Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B915D/7109EFC47DC911ECBBFB6F24C4F9AE02/o5jf1NOXXquW_TgDOWgkbkdeKLM.mft
File:                     o5jf1NOXXquW_TgDOWgkbkdeKLM.mft (raw, json)
Hash identifier:          D8ApWfLsjJvOn2YC/sFAJPy4G+W3B8yAAUd7X3Q74mw=
Subject key identifier:   46:BB:C5:77:A6:E0:38:F8:22:E3:33:9D:36:EC:3D:8A:BA:82:6F:F8
Authority key identifier: A3:98:DF:D4:D3:97:5E:AB:96:FD:38:03:39:68:24:6E:47:5E:28:B3
Certificate issuer:       /CN=A91B915D/serialNumber=A398DFD4D3975EAB96FD38033968246E475E28B3
Certificate serial:       03AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5jf1NOXXquW_TgDOWgkbkdeKLM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B915D/7109EFC47DC911ECBBFB6F24C4F9AE02/o5jf1NOXXquW_TgDOWgkbkdeKLM.mft
Manifest number:          03AA
Signing time:             Fri 31 Jan 2025 00:45:57 +0000
Manifest this update:     Fri 31 Jan 2025 00:45:56 +0000
Manifest next update:     Fri 07 Feb 2025 00:45:56 +0000
Files and hashes:         1: o5jf1NOXXquW_TgDOWgkbkdeKLM.crl (hash: prq2lkx3laYmT26n/9IgwYdT3T4hGMFWxRKOZ26ue9c=)
                          2: 8CA3BAEC7DCB11EC99806E25C4F9AE02.roa (hash: oPYfSqxkN8npABudY2l+Ic8/CeJazaNkfy3rG5MWBXQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 942 (0x3ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B915D/serialNumber=A398DFD4D3975EAB96FD38033968246E475E28B3
        Validity
            Not Before: Jan 31 00:45:56 2025 GMT
            Not After : Feb  7 00:45:56 2025 GMT
        Subject: CN=679c1d45-7068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a8:ab:e2:00:0d:32:5e:bf:c9:e4:36:71:41:
                    2c:0d:d1:ee:f9:3a:1b:04:05:f7:1f:13:4a:4b:a3:
                    db:66:83:36:5f:15:23:a5:ed:4d:9d:c2:40:58:5e:
                    6e:66:cb:8e:17:7c:c8:38:a5:40:d3:d2:d6:f9:06:
                    2b:e3:fb:82:9b:5c:ce:b3:c6:ca:23:7f:40:fa:31:
                    74:28:f0:c6:60:b2:e9:f8:ae:03:f2:ad:9d:ca:bb:
                    10:e3:86:a3:7f:79:ec:2f:91:4b:95:7f:2f:6e:52:
                    d7:8f:58:45:88:b4:57:8d:f9:28:93:e7:33:57:ec:
                    0d:03:7f:1f:8c:04:9c:ff:54:c5:6b:56:b9:3d:47:
                    17:70:68:61:55:e5:29:6b:82:31:b1:fd:7c:ea:69:
                    d3:f5:04:00:00:c1:5c:21:f1:da:34:ec:29:ef:80:
                    44:da:9d:37:c5:ee:7b:90:c8:40:ea:14:09:b5:0f:
                    48:b8:96:d6:46:56:11:98:a5:50:ec:93:f4:3a:36:
                    61:5c:4b:dd:c1:c7:88:1f:40:62:85:aa:38:dc:3a:
                    7c:07:f5:5e:fe:e7:0f:b1:af:ab:5f:0e:ff:65:05:
                    e6:b4:dd:89:cb:8c:ef:db:32:77:6d:4b:a0:86:79:
                    1f:d2:97:25:bd:b6:d9:50:e4:e4:af:4c:66:4e:9f:
                    d4:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:BB:C5:77:A6:E0:38:F8:22:E3:33:9D:36:EC:3D:8A:BA:82:6F:F8
            X509v3 Authority Key Identifier:
                keyid:A3:98:DF:D4:D3:97:5E:AB:96:FD:38:03:39:68:24:6E:47:5E:28:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B915D/7109EFC47DC911ECBBFB6F24C4F9AE02/o5jf1NOXXquW_TgDOWgkbkdeKLM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5jf1NOXXquW_TgDOWgkbkdeKLM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B915D/7109EFC47DC911ECBBFB6F24C4F9AE02/o5jf1NOXXquW_TgDOWgkbkdeKLM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:3b:7b:4d:bd:08:78:5a:e1:54:a6:73:c7:29:a9:c5:c8:a9:
         5f:19:d5:b1:b5:c7:97:6f:77:d6:7e:77:f8:f6:e9:75:98:80:
         d0:65:51:15:73:d4:3e:92:7d:df:e5:f0:c4:27:22:97:a5:45:
         ae:a5:ee:d5:0b:30:48:fb:c2:ee:b3:d2:c1:f9:d2:2b:a0:ba:
         35:09:ac:9d:af:fa:4c:c3:cb:b0:eb:b7:3e:15:7e:01:d6:be:
         78:5c:f2:b0:c7:3e:4a:3e:03:df:f3:27:4c:1e:56:66:8b:3d:
         22:1c:5f:93:3d:81:35:00:80:56:f3:cc:6e:ba:ff:fc:37:ef:
         f9:db:0e:2f:28:15:de:07:99:3a:5c:2a:bc:ce:01:99:38:73:
         36:e7:5b:b5:08:92:03:97:e2:ea:49:cd:6c:c9:d0:47:d1:ef:
         69:e7:a6:6b:d5:45:21:44:93:76:59:27:4c:27:9e:38:f8:99:
         64:e5:cb:d5:f8:ec:a0:3f:53:60:7e:68:cc:a6:fa:08:11:83:
         3c:9d:0e:8b:bc:62:40:5c:00:94:81:a7:26:3e:c9:52:48:ff:
         c4:c6:77:af:27:66:b5:8f:a0:40:64:b9:81:9b:3f:17:59:56:
         6d:0d:85:be:4a:38:d6:55:5a:de:f9:ee:e3:9c:78:33:c2:2f:
         6d:82:2a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----