Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft
File:                     c_S729eiHW57nkv1sMgXIszCHWc.mft (raw, json)
Hash identifier:          ojqBucijr4Ubq2gr9j0pFt20jGkMvz0CYeIRqQEuJPc=
Subject key identifier:   85:12:1B:3C:FD:28:DC:B7:78:7E:C6:02:7D:EB:66:8A:09:52:8C:EE
Authority key identifier: 73:F4:BB:DB:D7:A2:1D:6E:7B:9E:4B:F5:B0:C8:17:22:CC:C2:1D:67
Certificate issuer:       /CN=A91BDDB8/serialNumber=73F4BBDBD7A21D6E7B9E4BF5B0C81722CCC21D67
Certificate serial:       118E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_S729eiHW57nkv1sMgXIszCHWc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft
Manifest number:          1181
Signing time:             Fri 31 Jan 2025 17:13:14 +0000
Manifest this update:     Fri 31 Jan 2025 17:13:14 +0000
Manifest next update:     Fri 07 Feb 2025 17:13:14 +0000
Files and hashes:         1: c_S729eiHW57nkv1sMgXIszCHWc.crl (hash: O2tnJw/dHlOCSphEisosri4As1Diyi9DuJH7pzOMs7E=)
                          2: 732BAF02BF5D11EB8199C943C4F9AE02.roa (hash: yzhbO4fNgFXSarfTZtISXiyDIysa917WS3nmXTjeXuI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4494 (0x118e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDDB8/serialNumber=73F4BBDBD7A21D6E7B9E4BF5B0C81722CCC21D67
        Validity
            Not Before: Jan 31 17:13:14 2025 GMT
            Not After : Feb  7 17:13:14 2025 GMT
        Subject: CN=679d04aa-ea48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:35:c2:e7:5c:8e:6e:5e:12:ce:ec:03:d5:aa:
                    82:00:b6:f0:3f:ec:44:b3:da:97:83:2e:ce:62:fd:
                    33:b5:8a:a5:4d:fd:48:9f:3a:9c:66:83:8b:41:aa:
                    bf:91:93:e0:d8:8e:9c:e3:3d:48:8f:a4:3a:18:df:
                    ae:8f:b3:ec:b1:6c:94:96:e2:89:47:58:68:d5:96:
                    7d:5a:46:48:da:58:69:8b:f0:51:31:76:ff:91:2e:
                    8d:64:2c:7b:c1:61:a1:e7:46:47:2a:b5:98:62:ec:
                    7d:66:41:88:fd:c3:69:77:12:7f:b1:d8:b5:17:ba:
                    fc:47:e4:08:9c:e4:fe:bf:50:f3:0e:d5:7e:26:ff:
                    15:8f:35:84:72:6c:88:01:1c:a2:76:01:9f:ba:4d:
                    1e:e3:8b:3e:e9:45:cb:2a:06:6d:58:d3:7a:47:82:
                    a5:5d:a5:bb:48:90:4d:83:86:37:e1:13:b1:c6:c9:
                    77:db:57:d0:13:92:80:35:94:4a:5e:f3:dc:8e:c6:
                    d1:9c:11:0b:6b:bd:3f:2b:b7:a9:92:04:1f:c1:64:
                    d9:90:e8:c3:be:a0:5d:37:0a:ff:26:0c:a4:35:a3:
                    e3:3b:7c:b0:53:bc:36:98:a3:87:88:f5:a0:7d:fc:
                    72:8a:2b:1f:67:42:ed:31:56:44:9d:c3:46:6b:0d:
                    c3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:12:1B:3C:FD:28:DC:B7:78:7E:C6:02:7D:EB:66:8A:09:52:8C:EE
            X509v3 Authority Key Identifier:
                keyid:73:F4:BB:DB:D7:A2:1D:6E:7B:9E:4B:F5:B0:C8:17:22:CC:C2:1D:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_S729eiHW57nkv1sMgXIszCHWc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:0c:12:90:96:ff:7d:61:d4:df:21:db:77:36:17:bd:e2:89:
         fb:5c:54:d3:5b:65:b1:39:72:14:ec:42:b6:ce:ad:75:16:83:
         82:82:75:a7:8b:3c:0c:80:ae:2a:13:cc:26:32:47:6c:30:6a:
         e4:3c:41:43:c1:a9:67:2b:98:53:45:8b:18:c6:71:e8:88:95:
         f8:f6:13:3b:09:3a:ab:7d:62:81:46:16:6f:28:67:02:fa:2d:
         51:c5:78:00:29:da:fc:2e:56:92:4b:34:6a:f6:06:09:22:28:
         bf:ea:b6:5d:cf:3d:02:a7:86:f8:62:1c:89:8e:94:22:14:10:
         41:6b:fe:a2:37:22:45:06:9a:b3:09:fb:51:af:16:de:e6:ce:
         0a:bb:b7:82:ee:92:a5:bf:68:47:11:5d:77:a2:54:1d:a8:43:
         2f:02:b8:28:8c:8b:49:b0:49:6c:59:c2:2d:dc:24:fb:24:7e:
         d8:15:8c:f2:a9:b6:6c:24:09:92:7e:67:77:0d:d9:c0:34:bd:
         7d:15:f7:63:0e:2f:8d:d6:0e:5d:81:f2:95:44:bb:67:dd:ec:
         b0:36:b4:22:b7:52:c2:24:2b:93:fa:8b:0a:f5:95:85:41:fe:
         1f:51:32:60:31:18:f2:78:9f:55:d4:c2:e7:f8:4f:8d:15:11:
         4f:5f:9a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----