Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.mft
File:                     6WkLu582wJ1MLtT2bPVdw1J1-3I.mft (raw, json)
Hash identifier:          iGNrjLZSGiMbY/QSOmqNG8rYWcL/obvuG+gY8VXWFxo=
Subject key identifier:   E5:6E:50:47:46:D6:FC:F2:63:C3:DD:8A:B3:1A:F5:4F:F2:5F:FE:F1
Authority key identifier: E9:69:0B:BB:9F:36:C0:9D:4C:2E:D4:F6:6C:F5:5D:C3:52:75:FB:72
Certificate issuer:       /CN=A91BA9CE/serialNumber=E9690BBB9F36C09D4C2ED4F66CF55DC35275FB72
Certificate serial:       0C49
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WkLu582wJ1MLtT2bPVdw1J1-3I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.mft
Manifest number:          0C27
Signing time:             Fri 31 Jan 2025 18:21:43 +0000
Manifest this update:     Fri 31 Jan 2025 18:21:42 +0000
Manifest next update:     Fri 07 Feb 2025 18:21:42 +0000
Files and hashes:         1: 6WkLu582wJ1MLtT2bPVdw1J1-3I.crl (hash: 8IIuGOnd7FEgcII7z0K4uP2jwLOi6XVhTALWG2Dyy58=)
                          2: 703918CC69EA11EE83318C50C4F9AE02.roa (hash: t0aqG9d8NreOF7Hkj2uOxQflMXILI7dvbOY4xze0Cxs=)
                          3: DC79515C011411EAAB0EF153C4F9AE02.roa (hash: 2sF0RGqydi9yAOOW0MmAfLox7UfaFANJNpO99v6yN+w=)
                          4: 843F754669EA11EE90D6585BC4F9AE02.roa (hash: dOPINm+X0a/7qz4DJTOmc8jtnH9q3I2oFG16VAh92xI=)
                          5: DBED3B7C011411EAAB0EF153C4F9AE02.roa (hash: dOK6fD6p3SaYunOllZqT7Ibue650eZ6DRi8CGiJCo+c=)
                          6: DB63CF9A011411EAAB0EF153C4F9AE02.roa (hash: Yj/+HaStFW98TgfGWike2ABsxcjxoPWlWvANthH7quo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3145 (0xc49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA9CE/serialNumber=E9690BBB9F36C09D4C2ED4F66CF55DC35275FB72
        Validity
            Not Before: Jan 31 18:21:42 2025 GMT
            Not After : Feb  7 18:21:42 2025 GMT
        Subject: CN=679d14b6-c617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c8:60:70:73:95:97:ef:12:a5:4b:1d:0f:82:
                    f4:9e:25:97:88:17:a0:fb:41:0e:f2:45:fd:e3:b2:
                    ee:b6:8f:36:71:4a:ea:3b:87:c9:91:03:f0:d8:c1:
                    dd:3d:f6:45:3e:e8:82:8c:2b:49:34:df:a6:1a:82:
                    2d:41:51:20:f4:65:d3:d7:bb:a2:47:a6:29:0f:3c:
                    95:a4:47:9a:6e:89:d5:37:90:3c:e8:9d:11:b3:5a:
                    c3:9a:5b:76:08:98:74:6b:46:15:a7:9e:bc:94:0f:
                    2a:b6:82:15:a3:c3:df:2d:a1:7d:2f:04:44:7e:90:
                    69:a9:81:68:ae:93:72:86:b6:15:5a:b6:90:76:fe:
                    47:cf:9f:ad:dd:d9:b3:c4:fb:db:db:ee:11:a1:70:
                    96:b5:44:fa:85:77:9e:eb:82:f0:8d:db:6e:bb:df:
                    34:53:93:b8:18:3d:0c:fc:ba:26:8d:1a:33:39:aa:
                    93:ac:0f:0a:4b:6f:5c:dd:0d:31:38:79:b6:88:8b:
                    80:a8:c8:b0:1d:24:7f:12:f5:be:b9:3e:10:10:24:
                    50:fb:8d:6d:c9:1f:af:24:a6:fd:f6:d8:5c:fe:06:
                    3e:06:fc:a0:9f:27:4d:5b:58:95:8a:54:be:75:fe:
                    a7:d2:b5:4d:b8:03:4f:11:a6:d3:d5:f8:be:3b:6f:
                    54:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:6E:50:47:46:D6:FC:F2:63:C3:DD:8A:B3:1A:F5:4F:F2:5F:FE:F1
            X509v3 Authority Key Identifier:
                keyid:E9:69:0B:BB:9F:36:C0:9D:4C:2E:D4:F6:6C:F5:5D:C3:52:75:FB:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WkLu582wJ1MLtT2bPVdw1J1-3I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:3a:95:28:3b:15:2b:fc:c9:e4:69:1d:0f:2a:81:e7:d7:9f:
         e1:32:60:b7:36:5a:35:3c:53:1f:79:3f:78:74:1d:73:8c:bb:
         ff:ea:f0:32:c6:2c:77:75:d7:8a:fd:27:01:58:cd:b2:9e:6c:
         e4:16:09:95:02:74:a1:85:1f:6a:83:43:4b:c5:5d:43:b9:68:
         4b:2f:81:75:58:45:09:d8:39:bb:79:8d:29:c5:24:59:56:61:
         1b:d6:9e:e3:49:12:3f:45:8f:e6:ad:3e:81:f4:3d:14:ae:18:
         95:c2:35:f5:9a:7b:f4:29:fb:67:8f:8c:c3:fe:dc:4e:c5:0a:
         b2:57:0a:87:aa:5f:52:58:60:80:b3:0d:31:0a:e5:82:b7:cf:
         0a:d2:d3:58:ca:f8:6d:de:8c:03:f8:be:21:14:87:8b:bc:44:
         76:c8:7b:69:ab:e9:9f:7c:c9:68:be:a0:8b:d9:b1:03:5e:ce:
         93:49:f3:d2:83:bb:ae:83:b3:28:f1:2a:01:08:d6:c8:52:a8:
         72:90:ba:9a:43:d9:7f:33:4a:ca:97:df:ec:23:79:dd:b2:52:
         f4:9f:87:2e:9a:43:3d:bb:00:48:ad:c6:9f:d1:49:40:0f:c4:
         bf:93:bf:3e:ae:05:84:50:c8:67:3a:08:21:e7:38:ea:73:f5:
         70:e9:0a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----