Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.mft
File:                     NctCHFV3F3WBziSzai9syTGEYFI.mft (raw, json)
Hash identifier:          V0cZo1eSUCSi2Y+UhZXli1RbYJyghN+fx70vthNl2Wg=
Subject key identifier:   DB:79:45:EF:A7:16:F5:59:C8:2F:3F:4D:59:70:A1:57:3F:76:88:D4
Authority key identifier: 35:CB:42:1C:55:77:17:75:81:CE:24:B3:6A:2F:6C:C9:31:84:60:52
Certificate issuer:       /CN=A91CA3CD/serialNumber=35CB421C5577177581CE24B36A2F6CC931846052
Certificate serial:       E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NctCHFV3F3WBziSzai9syTGEYFI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.mft
Manifest number:          DD
Signing time:             Fri 31 Jan 2025 04:40:23 +0000
Manifest this update:     Fri 31 Jan 2025 04:40:23 +0000
Manifest next update:     Fri 07 Feb 2025 04:40:23 +0000
Files and hashes:         1: NctCHFV3F3WBziSzai9syTGEYFI.crl (hash: yHz70OGyNJMnfysFX8Q/RScbNSGlFi6UrWFWh1RNcv4=)
                          2: F5121FB090CF11EE8036815AC4F9AE02.roa (hash: acmm68uBDagq25oNDAk3Sfa5aVrunt/qZpCPMnp6KYo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 224 (0xe0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA3CD/serialNumber=35CB421C5577177581CE24B36A2F6CC931846052
        Validity
            Not Before: Jan 31 04:40:23 2025 GMT
            Not After : Feb  7 04:40:23 2025 GMT
        Subject: CN=679c5437-3d08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8c:aa:50:07:a4:d2:ca:91:d3:ed:8e:82:3c:
                    c8:31:38:40:fc:f2:4c:b9:be:0b:6f:9a:00:86:69:
                    ab:f9:e0:ab:c2:1f:34:46:b1:ea:3f:18:fd:86:ee:
                    dc:70:77:a4:90:92:ef:30:36:bb:e9:16:2a:02:0c:
                    bd:5a:05:0d:84:9c:a5:08:83:96:f1:e0:ad:1f:c1:
                    4f:53:0e:9d:82:9f:ea:80:d5:57:0b:df:44:7f:a3:
                    13:82:de:96:8f:cc:f8:e6:3b:89:9a:20:bf:6c:45:
                    54:22:d4:20:d8:2e:a6:22:b0:e3:4f:bc:e8:18:b5:
                    e1:75:59:62:c5:26:36:60:95:68:20:c6:df:9a:56:
                    bf:a6:77:4f:3c:3c:2a:c4:4c:0c:68:14:08:65:ba:
                    6e:50:14:e4:ee:7b:32:5e:03:f6:cf:45:ca:db:ff:
                    34:39:64:e9:7d:35:7b:1d:61:e1:32:c5:28:20:b6:
                    d3:f7:68:8b:c0:29:32:f5:ca:68:52:6f:c0:8b:1e:
                    a6:a4:ee:fd:d4:c3:7a:50:d6:62:f4:dd:d1:d6:3a:
                    ff:ef:37:e5:95:88:a0:b9:38:ba:6b:68:a6:86:19:
                    81:40:be:c0:81:47:46:f4:f4:d6:29:15:f6:e6:e5:
                    c5:92:2c:fd:1f:4f:cd:a7:b3:ea:35:8a:e8:2b:6d:
                    0d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:79:45:EF:A7:16:F5:59:C8:2F:3F:4D:59:70:A1:57:3F:76:88:D4
            X509v3 Authority Key Identifier:
                keyid:35:CB:42:1C:55:77:17:75:81:CE:24:B3:6A:2F:6C:C9:31:84:60:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NctCHFV3F3WBziSzai9syTGEYFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:84:97:05:6b:cd:77:72:68:b7:a3:5d:53:88:7c:38:81:01:
         3a:f6:64:0f:94:2a:c9:1f:3e:dc:82:f7:42:5d:ff:37:6f:6b:
         ab:19:c2:51:d6:77:1a:94:e1:94:e9:5d:94:4f:3e:9e:d5:3d:
         b8:76:30:9d:ae:ea:9e:0e:a0:a0:32:cb:e4:8c:56:43:7b:aa:
         34:1f:e6:e0:d2:5e:b9:87:01:33:f5:1d:25:72:27:72:87:61:
         0d:5b:6c:0a:bc:c7:ed:af:0f:0c:28:9c:96:37:96:7a:b7:07:
         64:2b:72:f3:d9:77:f8:f5:de:14:f1:8b:ee:8a:3f:71:91:75:
         62:4a:5e:b9:28:5b:ff:57:01:9e:25:22:4d:cb:b3:74:0a:0f:
         16:b6:53:5c:cf:7e:92:00:16:0a:e0:c6:be:e1:6f:8f:97:48:
         10:46:4f:90:80:e2:df:78:9a:f6:1d:e9:f3:a3:ff:f8:cf:05:
         d5:9e:ff:67:0c:9a:b6:29:3d:e5:1b:3c:55:40:8e:8d:18:63:
         94:67:8a:7f:06:2e:b6:a0:c4:e5:1e:8d:9d:50:38:41:47:a9:
         b3:ae:45:c2:ee:dc:b2:7a:f6:11:37:fb:b3:c5:f4:01:3c:f7:
         67:b8:18:dc:21:62:86:78:df:71:e6:69:7b:f4:9a:11:ed:27:
         e7:09:69:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----