Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.mft
File:                     vrCjIjTRl23j3iJaVReALbYTqLY.mft (raw, json)
Hash identifier:          5AWgTdskCl3dWo4nHAsSYzUb9+EF2z4KfhGj73CQr24=
Subject key identifier:   A9:BA:DF:47:2E:8F:A0:A2:97:B2:60:9B:0E:04:CA:DD:67:08:53:00
Authority key identifier: BE:B0:A3:22:34:D1:97:6D:E3:DE:22:5A:55:17:80:2D:B6:13:A8:B6
Certificate issuer:       /CN=A91AF17B/serialNumber=BEB0A32234D1976DE3DE225A5517802DB613A8B6
Certificate serial:       057A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrCjIjTRl23j3iJaVReALbYTqLY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.mft
Manifest number:          0575
Signing time:             Thu 30 Jan 2025 23:19:23 +0000
Manifest this update:     Thu 30 Jan 2025 23:19:23 +0000
Manifest next update:     Thu 06 Feb 2025 23:19:23 +0000
Files and hashes:         1: vrCjIjTRl23j3iJaVReALbYTqLY.crl (hash: FcRE1C9zSUYFD92s2q5OcZqATtOptuGzJiGpZxA3qLo=)
                          2: 9C955450C77E11EB9DF68B6AC4F9AE02.roa (hash: CdejYox3BV6EKy7rSMjwH4v5mRzFb0N6duLMtMnZvdQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1402 (0x57a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF17B/serialNumber=BEB0A32234D1976DE3DE225A5517802DB613A8B6
        Validity
            Not Before: Jan 30 23:19:23 2025 GMT
            Not After : Feb  6 23:19:23 2025 GMT
        Subject: CN=679c08fb-d3ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a4:92:e1:ec:73:13:89:76:dc:77:9d:39:48:
                    e6:6e:67:22:9f:0b:62:0d:34:b2:60:8e:38:fa:bf:
                    86:6c:ef:25:1b:8e:2c:f9:26:10:b9:12:1a:3d:ee:
                    d3:e7:47:f4:56:38:1f:ae:90:a9:b2:7b:b3:74:3f:
                    b5:3e:e0:1d:4f:9c:de:9f:e7:5c:27:a6:87:9f:b2:
                    e5:c6:83:dd:a4:3a:4d:6d:3a:80:a7:9f:98:44:38:
                    f2:09:cf:ad:e3:7b:a2:f0:05:4a:38:81:36:fb:d4:
                    f5:2c:3d:f3:22:eb:3d:78:f1:62:cc:b3:1a:ac:55:
                    c7:b1:c3:80:1d:ac:10:ef:a7:a9:b7:0c:6a:7f:ae:
                    a5:d6:42:db:ff:bd:33:2f:f5:56:b2:9e:58:c9:80:
                    3a:55:a1:0c:44:f9:c8:e0:45:52:6f:94:c9:ed:a4:
                    70:2a:18:e5:3e:bf:fa:e2:92:de:32:74:93:4f:67:
                    56:6a:a3:fd:02:f5:0f:09:de:25:3d:d8:4a:15:e2:
                    c1:95:a1:8f:f4:31:27:96:29:fe:dd:9c:43:46:34:
                    43:dd:a9:08:65:bf:37:76:55:ca:c7:53:04:50:4f:
                    c0:21:fd:23:de:08:83:1e:ea:c9:11:e5:32:6b:9c:
                    96:af:28:25:51:f1:57:0b:5e:59:79:f3:30:e5:f2:
                    f2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:BA:DF:47:2E:8F:A0:A2:97:B2:60:9B:0E:04:CA:DD:67:08:53:00
            X509v3 Authority Key Identifier:
                keyid:BE:B0:A3:22:34:D1:97:6D:E3:DE:22:5A:55:17:80:2D:B6:13:A8:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrCjIjTRl23j3iJaVReALbYTqLY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:81:c2:bb:18:82:3b:cf:16:55:23:3b:d5:9f:ef:0e:48:5c:
         0f:db:06:2c:61:9b:d8:3a:ca:a7:e3:29:21:a9:88:a6:cd:31:
         50:4b:cb:55:cf:1a:6a:06:d8:24:b2:6c:f0:c9:0d:c9:b2:b3:
         9e:1b:31:f7:07:89:9a:c0:96:b4:27:90:da:6c:b0:3a:14:ae:
         eb:55:f6:6f:b3:09:b3:68:b0:7b:15:ca:7e:d8:f6:1a:c5:a1:
         09:0b:de:fc:95:28:ec:df:59:41:df:02:b8:dc:37:0f:72:18:
         c6:af:d3:ed:f0:2a:10:02:69:45:81:ae:35:3a:75:28:9d:ed:
         58:37:b2:86:49:79:73:4a:c5:24:39:47:86:a9:24:33:fc:c0:
         9c:6b:02:3b:09:56:a7:57:80:7f:75:89:72:9d:00:da:d0:4d:
         81:cb:37:ca:ce:37:7a:aa:44:83:b5:74:26:50:59:43:5c:d2:
         95:0f:c2:22:3c:a3:f7:8c:80:50:9a:26:91:ef:88:62:a5:53:
         36:1c:9d:4b:8c:96:ad:38:c7:c3:52:f5:62:29:c0:7a:d0:a9:
         74:3a:d9:2b:91:ff:0c:48:bd:3a:b2:74:2b:4f:51:65:34:33:
         27:d4:a0:93:de:9d:57:00:72:28:29:9d:36:47:c5:06:7f:b2:
         5d:d0:fe:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----