Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft
File:                     4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft (raw, json)
Hash identifier:          KFcfdFNnFL9CtJEdbXV0+sunWqUKMSClssou5pp4Hbw=
Subject key identifier:   A1:B6:0A:91:A0:DE:B0:07:18:2A:72:06:78:13:09:F4:FF:21:E9:CA
Authority key identifier: E3:0A:4C:DD:F6:C2:69:AC:BA:39:CA:58:AA:95:92:D8:98:64:01:F4
Certificate issuer:       /CN=A91B7F47/serialNumber=E30A4CDDF6C269ACBA39CA58AA9592D8986401F4
Certificate serial:       0D51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft
Manifest number:          0D38
Signing time:             Fri 31 Jan 2025 18:00:16 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:15 +0000
Manifest next update:     Fri 07 Feb 2025 18:00:15 +0000
Files and hashes:         1: 4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl (hash: KQSW7Fo2nHuXDd4Bke64Ygthmo0MvfoTLdF/2iBPrNM=)
                          2: 4E98421A162311EB90D1657AC4F9AE02.roa (hash: 1jUxwWAX6KnigOFs20Vg85yLzTjyxdO59rmGUv5qs2k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3409 (0xd51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7F47/serialNumber=E30A4CDDF6C269ACBA39CA58AA9592D8986401F4
        Validity
            Not Before: Jan 31 18:00:15 2025 GMT
            Not After : Feb  7 18:00:15 2025 GMT
        Subject: CN=679d0fb0-4df3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7c:a9:50:7d:2b:d5:5f:84:15:d9:60:05:92:
                    5b:be:20:85:fb:ea:37:4f:76:3c:75:ad:ba:e7:0a:
                    70:9a:f3:2c:9d:38:76:de:dc:3d:d2:14:54:17:c5:
                    80:12:92:63:f0:aa:8b:81:bf:8f:c1:16:71:b0:dd:
                    c1:90:3c:62:1c:db:01:8b:29:42:a4:12:ef:ef:cc:
                    3f:b0:66:8f:1e:c7:71:0e:d4:9d:dd:44:fc:00:49:
                    9f:21:0c:4e:3b:b3:08:69:b0:e0:45:1f:3a:06:a6:
                    1c:82:bd:bd:87:b3:cb:a2:22:b4:f2:63:7b:a2:b5:
                    00:62:c2:6b:ad:bd:81:47:6c:1c:d3:7f:de:fb:0d:
                    a5:41:77:23:16:56:8d:37:42:dc:f3:33:1b:37:a5:
                    90:5b:05:ef:b6:14:e2:c1:84:55:8c:02:0c:fd:2e:
                    ab:57:3b:4c:74:92:9c:0b:83:e7:52:6c:ec:33:cd:
                    1f:00:3a:5d:cc:4c:e5:c6:0d:10:18:32:41:38:68:
                    96:24:80:1e:34:2a:1e:9b:47:eb:7c:95:fd:13:2a:
                    4b:52:90:4a:12:bc:0e:33:85:87:dd:4b:1c:22:2a:
                    1e:a0:a0:d2:6d:95:10:7d:4e:2c:12:96:5f:10:a2:
                    3e:5f:53:4a:ed:62:a8:c8:58:b6:b1:b1:8d:1e:79:
                    e4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B6:0A:91:A0:DE:B0:07:18:2A:72:06:78:13:09:F4:FF:21:E9:CA
            X509v3 Authority Key Identifier:
                keyid:E3:0A:4C:DD:F6:C2:69:AC:BA:39:CA:58:AA:95:92:D8:98:64:01:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:51:f3:c8:af:46:76:32:3f:84:1d:f6:98:d4:c3:54:09:c5:
         2f:f0:60:f4:53:71:fa:d8:f7:f2:75:ce:9c:f7:b9:17:9b:7e:
         b0:5f:88:f6:d5:71:67:ae:71:bc:26:47:3e:66:8e:7d:74:30:
         3d:62:0d:25:c6:f2:cf:a1:27:57:5e:80:df:2e:4c:b2:aa:b1:
         b0:2b:96:91:a9:f9:4d:b2:c2:41:98:c6:5d:ae:2b:2e:33:55:
         63:06:ff:94:80:1c:a9:52:d0:68:ef:5b:e3:92:5c:3e:c8:a3:
         2a:3c:f3:8e:a2:a5:12:2a:e1:ed:d5:d0:3a:31:cf:29:65:6b:
         4c:a1:be:1b:91:3e:30:ce:b2:52:75:6d:16:81:2d:30:d1:f7:
         ff:bd:73:d0:a0:56:1d:f5:df:53:17:91:26:54:63:05:07:a7:
         b9:68:99:30:51:62:d0:ff:3f:53:06:af:e3:41:49:8d:91:52:
         88:85:61:6c:fd:e5:16:24:19:ba:6c:d5:d2:76:a3:c1:a7:44:
         be:e5:71:81:34:2f:02:53:3f:0f:4d:4e:f2:e0:f9:eb:ab:9a:
         ee:7a:11:40:25:6e:3c:1d:28:33:35:ad:65:f3:02:b9:1e:1d:
         9b:be:b8:00:03:24:cb:c7:99:dd:cd:43:82:b4:a2:d7:e7:64:
         d5:d9:e7:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----