Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.mft
File:                     cwYbqQQBgewK602PbgA_g4_JxI8.mft (raw, json)
Hash identifier:          zep9iBepTUQVAnPhzUXzSXZh2X1X2eMLdyQMN5/xNMw=
Subject key identifier:   12:A4:9A:E8:F5:4A:6B:02:72:21:4A:FE:18:65:AD:F7:4C:A1:3A:A6
Authority key identifier: 73:06:1B:A9:04:01:81:EC:0A:EB:4D:8F:6E:00:3F:83:8F:C9:C4:8F
Certificate issuer:       /CN=A91B65AC/serialNumber=73061BA9040181EC0AEB4D8F6E003F838FC9C48F
Certificate serial:       A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwYbqQQBgewK602PbgA_g4_JxI8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.mft
Manifest number:          A5
Signing time:             Fri 31 Jan 2025 05:18:06 +0000
Manifest this update:     Fri 31 Jan 2025 05:18:06 +0000
Manifest next update:     Fri 07 Feb 2025 05:18:06 +0000
Files and hashes:         1: cwYbqQQBgewK602PbgA_g4_JxI8.crl (hash: o8Q5XZ3Kd+wkrNvjvWtHGprFCBvsd7BIoGRIxCrMcOg=)
                          2: 7D2E766CE5AF11EE9A0A642FC4F9AE02.roa (hash: FB0V4RMdFHeXRpqHQF3eni47ItP+S5H4Tlgoc4AQRYQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166 (0xa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B65AC/serialNumber=73061BA9040181EC0AEB4D8F6E003F838FC9C48F
        Validity
            Not Before: Jan 31 05:18:06 2025 GMT
            Not After : Feb  7 05:18:06 2025 GMT
        Subject: CN=679c5d0e-c591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:43:02:13:81:ea:ad:0c:5e:94:4c:9e:fc:95:
                    77:ad:58:07:44:ee:62:16:55:0b:9f:d9:67:08:bc:
                    d6:b6:ad:15:b8:73:2d:4e:33:d7:b5:48:55:23:31:
                    cf:72:8a:23:95:55:f0:e8:92:06:4d:f7:70:0c:f9:
                    f7:a3:9d:c7:d4:9a:ee:15:10:cc:7e:6e:31:57:85:
                    29:aa:1f:63:35:77:13:7a:75:44:94:8c:ba:af:48:
                    70:07:3f:d2:7c:12:54:f3:88:38:3c:a7:7d:b1:02:
                    fa:20:49:34:74:77:a0:09:d5:2e:9d:1b:d8:41:25:
                    e1:fd:6e:94:e5:e9:ec:c6:df:0a:f0:2b:f8:9b:86:
                    5b:f3:53:4b:0d:f0:a6:d9:7d:16:ef:ee:da:69:25:
                    4a:71:30:4a:78:c7:5c:ae:8a:64:02:0b:f3:88:0c:
                    89:85:c5:cb:d1:22:9d:16:18:25:3f:f1:43:ce:09:
                    e6:a5:8f:57:f1:1a:53:97:d3:0d:10:87:d0:49:fd:
                    9e:32:72:93:09:cd:c7:49:b4:28:44:2d:aa:cd:29:
                    8d:38:01:10:fa:33:d9:71:70:1c:33:b5:d6:ec:57:
                    41:9b:92:7c:00:0a:32:ce:34:a1:4f:cd:5c:75:e0:
                    77:de:05:01:50:a3:85:d0:7f:35:2a:13:b0:0f:b7:
                    e9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A4:9A:E8:F5:4A:6B:02:72:21:4A:FE:18:65:AD:F7:4C:A1:3A:A6
            X509v3 Authority Key Identifier:
                keyid:73:06:1B:A9:04:01:81:EC:0A:EB:4D:8F:6E:00:3F:83:8F:C9:C4:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwYbqQQBgewK602PbgA_g4_JxI8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:d9:81:62:4b:21:9c:c9:cc:ab:2c:e9:c5:c8:df:a9:95:78:
         2f:7d:49:88:9d:d9:48:f9:94:a6:dc:46:81:e4:53:e4:01:6f:
         7d:b8:c3:f5:77:4b:4e:18:29:b0:0a:01:72:8c:90:47:2c:83:
         87:97:27:98:cf:4f:9a:3d:97:d5:3f:b7:ca:b8:4e:4a:06:fe:
         41:1f:37:c1:d3:71:19:cb:69:85:df:1c:b7:08:2f:c4:57:2c:
         29:04:26:d7:1c:03:13:dd:1d:c6:d0:9b:0c:78:cb:24:93:94:
         3f:49:9d:9f:be:58:93:4c:27:44:5b:c3:85:91:19:ac:9e:a1:
         10:0d:41:a5:2b:78:cf:b0:a9:1c:12:09:24:5c:9b:6c:38:2d:
         ea:ea:9d:5c:6c:1c:8c:2d:3d:66:69:9f:48:71:32:1a:44:47:
         6f:31:f1:a9:15:76:d7:89:fa:4e:73:7f:45:73:dd:36:10:82:
         a4:33:cf:e2:59:1a:b8:d1:3e:81:f4:b2:10:1b:b2:ce:85:a5:
         b3:1b:8d:d0:33:4c:5a:f5:4c:db:5a:62:74:9e:8d:e9:dc:96:
         1a:59:76:c4:ec:ec:62:f1:d6:fc:41:4b:36:c6:43:ae:77:35:
         dd:c4:21:a5:91:c3:9f:f8:b6:a2:39:06:a5:2c:a3:c2:38:b8:
         b9:5a:49:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----