Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDB80/7A3F0BA8C2C211EDA222F72EC4F9AE02/FK0Vyz8rS_JJsKz0of_b9KUBMlw.mft
File:                     FK0Vyz8rS_JJsKz0of_b9KUBMlw.mft (raw, json)
Hash identifier:          5rJgIfD6EuI/zRMjs6u48s7ZC5nRogIGMzvH2bPylmc=
Subject key identifier:   17:18:25:E8:5E:14:FA:04:B0:5A:A2:51:39:01:31:20:9B:B6:FC:2D
Authority key identifier: 14:AD:15:CB:3F:2B:4B:F2:49:B0:AC:F4:A1:FF:DB:F4:A5:01:32:5C
Certificate issuer:       /CN=A91BDB80/serialNumber=14AD15CB3F2B4BF249B0ACF4A1FFDBF4A501325C
Certificate serial:       0168
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FK0Vyz8rS_JJsKz0of_b9KUBMlw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BDB80/7A3F0BA8C2C211EDA222F72EC4F9AE02/FK0Vyz8rS_JJsKz0of_b9KUBMlw.mft
Manifest number:          0162
Signing time:             Fri 31 Jan 2025 03:13:59 +0000
Manifest this update:     Fri 31 Jan 2025 03:13:58 +0000
Manifest next update:     Fri 07 Feb 2025 03:13:58 +0000
Files and hashes:         1: FK0Vyz8rS_JJsKz0of_b9KUBMlw.crl (hash: MyJXhV9LnNcOuzUSQdYqTzdVsAU9EsPTMQI/v2vJ81w=)
                          2: AD633F28C2C611ED86556036C4F9AE02.roa (hash: MS7NWq0UAnEQeKvAZaw7UobWiB8w/tScY/6YvlxdzAc=)
                          3: ACA62AC8C2C611ED86556036C4F9AE02.roa (hash: 75H6iOtyKg/g21bWinoaWQqrg0ybarH3XmE2m+ZDXWE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 360 (0x168)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB80/serialNumber=14AD15CB3F2B4BF249B0ACF4A1FFDBF4A501325C
        Validity
            Not Before: Jan 31 03:13:58 2025 GMT
            Not After : Feb  7 03:13:58 2025 GMT
        Subject: CN=679c3ff7-a1a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:04:99:c8:fa:48:dc:a8:ef:4d:d4:8d:13:84:
                    ab:0b:93:3e:4a:6f:c5:b2:28:6f:9c:27:92:98:72:
                    83:3c:9b:84:a8:ce:4a:53:fc:3e:c3:91:66:cf:73:
                    00:9a:3a:11:6e:b7:e7:28:86:b3:4d:41:d7:93:34:
                    5a:21:1f:d4:e4:10:76:54:b3:9d:39:85:04:e9:d8:
                    3f:72:e6:f7:60:ce:67:0d:92:b5:6e:11:0d:fa:74:
                    c0:ee:23:a0:da:7e:f7:e9:dd:36:7f:11:2f:98:fa:
                    6a:e4:7e:4e:cb:08:9d:9a:01:bb:8b:cd:ae:fd:d6:
                    0f:99:0e:01:5f:cf:16:9f:8b:e7:d1:63:85:68:c1:
                    10:32:bc:7c:ac:b2:43:cf:a1:71:ff:2f:04:68:06:
                    20:cc:47:33:03:57:22:2f:40:ce:31:5b:58:b2:35:
                    19:39:8e:62:22:a6:74:ca:c9:6e:95:61:6f:c2:b5:
                    1c:b9:45:f1:b4:4b:77:75:8a:f2:98:0b:40:9e:61:
                    12:ba:5c:77:8f:99:4b:3c:36:1b:d2:91:7d:72:7d:
                    78:2b:83:bc:6e:eb:48:e4:df:fc:df:2b:93:01:d0:
                    5b:a4:b2:0d:98:7c:bd:82:63:87:2c:78:67:fb:43:
                    c0:3f:fd:9c:19:b4:8e:a3:d8:d4:97:57:13:60:87:
                    ca:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:18:25:E8:5E:14:FA:04:B0:5A:A2:51:39:01:31:20:9B:B6:FC:2D
            X509v3 Authority Key Identifier:
                keyid:14:AD:15:CB:3F:2B:4B:F2:49:B0:AC:F4:A1:FF:DB:F4:A5:01:32:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BDB80/7A3F0BA8C2C211EDA222F72EC4F9AE02/FK0Vyz8rS_JJsKz0of_b9KUBMlw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FK0Vyz8rS_JJsKz0of_b9KUBMlw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDB80/7A3F0BA8C2C211EDA222F72EC4F9AE02/FK0Vyz8rS_JJsKz0of_b9KUBMlw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:63:f1:c9:e4:25:27:ed:4e:b7:8a:ea:8c:d1:9e:6e:db:32:
         56:4e:86:e4:51:77:be:f1:c9:f2:96:6a:76:fe:99:df:bf:97:
         91:27:16:74:10:92:71:74:5f:0e:f1:b0:5c:52:33:01:89:26:
         7a:c6:30:81:18:60:69:de:c6:f0:da:70:40:3c:2c:a5:57:1c:
         11:3f:54:dd:99:a6:1a:fc:4f:ed:7a:50:bf:d2:e7:84:1c:b0:
         a4:a1:27:96:98:4c:0d:31:6b:9d:5b:06:a1:f4:1d:21:2a:7a:
         d3:fe:95:d7:04:dd:79:a3:0f:0a:5d:4d:7c:d4:76:57:26:bb:
         1e:2c:84:39:15:aa:d1:a7:f9:86:77:47:e5:40:1d:9f:fa:b8:
         f7:9f:2f:59:80:97:ee:f8:10:78:e9:26:20:cd:8f:de:6a:db:
         84:1b:c0:7f:d5:be:bd:65:8f:1b:cc:1c:a9:cf:f1:c4:7e:96:
         99:44:c8:be:d4:c8:64:12:d4:63:f2:3e:67:d8:b6:d0:5b:49:
         0d:6b:f7:e2:f2:53:90:ff:36:2a:a5:b2:44:48:10:70:df:c5:
         ec:a4:6a:d9:12:14:55:5f:f7:89:00:02:1b:3f:58:a6:50:73:
         26:c9:b3:ae:25:f5:39:e9:df:a0:6d:97:35:b7:79:1c:00:53:
         a5:3e:a9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----