Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft
File:                     7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft (raw, json)
Hash identifier:          sEZ0BWqhOnWQuAcPjb+JbNy/ZXl4v/qSIkGYt3SRXks=
Subject key identifier:   5E:88:D8:8D:0F:3C:B2:D7:FD:77:72:FE:E5:7D:57:08:BE:0A:3B:3F
Authority key identifier: EC:58:B4:37:8F:CB:FF:4C:B1:24:1F:82:F3:BC:C0:E8:72:E4:B3:96
Certificate issuer:       /CN=A91B04E3/serialNumber=EC58B4378FCBFF4CB1241F82F3BCC0E872E4B396
Certificate serial:       0A4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Fi0N4_L_0yxJB-C87zA6HLks5Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft
Manifest number:          0A48
Signing time:             Thu 30 Jan 2025 19:49:37 +0000
Manifest this update:     Thu 30 Jan 2025 19:49:36 +0000
Manifest next update:     Thu 06 Feb 2025 19:49:36 +0000
Files and hashes:         1: 7Fi0N4_L_0yxJB-C87zA6HLks5Y.crl (hash: TIYVjXoZPX0fqCRBB25WzGDMBe3S5c3am/ymO6pS/0Q=)
                          2: A7D265605BB411EAB5B9A73BC4F9AE02.roa (hash: wRiU0pz+/rk6H4beDLKQQM79S2Mgy7c+Kq9SVKFoW2s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2638 (0xa4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B04E3/serialNumber=EC58B4378FCBFF4CB1241F82F3BCC0E872E4B396
        Validity
            Not Before: Jan 30 19:49:36 2025 GMT
            Not After : Feb  6 19:49:36 2025 GMT
        Subject: CN=679bd7d0-2d7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:1d:7d:4d:bc:98:fc:34:18:8f:59:5a:5e:75:
                    ab:f9:9f:f9:d1:8d:6a:7b:86:91:de:6c:e4:13:28:
                    63:cd:fb:f7:e8:06:48:42:12:5d:1b:6d:27:04:6c:
                    3c:2a:06:ec:c2:26:a2:fd:16:fb:d4:11:55:1f:f4:
                    8b:77:23:47:d8:1f:c5:66:f1:a6:ba:15:d3:04:b1:
                    5b:d7:79:17:68:db:1f:14:ef:00:91:bf:82:e5:2d:
                    26:c9:d4:c5:63:40:60:7f:66:63:88:06:5a:57:42:
                    f2:d0:77:0f:12:8a:98:a2:df:77:9a:d2:4f:30:32:
                    94:ea:9b:b8:3a:7c:e4:69:ea:a7:23:e1:57:ed:07:
                    b0:98:11:12:71:2a:82:f6:4f:f8:ed:ce:ab:8d:f1:
                    a4:68:36:c2:ec:e7:31:6a:cd:4c:ca:36:e7:f5:4a:
                    be:a8:1a:b2:c4:f1:87:e6:a5:bc:f0:1a:13:a3:c3:
                    78:e2:08:a7:c3:65:b1:95:c1:e1:16:d2:55:9d:40:
                    6b:51:77:73:fe:d2:ab:a0:31:dd:5c:cb:eb:ca:81:
                    69:86:78:51:81:1b:62:c3:2c:a0:1d:4c:80:1d:6a:
                    03:69:08:60:73:54:fc:aa:3e:e4:6a:be:f9:dd:88:
                    a8:e8:ad:f9:b5:fa:e4:5a:8f:fc:a4:a4:2b:42:ce:
                    ba:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:88:D8:8D:0F:3C:B2:D7:FD:77:72:FE:E5:7D:57:08:BE:0A:3B:3F
            X509v3 Authority Key Identifier:
                keyid:EC:58:B4:37:8F:CB:FF:4C:B1:24:1F:82:F3:BC:C0:E8:72:E4:B3:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Fi0N4_L_0yxJB-C87zA6HLks5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:f6:c9:f5:31:d5:53:4f:c0:06:57:86:b6:4f:65:92:83:a4:
         13:7e:38:90:9b:0b:5d:ce:48:f9:d7:f6:63:df:89:9f:80:4e:
         5b:81:27:b3:c9:12:3f:a2:1c:fd:ad:6f:cb:f4:59:d2:38:cf:
         81:a2:7c:8d:0d:14:64:f7:25:2c:1d:5c:4f:84:fa:3c:31:1c:
         85:72:15:40:6f:6c:75:c4:2a:45:c1:1d:37:a4:25:ec:0d:8f:
         a5:2e:c3:3a:de:14:8b:e6:38:32:8e:73:78:90:26:fb:7f:d6:
         6e:78:0d:0e:79:3b:6e:eb:91:e4:d5:09:85:ce:ca:17:b8:23:
         8e:66:29:75:e5:87:78:85:e4:e5:a0:5c:90:4b:ea:41:64:8e:
         b3:84:91:6a:62:b3:c9:d0:0e:24:f7:e8:38:e6:42:9d:ff:bf:
         cc:1a:ec:c8:67:bd:ed:ab:aa:e2:c9:68:83:c9:1e:71:bd:1b:
         74:d5:34:50:ff:be:d9:5b:79:06:87:e0:62:10:a2:9f:b1:90:
         3a:2d:50:61:84:05:f8:f4:0c:09:5d:76:34:6e:51:d5:23:7a:
         bb:3b:ac:0b:8f:53:e0:ca:0a:a8:22:ad:20:6e:3e:9d:f4:00:
         c3:ff:50:2e:4d:00:45:9d:d6:e4:85:c6:ce:a6:44:d5:e2:49:
         89:12:9f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----