Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft
File:                     _jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft (raw, json)
Hash identifier:          ZW+pfNeeYmVOYoesOa0L2DJSgQeFLTOXdc80gvijN1M=
Subject key identifier:   66:9F:88:B2:AA:49:A8:FC:D6:01:0B:D3:A0:66:16:2E:32:6B:B1:2C
Authority key identifier: FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53
Certificate issuer:       /CN=A91B1185/serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053
Certificate serial:       161E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft
Manifest number:          15F7
Signing time:             Fri 31 Jan 2025 16:44:50 +0000
Manifest this update:     Fri 31 Jan 2025 16:44:50 +0000
Manifest next update:     Fri 07 Feb 2025 16:44:50 +0000
Files and hashes:         1: _jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl (hash: D44r/8ED1Q0+z5EaIVHE0gfWCJEiw9xlTkP7lK5v4k0=)
                          2: 86BBD3DE994C11EC82BA3978C4F9AE02.roa (hash: Q2kZN7QvQgBqoWWAZ0d5JV7Ik/xKOmBtwv1GiK5L6BY=)
                          3: 7BC4E6DE322C11EFBC879F31C4F9AE02.roa (hash: gYsoSmLyEmfNsV6SexFxZ+i2l3QJSOLw2j/lALUlIrI=)
                          4: 87D45318994C11EC82BA3978C4F9AE02.roa (hash: HRxLdFHU7v9ktQmRHzKA7IbwxRL+QI1P77qnL5kGPjQ=)
                          5: 1AD64F18D23411EAAFD6AA3AC4F9AE02.roa (hash: kaCh08b2Mg8Eik2IuIhloga+8nnEdGyPNQCWzUmLk58=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5662 (0x161e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1185/serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053
        Validity
            Not Before: Jan 31 16:44:50 2025 GMT
            Not After : Feb  7 16:44:50 2025 GMT
        Subject: CN=679cfe02-f8d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bf:2d:c3:92:20:47:1a:ba:25:2a:3d:de:6b:
                    69:ab:5b:57:dd:37:c7:a1:51:de:9f:bc:24:22:14:
                    42:8b:38:17:27:be:69:90:bc:68:1a:1d:96:68:d9:
                    6e:5c:81:af:af:85:30:a6:a8:87:ff:3f:ca:10:2b:
                    1f:0b:6b:da:0f:25:3f:10:de:dc:90:ab:15:32:34:
                    79:62:81:58:d7:19:c7:9a:cb:a3:70:d5:63:b5:9d:
                    dd:23:52:a1:f9:a7:3f:f9:cf:e9:02:f8:22:fa:1f:
                    f1:a7:9a:4d:5e:21:09:d2:2e:af:27:69:21:a3:b2:
                    b6:d3:4b:be:35:3e:45:09:7c:bc:98:41:e7:b8:5f:
                    93:f4:6c:ed:b1:86:d7:b6:2c:c2:ee:88:f7:98:6e:
                    e3:03:b0:49:5f:7a:05:48:02:35:c5:da:7d:88:66:
                    f5:b2:dc:2a:a3:91:00:28:50:d8:66:f3:25:75:1a:
                    ee:36:c9:0d:7c:08:a2:83:2d:00:7c:f2:8e:3b:b8:
                    d8:2b:cd:00:28:49:21:da:b1:45:cf:76:26:2c:61:
                    89:d0:74:37:2e:21:de:66:47:20:7d:06:6f:01:4f:
                    86:d3:de:69:fc:d0:ce:cc:b0:7a:59:24:0a:b4:a9:
                    bc:f9:6b:80:81:82:65:77:f0:47:7b:a3:4a:a9:2f:
                    ea:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:9F:88:B2:AA:49:A8:FC:D6:01:0B:D3:A0:66:16:2E:32:6B:B1:2C
            X509v3 Authority Key Identifier:
                keyid:FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:0d:2b:de:7b:ec:fb:a9:03:ea:cf:f0:4f:5c:a6:e2:1c:9a:
         9c:04:e8:e8:d8:d8:2e:62:83:fc:c0:97:52:e1:fb:bd:15:70:
         19:17:d8:02:85:8b:85:3d:e4:40:7c:dc:a4:6a:e4:ff:af:92:
         2e:17:09:76:07:fa:5f:ea:80:c3:d5:7e:22:3c:08:7a:bf:7c:
         cf:30:ba:5e:76:28:e9:69:f9:64:d9:8e:7b:07:ce:87:bf:3f:
         a1:b5:cd:2d:72:46:18:97:a7:d9:50:87:62:72:ea:81:ba:63:
         b8:7a:5b:49:25:0d:05:33:37:79:2c:b5:0d:29:1c:30:56:60:
         0f:51:71:72:8a:a6:62:d7:4a:f9:f7:66:85:c2:70:58:65:a7:
         61:03:2a:88:d5:2b:2d:03:43:a1:30:39:a9:b9:af:96:e3:c6:
         83:51:ad:df:02:41:3b:dc:a6:7f:2c:0f:1f:48:4a:8c:f5:e5:
         07:0f:63:7e:a5:30:cf:2a:0f:61:1c:ec:5e:0a:e5:39:bf:e0:
         0b:0d:3d:c1:32:25:1b:d6:31:61:42:94:5a:d7:94:a8:6e:54:
         56:05:78:b2:83:76:bf:8e:46:a4:0a:ff:51:e9:76:d4:5f:b8:
         03:f5:71:e4:93:ea:32:13:3a:ad:6e:4c:76:9b:8d:f6:2c:27:
         47:31:58:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----