Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft
File:                     E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft (raw, json)
Hash identifier:          Xpr0Ibieb9Au7Hnx0dOcZPEAbakgUP5foHb/Ztl/P0I=
Subject key identifier:   45:EE:33:21:77:E0:1B:E5:D4:82:0C:FB:3B:8B:CE:8D:91:45:C9:ED
Authority key identifier: 13:67:41:BD:9E:87:0F:06:EC:E5:CB:35:5B:8C:75:71:CC:96:BA:74
Certificate issuer:       /CN=A91CE9D6/serialNumber=136741BD9E870F06ECE5CB355B8C7571CC96BA74
Certificate serial:       09C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft
Manifest number:          09B3
Signing time:             Thu 30 Jan 2025 20:06:32 +0000
Manifest this update:     Thu 30 Jan 2025 20:06:32 +0000
Manifest next update:     Thu 06 Feb 2025 20:06:32 +0000
Files and hashes:         1: E2dBvZ6HDwbs5cs1W4x1ccyWunQ.crl (hash: tUVY3OvWF+jZhgmhD9giYdAVjT1C09DLwaoZyZ3YBsM=)
                          2: 722D43AC7A5A11EABD77E486C4F9AE02.roa (hash: gpPg/16kKxPZtosxwk3uS2OGAiNWAdV4RvEaBetwtjY=)
                          3: E4EFE6905ECB11ECA9B55A3BC4F9AE02.roa (hash: 2/vrRanjIvJ85A1uVxImmh8dfMsQj3ydRiChMXIyicw=)
                          4: A1C764027A5B11EA98745A0EC4F9AE02.roa (hash: Nzvt2pSeGZD3qdrCxDPbO/iQuuVNl0d8y3dg1zJR1Nk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2502 (0x9c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE9D6/serialNumber=136741BD9E870F06ECE5CB355B8C7571CC96BA74
        Validity
            Not Before: Jan 30 20:06:32 2025 GMT
            Not After : Feb  6 20:06:32 2025 GMT
        Subject: CN=679bdbc8-a61e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b8:4c:6e:e3:28:e0:c1:23:9d:4b:80:77:87:
                    b0:de:f2:ef:7a:55:d3:aa:0f:26:a2:49:b2:76:d3:
                    10:36:2b:3e:aa:55:00:62:0d:30:5c:ef:6f:35:c8:
                    b6:bd:40:43:ab:47:cd:d1:62:a2:21:47:33:eb:4e:
                    64:a3:c1:c9:c0:60:e3:fe:f9:ce:7d:42:6f:74:91:
                    c6:0d:4d:1b:4a:1f:3c:5c:7b:78:33:cf:92:ed:31:
                    b7:db:3a:a6:eb:ac:37:10:1e:88:4e:d1:fa:d9:76:
                    d1:67:81:5e:72:59:4e:09:65:c8:06:52:bb:e6:70:
                    0f:e4:38:9d:c1:5e:e6:ba:d2:c8:23:41:0b:6c:ce:
                    63:a3:f2:af:0c:f0:ce:57:2f:a2:c9:8b:01:a7:19:
                    75:8d:18:11:f8:ab:af:c4:2b:3d:4c:ec:4a:1b:5f:
                    8a:39:75:f7:c2:60:5a:8a:4c:f7:d6:b7:4d:fa:42:
                    58:60:71:e7:a9:fe:b2:27:ed:fe:19:34:a5:e5:84:
                    17:fd:3a:96:b3:0c:99:ab:be:09:50:0b:ee:e3:d0:
                    39:00:5f:99:f9:e5:bd:77:48:4c:22:f7:35:fa:a2:
                    28:f6:7e:2b:76:f6:e4:45:45:82:cc:be:18:4f:14:
                    b7:33:60:fb:a1:d8:73:10:1b:aa:1f:9f:c5:e0:54:
                    c7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:EE:33:21:77:E0:1B:E5:D4:82:0C:FB:3B:8B:CE:8D:91:45:C9:ED
            X509v3 Authority Key Identifier:
                keyid:13:67:41:BD:9E:87:0F:06:EC:E5:CB:35:5B:8C:75:71:CC:96:BA:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:9f:61:d3:46:67:73:3d:c3:0b:31:a7:12:55:fa:2e:86:d3:
         da:7b:5a:5a:f3:89:5e:69:8b:29:3c:59:7b:8e:ef:b8:25:01:
         20:e4:69:95:b2:08:2d:41:50:55:91:7e:68:64:c5:12:02:98:
         5d:f7:39:af:ff:db:c5:d9:d9:4c:10:9b:67:cc:db:f0:b4:8b:
         7b:37:2b:d6:ee:fc:66:69:01:3c:86:02:d3:64:30:25:9e:15:
         17:40:fa:94:00:b4:27:9b:c8:b1:a1:b2:b6:ea:97:1c:f2:cf:
         17:5c:de:ed:85:7a:05:8e:e0:e6:df:26:77:d2:66:fc:ee:0a:
         8d:72:83:ce:ed:42:64:82:1f:72:86:c6:23:eb:3f:d9:45:d2:
         0d:c9:7a:43:7c:68:ff:50:db:68:b5:28:a4:10:3e:d8:cf:3b:
         6f:8d:50:8e:27:f5:25:42:d3:54:f2:a4:db:10:5c:db:74:23:
         57:63:8e:f9:3d:7d:24:2d:fb:26:2f:7e:52:af:bc:d9:6e:0b:
         a8:3f:2a:ad:77:99:96:16:4c:3e:f5:46:73:e0:a2:ad:7a:9d:
         fa:dd:f0:00:e7:70:ed:3f:65:b1:46:5f:c9:9f:9a:e2:50:d9:
         51:78:3a:6d:cd:76:1c:a7:5d:a9:d4:68:ea:fe:ed:55:09:77:
         e8:72:26:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----