Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.mft
File:                     jMMEPUtGxI8SbAboKXDrtItkY8g.mft (raw, json)
Hash identifier:          KFgHA4KChflp6621Vw60yNL1hbMH1hGkEnJfn4H4tw8=
Subject key identifier:   15:96:91:80:79:ED:9D:D4:C9:D9:9A:7F:BD:D4:B2:3B:46:A6:3A:FF
Authority key identifier: 8C:C3:04:3D:4B:46:C4:8F:12:6C:06:E8:29:70:EB:B4:8B:64:63:C8
Certificate issuer:       /CN=A91A64F6/serialNumber=8CC3043D4B46C48F126C06E82970EBB48B6463C8
Certificate serial:       E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMMEPUtGxI8SbAboKXDrtItkY8g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.mft
Manifest number:          E0
Signing time:             Fri 31 Jan 2025 04:40:58 +0000
Manifest this update:     Fri 31 Jan 2025 04:40:58 +0000
Manifest next update:     Fri 07 Feb 2025 04:40:58 +0000
Files and hashes:         1: jMMEPUtGxI8SbAboKXDrtItkY8g.crl (hash: e6s3c6EYZFwZm3vX+F5GHHpUi40GFgq0ED22COpBjYY=)
                          2: 005C6D6EC17A11EEB919C476C4F9AE02.roa (hash: t9AWerdFoSlx8BlZhPHhMpsds8XRNwYqNkMr3i+O4XA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 231 (0xe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A64F6/serialNumber=8CC3043D4B46C48F126C06E82970EBB48B6463C8
        Validity
            Not Before: Jan 31 04:40:58 2025 GMT
            Not After : Feb  7 04:40:58 2025 GMT
        Subject: CN=679c545a-343d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7a:01:14:27:cc:40:81:e2:2d:0a:a6:da:98:
                    6e:03:35:35:37:0c:1e:00:17:80:c7:a5:69:5e:c5:
                    91:e5:61:3b:9b:19:ad:39:41:ef:e3:39:de:d4:2a:
                    c2:22:41:53:15:b7:7e:35:db:d4:69:58:e7:8d:d4:
                    7f:16:48:ee:b5:62:6a:99:0b:3e:be:02:c3:c0:e6:
                    61:8d:da:bf:22:08:b9:f0:7a:61:01:a9:aa:d2:21:
                    50:dd:d1:e0:cd:2a:8d:fc:04:94:12:ac:b7:69:4f:
                    fc:d9:48:99:1e:ce:f8:8c:70:76:ad:8a:0b:bc:a3:
                    4e:37:0b:00:27:c5:c2:7f:04:58:00:f5:71:b2:8e:
                    2a:c5:29:6c:ba:35:d4:b1:1f:fa:bd:97:b0:6e:cf:
                    49:a9:e2:4a:93:44:d3:0c:f2:bf:59:74:37:5f:a5:
                    45:d4:ea:dc:42:b3:a5:e4:f2:9c:d8:6b:3f:06:6b:
                    3b:a7:ad:3e:5a:d7:d8:93:01:d8:89:c6:88:26:32:
                    4d:50:8d:5e:38:ff:4f:44:cd:5b:83:28:1f:ef:fb:
                    a7:89:2a:7a:3b:1d:13:86:e4:4a:e8:f1:6b:64:11:
                    d4:10:e5:77:e5:42:eb:28:96:b6:58:2a:8c:5c:b1:
                    ad:ee:bf:8a:bd:42:37:64:de:e2:e1:8b:08:09:d0:
                    57:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:96:91:80:79:ED:9D:D4:C9:D9:9A:7F:BD:D4:B2:3B:46:A6:3A:FF
            X509v3 Authority Key Identifier:
                keyid:8C:C3:04:3D:4B:46:C4:8F:12:6C:06:E8:29:70:EB:B4:8B:64:63:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMMEPUtGxI8SbAboKXDrtItkY8g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:26:75:3d:ec:e9:14:9c:82:12:f4:81:6a:db:1f:9e:df:00:
         07:12:62:b3:8f:70:2a:5b:e1:78:1f:a5:17:17:44:20:fb:cf:
         18:83:3f:1f:93:52:64:90:68:a7:06:7e:5c:c3:68:fe:a5:24:
         c9:5a:32:98:15:9a:33:b6:c2:1d:54:e8:8b:57:97:2d:3b:87:
         4f:a0:65:18:1a:4f:d5:3d:d2:ce:3b:b3:49:26:32:db:96:bf:
         f7:77:88:79:c4:91:3b:d7:99:93:21:84:a4:1e:6d:f3:0c:7a:
         37:e7:7d:79:7f:da:24:0a:a7:88:ca:bc:3f:25:dd:a1:6d:35:
         59:7f:ea:fb:47:da:9a:88:6a:95:50:c5:78:c4:26:c8:24:ef:
         47:f3:af:96:14:4e:92:c0:80:92:54:cb:72:71:7b:d5:ec:8f:
         5a:85:24:56:be:33:cb:43:f4:32:c0:84:bf:31:1d:bd:2a:fa:
         b5:f9:2c:28:8f:de:14:9f:59:bf:2b:b4:f7:48:9f:99:a6:4a:
         76:f5:91:22:5d:dd:05:be:0a:ef:44:4a:63:65:04:d6:ef:5f:
         bf:96:1d:fb:3a:f8:69:b5:1d:a5:b6:b8:9f:05:32:b5:27:4d:
         f5:d9:8d:29:d4:ed:10:4e:fd:e8:89:2c:6e:2f:63:ab:ee:d2:
         7d:08:ca:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----