Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.mft
File:                     _D97sEVCVvMfJcoAhkvDpr11X5Y.mft (raw, json)
Hash identifier:          eHkWjRr8pO8XP0wZxTJIC8y21yAIy7eFStWxtIg9FjY=
Subject key identifier:   39:09:B7:E4:3D:3C:00:6A:91:76:61:DB:2E:3F:84:1D:0A:F1:57:B5
Authority key identifier: FC:3F:7B:B0:45:42:56:F3:1F:25:CA:00:86:4B:C3:A6:BD:75:5F:96
Certificate issuer:       /CN=A91CE2DE/serialNumber=FC3F7BB0454256F31F25CA00864BC3A6BD755F96
Certificate serial:       01D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D97sEVCVvMfJcoAhkvDpr11X5Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.mft
Manifest number:          01D0
Signing time:             Fri 31 Jan 2025 02:18:33 +0000
Manifest this update:     Fri 31 Jan 2025 02:18:33 +0000
Manifest next update:     Fri 07 Feb 2025 02:18:33 +0000
Files and hashes:         1: _D97sEVCVvMfJcoAhkvDpr11X5Y.crl (hash: cu+lwkjESQF9dVmCzqWzAuhTPKjyDLehMB0Nhc6sxtQ=)
                          2: 97B4F5603B3D11ED822BB46CC4F9AE02.roa (hash: XDsE6Ddixa5A+mdde/4fTJzczS6XmbdyS2Na1+31tR8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 468 (0x1d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE2DE/serialNumber=FC3F7BB0454256F31F25CA00864BC3A6BD755F96
        Validity
            Not Before: Jan 31 02:18:33 2025 GMT
            Not After : Feb  7 02:18:33 2025 GMT
        Subject: CN=679c32f9-1547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:37:4b:69:4a:2f:ed:71:b0:af:cb:9b:4b:a7:
                    af:e6:13:b6:ae:ec:c3:02:21:94:cd:2a:38:36:c0:
                    1d:44:4a:35:86:9e:fe:24:fd:d1:53:e6:1c:48:a6:
                    1d:3c:cc:a7:cd:09:09:23:2c:73:cc:4d:20:b4:79:
                    b3:ef:7f:c8:2f:3e:20:b4:4c:21:2f:96:e4:39:6e:
                    09:7f:df:f3:4a:63:19:40:2c:d0:a5:19:05:b7:f6:
                    4b:87:bd:66:70:af:40:0a:65:6d:2d:7a:f8:27:fd:
                    45:b5:07:91:90:4a:90:bc:61:7c:b8:1c:ed:52:67:
                    19:bc:d5:c1:ff:f9:51:ab:f9:24:b0:c0:21:bb:e2:
                    6e:53:b8:fa:7d:f2:51:b3:46:70:52:e7:31:c2:ba:
                    29:f5:94:10:b0:c2:f6:18:f1:59:a2:9d:72:7b:26:
                    0a:6c:7c:7c:55:23:4b:77:f2:cc:5c:aa:29:b6:56:
                    66:5c:a1:64:2b:48:a1:d0:81:30:88:9c:3a:00:1b:
                    9d:49:7f:78:3f:3a:4e:86:43:38:08:8a:72:7c:ea:
                    ff:3d:f6:13:93:ad:e3:cf:24:98:a6:60:2a:38:c1:
                    9b:6f:b1:51:f8:9b:9f:11:58:16:25:05:38:f5:9c:
                    67:df:93:b7:db:e9:af:82:21:51:44:7e:c7:be:0f:
                    bf:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:09:B7:E4:3D:3C:00:6A:91:76:61:DB:2E:3F:84:1D:0A:F1:57:B5
            X509v3 Authority Key Identifier:
                keyid:FC:3F:7B:B0:45:42:56:F3:1F:25:CA:00:86:4B:C3:A6:BD:75:5F:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D97sEVCVvMfJcoAhkvDpr11X5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:5e:61:6c:f5:53:1d:34:33:e2:bf:e1:57:90:2e:f4:39:84:
         f3:bf:74:41:b8:03:f9:9e:3e:da:4f:ab:00:f4:cb:b0:12:4d:
         6d:46:80:55:e0:0b:83:6b:d1:d9:6c:12:91:ac:2f:92:e7:2a:
         aa:03:cf:a2:e1:79:83:98:7d:a5:e7:46:2a:08:20:61:37:54:
         1a:0e:30:48:0b:c9:ba:5f:2f:4e:17:ac:bd:87:00:69:23:e5:
         be:6a:71:78:00:cf:4e:69:49:55:2a:62:f3:a0:15:d2:83:7b:
         09:c3:0e:52:2f:0c:f8:ee:59:d8:2b:7c:51:83:5d:3f:7c:ad:
         a6:b5:60:a6:61:cf:d8:46:0c:6d:f5:03:80:5c:fa:02:1d:3b:
         d8:8e:5a:05:51:af:78:98:2c:e5:4e:8a:a3:5c:01:94:3e:98:
         32:0f:91:70:16:c4:88:f5:c8:21:4d:73:7b:4c:dd:cf:b1:03:
         7e:0d:52:8a:45:bc:49:ca:55:55:fd:e8:2c:0e:d6:2f:20:bb:
         d4:86:13:32:a7:1b:66:28:a0:73:24:e4:6d:2e:02:07:cc:cb:
         99:45:34:4f:17:da:e9:1c:ac:fc:d1:51:a1:ca:12:44:12:1a:
         b5:c7:d9:2e:d6:86:ce:7e:f2:2e:a2:f3:dc:00:71:45:4a:b4:
         d8:b3:1d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----