Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft
File:                     88hJQLK99AJViHBvWcHm7D0hR_A.mft (raw, json)
Hash identifier:          G2SuqxM5w1rfaDsTn7nS/GoFiwR+9Bz5z2kU4Y6UGmI=
Subject key identifier:   F3:B7:59:BF:89:C0:19:83:F3:88:CA:A0:C7:79:3C:09:75:F0:0F:BA
Authority key identifier: F3:C8:49:40:B2:BD:F4:02:55:88:70:6F:59:C1:E6:EC:3D:21:47:F0
Certificate issuer:       /CN=A91BCC23/serialNumber=F3C84940B2BDF4025588706F59C1E6EC3D2147F0
Certificate serial:       E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft
Manifest number:          E4
Signing time:             Fri 31 Jan 2025 04:31:44 +0000
Manifest this update:     Fri 31 Jan 2025 04:31:43 +0000
Manifest next update:     Fri 07 Feb 2025 04:31:43 +0000
Files and hashes:         1: 88hJQLK99AJViHBvWcHm7D0hR_A.crl (hash: BBtASAiBfypWRJsupDghkuaPHLMXkmbKkXbCFKgE7pw=)
                          2: D36C048A81E211EEAF423C87C4F9AE02.roa (hash: AgEcJkKDpEPBaGjrS9V0jt2iST6E+qzc3K1SEhivhc4=)
                          3: FC3C8A6A81E211EE963BAB87C4F9AE02.roa (hash: 548P4XWsPS3JTWuhyip3nqsrffc51BRt/khZw2JCljI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 231 (0xe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BCC23/serialNumber=F3C84940B2BDF4025588706F59C1E6EC3D2147F0
        Validity
            Not Before: Jan 31 04:31:43 2025 GMT
            Not After : Feb  7 04:31:43 2025 GMT
        Subject: CN=679c522f-7488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b0:a2:96:c3:00:9a:de:b2:ad:a9:67:3d:9c:
                    67:80:93:a0:61:a2:a3:90:d0:be:a0:6b:08:b1:60:
                    27:6f:ee:fc:0e:31:ef:3d:56:b5:a4:9d:9f:b2:a0:
                    a5:ce:94:f8:2a:92:8c:ae:6d:e0:0d:28:78:72:d1:
                    85:01:11:80:a0:32:07:ce:39:f4:65:46:6f:64:f4:
                    fc:dc:4c:76:a5:0b:24:de:7a:dc:0d:28:94:19:b3:
                    eb:94:44:78:4e:f1:91:59:ab:76:f9:d4:79:ca:1a:
                    b5:5b:6d:eb:50:75:4a:21:5a:af:4d:2f:1c:bf:3e:
                    68:c6:ad:22:a5:9f:eb:c6:fb:dd:2b:e6:bb:ad:96:
                    c9:2e:10:fa:92:93:ee:52:68:77:de:0b:94:c1:87:
                    a6:83:7d:1c:84:e9:da:c7:29:d4:60:6b:9b:34:2a:
                    09:99:58:42:19:b5:01:fb:2e:00:dc:49:d1:61:e8:
                    63:64:c3:8f:3c:a9:96:6e:99:3d:18:19:7b:db:42:
                    a0:e8:1c:86:98:17:41:b7:5b:73:98:e3:fc:5e:7d:
                    d7:17:8a:7d:db:4c:ad:64:53:14:83:96:ad:b4:95:
                    da:c3:05:bc:60:d1:c6:02:a3:c4:48:0d:cb:c6:58:
                    37:fa:d8:6d:96:b4:f8:eb:e8:44:36:87:a9:79:99:
                    f9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:B7:59:BF:89:C0:19:83:F3:88:CA:A0:C7:79:3C:09:75:F0:0F:BA
            X509v3 Authority Key Identifier:
                keyid:F3:C8:49:40:B2:BD:F4:02:55:88:70:6F:59:C1:E6:EC:3D:21:47:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:e5:b4:1d:71:f0:bb:6e:86:fa:1e:ab:82:43:4c:9d:6b:a2:
         50:d0:14:72:50:2f:21:5c:89:e0:48:f3:8b:c0:29:8b:a6:e9:
         61:e2:3d:08:3f:02:61:7a:a0:80:da:a6:6e:50:f2:81:a9:97:
         89:60:00:ce:37:1e:2d:07:59:c5:f3:31:36:c7:57:41:66:72:
         ae:c8:41:ca:2d:d5:82:e5:d9:2e:6d:7e:df:85:88:02:b2:33:
         9c:a3:90:d4:4e:3c:13:96:a5:5c:86:25:c2:8e:ff:66:bf:fb:
         0b:8f:01:a4:d8:6f:40:c1:31:a7:14:88:d5:42:ba:c3:45:af:
         01:c0:74:78:0f:e6:a7:3f:a8:cb:e5:6d:17:4d:1a:2d:c2:23:
         f1:e1:a1:80:58:76:7c:f3:5d:f9:b5:d3:8c:f5:26:6b:d8:3e:
         70:94:c0:4f:f6:e0:27:53:e7:23:36:8f:48:e8:8f:42:2e:10:
         6e:fc:df:09:8e:65:67:90:2f:e8:22:64:1a:17:58:4d:55:95:
         0e:91:37:20:bd:4c:5b:79:f1:e8:0b:fa:29:52:5f:95:74:bb:
         0d:e1:78:7e:0e:2c:b2:04:e4:4b:99:98:18:1a:c7:15:19:40:
         b5:7a:e5:53:21:f1:1a:4c:32:1b:89:00:68:41:19:78:92:05:
         b1:cd:bb:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----