Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft
File:                     jnhDSe8t33hXX9VMx47YxFyXbL8.mft (raw, json)
Hash identifier:          on7KfbVZRes+FSESr+5AuKUcuc/zgdBBLb86SjhF+0k=
Subject key identifier:   C9:93:B9:B8:B4:E4:21:E5:88:19:40:B5:3F:0C:67:7B:F4:0E:2A:C9
Authority key identifier: 8E:78:43:49:EF:2D:DF:78:57:5F:D5:4C:C7:8E:D8:C4:5C:97:6C:BF
Certificate issuer:       /CN=A91C40D6/serialNumber=8E784349EF2DDF78575FD54CC78ED8C45C976CBF
Certificate serial:       08F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnhDSe8t33hXX9VMx47YxFyXbL8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft
Manifest number:          08DE
Signing time:             Thu 30 Jan 2025 20:30:10 +0000
Manifest this update:     Thu 30 Jan 2025 20:30:09 +0000
Manifest next update:     Thu 06 Feb 2025 20:30:09 +0000
Files and hashes:         1: jnhDSe8t33hXX9VMx47YxFyXbL8.crl (hash: e2ZpBYAVsB0q181S7lJQM6kkm6qJ0KZjMC6/3u7zChg=)
                          2: A84D830AA54511EAA942C683C4F9AE02.roa (hash: LRUqK0HbwhlophByZnm497LSzITbbBMeAuaK57/ofL0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2289 (0x8f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C40D6/serialNumber=8E784349EF2DDF78575FD54CC78ED8C45C976CBF
        Validity
            Not Before: Jan 30 20:30:09 2025 GMT
            Not After : Feb  6 20:30:09 2025 GMT
        Subject: CN=679be152-a8e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:94:b3:83:ae:82:be:4b:02:12:eb:bb:1e:ed:
                    92:e3:38:57:45:89:3f:dc:13:04:08:ed:3f:f1:87:
                    7b:83:26:21:73:65:e5:e5:ba:a6:e2:ed:85:02:fb:
                    8e:36:d0:ed:33:25:18:76:d0:ea:44:f2:90:6d:71:
                    a8:1d:a2:ee:59:0c:65:88:15:da:b6:06:11:74:c8:
                    d0:7a:8e:0b:f7:7f:97:b8:4b:75:8d:cd:62:62:e8:
                    50:05:1c:ab:85:ec:1f:9d:eb:65:b1:0f:b1:29:79:
                    64:c3:27:37:36:14:42:da:38:12:ce:52:9d:32:20:
                    7d:35:b9:24:c4:c8:0e:79:55:f0:2a:c5:50:35:b9:
                    ed:e9:e6:bc:17:5d:bd:d7:07:86:a4:d8:0d:d4:3e:
                    95:ff:5b:1d:29:fa:74:ba:91:1b:a5:03:02:2a:2c:
                    ba:af:2b:86:a9:bc:ec:5a:67:1f:e4:86:ca:73:18:
                    1c:59:3a:e4:ad:f1:1b:fa:62:2d:86:ba:54:a9:9b:
                    18:6f:f2:09:aa:51:e8:f9:a4:4a:22:ed:e7:24:57:
                    3e:57:48:bb:64:18:8c:4c:db:f6:09:15:21:bd:a0:
                    a3:f1:8d:72:e1:20:49:6f:5f:b2:17:51:df:1d:39:
                    8e:eb:42:95:0e:ed:27:fc:57:8e:9c:03:a6:ec:fa:
                    a3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:93:B9:B8:B4:E4:21:E5:88:19:40:B5:3F:0C:67:7B:F4:0E:2A:C9
            X509v3 Authority Key Identifier:
                keyid:8E:78:43:49:EF:2D:DF:78:57:5F:D5:4C:C7:8E:D8:C4:5C:97:6C:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnhDSe8t33hXX9VMx47YxFyXbL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:51:6b:5f:1c:d2:c5:98:02:fb:04:4b:0d:ec:8a:c0:ae:48:
         10:7d:be:8c:67:0c:85:ac:14:b6:b4:08:47:e7:01:08:43:e8:
         c1:1e:7a:df:9a:97:b6:c2:3f:54:5f:f0:f6:91:07:81:4c:49:
         4f:4e:19:b7:3c:ef:55:a3:52:29:f2:e6:8c:fc:6d:2b:6b:a1:
         6a:5c:b9:2a:df:2c:d5:e6:fa:90:d1:7b:94:72:ed:2b:fb:ae:
         e2:c6:b5:7e:73:b8:97:5a:ce:63:21:ef:27:52:12:d7:f0:9e:
         b9:4e:04:87:44:5f:bd:57:ed:ca:15:75:1b:fe:52:aa:50:dc:
         90:cb:25:70:0e:17:12:20:6b:d4:77:79:d8:21:a8:40:7a:8e:
         f3:ef:89:8c:f8:15:bb:b6:46:44:42:83:e4:68:b0:37:bd:77:
         21:1b:f9:55:0d:f9:44:d1:71:89:a6:c1:89:cc:f5:bc:2d:53:
         f4:d4:0b:1e:20:96:05:a2:91:8c:06:d4:72:8c:9c:93:b7:38:
         e4:32:49:b4:b8:1a:68:d6:b1:92:94:b4:68:a2:8f:dc:5e:d3:
         4d:5f:ad:cd:11:1e:83:04:56:9b:ee:44:f0:eb:41:ec:ac:ea:
         d0:dc:b5:2f:b7:db:0b:c4:58:58:4c:a6:3d:bd:36:75:d6:bc:
         98:d6:03:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----