Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft
File:                     8rcLSXMivuZoIO0_ziiqeW2wkVM.mft (raw, json)
Hash identifier:          yJmuyDvQTBu2moyB676l4gbmEHtTKxsuNqfWLbYVnFY=
Subject key identifier:   DB:AB:67:0D:9D:37:6D:29:1F:8B:E9:FC:30:5C:4C:05:4C:E3:B1:52
Authority key identifier: F2:B7:0B:49:73:22:BE:E6:68:20:ED:3F:CE:28:AA:79:6D:B0:91:53
Certificate issuer:       /CN=A91B43D7/serialNumber=F2B70B497322BEE66820ED3FCE28AA796DB09153
Certificate serial:       0671
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft
Manifest number:          066D
Signing time:             Thu 30 Jan 2025 22:23:15 +0000
Manifest this update:     Thu 30 Jan 2025 22:23:14 +0000
Manifest next update:     Thu 06 Feb 2025 22:23:14 +0000
Files and hashes:         1: 8rcLSXMivuZoIO0_ziiqeW2wkVM.crl (hash: ArF7fvCuc5ZZ7AGWvZQRQdOCvWH6ZBW/iXqhYnkbjSE=)
                          2: 643961CCB39811EBBD3F524CC4F9AE02.roa (hash: taFGAacxq2sm6Y1QRRo3KlRLFJEopO93ww8dAQZR/68=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1649 (0x671)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B43D7/serialNumber=F2B70B497322BEE66820ED3FCE28AA796DB09153
        Validity
            Not Before: Jan 30 22:23:14 2025 GMT
            Not After : Feb  6 22:23:14 2025 GMT
        Subject: CN=679bfbd2-68b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:80:96:23:b1:fe:ae:54:44:02:94:fa:1e:23:
                    ed:02:5d:00:5f:1a:a1:3f:ae:c7:bf:a2:b1:93:a7:
                    bd:61:52:a6:82:7b:f9:ce:6b:56:0c:18:e4:f2:31:
                    55:29:aa:04:62:49:6b:14:e6:25:e0:d4:db:fb:ca:
                    02:97:03:05:a3:7d:64:34:3e:0d:88:cd:25:25:19:
                    4d:c4:31:32:d9:38:3f:f3:2b:d1:46:04:83:68:e8:
                    b6:d4:03:22:37:e5:95:f7:30:a2:81:6f:5a:11:18:
                    a3:4b:82:39:5f:9e:07:bd:73:59:01:9f:c4:c0:1e:
                    5c:ef:e9:74:e7:76:91:68:c9:5c:4b:ce:ad:c3:16:
                    1e:3d:83:48:dd:2a:6f:13:6b:5e:82:45:c3:82:93:
                    14:07:61:dd:4c:1c:03:8b:5a:a6:8a:1c:bc:31:e7:
                    5f:c5:71:be:81:56:89:bd:b9:cd:ea:16:11:52:63:
                    8a:7c:72:63:b6:b6:fd:a7:b1:85:43:c8:7b:a7:16:
                    71:75:53:c5:5e:fe:39:0b:17:e6:5f:20:0a:83:b6:
                    16:0b:61:ff:2b:0e:ab:67:b2:de:86:be:5a:c8:5e:
                    77:51:a7:22:b9:96:be:29:16:74:17:4c:f3:01:77:
                    2f:32:51:d2:38:6b:98:55:f2:9c:35:c3:63:c7:4e:
                    49:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:AB:67:0D:9D:37:6D:29:1F:8B:E9:FC:30:5C:4C:05:4C:E3:B1:52
            X509v3 Authority Key Identifier:
                keyid:F2:B7:0B:49:73:22:BE:E6:68:20:ED:3F:CE:28:AA:79:6D:B0:91:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:1d:a3:40:75:64:c3:7d:be:c6:9e:85:f5:93:94:4b:06:3f:
         85:f2:fe:9a:21:e6:45:3b:de:9d:98:0a:0a:a2:1a:58:18:ee:
         aa:e0:59:97:2f:7a:41:d0:ce:63:c6:2b:e9:3b:87:a1:5b:74:
         e0:bd:4b:bf:4a:d3:73:cf:95:1e:b2:de:71:b4:9f:9b:ce:f7:
         b0:a2:3a:c5:42:04:a1:17:b1:76:2a:87:93:df:29:aa:17:0f:
         0c:a5:60:e0:be:6e:fd:d8:4c:95:75:5d:42:19:ef:81:c5:1b:
         40:08:3e:36:1e:be:5d:0d:21:50:ce:aa:7c:be:8d:15:46:ed:
         ff:12:19:72:2c:e0:13:0c:dd:41:70:28:1a:77:c4:a9:bc:56:
         c5:6e:f8:00:a8:26:c0:da:7d:92:bd:f5:91:14:33:2b:62:4a:
         a6:bc:db:32:b1:1a:a6:81:b9:35:b8:12:23:ec:db:08:c6:d5:
         d3:ce:da:b2:f0:a6:dd:9b:7b:3f:90:86:eb:29:7a:2a:72:92:
         6d:6d:79:75:64:1a:d4:aa:42:cb:41:29:54:59:70:2b:17:01:
         42:04:fa:6e:ea:3b:f9:3b:c3:6a:14:05:a0:c9:06:ad:ed:8f:
         d0:b6:21:88:64:fb:12:15:b5:9c:86:74:98:38:5d:33:a6:0a:
         4f:0d:ad:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----