Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft
File:                     TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft (raw, json)
Hash identifier:          Y8ESze1mjsuySBLbpYWSSmTyP2+4t34R3aBIsYByzEE=
Subject key identifier:   E6:7B:2D:7D:AA:2A:B7:44:5E:F7:77:9D:F1:AF:E2:86:5B:FB:EE:5B
Authority key identifier: 4C:33:9C:AB:FC:80:A5:F4:19:DF:33:DF:B0:68:85:C1:C3:48:8B:2D
Certificate issuer:       /CN=A91C31B7/serialNumber=4C339CABFC80A5F419DF33DFB06885C1C3488B2D
Certificate serial:       83
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TDOcq_yApfQZ3zPfsGiFwcNIiy0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft
Manifest number:          81
Signing time:             Fri 31 Jan 2025 05:43:01 +0000
Manifest this update:     Fri 31 Jan 2025 05:43:00 +0000
Manifest next update:     Fri 07 Feb 2025 05:43:00 +0000
Files and hashes:         1: TDOcq_yApfQZ3zPfsGiFwcNIiy0.crl (hash: ErqyRtS3NDE9W8ZrJCfWGOd0YAOTlHsPpzdOPi9b7/c=)
                          2: 1FC3B0DE1E6F11EFB392D937C4F9AE02.roa (hash: ymGuQNubHZmih1/MlsNM4UjPPYjnvk5QIBxrno55/zE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C31B7/serialNumber=4C339CABFC80A5F419DF33DFB06885C1C3488B2D
        Validity
            Not Before: Jan 31 05:43:00 2025 GMT
            Not After : Feb  7 05:43:00 2025 GMT
        Subject: CN=679c62e5-9869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7e:44:b1:ee:d8:63:19:e3:a3:9b:b5:f3:59:
                    43:3a:f0:90:68:e8:6d:e1:ea:df:f2:b6:a2:2f:91:
                    c9:2d:60:b6:77:77:86:2d:e9:fb:c5:d2:c2:7b:0b:
                    4c:8a:22:a9:d8:67:04:65:5d:9d:3c:37:83:ba:fb:
                    a7:2b:93:56:c0:bf:4c:1d:32:2c:7c:15:0a:e7:46:
                    55:b2:47:11:86:5d:34:71:09:ea:51:91:41:78:87:
                    65:56:62:c3:15:44:10:1e:0f:ca:96:66:0b:42:77:
                    8a:2a:b8:ef:46:c1:2e:6e:fb:29:49:7d:88:6f:e2:
                    7b:d7:64:22:8d:9f:e8:72:29:e6:67:e8:e7:a5:cb:
                    2a:1c:1f:0d:f3:be:b5:98:2c:bb:b0:da:63:49:5b:
                    9d:0a:43:dd:f7:8b:63:3c:3a:d4:b7:c7:ff:09:25:
                    22:1f:68:27:84:8e:1c:2d:3f:de:70:25:8d:47:69:
                    f4:be:60:17:f9:60:5f:d6:6e:02:9b:98:4d:74:cf:
                    90:c0:fe:20:62:a8:96:94:a9:50:88:f0:d6:7f:d7:
                    d5:27:23:38:50:67:d2:0d:8a:19:52:2f:b8:cd:60:
                    51:65:6c:65:0e:8c:16:f6:58:0a:07:8f:5a:c4:d1:
                    5c:df:47:d2:a8:93:db:ce:f2:ea:c2:ef:95:54:1b:
                    c4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:7B:2D:7D:AA:2A:B7:44:5E:F7:77:9D:F1:AF:E2:86:5B:FB:EE:5B
            X509v3 Authority Key Identifier:
                keyid:4C:33:9C:AB:FC:80:A5:F4:19:DF:33:DF:B0:68:85:C1:C3:48:8B:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TDOcq_yApfQZ3zPfsGiFwcNIiy0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:45:af:7a:62:ee:0f:8d:47:c1:9f:87:b4:0e:42:2d:2e:c4:
         43:55:bf:8b:62:1b:76:52:a5:87:9b:20:86:68:a9:77:3c:18:
         b3:35:6c:da:9f:97:8a:91:93:60:aa:84:72:96:d0:d0:94:21:
         a3:07:10:9f:54:a5:9d:2c:4f:28:12:28:75:eb:3e:34:19:43:
         0d:0b:59:81:b5:dc:c9:f2:96:ff:78:9e:26:12:21:1a:1a:ed:
         d8:a1:d1:62:e5:9a:99:24:ec:1f:c9:8f:f2:72:29:ae:15:86:
         d4:f6:d3:72:be:a8:58:7b:f3:7f:ff:81:ce:3d:3e:e5:e0:0d:
         27:5c:a9:0e:e7:c1:0d:f3:bc:29:27:ad:3a:27:25:22:17:e1:
         3e:33:91:27:c3:22:9f:ae:4b:6a:87:ef:c7:d4:e8:c0:7e:12:
         81:7d:38:64:64:76:d3:e5:30:76:87:f7:1c:ef:44:45:04:f4:
         1c:b6:7d:e7:d0:32:40:b0:34:35:31:6e:ee:66:d9:fc:1e:d3:
         2d:2b:d6:09:0d:e7:bc:44:22:1d:db:a6:3c:a4:50:81:15:4b:
         3c:01:d9:55:4a:40:fe:48:1f:35:06:01:a0:3e:74:fd:b5:8d:
         7f:5a:b0:77:64:75:37:7c:a3:a5:7b:f4:4a:c9:1c:82:f9:be:
         13:22:5a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----