Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/v-RhN13CI9T3snBV4rNHRf5hAdQ.mft
File:                     v-RhN13CI9T3snBV4rNHRf5hAdQ.mft (raw, json)
Hash identifier:          mF0UNcp+/cNXg5G5jskwCSV7dokNbX0ySW7OMNbCC+c=
Subject key identifier:   AD:1E:D7:1E:E6:90:32:75:C8:D5:32:20:C4:37:3C:19:0A:BE:6D:B6
Authority key identifier: BF:E4:61:37:5D:C2:23:D4:F7:B2:70:55:E2:B3:47:45:FE:61:01:D4
Certificate issuer:       /CN=A91CD98D/serialNumber=BFE461375DC223D4F7B27055E2B34745FE6101D4
Certificate serial:       06C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v-RhN13CI9T3snBV4rNHRf5hAdQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/v-RhN13CI9T3snBV4rNHRf5hAdQ.mft
Manifest number:          06B5
Signing time:             Thu 30 Jan 2025 22:07:41 +0000
Manifest this update:     Thu 30 Jan 2025 22:07:41 +0000
Manifest next update:     Thu 06 Feb 2025 22:07:41 +0000
Files and hashes:         1: v-RhN13CI9T3snBV4rNHRf5hAdQ.crl (hash: RrkPiGYOTlSEHuT6d4GkOBVbraSnBiD1M3s5afPAZDE=)
                          2: 44E601A48AE411EB9FA47119C4F9AE02.roa (hash: RqWjIzRpTkG4RIhz0EwkHDJkKT6pzO4pTDtTG0aBM94=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1736 (0x6c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD98D/serialNumber=BFE461375DC223D4F7B27055E2B34745FE6101D4
        Validity
            Not Before: Jan 30 22:07:41 2025 GMT
            Not After : Feb  6 22:07:41 2025 GMT
        Subject: CN=679bf82d-5a9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:cc:33:f4:fe:a2:98:a8:ef:57:09:4b:50:c9:
                    b0:57:bb:75:3b:ff:83:20:ec:5f:a3:a6:93:b6:fd:
                    00:b9:c9:1e:76:7a:34:ad:37:ba:c7:8b:87:e7:0f:
                    74:b5:a4:64:0e:ff:60:59:17:d0:d6:b7:df:1b:61:
                    ff:1c:a0:e7:2c:7a:db:33:ca:fb:59:8b:ec:32:11:
                    39:e0:85:96:c9:51:25:ff:28:e0:44:bc:9a:04:92:
                    8d:67:b4:a4:b4:72:8f:f4:10:09:58:d6:fd:59:de:
                    b1:de:99:45:03:d8:65:ff:ac:3e:e5:9b:83:bd:d4:
                    57:32:49:db:f4:0a:84:51:4a:b1:10:df:7b:1e:82:
                    a4:41:74:b0:fa:f4:dc:7e:04:29:3a:e9:72:0c:51:
                    a0:94:29:a5:6f:c8:3d:5d:f5:15:e7:03:58:c6:5d:
                    d6:a0:fc:18:37:b9:77:8c:5f:70:d1:82:c3:e0:0b:
                    97:93:ce:c3:be:78:ae:f8:97:40:6c:5a:f5:53:65:
                    53:50:61:90:3f:b2:42:bd:aa:e1:72:49:45:29:07:
                    84:4d:65:c5:3c:c9:70:2e:fb:c6:ba:54:9b:f8:ab:
                    11:66:e4:d1:49:c4:7c:0f:03:56:93:76:f2:dc:eb:
                    25:a3:5b:73:1f:1e:1c:98:98:5d:45:eb:d1:fa:54:
                    83:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:1E:D7:1E:E6:90:32:75:C8:D5:32:20:C4:37:3C:19:0A:BE:6D:B6
            X509v3 Authority Key Identifier:
                keyid:BF:E4:61:37:5D:C2:23:D4:F7:B2:70:55:E2:B3:47:45:FE:61:01:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/v-RhN13CI9T3snBV4rNHRf5hAdQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v-RhN13CI9T3snBV4rNHRf5hAdQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/v-RhN13CI9T3snBV4rNHRf5hAdQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:cd:0b:9c:5d:10:3a:8f:14:05:c7:3f:af:33:a4:16:fb:2d:
         d4:9f:4b:ce:b4:75:f7:ea:62:5d:a3:6b:26:0a:ee:9d:60:26:
         4a:26:ad:dc:0a:a2:f3:dc:93:32:4b:d4:85:b3:61:24:7c:31:
         48:f9:09:a0:13:37:5a:d3:52:76:e7:6a:5e:64:18:d9:4b:ce:
         88:28:e4:ee:c4:c4:41:a4:e1:5f:fb:99:fd:de:6a:56:e5:cd:
         6e:a9:d8:e6:18:fa:21:7c:20:2c:75:99:62:99:33:ab:16:82:
         92:5f:20:2c:af:25:4a:d1:57:52:30:17:0a:d2:ea:98:ce:95:
         fa:81:e6:b5:59:fe:bf:99:7f:cf:06:1f:28:72:fe:53:67:b6:
         c2:b9:17:6a:ca:19:9f:f2:ad:55:0d:78:0d:c0:5e:98:35:05:
         6a:08:22:b4:23:45:27:bc:96:05:a4:00:2e:e3:45:7d:ae:97:
         72:50:3d:27:6a:22:22:a6:51:eb:3a:e6:76:ad:2b:a4:06:bc:
         07:13:7b:af:92:04:62:48:9d:c6:65:8a:d1:d3:d7:fd:38:7f:
         c1:0c:59:4d:06:fb:41:bd:7f:f5:36:0a:76:6e:39:a2:b5:39:
         86:25:e6:22:5a:9b:a3:ca:63:37:b5:3c:8e:d4:42:5b:d8:51:
         c1:79:9d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----