:a2:e2:de:ac:4b:21:0b:68:6a:af:
         37:b0:94:76:3a:69:9c:31:74:0a:bf:06:54:30:f1:a8:8f:b5:
         38:a1:c1:3d:66:4a:c8:55:72:9d:3c:73:73:d1:8b:ab:a9:f2:
         2b:cf:15:6e:ee:99:f5:b9:03:5d:3c:4c:57:6f:bd:e5:3e:73:
         6e:6d:74:55:5d:29:85:ee:1e:c2:4a:ef:2d:1e:b9:47:28:22:
         98:0b:38:c7:de:0d:bd:81:48:c3:0a:4d:fa:75:67:f4:4e:85:
         b1:4a:b2:a6:93:c0:25:2f:f6:e8:ad:b3:b7:c4:e3:d6:64:44:
         16:95:95:bd:12:1e:43:35:e6:a1:2f:d8:31:5a:55:54:45:94:
         32:14:04:9e:84:ce:07:2f:d5:b6:c8:a9:d3:ac:44:76:04:a1:
         40:01:0a:3e:78:df:14:77:9e:87:44:b1:63:b4:6b:f0:0b:7e:
         01:c9:b4:7f:ae:0d:41:52:78:67:03:6a:cb:34:14:e0:28:84:
         54:0a:d7:49:b9:aa:c9:4c:5f:a2:39:1d:8a:a1:29:89:d4:ff:
         fa:8a:c5:e7:60:d3:d9:1f:8e:7d:1d:57:f1:ca:78:f1:d5:f7:
         11:17:24:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----