Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A81F7/30F46EEE9F8611EC8D9F3F34C4F9AE02/kzrtfDoGQianFEt0eMdAPazdgAU.mft
File:                     kzrtfDoGQianFEt0eMdAPazdgAU.mft (raw, json)
Hash identifier:          AE3paWNrx/8l5+GKw6peJOoUKBU1Odi+IB4B4W0MPbk=
Subject key identifier:   5B:96:53:DA:36:44:9B:CD:BF:0B:F2:05:0C:CA:2D:BF:19:5B:F6:AE
Authority key identifier: 93:3A:ED:7C:3A:06:42:26:A7:14:4B:74:78:C7:40:3D:AC:DD:80:05
Certificate issuer:       /CN=A91A81F7/serialNumber=933AED7C3A064226A7144B7478C7403DACDD8005
Certificate serial:       0357
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrtfDoGQianFEt0eMdAPazdgAU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A81F7/30F46EEE9F8611EC8D9F3F34C4F9AE02/kzrtfDoGQianFEt0eMdAPazdgAU.mft
Manifest number:          0353
Signing time:             Fri 31 Jan 2025 01:04:44 +0000
Manifest this update:     Fri 31 Jan 2025 01:04:43 +0000
Manifest next update:     Fri 07 Feb 2025 01:04:43 +0000
Files and hashes:         1: kzrtfDoGQianFEt0eMdAPazdgAU.crl (hash: +oxPVupQ4D1brG8h9R/3Xgcu79Lrsh0M2AYqAY0GEws=)
                          2: 4D7F18D69F8911EC8270CE39C4F9AE02.roa (hash: DvvVhTWHCUbaFBHxMQ8UUW6nZ5VH6Qlov4BUrN8E2sA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 855 (0x357)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A81F7/serialNumber=933AED7C3A064226A7144B7478C7403DACDD8005
        Validity
            Not Before: Jan 31 01:04:43 2025 GMT
            Not After : Feb  7 01:04:43 2025 GMT
        Subject: CN=679c21ab-0d51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b8:46:1b:b0:8a:bc:ab:c5:fc:cb:3c:4d:36:
                    94:c7:b1:f4:91:95:d6:e8:4c:78:39:26:2e:a6:e0:
                    38:e7:f8:4a:db:da:33:ea:9c:67:b6:57:49:eb:72:
                    48:8c:24:4a:e8:17:02:5e:9f:ea:da:e9:76:59:69:
                    99:35:1f:23:e3:0d:e1:0b:d5:a6:7a:5c:b4:c9:ec:
                    5a:04:3e:af:8c:6e:ed:b4:9c:3a:b6:7e:33:0e:58:
                    30:ec:b7:ba:89:57:12:d6:12:c4:91:be:09:3b:e6:
                    51:57:98:3b:e6:11:80:1a:ad:45:f0:9b:b0:6e:10:
                    bf:ca:fd:5e:19:0e:2d:91:11:f9:1c:e9:b2:35:8a:
                    88:02:fc:e4:ba:69:f9:33:bc:53:02:e5:c4:17:21:
                    1e:71:89:62:de:51:ba:d5:e2:7c:de:99:69:cb:04:
                    ae:3f:bb:b7:12:fe:e8:cb:84:d5:73:18:cc:43:05:
                    1c:74:e2:9c:e3:ab:09:17:77:2a:70:4e:99:a6:31:
                    e4:84:4b:d1:e5:d3:94:9e:78:a8:dd:89:43:97:24:
                    f6:e4:46:01:6c:40:99:79:df:94:75:89:d3:28:a3:
                    5e:38:ec:87:11:11:19:dd:26:b6:40:b7:aa:85:4c:
                    53:ac:4b:a2:ba:30:4e:52:0d:8c:83:ad:38:ed:b2:
                    e4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:96:53:DA:36:44:9B:CD:BF:0B:F2:05:0C:CA:2D:BF:19:5B:F6:AE
            X509v3 Authority Key Identifier:
                keyid:93:3A:ED:7C:3A:06:42:26:A7:14:4B:74:78:C7:40:3D:AC:DD:80:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A81F7/30F46EEE9F8611EC8D9F3F34C4F9AE02/kzrtfDoGQianFEt0eMdAPazdgAU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrtfDoGQianFEt0eMdAPazdgAU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A81F7/30F46EEE9F8611EC8D9F3F34C4F9AE02/kzrtfDoGQianFEt0eMdAPazdgAU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:bd:ea:88:97:c5:9d:ac:20:b5:d2:c9:1c:58:85:dc:ed:53:
         70:8f:59:9f:7d:de:2f:83:87:97:0f:08:a2:29:47:92:00:ec:
         c7:1a:62:13:0e:59:a7:4f:37:ae:0f:8e:2b:77:10:22:bb:ca:
         2d:10:b6:48:1a:fc:68:b7:bd:39:9b:9d:13:5b:4a:59:93:58:
         b9:66:56:a3:b1:c1:a3:9e:9b:56:bc:bc:56:83:ef:dc:81:10:
         1c:f5:c7:99:12:82:fe:47:a4:a3:42:b2:6b:72:42:0a:2e:a4:
         64:13:9a:e6:63:bc:f2:f0:a8:37:2a:f0:6e:73:80:04:a2:95:
         a4:5c:08:83:7c:cb:d5:e8:3b:ca:29:b3:13:e0:d6:4f:25:56:
         cb:74:4c:55:d1:0e:c4:09:e0:37:9d:bb:58:93:4f:74:3c:17:
         18:f5:17:73:56:61:95:2f:a1:21:28:35:41:88:c4:5f:e7:2a:
         fd:1e:95:c0:bf:c8:38:be:87:19:b6:98:e0:60:d6:98:02:c0:
         65:db:6e:1c:bf:92:25:ad:cb:dd:78:a6:b9:39:8a:b9:a9:6a:
         60:f6:78:a1:6e:e5:eb:5b:c4:d1:aa:e3:01:b2:ba:d3:2b:26:
         87:0a:0a:98:28:83:82:f3:67:a8:5b:b1:ad:60:c4:7f:38:b1:
         1a:b0:3d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----