Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE35F/EC34742CF91A11EC901B8F25C4F9AE02/gaOMiwlmciXuBPc67PoJWQ0fQUw.mft
File:                     gaOMiwlmciXuBPc67PoJWQ0fQUw.mft (raw, json)
Hash identifier:          eMPKBulLMLNAF9qyVWOPomgG/RTKpfhB3YHKiZLHCnk=
Subject key identifier:   7B:53:4F:37:8C:43:9E:34:B8:4B:BF:F1:7D:52:39:DF:7E:50:77:10
Authority key identifier: 81:A3:8C:8B:09:66:72:25:EE:04:F7:3A:EC:FA:09:59:0D:1F:41:4C
Certificate issuer:       /CN=A91CE35F/serialNumber=81A38C8B09667225EE04F73AECFA09590D1F414C
Certificate serial:       0274
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaOMiwlmciXuBPc67PoJWQ0fQUw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE35F/EC34742CF91A11EC901B8F25C4F9AE02/gaOMiwlmciXuBPc67PoJWQ0fQUw.mft
Manifest number:          0270
Signing time:             Fri 31 Jan 2025 02:15:57 +0000
Manifest this update:     Fri 31 Jan 2025 02:15:57 +0000
Manifest next update:     Fri 07 Feb 2025 02:15:57 +0000
Files and hashes:         1: gaOMiwlmciXuBPc67PoJWQ0fQUw.crl (hash: mj9sWE4gqkZkfBD0oYJTSZJyNL40LfM0TzY4lsk9Btc=)
                          2: 2E18B9F4F91E11EC9E48A02BC4F9AE02.roa (hash: ZJWgSDrLFfNOuPTNgDdPSzBJ/e3KlQSzPNP0r4rvObw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 628 (0x274)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE35F/serialNumber=81A38C8B09667225EE04F73AECFA09590D1F414C
        Validity
            Not Before: Jan 31 02:15:57 2025 GMT
            Not After : Feb  7 02:15:57 2025 GMT
        Subject: CN=679c325d-989f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:14:5b:99:66:5f:bf:b6:88:49:70:0e:7c:6c:
                    9d:e3:ff:29:c2:1d:c7:b9:66:6c:27:80:df:9d:42:
                    c2:52:d5:41:74:2e:b4:26:a2:ca:8f:51:a8:9f:98:
                    04:33:04:2e:f0:1d:da:b6:f6:a9:d4:b7:6f:1f:c0:
                    ee:e5:42:73:16:a1:8f:00:54:97:3e:43:03:e3:0f:
                    96:99:d9:76:6a:57:88:17:5e:9a:f3:6b:52:ab:f7:
                    58:b0:a8:f9:fd:ad:af:8c:38:0e:74:4f:68:35:7d:
                    d4:c8:57:0d:e4:cf:0f:6c:9c:7c:55:f0:b2:a7:42:
                    68:5b:92:1f:36:95:90:28:bc:d3:3b:18:b7:4e:3a:
                    d6:66:20:b7:77:ce:73:05:15:d2:2a:a7:58:b0:7e:
                    d0:9b:03:ec:d1:7b:58:8e:67:cc:83:70:32:cf:81:
                    f5:45:c7:fc:ca:7c:52:6b:bb:d3:c6:42:4e:c2:81:
                    a0:ee:01:fd:6c:97:20:fc:01:a6:c3:6e:92:97:f8:
                    f1:c3:fd:a0:4e:f2:07:f9:e0:63:96:83:e8:c5:4d:
                    45:67:5e:c3:0f:59:32:85:bc:5c:79:f5:c3:07:f9:
                    9e:af:c3:ef:0c:e9:8d:c1:60:c2:73:77:75:b8:dc:
                    11:3d:3a:91:5e:e2:bb:15:d0:1f:8f:b8:d0:2b:e1:
                    9f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:53:4F:37:8C:43:9E:34:B8:4B:BF:F1:7D:52:39:DF:7E:50:77:10
            X509v3 Authority Key Identifier:
                keyid:81:A3:8C:8B:09:66:72:25:EE:04:F7:3A:EC:FA:09:59:0D:1F:41:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE35F/EC34742CF91A11EC901B8F25C4F9AE02/gaOMiwlmciXuBPc67PoJWQ0fQUw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaOMiwlmciXuBPc67PoJWQ0fQUw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE35F/EC34742CF91A11EC901B8F25C4F9AE02/gaOMiwlmciXuBPc67PoJWQ0fQUw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:45:13:ab:e2:fc:5f:4d:53:88:5a:9f:12:7c:d1:05:19:cb:
         02:c1:6b:6b:88:bb:62:bd:ec:ef:a0:49:ef:45:e5:73:fc:23:
         38:80:ee:ed:35:ba:2e:3c:2f:33:cd:ac:c0:68:dd:c0:cc:76:
         6b:c6:4f:a2:e5:38:cd:12:fa:aa:f0:7d:b7:78:64:ff:99:59:
         25:88:55:b7:94:4a:f7:52:68:db:15:27:78:fb:27:f8:68:40:
         12:25:1f:a6:3c:1d:a3:84:70:ac:fc:1c:1f:d3:3a:c3:61:fd:
         3a:6e:97:38:54:c2:d7:fb:37:9d:6c:bf:15:c6:60:b0:07:96:
         16:1f:35:0c:7a:a2:59:6d:1e:8c:b6:13:c5:54:60:8b:fe:08:
         c1:73:be:fd:3c:f1:7c:3f:49:49:80:7f:2b:de:50:72:15:15:
         72:e3:35:11:a4:eb:4c:92:17:6f:bf:bb:8e:0a:84:55:93:8a:
         2c:08:a9:c2:41:ab:04:c3:29:b9:e1:16:8b:8a:cf:93:a1:cc:
         3e:ed:dc:9b:0e:05:f3:cc:71:86:ed:95:e9:47:47:a7:79:d1:
         b5:e1:15:09:a7:87:3f:f8:0b:0b:3c:dc:38:88:2d:42:6a:e9:
         4e:f5:12:70:66:52:c0:18:dc:21:3b:68:72:4b:2d:d2:6a:51:
         d5:90:ff:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----