Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft
File:                     KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft (raw, json)
Hash identifier:          Vqby9MGw5a9AIQURuxxxG5Zs8ureYuGVwHgGr0NfP04=
Subject key identifier:   4C:9F:F4:F2:48:14:99:22:B1:B2:53:39:0B:C2:D9:4D:46:D5:D0:1F
Authority key identifier: 28:C0:60:7D:96:83:1A:3D:18:09:33:45:B3:72:58:EE:3B:D7:F3:E7
Certificate issuer:       /CN=A91C5AEE/serialNumber=28C0607D96831A3D18093345B37258EE3BD7F3E7
Certificate serial:       0105
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMBgfZaDGj0YCTNFs3JY7jvX8-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft
Manifest number:          0103
Signing time:             Fri 31 Jan 2025 04:09:26 +0000
Manifest this update:     Fri 31 Jan 2025 04:09:25 +0000
Manifest next update:     Fri 07 Feb 2025 04:09:25 +0000
Files and hashes:         1: KMBgfZaDGj0YCTNFs3JY7jvX8-c.crl (hash: E/PwVTUQVhDQ5AKVohU30u588SS7qPuzfF42lPaOZ9U=)
                          2: 21525A1C520B11EE8B79021AC4F9AE02.roa (hash: s8Vu/R6gOMwvLzsGf3nk9tFhiMljx1hOH6LnsMms3Vg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 261 (0x105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5AEE/serialNumber=28C0607D96831A3D18093345B37258EE3BD7F3E7
        Validity
            Not Before: Jan 31 04:09:25 2025 GMT
            Not After : Feb  7 04:09:25 2025 GMT
        Subject: CN=679c4cf5-68cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:df:9d:71:a0:f1:ae:37:d1:13:4c:21:28:31:
                    d4:db:f0:1d:1c:4b:4b:2a:5b:5a:30:a2:52:23:46:
                    bb:0e:c6:be:42:e6:ef:b0:d4:9b:f6:3b:9c:ad:7f:
                    44:17:55:aa:63:0d:6f:26:be:90:02:89:87:81:40:
                    e6:8b:f4:cc:0d:71:a0:da:c7:8f:0e:d9:95:f4:67:
                    56:03:e3:fa:a4:f7:32:ad:97:5e:87:7a:f6:ca:aa:
                    9f:e0:f2:26:81:e9:6a:4b:b5:df:3f:68:ee:ed:a3:
                    10:dc:2d:11:b2:63:8c:dc:6f:17:48:d2:35:a4:5f:
                    49:8a:df:7b:6d:49:9e:07:82:56:f6:4c:65:b1:a3:
                    f0:e0:ef:68:a4:0d:c6:bc:16:71:5b:39:6a:70:73:
                    de:a8:09:e3:2b:f3:ad:fa:7a:7b:15:ed:5c:a5:e7:
                    d8:10:30:5f:31:57:a3:5c:16:50:94:35:38:10:d9:
                    dd:f9:f9:5b:67:51:8b:66:bc:cf:50:11:9e:38:c7:
                    e9:4a:de:18:b7:02:da:82:81:2c:af:62:98:9a:17:
                    46:a9:2c:99:4d:ce:41:31:d4:99:82:13:ee:00:0f:
                    55:d7:82:e2:a6:a1:54:ac:78:34:19:dd:29:b9:04:
                    79:ec:a0:84:04:89:cc:b8:71:72:7a:c4:4e:f4:b5:
                    dd:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:9F:F4:F2:48:14:99:22:B1:B2:53:39:0B:C2:D9:4D:46:D5:D0:1F
            X509v3 Authority Key Identifier:
                keyid:28:C0:60:7D:96:83:1A:3D:18:09:33:45:B3:72:58:EE:3B:D7:F3:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMBgfZaDGj0YCTNFs3JY7jvX8-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:ee:78:b9:46:59:3a:d9:05:ba:dc:db:68:6b:46:2b:be:ef:
         6d:78:13:95:f9:c1:de:fc:d0:39:1f:c0:93:53:c0:67:86:7b:
         2a:1d:f0:37:5f:81:9a:1f:40:e4:56:6c:e6:6d:5c:9f:4d:24:
         8e:6f:e9:be:79:f3:3b:cd:54:8b:4d:44:5c:d4:06:dd:54:c6:
         04:12:d3:2a:5d:46:b2:a7:db:1b:74:46:59:d9:9a:29:64:59:
         e2:25:c8:62:48:bd:a0:c4:bf:05:c4:ec:a6:06:ab:91:ce:3f:
         e3:84:8b:e8:a3:e3:64:e7:26:cf:1c:ff:17:ed:09:06:c1:ab:
         2e:a6:0c:9f:75:8b:d0:b4:ec:70:75:49:23:a7:cd:11:92:c9:
         ec:09:e5:b7:85:4d:66:b1:37:15:3a:e5:cc:a0:48:22:b0:ea:
         c9:5d:ed:e2:60:b4:b5:39:3e:cf:42:a9:9a:30:d8:09:1d:dd:
         85:a0:a7:88:0c:24:92:f4:de:55:5c:e7:8b:1e:8c:0a:1a:1f:
         a4:f5:91:5f:78:70:ba:f0:c8:33:bc:cd:c4:f2:83:aa:b0:fe:
         c9:ea:bb:6c:36:eb:5a:2d:89:b6:b9:cd:1a:25:5b:cd:3e:87:
         59:78:58:72:51:44:43:e5:28:79:27:cc:d4:72:24:41:57:d2:
         15:86:0a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----