Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.mft
File:                     7JW4qElym6bvhCxjcarUrH2PIfc.mft (raw, json)
Hash identifier:          tSzIeQ39CgvzlsececdURjSzLOTgPWam/DJFz0yUKXA=
Subject key identifier:   33:B9:26:CA:D2:51:A1:97:E7:0A:D7:86:A4:C8:1D:F0:3F:A4:F9:3C
Authority key identifier: EC:95:B8:A8:49:72:9B:A6:EF:84:2C:63:71:AA:D4:AC:7D:8F:21:F7
Certificate issuer:       /CN=A91A759F/serialNumber=EC95B8A849729BA6EF842C6371AAD4AC7D8F21F7
Certificate serial:       32C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7JW4qElym6bvhCxjcarUrH2PIfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.mft
Manifest number:          3B86
Signing time:             Fri 31 Jan 2025 15:25:00 +0000
Manifest this update:     Fri 31 Jan 2025 15:25:00 +0000
Manifest next update:     Fri 07 Feb 2025 15:25:00 +0000
Files and hashes:         1: 7JW4qElym6bvhCxjcarUrH2PIfc.crl (hash: O7AycLcBJ9hQ8dljIJCj34IYBAAeO97xUTMIh2RxHh4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12998 (0x32c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A759F/serialNumber=EC95B8A849729BA6EF842C6371AAD4AC7D8F21F7
        Validity
            Not Before: Jan 31 15:25:00 2025 GMT
            Not After : Feb  7 15:25:00 2025 GMT
        Subject: CN=679ceb4c-2889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ad:9c:f0:32:ae:a7:29:e0:64:b7:2b:ee:e0:
                    a5:fe:bc:4b:10:e7:00:bb:9a:75:fd:16:44:a1:64:
                    49:83:5c:07:b9:c2:2c:cf:a8:9b:bb:b3:1b:c8:e5:
                    f5:54:ff:65:6f:14:39:8b:63:40:78:c0:bc:03:19:
                    ea:b8:23:f3:f9:cf:b9:f2:93:61:fb:ed:d8:17:61:
                    ae:57:e3:8b:ae:3e:8d:b9:26:3f:c8:74:bc:de:b4:
                    88:52:0f:a1:23:da:5a:4d:e0:b3:42:f7:4f:1e:b2:
                    06:eb:25:de:34:90:ca:d0:43:e1:7e:33:c5:cf:a9:
                    f0:1e:35:2e:d5:5f:64:41:90:a2:6b:1a:e0:0c:ba:
                    6d:09:fb:94:b0:fc:1c:66:a2:b3:72:c1:51:f8:28:
                    fb:13:b0:64:9a:00:3c:4a:11:3f:3e:c7:95:38:a0:
                    f1:4f:5d:d1:56:8f:e3:f8:56:c3:7a:7b:fd:57:94:
                    3f:c6:59:ff:8c:15:e8:aa:20:6b:ed:64:64:b3:2b:
                    66:8c:1d:44:d6:71:59:63:9e:6d:01:2e:18:61:a7:
                    84:30:e6:49:9f:df:b9:57:79:28:a8:82:59:8d:a9:
                    0f:07:3c:5e:ac:2a:4d:13:c9:cd:0f:06:bd:0f:67:
                    6b:1d:0b:0b:fd:e7:35:93:88:8c:f4:df:f0:cc:18:
                    76:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:B9:26:CA:D2:51:A1:97:E7:0A:D7:86:A4:C8:1D:F0:3F:A4:F9:3C
            X509v3 Authority Key Identifier:
                keyid:EC:95:B8:A8:49:72:9B:A6:EF:84:2C:63:71:AA:D4:AC:7D:8F:21:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7JW4qElym6bvhCxjcarUrH2PIfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:fb:eb:37:7a:7f:08:1e:8f:0f:6b:36:ec:0e:b2:26:33:e3:
         3c:0f:0a:b4:ed:52:c9:7a:a3:a4:31:89:ef:1f:61:e8:56:7d:
         f4:7d:fb:88:4d:b1:ff:54:33:a6:6c:e1:3d:09:2e:ea:cf:da:
         e0:32:ff:70:49:5f:5b:55:ae:dd:81:7b:69:6a:a0:22:f4:a1:
         8b:dc:06:8f:48:33:3c:ec:85:8f:6f:7e:3a:ab:56:73:b8:ec:
         25:68:f9:d1:e8:31:19:ae:7c:57:cd:21:f7:4e:56:5b:e1:c7:
         6f:b1:91:38:52:f5:48:81:7d:28:5b:0c:65:50:0f:94:b8:8f:
         73:c1:0d:b6:d8:0d:d0:dd:97:8d:af:b2:3a:17:0e:40:95:f1:
         39:2d:c2:51:81:c3:d7:ac:2b:c7:7e:49:f9:55:b9:4b:f1:45:
         f6:0c:2f:61:4f:39:76:fd:17:30:cc:e1:04:32:2f:04:c7:6b:
         73:4f:a8:c6:e8:07:0f:a0:e3:83:02:9e:28:9c:bb:21:c4:94:
         e7:63:e3:b8:c6:3e:95:73:9c:94:31:ff:6d:c8:f7:e8:ba:80:
         83:e9:c5:f2:18:d8:78:38:6e:28:7b:10:91:e6:9e:fe:fd:9e:
         12:05:09:2f:3c:da:50:97:c0:6a:16:23:e9:8d:aa:30:ea:34:
         34:4e:f4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----