Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.mft
File:                     HdM6aLwLXJMQ__Uq1zlBINECpic.mft (raw, json)
Hash identifier:          dam5hUxPDj/v7fj5ETtQOlDrVkCupSme98aPg3keX5U=
Subject key identifier:   84:9E:BF:43:27:53:68:B0:02:72:E5:C8:76:68:A1:6C:61:10:73:D5
Authority key identifier: 1D:D3:3A:68:BC:0B:5C:93:10:FF:F5:2A:D7:39:41:20:D1:02:A6:27
Certificate issuer:       /CN=A91C5319/serialNumber=1DD33A68BC0B5C9310FFF52AD7394120D102A627
Certificate serial:       3A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HdM6aLwLXJMQ__Uq1zlBINECpic.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.mft
Manifest number:          39
Signing time:             Fri 31 Jan 2025 06:36:38 +0000
Manifest this update:     Fri 31 Jan 2025 06:36:37 +0000
Manifest next update:     Fri 07 Feb 2025 06:36:37 +0000
Files and hashes:         1: HdM6aLwLXJMQ__Uq1zlBINECpic.crl (hash: CFzXWScMgQrxiiJYqRnclkeQ2mY+QRTabehcFlEIwXE=)
                          2: C7500EC88C2F11EF82B2F55CC4F9AE02.roa (hash: KqwFgUGGWmZ6w/oc9lE/9i1V2X5VufgZVt2vhykEeNg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5319/serialNumber=1DD33A68BC0B5C9310FFF52AD7394120D102A627
        Validity
            Not Before: Jan 31 06:36:37 2025 GMT
            Not After : Feb  7 06:36:37 2025 GMT
        Subject: CN=679c6f76-5005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:af:47:88:7b:d2:48:fb:34:e2:7c:7a:93:3d:
                    02:a5:90:ee:57:7b:53:ab:e2:02:33:a8:ca:05:e1:
                    ae:cc:dc:36:30:19:6d:5b:f8:23:26:34:d5:27:1a:
                    8f:d5:a2:04:5c:2c:a7:4f:2d:f7:9b:d4:fe:a9:51:
                    9a:11:e1:97:8d:cf:39:e2:52:45:db:58:7f:ae:6b:
                    e7:89:f9:ef:89:b0:1a:45:72:3b:55:1d:96:63:06:
                    a4:e4:b5:f3:e2:c3:cc:bc:84:b5:32:17:fe:5b:1a:
                    8c:7e:cd:c5:84:44:d1:e4:c6:9a:53:f4:66:98:c0:
                    09:50:11:a2:87:20:f2:dd:5d:90:43:a6:15:d0:28:
                    16:63:bc:ce:da:df:bf:5b:f1:99:58:12:e5:a7:a4:
                    7d:98:0a:ca:6f:e1:1e:e3:23:e4:d3:c2:a7:b6:e3:
                    4f:69:ca:ef:74:86:02:8d:b3:fb:aa:a7:1f:52:82:
                    a2:82:31:27:5a:ee:79:93:5d:90:ac:7a:c5:95:8c:
                    66:a5:76:9d:07:61:e1:82:8f:17:ce:8e:ba:63:cd:
                    ce:52:d2:a5:f5:87:82:12:00:60:42:31:05:4d:6f:
                    c8:b1:de:06:8e:76:cc:90:f4:45:39:b2:38:7d:25:
                    81:b0:33:c0:c5:e7:22:54:e2:b4:82:8d:fd:02:d0:
                    de:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:9E:BF:43:27:53:68:B0:02:72:E5:C8:76:68:A1:6C:61:10:73:D5
            X509v3 Authority Key Identifier:
                keyid:1D:D3:3A:68:BC:0B:5C:93:10:FF:F5:2A:D7:39:41:20:D1:02:A6:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HdM6aLwLXJMQ__Uq1zlBINECpic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:53:74:c4:c2:55:85:03:32:11:c8:f1:7b:9c:99:6f:ff:82:
         69:17:63:4a:88:8c:b1:62:09:4e:06:51:ff:bc:75:8d:33:50:
         02:c3:7c:f1:c7:32:18:15:2d:b7:91:be:02:05:74:58:5b:03:
         fa:17:b6:99:72:b0:be:86:fa:96:2c:f6:8a:01:3c:d6:da:9e:
         d8:8d:2c:15:65:54:21:0d:06:4c:63:38:79:df:59:4c:33:93:
         2a:57:32:69:da:13:34:e0:79:44:4b:55:14:0c:95:b2:0c:3b:
         f0:3d:cd:0a:ac:b1:b1:e0:4b:e9:39:a2:5b:93:76:ba:91:66:
         6a:88:c1:dd:2b:cf:59:0f:ca:d2:da:9d:6f:2e:a3:c5:dd:17:
         e0:9e:d2:93:75:d0:cc:28:2b:df:04:4a:82:24:77:c2:86:94:
         68:72:c9:21:db:6e:c5:80:be:69:d0:d5:c6:7f:48:68:22:74:
         20:de:5b:03:8f:58:22:c6:83:1e:b7:93:a8:d6:f3:24:67:80:
         bb:e9:30:b2:08:9d:67:66:2a:a7:e9:1f:d7:7d:72:59:18:c6:
         cc:26:1b:6a:0e:b2:33:22:0e:50:35:8a:56:7e:9c:8a:25:47:
         56:51:a9:f0:8e:f7:e6:b4:df:c6:b4:6c:ae:d8:c0:a4:80:ef:
         2e:5d:d5:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----