Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft
File:                     T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft (raw, json)
Hash identifier:          lpdDitGQUO0B318Tb5VNnCJxf+IHJVej9pBHDKr76G4=
Subject key identifier:   BF:E6:42:EF:37:46:89:67:46:75:BB:14:83:40:A8:25:F5:38:45:A5
Authority key identifier: 4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC
Certificate issuer:       /CN=A91BF4A1/serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC
Certificate serial:       0170
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft
Manifest number:          016D
Signing time:             Fri 31 Jan 2025 03:07:00 +0000
Manifest this update:     Fri 31 Jan 2025 03:07:00 +0000
Manifest next update:     Fri 07 Feb 2025 03:07:00 +0000
Files and hashes:         1: T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl (hash: FYTaISK+eEGAcQ2z1yYzKalHa8bm1TNtWSFMEC+kJGA=)
                          2: 9AB64290908211EF9877C022C4F9AE02.roa (hash: kBjJffmWH0hnmv2iS3P4OXsaabkURrp3QWa8pKlrDtM=)
                          3: B780E2A097F711EF89B09770C4F9AE02.roa (hash: ml/kq4DvdunFG6emIvOZeNFtW1s51mRlqAa26sB7GvQ=)
                          4: FD91D382FDFE11EEA991412FC4F9AE02.roa (hash: UJVqZVv2LvOtLV0E0fDBrYAFdyi9fTFpHu6AEr0aBjA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 368 (0x170)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF4A1/serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC
        Validity
            Not Before: Jan 31 03:07:00 2025 GMT
            Not After : Feb  7 03:07:00 2025 GMT
        Subject: CN=679c3e54-2c4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6e:97:79:b1:21:1c:a3:19:05:e6:94:c7:b6:
                    d8:4b:a7:a5:b6:c4:94:d8:9e:01:08:14:f8:bc:9d:
                    a7:44:ad:8d:32:2b:fe:31:f9:24:94:59:2f:25:7e:
                    7a:64:f6:46:1b:7b:b9:a0:93:7d:4a:2a:f0:31:6f:
                    bc:e3:d3:7a:4c:50:3e:c8:23:29:69:15:15:46:a6:
                    2f:39:a0:54:83:2b:a6:39:26:12:55:91:44:c4:fa:
                    9c:b7:88:5d:09:93:f7:96:13:3b:57:e1:36:15:ed:
                    94:11:4b:a6:1d:54:13:1b:a9:3a:d4:31:53:ce:46:
                    98:3f:7b:5a:7c:20:aa:09:b3:af:8f:7d:2e:5c:18:
                    0a:60:c0:d0:fe:24:10:73:6c:63:ed:fe:43:38:85:
                    19:0e:87:12:9b:c9:9f:60:dd:77:9d:b4:ad:ce:b9:
                    91:d3:e6:a6:eb:15:ca:bf:6b:93:70:fd:66:33:4a:
                    3f:68:c4:e3:ed:bc:4c:d0:47:2f:be:f0:60:1b:dd:
                    29:ab:f3:40:12:44:38:82:71:a1:6a:49:6b:f3:15:
                    2a:66:35:06:f4:97:6b:fc:05:67:8a:1d:8e:49:1c:
                    70:b5:19:47:97:e0:0f:a1:1f:ca:81:c2:12:16:61:
                    72:d1:a5:fa:1a:b8:31:84:00:90:68:80:71:91:5d:
                    31:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:E6:42:EF:37:46:89:67:46:75:BB:14:83:40:A8:25:F5:38:45:A5
            X509v3 Authority Key Identifier:
                keyid:4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:55:70:67:e4:2e:2b:37:e9:ef:a5:03:f0:2d:d2:4f:e5:af:
         08:0e:72:07:d4:46:e0:85:77:d7:55:f0:82:d9:8e:77:d8:86:
         92:83:24:ac:df:33:91:f1:34:b2:9c:85:9a:7d:96:41:73:af:
         0d:e4:0a:6b:5d:60:7e:62:06:5f:d3:43:b9:f5:d6:35:d3:70:
         dd:80:5c:b0:9b:75:a8:06:e0:0f:30:e2:ba:71:30:dd:96:01:
         3d:62:3e:38:6d:39:26:9d:fa:05:fe:cf:32:f2:5c:d8:29:70:
         45:83:50:a6:73:89:ff:f6:e3:0e:53:2a:e2:c6:7a:27:cf:9f:
         17:3a:35:1a:c1:7b:d2:d7:61:5f:c7:fd:88:7b:5d:ba:34:69:
         d3:53:8f:a9:dc:af:b4:cb:17:cb:78:0c:44:85:29:c6:a9:de:
         64:f1:fb:d7:0c:0c:1f:14:1d:e9:44:df:ef:fe:25:6f:6c:81:
         63:b7:eb:54:6d:ef:ef:85:0b:f7:5d:56:b3:15:ed:db:5b:54:
         0b:be:93:3f:90:0b:b2:4d:fc:37:12:c9:83:95:f0:e6:52:b4:
         2d:99:19:92:e2:e1:d2:19:7e:66:56:90:20:b1:b5:37:11:83:
         c0:9c:4e:73:b1:07:56:13:a3:ab:4f:f3:c8:2d:3a:a2:17:d3:
         84:2a:8c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----