Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft
File:                     a63X1dESgRLXCrSiRSQBQo-dCXs.mft (raw, json)
Hash identifier:          E/GgY9XqY2AnvBOrqEt3PZqeAN8dy6CGN6vNZvjL8tM=
Subject key identifier:   B3:76:97:17:56:23:E8:81:87:8B:D2:ED:6D:95:B2:81:69:E8:66:0E
Authority key identifier: 6B:AD:D7:D5:D1:12:81:12:D7:0A:B4:A2:45:24:01:42:8F:9D:09:7B
Certificate issuer:       /CN=A91CC86F/serialNumber=6BADD7D5D1128112D70AB4A2452401428F9D097B
Certificate serial:       0134
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a63X1dESgRLXCrSiRSQBQo-dCXs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft
Manifest number:          0130
Signing time:             Fri 31 Jan 2025 03:43:42 +0000
Manifest this update:     Fri 31 Jan 2025 03:43:41 +0000
Manifest next update:     Fri 07 Feb 2025 03:43:41 +0000
Files and hashes:         1: a63X1dESgRLXCrSiRSQBQo-dCXs.crl (hash: n8fgAXUh7KkcgAUhB1Tx7pzaMg5cZbhwOBqwwQ5djQ4=)
                          2: AE1747DE13FC11EEAD14AF35C4F9AE02.roa (hash: IQBn4ZS4C/ZFnSsdM9cr5llJmaKNs+18E9KjqV8Ptcw=)
                          3: 96F5D26CFD5A11EEA0731E55C4F9AE02.roa (hash: G67FBcoSo5SdfUGnyF3K1ScYA7zHkycNrRNLNW9eMyM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 308 (0x134)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC86F/serialNumber=6BADD7D5D1128112D70AB4A2452401428F9D097B
        Validity
            Not Before: Jan 31 03:43:41 2025 GMT
            Not After : Feb  7 03:43:41 2025 GMT
        Subject: CN=679c46ed-de12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:a7:0a:6d:e6:c4:e7:68:e3:cf:53:5d:6c:12:
                    e7:e0:25:71:8d:fb:85:ac:65:c5:15:5f:ab:1f:a2:
                    5e:53:ce:93:89:6e:4c:b5:0e:64:43:5a:75:a6:27:
                    4a:88:99:df:97:a5:c8:bd:bc:14:c7:d6:77:70:e2:
                    7a:37:85:0c:6d:05:52:82:f0:9a:ce:0d:0a:17:cd:
                    02:ea:bd:8e:7d:b4:2a:e1:74:c9:e2:f8:c6:03:8e:
                    9a:15:db:5b:37:8a:12:c6:55:28:6d:42:13:16:f8:
                    d0:fb:4e:86:5c:e4:52:56:a8:40:06:f1:d3:61:0d:
                    d1:46:fa:00:39:e7:b0:53:b3:9c:52:a9:bb:3a:54:
                    ae:32:71:42:fa:aa:9a:3f:42:46:9c:96:53:a4:4f:
                    5d:99:db:66:3f:5e:04:5c:15:bf:6a:c2:e4:22:90:
                    39:55:49:76:7b:12:14:80:49:e0:c7:62:4a:56:ef:
                    57:cb:a1:c0:1d:30:a9:09:99:ce:ba:38:d7:dd:ef:
                    40:8d:6d:50:03:c5:c9:a7:7a:ec:aa:49:62:2f:b7:
                    84:18:3b:c7:f1:33:0d:99:ef:5d:26:86:d6:c3:9e:
                    45:e6:49:c5:4b:96:03:10:f3:29:e8:ff:11:67:45:
                    aa:6a:c1:de:81:98:1a:75:e8:43:90:6c:4d:50:ef:
                    fd:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:76:97:17:56:23:E8:81:87:8B:D2:ED:6D:95:B2:81:69:E8:66:0E
            X509v3 Authority Key Identifier:
                keyid:6B:AD:D7:D5:D1:12:81:12:D7:0A:B4:A2:45:24:01:42:8F:9D:09:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a63X1dESgRLXCrSiRSQBQo-dCXs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:7d:18:20:34:92:1c:d6:49:b2:3d:da:dd:ad:84:c5:19:e5:
         bb:6b:b4:d9:2a:cf:f7:61:79:1d:8c:9e:e7:28:8c:8e:41:70:
         09:35:54:76:0c:a2:b5:db:7a:1f:ef:54:41:d7:42:03:13:12:
         37:86:b9:2f:89:2b:c7:cc:b4:99:05:8a:77:34:86:4d:0b:86:
         8f:73:64:a6:3a:ea:b7:cc:cf:43:79:f8:d8:ac:ee:ba:fc:7e:
         d2:f7:02:d6:2f:a9:d1:76:5c:c6:eb:dc:aa:e8:22:2f:4d:96:
         66:93:c2:8d:e3:47:6c:ec:d7:30:5d:bf:ab:90:d5:6e:57:d8:
         b5:f7:13:2b:7c:61:76:4b:56:f8:06:48:6e:d4:91:a9:81:de:
         5d:38:16:40:a4:0f:fc:77:42:ad:5f:21:6c:7c:08:a4:b5:00:
         23:0c:b0:3a:0b:e5:b0:c7:de:db:6c:e8:a9:f5:1a:40:c9:a2:
         1b:0c:60:64:27:5d:00:b7:09:33:9f:4c:86:da:85:8c:03:9a:
         da:11:96:81:31:9f:42:8e:38:28:55:40:a8:b3:29:68:73:51:
         5b:88:d4:53:04:9b:3b:48:59:96:b9:3d:c8:3b:66:05:1e:76:
         c2:5d:74:c3:65:b0:9d:66:7d:26:3f:7a:35:0d:b2:d7:9b:18:
         99:94:f5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----