Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft
File:                     QOlsrrGdQeDa1lL0Na0I566Anvk.mft (raw, json)
Hash identifier:          Kl3yPGbkQq/LgLJTFicKM3NuLBxz57PeAI9uPS6aogg=
Subject key identifier:   1E:23:0D:E2:E3:D9:44:79:4D:B4:B6:9A:A7:01:86:B6:F9:4D:F8:88
Authority key identifier: 40:E9:6C:AE:B1:9D:41:E0:DA:D6:52:F4:35:AD:08:E7:AE:80:9E:F9
Certificate issuer:       /CN=A91BD000/serialNumber=40E96CAEB19D41E0DAD652F435AD08E7AE809EF9
Certificate serial:       0BE7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft
Manifest number:          0BDE
Signing time:             Fri 31 Jan 2025 18:39:16 +0000
Manifest this update:     Fri 31 Jan 2025 18:39:15 +0000
Manifest next update:     Fri 07 Feb 2025 18:39:15 +0000
Files and hashes:         1: QOlsrrGdQeDa1lL0Na0I566Anvk.crl (hash: NpfSu0KWV3g2THi6ZM6WY0h42Cil6HNdBkaCjeeug5s=)
                          2: A55C1282ACA311EFBA427354C4F9AE02.roa (hash: OPUUUSp5hb82PWfJ3qDCUj2m9VDIT8DwMp28XglHALE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3047 (0xbe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD000/serialNumber=40E96CAEB19D41E0DAD652F435AD08E7AE809EF9
        Validity
            Not Before: Jan 31 18:39:15 2025 GMT
            Not After : Feb  7 18:39:15 2025 GMT
        Subject: CN=679d18d3-b731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bc:f8:2c:b5:7c:13:31:f1:b0:ce:cb:70:5a:
                    04:ae:b5:2e:7e:f2:2f:ed:d0:4e:2b:84:28:80:cc:
                    a5:f3:38:29:22:70:a2:de:ea:6d:a5:7a:3c:25:e1:
                    26:22:b5:48:93:2d:1a:ef:f6:0f:e8:76:f6:92:17:
                    63:a3:37:0e:e2:eb:40:ed:cc:00:75:92:68:c2:02:
                    f5:80:79:0b:3b:eb:c1:b0:ef:1d:3a:18:95:49:23:
                    02:35:68:27:e6:77:51:fd:49:b4:b1:cd:c5:66:88:
                    fc:6b:ca:43:57:7e:fe:64:9b:cd:9e:51:e0:ba:c6:
                    3c:6d:e4:27:e5:34:11:08:7a:ad:cd:ae:07:9f:93:
                    3a:c5:56:37:70:f9:0d:93:30:54:76:66:a5:ab:51:
                    90:8f:19:77:68:55:82:72:8b:89:d9:19:7c:6e:2c:
                    f7:98:f5:09:15:5e:a6:2d:a8:ef:c6:12:64:8a:a8:
                    7f:15:2a:62:10:1d:38:05:12:9d:f9:f9:47:8d:19:
                    f5:88:aa:64:28:2d:67:ba:0c:1d:75:d2:c7:0e:15:
                    67:5c:da:98:45:52:43:75:dc:0f:43:a9:2c:de:13:
                    f6:6e:20:ba:c4:b3:e4:a8:48:75:47:88:4b:de:bb:
                    92:83:e9:6a:ce:8f:13:16:cf:14:3c:b5:12:bb:b0:
                    2a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:23:0D:E2:E3:D9:44:79:4D:B4:B6:9A:A7:01:86:B6:F9:4D:F8:88
            X509v3 Authority Key Identifier:
                keyid:40:E9:6C:AE:B1:9D:41:E0:DA:D6:52:F4:35:AD:08:E7:AE:80:9E:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:56:c3:18:63:1f:94:ad:39:a5:f6:38:b4:63:32:a7:5a:f7:
         b8:58:58:2c:3f:f4:e1:81:4c:a7:bc:00:58:82:c2:e1:e4:58:
         95:5e:8e:18:2b:08:d0:e8:19:cf:0c:46:bd:e1:b6:9a:c6:36:
         26:e5:bc:37:f6:1d:55:02:8d:4f:d9:79:55:57:8d:2b:fd:fe:
         1c:80:cf:39:e0:19:66:f1:05:f0:dc:f8:7f:7c:54:5d:60:84:
         45:3a:cd:f9:6b:8a:e7:b7:6c:98:32:56:f6:14:53:ae:55:55:
         d7:78:7c:97:72:71:c4:a2:5e:bb:c9:2f:b5:7f:6f:93:21:87:
         dc:f3:5a:e5:47:1b:98:94:77:bd:78:34:a8:16:4f:37:cb:91:
         e8:30:73:49:dd:d1:cd:45:e2:26:fc:55:21:00:44:70:53:77:
         5a:ba:f4:36:d2:21:93:6d:fe:fa:1f:df:47:3c:08:77:61:ba:
         76:bb:0e:06:74:1a:77:b2:d2:6e:d1:97:eb:77:07:60:e3:6a:
         9a:ab:b8:fc:58:ca:24:80:91:25:4b:51:d8:bd:74:4c:a6:2d:
         ab:6c:41:c1:9d:f8:89:1a:56:14:ec:df:d2:50:4f:cc:27:3a:
         16:5c:90:0c:e9:4e:c8:4a:e4:d9:de:71:fd:21:2f:c6:89:c1:
         77:29:83:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----