Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft
File:                     p_mvKNJKQySTtLK6m1Vym8CXfMg.mft (raw, json)
Hash identifier:          Hoj6MLGRZZEiUHCP2hGVGxGOHe3gp+UuE4XTZy+dMMM=
Subject key identifier:   72:D3:97:F5:15:3A:33:CF:6A:71:0D:7E:C0:49:8F:82:09:7E:09:D7
Authority key identifier: A7:F9:AF:28:D2:4A:43:24:93:B4:B2:BA:9B:55:72:9B:C0:97:7C:C8
Certificate issuer:       /CN=A91AF9A1/serialNumber=A7F9AF28D24A432493B4B2BA9B55729BC0977CC8
Certificate serial:       0D15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_mvKNJKQySTtLK6m1Vym8CXfMg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft
Manifest number:          0D0A
Signing time:             Fri 31 Jan 2025 18:01:17 +0000
Manifest this update:     Fri 31 Jan 2025 18:01:16 +0000
Manifest next update:     Fri 07 Feb 2025 18:01:16 +0000
Files and hashes:         1: p_mvKNJKQySTtLK6m1Vym8CXfMg.crl (hash: sNi3NZXiRbBXLziakgPSVL0FfrEY+Do+11fXhqx9wiY=)
                          2: 6DDABFB26CD511ED9EC9CF83C4F9AE02.roa (hash: 7fCnTjBep84sk9XgkMrT6eykdpGaMDHQzEZtybjm0AA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3349 (0xd15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF9A1/serialNumber=A7F9AF28D24A432493B4B2BA9B55729BC0977CC8
        Validity
            Not Before: Jan 31 18:01:16 2025 GMT
            Not After : Feb  7 18:01:16 2025 GMT
        Subject: CN=679d0fed-b760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b9:b5:38:81:3a:9c:bf:71:e4:dc:f9:94:e0:
                    9f:72:16:8a:99:5f:96:99:4d:9d:31:80:3a:83:a5:
                    6f:f4:5c:fb:87:fe:b4:8a:c7:17:8b:17:e1:70:cc:
                    07:d4:29:39:cd:36:0d:50:f0:c6:f4:57:50:c0:81:
                    e7:fe:75:1f:b4:1c:fe:d2:40:49:4c:31:5b:f3:0c:
                    34:d5:dc:29:38:b9:24:74:5b:b5:4e:6a:dd:d6:35:
                    9d:33:fa:07:89:74:8d:4c:d2:4e:7f:08:b8:f8:55:
                    0c:dc:c9:51:12:13:4a:9c:4f:e5:21:ff:b8:27:ba:
                    57:55:87:c1:a5:75:c2:f4:f1:f1:9b:3c:9d:e8:3f:
                    da:ff:ea:50:d0:06:bd:fd:05:05:bf:09:ce:a3:e0:
                    85:dd:de:88:33:86:6d:0e:30:19:a4:33:85:ae:9f:
                    ba:c6:b2:77:c6:09:88:21:c5:fe:22:60:fb:ca:e1:
                    95:93:c5:9e:95:ae:70:a3:0b:76:54:a6:e0:5b:eb:
                    05:1c:9d:e2:b1:07:b0:32:5c:62:6d:a5:79:32:75:
                    7b:20:78:72:2e:18:1e:c0:ec:64:c0:30:f9:58:9a:
                    74:f1:f7:dc:83:0d:fe:69:5e:35:c0:21:d5:65:d3:
                    de:e1:83:e6:61:92:2f:3f:46:b5:f7:b5:cc:81:2c:
                    18:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:D3:97:F5:15:3A:33:CF:6A:71:0D:7E:C0:49:8F:82:09:7E:09:D7
            X509v3 Authority Key Identifier:
                keyid:A7:F9:AF:28:D2:4A:43:24:93:B4:B2:BA:9B:55:72:9B:C0:97:7C:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_mvKNJKQySTtLK6m1Vym8CXfMg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:90:e8:8d:8a:1a:e6:cf:38:07:07:72:a0:38:1a:5f:5c:24:
         84:af:42:99:ba:06:d7:12:fd:13:df:6c:c3:41:ff:d9:99:95:
         08:e0:c6:62:6e:75:9f:ab:ed:bd:d6:6d:25:98:51:f2:1a:11:
         a5:da:6a:f4:01:a2:65:a0:81:b5:9c:bb:5c:ee:d6:8d:a5:e7:
         7f:02:ff:20:5b:06:37:3f:76:ea:35:73:fc:00:dd:1b:5e:a8:
         d9:0f:bb:3b:17:ac:c5:c0:a4:65:5a:69:67:17:4e:08:e8:ad:
         81:93:37:40:51:db:9b:50:0e:3b:e7:68:7d:7b:95:e6:35:86:
         78:9a:05:52:5a:08:3a:5f:f5:f0:94:3d:1e:b0:c7:0f:71:0c:
         8f:19:4a:2d:f3:3c:4c:85:c9:24:59:b0:d6:a2:a3:d7:d9:5e:
         02:2f:3b:08:c9:2b:ef:0e:bd:ce:5e:d0:8f:12:19:1f:24:ba:
         6e:43:23:60:bf:46:22:1f:99:2f:36:81:0d:ea:c7:77:35:de:
         88:ae:64:c3:c3:a5:bc:6d:17:20:e6:70:31:82:4c:1c:9b:5e:
         94:29:bc:76:ac:24:77:cb:0f:96:cd:01:79:de:97:e5:0f:1a:
         49:98:86:0a:dc:b7:73:e5:c8:c7:57:e5:70:cf:e8:f8:8c:bb:
         cb:e7:94:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----