Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8E70/35C76C7E955A11EFBD9E024AC4F9AE02/HmVt3sfpjSShhv_bb1l3EKr_Ko0.mft
File:                     HmVt3sfpjSShhv_bb1l3EKr_Ko0.mft (raw, json)
Hash identifier:          2hkCVDl2EVKfo6PmDSZWGWORUK6Ufq3IL12yZoKEf9c=
Subject key identifier:   6E:CB:F3:19:23:B4:D3:DC:4C:05:C7:4B:4E:1C:64:1F:BC:89:47:F6
Authority key identifier: 1E:65:6D:DE:C7:E9:8D:24:A1:86:FF:DB:6F:59:77:10:AA:FF:2A:8D
Certificate issuer:       /CN=A91B8E70/serialNumber=1E656DDEC7E98D24A186FFDB6F597710AAFF2A8D
Certificate serial:       33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmVt3sfpjSShhv_bb1l3EKr_Ko0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8E70/35C76C7E955A11EFBD9E024AC4F9AE02/HmVt3sfpjSShhv_bb1l3EKr_Ko0.mft
Manifest number:          32
Signing time:             Fri 31 Jan 2025 06:42:15 +0000
Manifest this update:     Fri 31 Jan 2025 06:42:15 +0000
Manifest next update:     Fri 07 Feb 2025 06:42:14 +0000
Files and hashes:         1: HmVt3sfpjSShhv_bb1l3EKr_Ko0.crl (hash: /JsLhT0gCk/ffxTJWx1iSqt8Ee+hpkyg9W9g1D61CmA=)
                          2: 4E7F3B4C955B11EFACD8F26CC4F9AE02.roa (hash: bUTe8Abd/nlivZy+DnMi/ZY+jKUvF8aFrBtrqXIxRb8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8E70/serialNumber=1E656DDEC7E98D24A186FFDB6F597710AAFF2A8D
        Validity
            Not Before: Jan 31 06:42:15 2025 GMT
            Not After : Feb  7 06:42:14 2025 GMT
        Subject: CN=679c70c7-f863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:76:f9:a9:8e:eb:c8:cf:42:9d:94:f5:e9:bc:
                    16:3c:bf:c6:75:ad:e9:45:38:f8:94:ef:b7:27:f3:
                    f3:b3:bc:01:6a:4b:3c:44:7b:56:c7:cd:3d:d5:ad:
                    9e:b5:13:f3:52:4f:71:ad:91:67:00:6b:f9:bd:ed:
                    da:db:9b:a0:6d:c0:e8:f0:4f:52:91:8f:82:7f:2c:
                    60:26:a1:ab:ad:a5:81:d0:ed:3e:fb:c6:b4:8e:52:
                    80:aa:7f:f0:b0:b1:d1:7a:4a:4a:27:5e:f4:c1:fd:
                    ec:3a:a7:6f:73:da:77:ed:0e:5f:85:f2:b2:59:33:
                    a4:35:71:b2:45:b5:9a:08:5b:cf:fa:d8:f3:f1:78:
                    d6:3d:d6:ce:b5:91:b2:3a:3a:c0:20:c2:89:17:9b:
                    5e:f3:4d:a6:72:c4:9b:ac:0a:97:4b:6b:d6:17:07:
                    b0:57:d8:d9:cb:1a:55:8d:a3:17:c5:fa:f6:b4:ff:
                    ae:f0:02:5b:6b:35:55:0f:cd:c6:47:79:93:b2:e6:
                    a8:36:28:a2:c6:5f:4b:1e:a8:fd:2a:58:31:93:05:
                    d0:f6:ed:5b:2d:84:87:58:95:c0:41:77:ee:93:04:
                    c7:62:06:1b:b9:20:9c:9a:65:ac:f2:38:33:e5:c7:
                    61:49:d0:b7:84:65:5f:4e:b2:12:56:a3:e1:92:4e:
                    3b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:CB:F3:19:23:B4:D3:DC:4C:05:C7:4B:4E:1C:64:1F:BC:89:47:F6
            X509v3 Authority Key Identifier:
                keyid:1E:65:6D:DE:C7:E9:8D:24:A1:86:FF:DB:6F:59:77:10:AA:FF:2A:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8E70/35C76C7E955A11EFBD9E024AC4F9AE02/HmVt3sfpjSShhv_bb1l3EKr_Ko0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmVt3sfpjSShhv_bb1l3EKr_Ko0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8E70/35C76C7E955A11EFBD9E024AC4F9AE02/HmVt3sfpjSShhv_bb1l3EKr_Ko0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:e6:59:fe:4a:34:78:29:a7:da:84:d7:3f:e8:04:18:db:07:
         87:24:c1:df:a8:ea:58:aa:a7:42:fd:d9:fe:24:d6:65:f4:5d:
         fb:a1:c8:c3:88:19:f8:1d:e8:25:50:bf:19:b2:73:a2:ba:bc:
         66:0a:f7:65:cc:5c:8b:e9:b4:54:fb:e4:5f:c8:9e:78:27:27:
         04:b4:17:dd:8c:17:ee:82:c0:26:26:58:c1:a7:da:6d:b9:d8:
         53:fb:38:99:08:62:0f:44:32:7a:43:9c:d0:43:1c:88:ca:15:
         12:ea:47:0f:43:71:19:57:70:d4:1a:58:6a:c1:a8:83:52:d9:
         7a:bf:4e:94:41:62:ba:08:e8:3b:a0:59:5c:d5:7d:26:eb:d4:
         38:0e:30:95:cb:6e:8d:d8:9d:59:83:df:2a:6a:66:0a:c2:b6:
         34:48:da:51:10:65:39:b7:16:97:93:38:3c:82:0c:ef:e2:d3:
         95:55:f2:87:01:f5:84:eb:97:e3:26:bb:12:86:0a:e6:20:6b:
         1a:27:75:a4:c3:24:c3:81:b3:5c:39:90:10:0e:9c:47:2f:3f:
         bf:c9:d9:ec:58:cb:7e:25:19:12:71:f8:77:ab:12:c5:7d:58:
         3b:16:02:46:26:aa:3d:10:c5:52:a0:3e:15:b4:11:c2:a7:7e:
         f8:b7:d2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----