Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft
File:                     _JvUY9Aun9Lfw8Oa5M1asyJljCo.mft (raw, json)
Hash identifier:          fBTRooJt8vud/XLl40aCN/jRSRZhMSRQKIRqXdXN+qg=
Subject key identifier:   FD:D1:F5:68:71:43:AE:21:08:12:F8:D3:0C:92:C4:2C:F8:77:F3:ED
Authority key identifier: FC:9B:D4:63:D0:2E:9F:D2:DF:C3:C3:9A:E4:CD:5A:B3:22:65:8C:2A
Certificate issuer:       /CN=A91AB6EB/serialNumber=FC9BD463D02E9FD2DFC3C39AE4CD5AB322658C2A
Certificate serial:       0A91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft
Manifest number:          09D9
Signing time:             Thu 30 Jan 2025 20:18:38 +0000
Manifest this update:     Thu 30 Jan 2025 20:18:37 +0000
Manifest next update:     Thu 06 Feb 2025 20:18:37 +0000
Files and hashes:         1: _JvUY9Aun9Lfw8Oa5M1asyJljCo.crl (hash: gdxZ/Y2Avo6AOuCSqW6bPoyks1k/Yj2Fpl4vYROd5k0=)
                          2: 23A38F44D74C11EF9514995EC4F9AE02.roa (hash: uQ6I3e0o8JnPRZxIvKe74jd/emFKj+hEJegapcf9rgQ=)
                          3: 22E7F194D74C11EF9514995EC4F9AE02.roa (hash: pX4gt2/jBl+mpRscfsXZm5rZDwrEDsihmrWaf+WIaWA=)
                          4: 1517BF2ED77711EF8E6D7517C4F9AE02.roa (hash: uZO/DmVHnwlWE4o9YOLMd9p2vDFrMMH7/c/iUXTrU3g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2705 (0xa91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB6EB/serialNumber=FC9BD463D02E9FD2DFC3C39AE4CD5AB322658C2A
        Validity
            Not Before: Jan 30 20:18:37 2025 GMT
            Not After : Feb  6 20:18:37 2025 GMT
        Subject: CN=679bde9d-5a4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:28:98:ef:8e:e0:fc:9e:cf:0c:7c:a1:51:6e:
                    f8:1f:2f:80:49:c0:a0:2c:50:cc:b6:7f:0f:2f:46:
                    c0:16:c1:03:7c:2b:d4:7b:5d:b6:b3:77:8f:ea:6d:
                    91:c9:04:5c:3d:63:af:ac:22:55:2f:2c:6e:68:f0:
                    6a:79:3e:2e:23:ad:e5:2c:ee:70:e5:72:3a:35:b9:
                    0d:ea:9a:95:68:d3:02:c8:58:0e:4b:1f:b1:54:19:
                    d4:ae:40:ca:4e:1a:9a:96:5c:f9:af:17:db:ca:1a:
                    59:44:d0:b1:dd:1d:26:cc:e3:f8:3b:3f:65:8b:74:
                    f1:c9:0d:66:79:4b:54:81:99:6f:b1:6f:c1:ba:c9:
                    10:01:53:03:cb:55:5c:0f:8f:3f:9a:c1:dd:be:b9:
                    70:51:89:34:d1:cd:04:d6:b2:fa:57:97:3f:47:d9:
                    35:a1:5c:00:b6:6e:2b:f1:03:c2:ab:f7:0f:2c:60:
                    81:97:e8:bd:b1:6f:da:9d:36:e3:2d:30:02:39:a7:
                    a9:49:37:e0:81:81:fa:a8:bb:57:05:4c:40:09:d8:
                    2d:7b:0e:3f:7d:a2:44:0d:59:5e:b6:b0:19:dd:11:
                    7e:6d:c4:21:dd:79:91:d9:f3:0a:b1:ff:e2:5f:ba:
                    22:9e:a0:85:9d:35:31:7e:9a:a3:d9:95:15:26:a1:
                    a3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:D1:F5:68:71:43:AE:21:08:12:F8:D3:0C:92:C4:2C:F8:77:F3:ED
            X509v3 Authority Key Identifier:
                keyid:FC:9B:D4:63:D0:2E:9F:D2:DF:C3:C3:9A:E4:CD:5A:B3:22:65:8C:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:03:a8:d6:b5:88:7c:ad:8e:53:4e:23:3b:75:28:ce:56:9e:
         bf:8c:68:42:c5:ef:7f:d0:7a:8d:40:60:98:e1:fb:7c:28:37:
         7d:b8:c3:d3:52:6e:2c:f4:a2:25:71:8d:f6:19:c9:08:42:98:
         a8:34:4e:b8:14:37:ec:55:35:6f:a2:0e:45:1c:ce:91:73:4c:
         03:17:14:e7:8c:85:2d:7e:87:0a:d1:ac:72:c6:ca:d2:4b:cd:
         37:9c:85:21:5d:9e:45:74:45:4f:8a:ce:ff:e6:22:1b:7f:a1:
         61:de:c7:99:ea:a9:14:ff:91:61:f0:9d:e8:fc:25:18:17:ba:
         22:d3:dd:3f:83:01:6f:1d:4a:9e:42:99:0a:22:55:f4:9e:f8:
         d9:57:fa:fe:b8:fd:26:d8:de:14:45:50:a0:b5:d1:ab:11:04:
         92:d6:42:3c:a9:4e:e6:d0:e1:40:c4:3c:29:d3:46:13:cb:fc:
         f6:bf:20:ca:fb:7e:6b:b6:94:93:0c:25:21:1a:bb:69:10:4f:
         89:a9:ae:d8:8c:f0:88:3b:c7:86:ce:ef:f6:e1:6f:ed:97:77:
         d6:45:3d:91:5c:ad:ef:48:ed:95:92:cd:9d:be:67:ef:68:eb:
         5e:92:ed:f1:d7:69:7d:d5:bc:26:a2:80:67:80:37:49:f0:47:
         ac:bf:26:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----