Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.mft
File:                     6f7YwwxxXQSs4XWunL1wDBl3BgI.mft (raw, json)
Hash identifier:          DkBtQwCnsnJSmCIp/oAcZh3pyVSnEXrPHe6AD4tIQAY=
Subject key identifier:   6E:31:9C:00:43:77:E1:FA:5A:EE:27:74:48:32:C9:6E:EB:C4:95:40
Authority key identifier: E9:FE:D8:C3:0C:71:5D:04:AC:E1:75:AE:9C:BD:70:0C:19:77:06:02
Certificate issuer:       /CN=A91C3EF6/serialNumber=E9FED8C30C715D04ACE175AE9CBD700C19770602
Certificate serial:       1495
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f7YwwxxXQSs4XWunL1wDBl3BgI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.mft
Manifest number:          148B
Signing time:             Fri 31 Jan 2025 16:52:15 +0000
Manifest this update:     Fri 31 Jan 2025 16:52:14 +0000
Manifest next update:     Fri 07 Feb 2025 16:52:14 +0000
Files and hashes:         1: 6f7YwwxxXQSs4XWunL1wDBl3BgI.crl (hash: jobGew2czgMUHu4rKDC1Y6oXNiNDKtBOsH4rQJJY5hs=)
                          2: D056896E592A11E889035A70C4F9AE02.roa (hash: tFV3sDzQ0MzS9JiFtiotNFf8xUZyC7UxkWA8BrQBeiQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5269 (0x1495)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C3EF6/serialNumber=E9FED8C30C715D04ACE175AE9CBD700C19770602
        Validity
            Not Before: Jan 31 16:52:14 2025 GMT
            Not After : Feb  7 16:52:14 2025 GMT
        Subject: CN=679cffbf-96b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8f:18:df:84:70:92:60:9b:30:c5:9a:2d:be:
                    47:83:ba:73:2f:17:f6:bb:80:54:8e:c5:fd:3b:33:
                    fe:eb:9b:54:b5:97:c6:78:9a:ca:79:c0:97:f7:73:
                    dc:36:b6:8d:1e:6b:d2:84:6b:84:e5:6a:83:fd:18:
                    78:7e:43:37:8e:2c:f7:41:ba:d1:99:da:77:f8:cc:
                    3e:07:8f:77:43:e0:b2:c7:70:ff:bf:ff:25:d1:00:
                    0f:e5:b6:f7:6b:55:c5:cd:44:02:2c:25:ea:d3:64:
                    24:e5:49:3b:1c:15:0d:f5:77:09:65:ff:d4:fd:4c:
                    96:e1:b6:90:30:68:c0:8b:9c:ca:e5:df:2a:25:51:
                    39:0d:eb:f1:c5:8b:b2:5d:8b:ad:ee:91:ef:cc:c8:
                    6a:ee:02:fe:28:bd:cb:74:3c:44:b7:4c:da:ea:e6:
                    96:18:94:90:df:f6:0e:e2:c1:ee:ef:58:55:6a:8a:
                    3f:53:fa:bd:7c:8e:5b:79:2d:4e:38:b4:89:8f:b5:
                    ab:a4:c6:59:d9:56:18:9c:6e:11:5c:8d:e1:d1:f8:
                    e7:bd:87:15:5b:55:05:30:ee:c5:6e:d0:9a:d1:4d:
                    cc:5b:67:34:17:7a:86:c0:f4:8c:5c:da:81:12:27:
                    b8:ac:41:ff:27:bd:b5:f9:c2:63:4a:dd:f7:5e:b4:
                    4b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:31:9C:00:43:77:E1:FA:5A:EE:27:74:48:32:C9:6E:EB:C4:95:40
            X509v3 Authority Key Identifier:
                keyid:E9:FE:D8:C3:0C:71:5D:04:AC:E1:75:AE:9C:BD:70:0C:19:77:06:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f7YwwxxXQSs4XWunL1wDBl3BgI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:69:98:d4:f1:fa:9a:3c:98:6b:64:bc:b6:16:4e:20:84:c9:
         44:0a:6d:77:a9:9a:a6:52:20:d9:fe:cd:bc:39:64:e1:2f:74:
         37:dd:2f:fc:e0:1f:3b:9d:19:89:1f:db:80:5e:5d:1c:06:9e:
         7e:c6:aa:e8:cf:b2:fb:ce:25:21:e1:b3:c1:35:5e:87:6e:95:
         da:74:e1:b7:93:ef:80:e4:b3:61:40:99:dc:93:7a:76:bf:ad:
         46:43:3d:d8:55:17:6e:87:39:4d:e4:c0:ec:ce:2c:e3:63:60:
         a5:fb:1c:cb:05:bf:1a:0d:d0:84:8f:c6:6c:c9:c1:1a:17:a7:
         13:3b:d5:a3:07:26:38:96:52:db:01:20:b9:93:0a:4c:b7:ae:
         69:c0:88:dc:2c:77:2c:81:51:c6:74:bb:80:48:66:87:a0:8d:
         e5:c5:05:6b:9d:a1:f4:14:75:85:39:db:02:01:bc:1a:06:39:
         68:5a:3b:d8:8b:59:19:39:d4:34:c1:7e:2e:d9:be:c9:9e:63:
         e4:3a:55:bc:82:0f:c6:27:aa:17:b9:4c:84:ab:9c:7b:ee:aa:
         35:0b:f6:9d:58:37:31:6c:e9:f8:34:03:1a:5e:93:a1:b8:f3:
         fd:b7:01:81:6c:89:bb:7c:c8:f3:55:d9:78:78:ae:65:6a:3e:
         9b:38:55:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----