Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft
File:                     IbLqdC_w7568zvOZh5Dj9bCNa2M.mft (raw, json)
Hash identifier:          977iOvj40vrMPwsMBJe+mAK3UoG71Um8oudNtt4pPRI=
Subject key identifier:   91:71:C1:6C:5A:1A:F4:DA:2D:A6:27:8D:29:8E:5F:F5:59:2E:B5:C4
Authority key identifier: 21:B2:EA:74:2F:F0:EF:9E:BC:CE:F3:99:87:90:E3:F5:B0:8D:6B:63
Certificate issuer:       /CN=A91B6172/serialNumber=21B2EA742FF0EF9EBCCEF3998790E3F5B08D6B63
Certificate serial:       01A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft
Manifest number:          0198
Signing time:             Fri 31 Jan 2025 02:42:45 +0000
Manifest this update:     Fri 31 Jan 2025 02:42:44 +0000
Manifest next update:     Fri 07 Feb 2025 02:42:44 +0000
Files and hashes:         1: IbLqdC_w7568zvOZh5Dj9bCNa2M.crl (hash: NwYd9t2Mn2CTpAZ4VDQFILmI4BTPHrUW9xEAR76Nd4M=)
                          2: ABDDEF28722F11EDA987AB75C4F9AE02.roa (hash: mzTY+yHaxiOoTmhIGnRxe8TteP35OSc9TDFULhxG7es=)
                          3: AC80FFE2722F11EDA987AB75C4F9AE02.roa (hash: TCA2TacY4ZsDEXX4IqBFag6vpZrZlhAMEJDWvtGJDWs=)
                          4: 08A71970723811EDB0BD0312C4F9AE02.roa (hash: Tjdi12mwJxE8vytdEEm6LYs9NXU4cX9jhBUfI2VO1fQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 419 (0x1a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6172/serialNumber=21B2EA742FF0EF9EBCCEF3998790E3F5B08D6B63
        Validity
            Not Before: Jan 31 02:42:44 2025 GMT
            Not After : Feb  7 02:42:44 2025 GMT
        Subject: CN=679c38a4-a7bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f5:1c:fd:d5:68:15:e6:62:06:c2:9d:ab:c4:
                    ac:79:a4:31:66:e3:da:ba:3e:c4:a8:dc:e5:19:d8:
                    e3:63:95:1c:bb:bd:90:ec:b9:59:43:75:25:09:f0:
                    a7:e4:5a:ae:9e:24:91:56:c1:b4:59:cf:c3:9e:85:
                    e2:c6:58:01:c6:0f:78:2d:11:1d:8c:56:da:01:32:
                    fc:45:d5:d7:9b:8e:fa:b1:79:93:d3:4d:28:84:49:
                    ef:b8:d1:83:29:69:32:19:5e:6c:92:82:d5:a4:fc:
                    89:85:d6:b1:63:eb:6a:e2:de:67:bb:6f:7f:28:72:
                    88:bc:d9:b4:f2:8f:25:24:85:d3:2a:30:97:66:7b:
                    e5:05:7a:a9:ee:85:46:db:f4:c3:2d:16:b3:ca:5a:
                    20:12:de:80:09:68:18:cd:5e:8d:98:8f:37:39:1c:
                    97:91:aa:dd:9d:d2:2e:86:a7:92:d1:2f:da:d0:b0:
                    f7:2f:e1:a6:ba:1c:96:fc:fa:d6:ee:9c:44:ec:63:
                    39:78:ae:49:5d:0d:95:8a:70:82:3d:2e:db:ba:fd:
                    33:71:aa:21:be:a1:51:f3:d9:ae:66:39:6b:88:57:
                    71:ab:29:21:fd:c8:b8:9b:e2:b2:96:2e:53:de:68:
                    13:33:4c:fc:2d:bf:bf:a3:09:b9:ae:3a:ab:0b:9f:
                    da:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:71:C1:6C:5A:1A:F4:DA:2D:A6:27:8D:29:8E:5F:F5:59:2E:B5:C4
            X509v3 Authority Key Identifier:
                keyid:21:B2:EA:74:2F:F0:EF:9E:BC:CE:F3:99:87:90:E3:F5:B0:8D:6B:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:e1:f9:3e:4a:8b:ea:d1:62:8e:45:da:e2:d8:13:d4:93:ba:
         d6:b2:b0:5b:ee:7f:ec:49:e8:b6:b8:82:b2:e3:ef:c6:54:bc:
         a0:6b:04:b9:1a:5a:74:d3:3a:1b:9b:d0:55:ae:81:1d:da:c5:
         73:59:07:6b:7b:4e:93:49:9e:33:ae:c8:ea:43:36:7f:4e:57:
         f0:66:dd:00:d3:03:4f:12:cd:0a:57:7d:c7:0b:fa:28:4f:5a:
         a1:d8:b8:46:b8:cb:c2:9f:9b:e3:cc:37:a9:8d:07:70:ce:c4:
         95:60:28:a1:9e:8a:7e:ad:ab:90:1f:fc:8a:11:37:e3:84:1c:
         02:d9:c0:11:c5:22:d9:a6:9e:a7:47:be:13:4c:d1:dd:31:bb:
         6f:1e:ee:78:23:3c:5a:e8:7c:c7:a9:cf:32:87:c3:de:d4:c4:
         f3:7e:b9:d4:bd:6d:48:64:7f:79:25:89:5f:22:50:a1:c2:85:
         25:e8:cf:12:34:9a:5d:fa:b5:1a:60:5b:eb:99:e5:0c:51:78:
         9b:da:11:e5:a7:42:73:93:00:22:d8:d6:56:ae:bf:ed:00:4f:
         32:08:2c:8f:16:2c:7e:d3:2a:f8:aa:04:40:d3:2d:9c:ec:07:
         db:6b:9c:53:52:39:e4:9a:45:cb:0d:c9:9b:7d:44:6a:ea:0a:
         13:dc:5d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----