Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2472/E62B735A481911EFB8BE4534C4F9AE02/nlE6zE17kAFKhn-1KviSKeALpKw.mft
File:                     nlE6zE17kAFKhn-1KviSKeALpKw.mft (raw, json)
Hash identifier:          P12/tQD6kvA3S7AMlo0AuD2yeZYraQOnQxyaiELsIaI=
Subject key identifier:   D3:8C:7F:AC:A8:CA:47:B5:EE:F1:37:F4:DA:83:43:68:91:91:FA:56
Authority key identifier: 9E:51:3A:CC:4D:7B:90:01:4A:86:7F:B5:2A:F8:92:29:E0:0B:A4:AC
Certificate issuer:       /CN=A91B2472/serialNumber=9E513ACC4D7B90014A867FB52AF89229E00BA4AC
Certificate serial:       69
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlE6zE17kAFKhn-1KviSKeALpKw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2472/E62B735A481911EFB8BE4534C4F9AE02/nlE6zE17kAFKhn-1KviSKeALpKw.mft
Manifest number:          66
Signing time:             Fri 31 Jan 2025 06:03:34 +0000
Manifest this update:     Fri 31 Jan 2025 06:03:33 +0000
Manifest next update:     Fri 07 Feb 2025 06:03:33 +0000
Files and hashes:         1: nlE6zE17kAFKhn-1KviSKeALpKw.crl (hash: 1gwd+I2XFFqtBo8Enqqm/St3utiWEjU53RCAvKWs8HI=)
                          2: 1B4BDA5C48B011EF9D34415EC4F9AE02.roa (hash: /fW0UzdpOpiVi/4bzpgP5X5TzlzFOgXdGZfbyGjzbdE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2472/serialNumber=9E513ACC4D7B90014A867FB52AF89229E00BA4AC
        Validity
            Not Before: Jan 31 06:03:33 2025 GMT
            Not After : Feb  7 06:03:33 2025 GMT
        Subject: CN=679c67b5-fb7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:47:99:8d:3f:0a:1e:29:02:6a:ce:f1:aa:b7:
                    32:ab:3b:e3:3d:b6:d8:07:42:3b:44:db:e4:6a:63:
                    78:0a:91:c3:d2:d6:a0:f7:96:21:22:40:7b:d9:7c:
                    08:62:de:3a:29:80:7b:34:94:99:19:60:11:ff:ad:
                    f7:28:57:3a:d3:65:33:74:8a:c0:77:bb:96:3c:2f:
                    6a:78:a8:dc:08:e4:7e:32:56:d1:0e:34:18:45:a6:
                    53:d8:89:3a:4e:c0:4b:58:e8:ae:05:15:91:e7:27:
                    5b:b6:54:e2:46:07:cf:1e:7c:c3:a7:ec:46:f1:49:
                    72:15:54:17:b3:ae:70:d4:fe:92:5b:03:96:2c:af:
                    1b:7f:c3:3a:16:a4:8b:dd:6d:08:70:f7:dc:dd:01:
                    c4:43:dd:a4:14:96:c9:78:89:f6:2a:ea:03:79:5a:
                    ca:91:0e:ac:c4:24:64:26:3e:b9:e4:f6:3f:a1:d1:
                    fb:e4:d6:9d:f9:e7:82:72:16:e0:78:15:73:fd:0f:
                    e5:79:10:a8:1d:32:89:04:57:44:2d:9b:37:c4:54:
                    df:1f:4d:a9:81:5e:3e:4e:16:93:07:63:a3:7b:c5:
                    e6:70:50:64:c4:3b:02:b2:91:96:da:52:d4:f8:13:
                    2b:7a:26:55:30:a8:63:6c:a2:8b:0c:8e:b7:da:38:
                    26:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:8C:7F:AC:A8:CA:47:B5:EE:F1:37:F4:DA:83:43:68:91:91:FA:56
            X509v3 Authority Key Identifier:
                keyid:9E:51:3A:CC:4D:7B:90:01:4A:86:7F:B5:2A:F8:92:29:E0:0B:A4:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2472/E62B735A481911EFB8BE4534C4F9AE02/nlE6zE17kAFKhn-1KviSKeALpKw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlE6zE17kAFKhn-1KviSKeALpKw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2472/E62B735A481911EFB8BE4534C4F9AE02/nlE6zE17kAFKhn-1KviSKeALpKw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:0c:c2:11:23:32:a5:9e:1f:4a:ee:d0:75:85:b4:7d:8d:d7:
         76:69:fd:ae:99:c1:93:e7:54:cb:1a:86:73:8b:4e:16:12:c5:
         1f:4b:83:7a:92:03:ec:33:b8:14:22:fd:78:cb:0c:5a:f1:2d:
         a0:cc:ec:87:ef:44:ed:79:c8:28:7a:b0:44:54:11:30:87:f9:
         04:96:42:ac:11:fe:1d:0f:c9:9a:0a:a8:47:65:d8:37:e1:7f:
         61:82:f7:0f:84:02:c1:0c:89:9e:dd:d2:c5:ef:c0:1d:ac:fd:
         ee:52:ea:8c:ae:aa:02:8f:fc:06:68:9a:46:77:2b:cf:dc:c2:
         fd:0c:fa:34:05:d3:3b:c2:7f:a5:a2:88:7a:ca:fe:eb:21:45:
         f2:05:7b:93:05:96:b6:bb:de:fa:6b:27:c0:a9:f9:5d:9c:30:
         9b:df:08:50:f2:e8:8c:80:be:56:2c:d0:bd:ee:4e:1d:5d:15:
         83:bb:95:0b:dc:11:96:3d:35:2f:0b:95:45:cb:16:3c:e7:db:
         8a:30:09:56:b0:61:a7:86:2a:7d:50:5b:bf:de:a7:f7:33:12:
         18:ba:d1:5f:11:7c:e8:9d:50:ab:9b:af:7d:92:70:8d:6b:89:
         ca:c5:bf:ea:26:49:e8:26:f8:46:f3:7b:74:70:10:34:3b:90:
         d0:b5:9d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----