Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.mft
File:                     Oq-A6pfpm5UlszvBM1uwlcLSeKc.mft (raw, json)
Hash identifier:          kwVOIH3V0LjqCYkpKM7hvObvFF/KoqU0DWBfr+pS+qQ=
Subject key identifier:   12:25:FD:4B:C9:57:70:24:8D:D3:18:26:30:37:FC:2E:C9:A4:1E:3A
Authority key identifier: 3A:AF:80:EA:97:E9:9B:95:25:B3:3B:C1:33:5B:B0:95:C2:D2:78:A7
Certificate issuer:       /CN=A91C4F06/serialNumber=3AAF80EA97E99B9525B33BC1335BB095C2D278A7
Certificate serial:       3523
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.mft
Manifest number:          34C4
Signing time:             Fri 31 Jan 2025 14:50:38 +0000
Manifest this update:     Fri 31 Jan 2025 14:50:37 +0000
Manifest next update:     Fri 07 Feb 2025 14:50:37 +0000
Files and hashes:         1: Oq-A6pfpm5UlszvBM1uwlcLSeKc.crl (hash: wZm5BMjXyQBWgVE/tKvS2CbAmIY9Pu4N0JuOaBJKyiM=)
                          2: 1600DBF659C311E9A04B846FC4F9AE02.roa (hash: K9GG+06i99foR/2RXGf0/I8Kvx2roZu5heq1VZdQ+OI=)
                          3: 5A318E06F6A111EBB6318B7EC4F9AE02.roa (hash: VKqO6rf4s4pSFyfrGnTR87o9xy4m/ObtM6kQrJ3USOc=)
                          4: 6F1612BE562511EB9470B150C4F9AE02.roa (hash: JsgxM7O87UBNAKRhO7z2ipB7o5ZRGqkbp9Qr0swNUZI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13603 (0x3523)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4F06/serialNumber=3AAF80EA97E99B9525B33BC1335BB095C2D278A7
        Validity
            Not Before: Jan 31 14:50:37 2025 GMT
            Not After : Feb  7 14:50:37 2025 GMT
        Subject: CN=679ce33d-d980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:33:d3:30:b8:d5:29:81:fa:35:1e:9e:d5:b4:
                    3b:85:9c:ca:7e:a8:14:72:12:e0:ad:56:97:6b:3a:
                    e4:46:3d:e2:e2:1c:d7:b2:1b:4d:8a:10:75:11:b8:
                    c1:07:11:ec:24:40:d0:9e:95:5c:6e:ad:1d:0e:b7:
                    88:8b:9b:cb:bd:44:54:07:ed:be:71:07:24:70:34:
                    06:10:bd:19:f0:a4:44:2b:ef:7b:d4:bf:2c:9d:2e:
                    1f:16:5a:3e:c0:c1:a7:f1:d8:1b:c9:e9:b4:6e:0b:
                    19:5d:88:f7:81:bf:15:24:b9:0c:56:1f:c5:df:88:
                    b2:15:39:b0:ef:49:32:ee:aa:36:d3:2e:cd:a8:da:
                    43:91:d6:85:0b:d0:e7:14:26:a4:6c:37:e2:13:3b:
                    76:9f:46:51:9e:77:c1:85:6e:49:65:09:eb:b7:d8:
                    0f:54:13:b4:77:cd:6a:80:00:9c:3f:66:26:a8:f5:
                    a8:90:86:d3:5b:18:ef:ad:ac:aa:82:66:b0:c9:4a:
                    a8:e3:1b:83:36:36:be:cc:59:ef:2a:47:8d:e8:07:
                    aa:30:af:b0:e1:dc:b2:45:72:4d:10:f0:8d:db:d5:
                    37:4d:3b:c1:ad:84:e7:80:9e:f5:01:0a:1f:60:2f:
                    a5:77:ed:f9:33:98:2a:ae:5a:f2:02:b1:3a:5d:fb:
                    ee:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:25:FD:4B:C9:57:70:24:8D:D3:18:26:30:37:FC:2E:C9:A4:1E:3A
            X509v3 Authority Key Identifier:
                keyid:3A:AF:80:EA:97:E9:9B:95:25:B3:3B:C1:33:5B:B0:95:C2:D2:78:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:33:11:b3:51:55:0f:19:de:5e:9a:e4:43:71:dd:65:e7:cb:
         12:54:1c:0c:00:1e:b6:0b:b7:42:46:6a:e0:b0:52:f4:b7:87:
         13:87:f1:cd:fe:e2:d0:d3:ca:a3:97:27:e3:e3:85:44:42:12:
         ac:41:5c:12:23:1a:c8:07:f1:f3:7a:15:70:63:8c:b2:70:27:
         12:eb:a4:35:73:33:5e:6d:92:19:10:6f:9a:3b:ed:47:5e:f1:
         3a:9a:c7:4e:b0:b6:27:5f:70:95:8c:c3:a5:6c:b6:3c:a1:89:
         95:6d:bf:c1:5d:bc:94:d6:58:6d:f1:52:cf:d3:5e:82:4d:15:
         98:45:0c:36:1d:22:d9:23:91:d7:c9:32:ba:96:16:c1:54:4d:
         e9:d2:92:8d:be:3f:3c:ab:84:28:15:31:42:de:b4:9e:18:50:
         0f:99:6d:49:1a:f1:c7:a9:11:a1:44:0d:19:a1:b0:0d:8a:46:
         d9:da:1a:94:c7:2b:1b:e7:cc:7b:a8:e2:67:39:32:61:32:50:
         e3:a7:16:31:81:71:3c:65:ca:b9:1b:38:46:24:f0:09:38:01:
         c6:71:84:ff:6e:c8:06:e0:46:fb:6f:fe:fb:03:8c:62:42:82:
         0b:3f:4f:97:81:99:8d:09:3c:6d:a7:5f:e6:12:a4:88:4e:b2:
         c0:8e:38:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----