Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft
File:                     92dQUVu3YtGADFrmxsLbJP6VLQI.mft (raw, json)
Hash identifier:          Ydvztu8t2dGLngW6p7McjqhYfbomN53qM7nPF3Zwnmg=
Subject key identifier:   E5:53:19:93:E7:51:68:43:F1:DA:93:05:51:F0:69:47:06:6D:09:2A
Authority key identifier: F7:67:50:51:5B:B7:62:D1:80:0C:5A:E6:C6:C2:DB:24:FE:95:2D:02
Certificate issuer:       /CN=A91C83EA/serialNumber=F76750515BB762D1800C5AE6C6C2DB24FE952D02
Certificate serial:       2A50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92dQUVu3YtGADFrmxsLbJP6VLQI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft
Manifest number:          2A3A
Signing time:             Fri 31 Jan 2025 15:36:19 +0000
Manifest this update:     Fri 31 Jan 2025 15:36:19 +0000
Manifest next update:     Fri 07 Feb 2025 15:36:19 +0000
Files and hashes:         1: 92dQUVu3YtGADFrmxsLbJP6VLQI.crl (hash: 90s+W7fKgIlCq41jp+GfNq8vOesq1Gz4fhgWdJGw/1I=)
                          2: 2ED1150C561D11E7B003DF26C4F9AE02.roa (hash: VWQv/IH7NsqTcNchTqEWHo8sER9hJVbk+Ml69dI7l0g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10832 (0x2a50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C83EA/serialNumber=F76750515BB762D1800C5AE6C6C2DB24FE952D02
        Validity
            Not Before: Jan 31 15:36:19 2025 GMT
            Not After : Feb  7 15:36:19 2025 GMT
        Subject: CN=679cedf3-35b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3f:03:6d:45:4e:34:0f:1e:47:55:a0:b0:e4:
                    45:95:9c:c6:ba:81:5b:e3:99:67:a2:54:d8:56:f6:
                    6f:78:3a:69:ef:da:d8:6a:bb:78:e7:b2:c6:30:45:
                    e4:9c:0c:d4:d2:af:a7:9f:84:8b:a9:7f:59:94:58:
                    34:eb:34:18:94:b2:95:fd:3a:4c:02:51:35:e0:a5:
                    64:0e:6e:81:c5:ea:11:64:15:35:5c:35:df:e0:71:
                    b3:42:fa:d8:de:e0:c0:fa:a2:1f:10:f0:5b:5b:ef:
                    7f:65:ab:22:e6:b2:8b:8a:05:79:03:f8:b1:3e:36:
                    61:af:cf:06:73:69:ff:25:5f:8e:70:ad:1e:c2:af:
                    b9:1a:70:2b:3d:bd:72:c3:f1:5b:2e:78:15:7b:f1:
                    6b:73:20:a5:b2:00:7a:80:52:2a:9b:5c:1a:c1:6a:
                    95:f4:43:2f:aa:42:66:25:86:72:4d:4d:e6:bd:18:
                    41:29:ce:db:9f:ad:f3:7a:29:76:b4:ef:84:3c:0d:
                    4e:d6:78:99:53:d3:32:1d:43:2e:19:6f:18:d3:63:
                    c5:fa:9e:86:78:13:31:58:93:fc:b6:3f:cb:5e:09:
                    25:b9:80:dd:4a:5e:25:fa:ca:da:a8:8c:46:9f:41:
                    88:bc:ce:ec:ed:a9:3d:7a:4f:3a:3b:a8:cb:5f:09:
                    d5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:53:19:93:E7:51:68:43:F1:DA:93:05:51:F0:69:47:06:6D:09:2A
            X509v3 Authority Key Identifier:
                keyid:F7:67:50:51:5B:B7:62:D1:80:0C:5A:E6:C6:C2:DB:24:FE:95:2D:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92dQUVu3YtGADFrmxsLbJP6VLQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:d2:0a:ec:42:c0:40:1b:cf:ff:92:e4:87:68:e9:f4:12:32:
         43:51:64:ca:bc:6e:23:a3:77:93:08:df:f8:c0:26:a9:14:83:
         12:5f:6c:28:04:50:b0:08:66:9f:6c:50:cc:86:fb:94:60:16:
         87:69:91:2f:2c:12:86:c1:02:52:3a:3b:5d:6a:2a:ac:ec:6d:
         f1:94:2c:5b:b5:41:0d:1c:6c:5c:00:fd:1d:2b:04:0e:c5:a9:
         66:d8:82:4a:a2:4e:59:a2:59:0a:36:a2:a3:84:a5:fe:84:ca:
         bd:8f:89:f4:52:33:05:12:b3:b9:11:eb:ac:1e:75:0c:aa:1c:
         c7:82:40:f0:44:54:c3:0c:0b:bf:60:30:a9:f4:43:6f:cc:a4:
         65:e0:e1:62:92:58:e6:15:94:37:c6:a9:08:3f:33:ec:8a:90:
         3f:e6:74:0b:d9:cf:80:c2:71:51:63:68:f2:76:eb:69:5a:13:
         b0:21:0b:aa:28:30:61:c8:34:8e:5d:7d:1a:ed:23:c5:2a:ac:
         e0:f2:bd:c6:c0:e8:77:7d:84:7f:6f:9c:c5:a2:b0:56:c2:6b:
         06:fc:e8:ec:c8:64:72:5c:6e:b7:a5:52:40:1a:f6:74:8b:0b:
         f5:ac:47:7b:58:dc:6f:77:bc:38:fa:68:d0:41:5a:95:52:8e:
         b6:a2:91:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----