Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft
File:                     1fbdY8A4EGCv-8nSDtMPB_veiOo.mft (raw, json)
Hash identifier:          I25z51UY+BTXsd09qgUraBux0X4RPjqBaF9vm9OaRwA=
Subject key identifier:   38:F4:C2:88:FC:61:29:F6:EB:CA:38:D8:BF:6C:B8:C4:13:BF:0F:B0
Authority key identifier: D5:F6:DD:63:C0:38:10:60:AF:FB:C9:D2:0E:D3:0F:07:FB:DE:88:EA
Certificate issuer:       /CN=A91BBF7F/serialNumber=D5F6DD63C0381060AFFBC9D20ED30F07FBDE88EA
Certificate serial:       0EA8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft
Manifest number:          0E92
Signing time:             Fri 31 Jan 2025 17:40:36 +0000
Manifest this update:     Fri 31 Jan 2025 17:40:36 +0000
Manifest next update:     Fri 07 Feb 2025 17:40:36 +0000
Files and hashes:         1: 1fbdY8A4EGCv-8nSDtMPB_veiOo.crl (hash: OzIuRqQxYg2H+sSLR0zeijy4JZvmRhHqZ2TxWYGk+ak=)
                          2: 656CB24EC9F611ED9853C583C4F9AE02.roa (hash: dWOEO8pwtx9hi9faa2fgwj2lHG7eHOgZT5KAz1c3Ctk=)
                          3: 64554290C9F611ED9853C583C4F9AE02.roa (hash: TcpjWImJ/6OMJ2cd8RP+FJqzHMIXrQ0AmNStUKst97g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3752 (0xea8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BBF7F/serialNumber=D5F6DD63C0381060AFFBC9D20ED30F07FBDE88EA
        Validity
            Not Before: Jan 31 17:40:36 2025 GMT
            Not After : Feb  7 17:40:36 2025 GMT
        Subject: CN=679d0b14-e129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d7:26:fe:f6:dd:34:6e:f7:2f:d8:a5:d8:f2:
                    00:29:ed:5d:fc:4f:63:6f:5d:d8:96:18:e9:45:15:
                    78:c4:17:b0:6b:9f:69:98:a3:01:fe:1e:0d:ee:30:
                    a0:57:0a:08:52:09:42:36:54:31:9b:ef:1d:5d:1b:
                    b9:81:08:32:d7:f2:d6:02:a5:0d:65:55:3e:9f:ce:
                    a5:3e:0a:41:73:b7:f3:b8:73:11:78:54:b8:09:92:
                    60:a6:7e:6d:e0:01:be:40:da:37:ad:ab:92:83:19:
                    a4:97:c2:3b:c1:c8:09:c6:59:65:92:4b:33:e4:56:
                    be:aa:ea:1b:3e:f9:5b:6d:50:21:46:25:c6:c1:50:
                    99:1c:7d:5f:28:45:c2:3d:ff:3f:a8:6c:57:a6:5a:
                    2b:1f:e1:e7:04:78:0c:ad:e6:e7:5e:51:42:f3:3f:
                    31:da:18:b9:65:e7:73:5f:29:af:b6:17:de:85:3a:
                    e9:70:26:8e:03:da:f7:70:1b:06:0d:cf:18:44:63:
                    21:59:db:f0:e3:b1:7b:c9:71:2d:07:0b:05:64:98:
                    51:d1:7d:63:22:fc:6c:78:48:e2:4c:cf:a4:6e:7b:
                    ac:dc:9d:63:cb:dd:aa:f4:68:70:af:4b:91:96:3e:
                    75:df:7e:db:74:31:74:30:a3:e6:29:af:11:ae:97:
                    0b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F4:C2:88:FC:61:29:F6:EB:CA:38:D8:BF:6C:B8:C4:13:BF:0F:B0
            X509v3 Authority Key Identifier:
                keyid:D5:F6:DD:63:C0:38:10:60:AF:FB:C9:D2:0E:D3:0F:07:FB:DE:88:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:0d:3c:b3:29:d6:3a:b7:cc:bf:d0:bd:0e:45:cf:b6:4c:a7:
         26:45:79:d0:8d:f9:2e:92:91:78:ee:af:0a:1d:65:08:8e:c9:
         4d:0a:a6:34:11:25:4c:1f:03:ca:05:7c:1d:45:b2:52:76:68:
         da:9b:11:03:ed:05:8b:e0:b3:31:77:2c:9b:b7:08:f0:c2:35:
         55:f4:41:dc:73:97:07:61:70:c6:8e:39:6b:92:54:a2:e6:9b:
         43:87:3b:25:bb:4a:b0:8d:34:fb:85:28:58:9b:87:65:72:55:
         f2:a2:62:61:12:60:e6:ae:1f:8d:68:c3:70:79:0b:5a:72:17:
         69:f3:cf:66:96:39:88:43:6d:94:07:79:ad:75:81:ee:d5:21:
         cc:2e:cc:7e:9a:3a:a7:df:72:85:13:3a:b2:17:d4:0f:ea:73:
         9c:03:02:03:f7:18:69:cd:34:3e:5e:0e:9e:49:77:12:85:44:
         0b:eb:42:20:22:c8:ae:7f:3c:5f:2b:84:d6:3d:5c:eb:0a:2a:
         9c:03:79:de:cc:be:52:5b:65:aa:8d:be:a1:36:f1:1e:c8:b7:
         9d:77:fe:76:9a:0f:3c:05:b7:34:5b:ac:8b:f6:f1:d3:2b:c0:
         5b:d5:74:04:d1:fe:ce:32:1a:8d:ca:8b:ae:5e:32:41:a4:eb:
         93:04:7d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----