Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/Cjz8fzlaNLq-MbjKRiPTHHao2fo.mft
File:                     Cjz8fzlaNLq-MbjKRiPTHHao2fo.mft (raw, json)
Hash identifier:          GIoQvD0vjzAEoIelEPUYSb+yE9xWKwmwT5muti/0Xco=
Subject key identifier:   98:BD:B4:AF:13:5F:C8:02:E6:33:7A:68:A0:94:58:9C:17:B2:28:42
Authority key identifier: 0A:3C:FC:7F:39:5A:34:BA:BE:31:B8:CA:46:23:D3:1C:76:A8:D9:FA
Certificate issuer:       /CN=A91C8EDF/serialNumber=0A3CFC7F395A34BABE31B8CA4623D31C76A8D9FA
Certificate serial:       019E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjz8fzlaNLq-MbjKRiPTHHao2fo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/Cjz8fzlaNLq-MbjKRiPTHHao2fo.mft
Manifest number:          019A
Signing time:             Fri 31 Jan 2025 02:47:06 +0000
Manifest this update:     Fri 31 Jan 2025 02:47:05 +0000
Manifest next update:     Fri 07 Feb 2025 02:47:05 +0000
Files and hashes:         1: Cjz8fzlaNLq-MbjKRiPTHHao2fo.crl (hash: JHu3Y0kDd7n85Yl7wr52uIjllH9L/z8DV0GKwMWudo4=)
                          2: 6ABFAA607C5A11EDB5D8DA67C4F9AE02.roa (hash: UPzNqHZtzAjVZqphmOfv2Hp1UJdFW2/M83hc9R8RBqA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 414 (0x19e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8EDF/serialNumber=0A3CFC7F395A34BABE31B8CA4623D31C76A8D9FA
        Validity
            Not Before: Jan 31 02:47:05 2025 GMT
            Not After : Feb  7 02:47:05 2025 GMT
        Subject: CN=679c39aa-0705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ef:3f:f8:38:89:93:0a:a5:e7:32:c3:2b:a5:
                    05:74:1d:87:78:2f:6c:a2:15:35:05:f3:2d:0a:bf:
                    4c:42:63:66:68:df:3e:82:cf:ab:d1:5b:26:1d:b9:
                    79:b8:ac:d4:c8:b5:27:15:a7:66:6c:63:d1:8a:5e:
                    d7:91:f4:93:7d:ba:c9:2b:a2:df:e3:ee:92:58:ea:
                    8b:40:75:6f:ef:58:fe:1e:b8:3d:91:30:48:25:7b:
                    2a:65:9f:e6:cd:eb:de:d8:54:fb:ec:81:c7:8b:c4:
                    f7:3a:95:d1:4e:9c:44:ee:73:7b:27:fc:5f:8e:8b:
                    26:d4:7e:77:33:56:b0:75:70:d4:04:9d:0d:80:d3:
                    5a:52:6c:f3:c1:0a:29:27:a1:f0:8d:28:8e:7e:78:
                    b8:a1:7c:cc:70:20:7a:7c:9d:f0:9b:d1:17:87:d9:
                    45:af:01:fa:da:18:28:70:4c:a4:67:b1:41:9f:aa:
                    85:18:28:65:bc:91:c4:e6:f3:0e:f5:b2:31:b0:1b:
                    fe:e2:a3:07:a8:83:24:ec:d6:31:67:f0:b1:e9:60:
                    fe:d1:94:aa:66:4a:3d:92:a7:e2:41:0b:e4:0d:19:
                    d6:8f:ff:81:9e:e0:ef:8b:97:23:a0:aa:7c:a5:c5:
                    9b:76:28:57:3e:eb:c3:78:e9:fe:6c:fa:80:1c:52:
                    4d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:BD:B4:AF:13:5F:C8:02:E6:33:7A:68:A0:94:58:9C:17:B2:28:42
            X509v3 Authority Key Identifier:
                keyid:0A:3C:FC:7F:39:5A:34:BA:BE:31:B8:CA:46:23:D3:1C:76:A8:D9:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/Cjz8fzlaNLq-MbjKRiPTHHao2fo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjz8fzlaNLq-MbjKRiPTHHao2fo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/Cjz8fzlaNLq-MbjKRiPTHHao2fo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:5a:c3:ee:38:eb:5e:8f:3d:85:00:72:74:d7:fa:19:c8:1e:
         43:92:99:7c:e7:ae:46:05:98:be:25:ad:37:6c:84:a9:8a:7e:
         ed:55:57:8e:88:9f:a4:2b:6d:3f:ac:99:c2:fe:9c:16:44:56:
         7c:93:9d:63:f8:91:f3:b2:ba:a2:09:e9:2e:55:82:c2:2a:df:
         71:d0:45:98:a0:2f:2a:28:8e:38:2f:ad:cf:7e:56:7a:32:de:
         60:98:e5:07:2c:b4:d8:a8:ed:08:06:17:af:bb:80:60:d2:8c:
         07:6e:70:63:12:3f:11:b7:79:57:e0:b1:ff:2b:05:a7:42:7f:
         e1:27:b2:9b:19:bc:40:0e:64:84:da:5b:25:34:15:bf:2f:e4:
         86:4f:f1:83:2a:0f:0d:b7:42:20:f5:3c:c7:00:c7:a1:d3:a7:
         29:46:53:c3:34:10:e5:bd:84:1a:98:89:cf:16:ee:97:84:12:
         d8:95:c2:ce:51:c0:fb:52:2a:3b:68:07:03:4e:f4:18:0c:13:
         49:51:dc:1f:75:3d:af:8b:62:45:63:18:50:b8:30:68:62:5c:
         18:be:8d:80:c0:7d:ee:51:ad:58:75:15:96:56:dc:6c:e9:c0:
         9d:aa:fe:07:0e:bc:49:4e:e5:1f:4b:e0:fc:6e:2e:9b:dc:74:
         86:f2:66:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----