Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft
File:                     25K4P0wYeDkNakTmrtV6d1ImNRI.mft (raw, json)
Hash identifier:          i3Po8pRbHrubURq5RpGTSBVeIjrVWJsYhXXVSlysna4=
Subject key identifier:   42:22:01:08:5B:9E:94:8F:A3:5A:92:11:A4:EE:D1:7C:3F:BB:2D:9C
Authority key identifier: DB:92:B8:3F:4C:18:78:39:0D:6A:44:E6:AE:D5:7A:77:52:26:35:12
Certificate issuer:       /CN=A91BBD5B/serialNumber=DB92B83F4C1878390D6A44E6AED57A7752263512
Certificate serial:       1CD7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25K4P0wYeDkNakTmrtV6d1ImNRI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft
Manifest number:          1CCC
Signing time:             Fri 31 Jan 2025 16:10:05 +0000
Manifest this update:     Fri 31 Jan 2025 16:10:04 +0000
Manifest next update:     Fri 07 Feb 2025 16:10:04 +0000
Files and hashes:         1: 25K4P0wYeDkNakTmrtV6d1ImNRI.crl (hash: IfAN27KdiIAvsxTYrpQs5UQUD9yUjQNz6c3E++fbwlA=)
                          2: AB9480A6BB6811E69E8D1212C4F9AE02.roa (hash: XU2BtSx1XPF+OETuBQTO4A3xSlkRLbVqfxk4yTT8ml4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7383 (0x1cd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BBD5B/serialNumber=DB92B83F4C1878390D6A44E6AED57A7752263512
        Validity
            Not Before: Jan 31 16:10:04 2025 GMT
            Not After : Feb  7 16:10:04 2025 GMT
        Subject: CN=679cf5dd-0a6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c6:41:77:83:15:33:3d:3c:d8:22:a8:71:38:
                    01:04:40:1c:c0:96:85:eb:e0:00:58:da:3c:dd:63:
                    1f:f5:d3:4b:04:d9:1f:3e:0c:18:38:23:46:2b:41:
                    75:90:e9:ff:73:34:a0:17:a5:39:14:2e:6e:73:85:
                    f0:c4:31:9d:5a:f5:e1:f4:b9:2c:be:f2:70:5b:93:
                    b0:c5:aa:3f:31:3e:9f:57:bb:6e:d9:31:16:bf:b6:
                    d1:a0:e0:a2:31:d5:a6:d6:dd:c1:ba:80:97:e8:32:
                    f6:b5:a4:f6:6a:af:ab:15:d3:7e:59:81:6c:92:37:
                    66:83:de:8d:64:da:8e:bd:39:04:6d:1d:75:c9:d9:
                    c0:a5:94:cd:65:00:1f:38:7d:8b:6f:25:bc:7c:02:
                    09:85:d0:0c:f9:21:05:bd:fc:80:bf:42:23:de:eb:
                    07:d1:60:23:8a:7f:3b:e4:96:2e:cd:d1:93:d3:ce:
                    8b:e9:ff:60:6c:d5:a7:4b:2e:6f:82:26:54:1a:97:
                    e5:53:60:50:69:fc:9a:30:3a:06:56:fc:f6:89:57:
                    6b:ce:19:fb:a5:07:41:24:f1:e4:b4:1b:b0:67:1a:
                    1a:63:be:dc:a1:64:5b:fd:e6:70:dd:22:cc:2b:2c:
                    6c:97:59:91:c1:55:60:49:c9:6c:95:e2:67:c2:47:
                    b1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:22:01:08:5B:9E:94:8F:A3:5A:92:11:A4:EE:D1:7C:3F:BB:2D:9C
            X509v3 Authority Key Identifier:
                keyid:DB:92:B8:3F:4C:18:78:39:0D:6A:44:E6:AE:D5:7A:77:52:26:35:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25K4P0wYeDkNakTmrtV6d1ImNRI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:f8:fb:68:a6:43:9c:68:a7:dc:76:b7:a2:42:a8:47:19:dc:
         9b:49:e6:17:07:16:46:17:d1:3d:4a:ca:d9:6d:28:99:8b:f1:
         7d:e4:23:24:60:c6:97:df:a0:96:95:54:f8:da:c9:ca:f0:7a:
         6a:68:ae:c8:52:13:3d:fd:97:f2:f0:3b:ec:65:87:ee:82:ba:
         5d:42:7d:80:ca:67:3a:99:d8:7c:85:54:7c:a3:05:76:cc:c0:
         28:5f:fc:bf:cd:f5:53:fb:c2:5c:31:c8:78:a6:7e:6b:57:71:
         e4:f5:5b:c7:85:95:3f:56:2e:18:c2:92:57:98:c4:4a:10:00:
         37:0a:0e:61:c9:e8:d1:2e:b7:4f:5b:19:b6:4a:69:4c:11:33:
         7c:7d:0c:c6:96:9c:97:92:89:d9:84:c3:9d:9b:4c:79:e7:df:
         5e:1c:0d:eb:e7:07:0c:fc:52:15:b8:91:92:6b:66:a6:55:ce:
         9f:b9:40:e0:28:ef:0b:27:7b:0f:3a:88:a1:28:31:a1:23:51:
         db:cf:a9:45:80:54:40:c0:5a:66:fd:34:44:a1:a4:8e:6a:7e:
         05:f0:1b:4f:0c:46:f5:76:12:ee:04:36:c4:c1:39:e7:f0:51:
         f4:2a:56:55:5c:56:54:96:e2:d8:77:79:d9:e7:b8:bc:3a:74:
         cf:25:40:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----