Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.mft
File:                     P7eFXvMwunfZ87ct_97CBxKsFAc.mft (raw, json)
Hash identifier:          D1uv9eehAY95/JrGwxUF6fSaHmDqhircJsD/tPbyxVM=
Subject key identifier:   5A:55:CC:CE:7C:EC:D7:89:E3:76:38:C7:95:DF:83:33:E5:D1:CF:81
Authority key identifier: 3F:B7:85:5E:F3:30:BA:77:D9:F3:B7:2D:FF:DE:C2:07:12:AC:14:07
Certificate issuer:       /CN=A91CD4DB/serialNumber=3FB7855EF330BA77D9F3B72DFFDEC20712AC1407
Certificate serial:       177C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7eFXvMwunfZ87ct_97CBxKsFAc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.mft
Manifest number:          1769
Signing time:             Fri 31 Jan 2025 16:36:25 +0000
Manifest this update:     Fri 31 Jan 2025 16:36:24 +0000
Manifest next update:     Fri 07 Feb 2025 16:36:24 +0000
Files and hashes:         1: P7eFXvMwunfZ87ct_97CBxKsFAc.crl (hash: ryeORuZEf92g0jxCwRc0WZ+slYlXmcaPProNJ1tPGGc=)
                          2: 1615AC3AD9E911EC9017DD21C4F9AE02.roa (hash: tZ+n1rBeiFep27McDY+TR8Gj4nHp3eK0QyhamvlvTOk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6012 (0x177c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD4DB/serialNumber=3FB7855EF330BA77D9F3B72DFFDEC20712AC1407
        Validity
            Not Before: Jan 31 16:36:24 2025 GMT
            Not After : Feb  7 16:36:24 2025 GMT
        Subject: CN=679cfc09-0f19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:49:57:10:9c:0f:07:0d:b9:81:d0:85:c6:94:
                    e2:c5:68:11:18:28:0e:c5:15:02:4a:cd:a6:16:cf:
                    6e:5a:09:47:05:75:42:47:1e:58:bb:bc:e1:17:b1:
                    24:39:53:2a:19:62:1c:5a:7b:92:2e:f7:25:77:39:
                    24:e6:48:38:db:75:97:9c:9f:de:6d:82:7a:56:6f:
                    82:30:78:59:33:1f:c8:69:fe:ed:c1:75:bd:30:a7:
                    06:b3:aa:6c:7f:91:dc:a9:e6:40:08:2a:7b:76:31:
                    25:14:db:a8:42:81:a3:fd:6b:fb:b5:14:4f:35:54:
                    1d:62:6b:59:be:e1:0a:a7:0f:32:1e:ac:75:6b:56:
                    05:9f:2c:f1:ec:34:12:07:f2:12:1d:4f:25:90:96:
                    1c:da:2c:69:eb:ec:49:97:8b:33:f9:a2:e0:b4:e5:
                    68:04:2b:3c:ed:37:59:42:44:4d:f3:27:4a:ab:68:
                    de:b7:c2:f9:b3:10:f6:1a:a4:4c:19:18:6e:95:5e:
                    63:e6:c5:ef:a4:6e:81:8e:96:c4:48:8a:2b:e1:af:
                    89:71:02:c9:3b:32:32:5c:e5:fe:05:f9:a0:4a:0f:
                    91:3d:96:16:a0:c6:85:82:6c:a4:1d:a8:c1:24:28:
                    11:ec:72:42:59:03:cf:08:3a:13:48:ab:d8:00:56:
                    43:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:55:CC:CE:7C:EC:D7:89:E3:76:38:C7:95:DF:83:33:E5:D1:CF:81
            X509v3 Authority Key Identifier:
                keyid:3F:B7:85:5E:F3:30:BA:77:D9:F3:B7:2D:FF:DE:C2:07:12:AC:14:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7eFXvMwunfZ87ct_97CBxKsFAc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:1c:57:48:ed:37:0c:20:f1:9a:8b:55:4d:d0:65:ae:7a:0d:
         69:e0:9d:d5:74:36:42:bf:e2:de:91:0d:ab:72:66:65:06:a5:
         b4:ec:bf:73:4b:6b:94:ed:f2:10:40:e1:f3:30:56:86:71:db:
         aa:83:2f:fe:44:ac:05:e4:f8:b2:30:f7:68:76:c2:01:74:48:
         3e:5e:e6:f1:56:b3:58:26:d6:1e:f4:74:a0:53:43:33:74:c3:
         43:65:ac:7f:64:2d:81:d8:81:23:a6:64:ad:6a:9d:68:ee:e2:
         30:bc:42:e2:c7:0c:e8:2d:a0:ac:f1:bc:59:10:68:5a:5e:dd:
         87:e5:b3:55:a1:a1:68:6a:55:89:e9:5f:8f:79:44:e6:3f:10:
         a2:6b:c1:80:60:ba:1f:1f:e8:f9:95:7a:54:7e:d3:de:dd:53:
         7c:1e:fe:72:3a:b9:dd:e9:b3:58:be:49:b8:7c:1e:8d:50:0b:
         2c:82:76:03:cd:cf:4d:b0:02:76:39:66:97:2c:d4:fe:1a:96:
         75:80:ab:d8:7b:54:35:ec:79:ee:ba:ad:de:ba:5f:56:b1:5f:
         99:25:e4:10:e2:8c:db:89:d4:73:21:fe:f2:9b:7a:4a:54:bc:
         c2:17:bf:7b:e8:df:be:5f:9c:0c:bb:7c:e9:57:7d:d7:24:04:
         a1:aa:f3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----