Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09B8/6AB99E262C7211EFB89B0F84C4F9AE02/4-j_B54D_aQzRoidk3ZblZ9uHVk.mft
File:                     4-j_B54D_aQzRoidk3ZblZ9uHVk.mft (raw, json)
Hash identifier:          zG6bxQSM7ovyQBy/PjKbcNaKuh7iXb6boNMnLCQXtfQ=
Subject key identifier:   16:03:7C:B7:EA:9D:4B:2D:09:18:F4:74:0F:A4:CD:01:1C:4D:4F:79
Authority key identifier: E3:E8:FF:07:9E:03:FD:A4:33:46:88:9D:93:76:5B:95:9F:6E:1D:59
Certificate issuer:       /CN=A91D09B8/serialNumber=E3E8FF079E03FDA43346889D93765B959F6E1D59
Certificate serial:       79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-j_B54D_aQzRoidk3ZblZ9uHVk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D09B8/6AB99E262C7211EFB89B0F84C4F9AE02/4-j_B54D_aQzRoidk3ZblZ9uHVk.mft
Manifest number:          77
Signing time:             Fri 31 Jan 2025 05:49:02 +0000
Manifest this update:     Fri 31 Jan 2025 05:49:01 +0000
Manifest next update:     Fri 07 Feb 2025 05:49:01 +0000
Files and hashes:         1: 4-j_B54D_aQzRoidk3ZblZ9uHVk.crl (hash: 3yZftz/FXgOAl+i2dhYnbaQ/yd3Y85kPALm0MQyq7GU=)
                          2: 7594FBFA2C7311EFA27A6526C4F9AE02.roa (hash: MW4brkS6iGYL+cXbHPuK8G2FUwzp/GEC0uyblPeDq90=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121 (0x79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D09B8/serialNumber=E3E8FF079E03FDA43346889D93765B959F6E1D59
        Validity
            Not Before: Jan 31 05:49:01 2025 GMT
            Not After : Feb  7 05:49:01 2025 GMT
        Subject: CN=679c644e-a6d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a1:cf:cc:13:3c:22:8d:23:ed:f0:7a:4d:9a:
                    ff:98:c4:51:a5:90:67:5a:bd:77:bd:60:ea:f4:17:
                    86:2a:dc:75:f6:e0:88:cf:c3:a1:1c:ff:6e:8c:c0:
                    e8:cd:c7:09:cd:db:f5:41:0c:d3:c1:db:c2:a5:0c:
                    7e:26:ae:4a:87:04:d0:98:95:5b:3e:8a:cc:20:b9:
                    90:5c:1d:fa:11:14:6e:a2:f7:e5:95:84:d0:40:f3:
                    da:70:87:51:27:70:d2:c4:3d:e8:90:b6:d7:fd:74:
                    6c:f7:78:df:ea:63:b4:26:3a:27:26:f8:66:fa:77:
                    55:6b:31:62:59:f7:9b:68:9a:11:6b:2d:40:d0:94:
                    9c:42:fc:57:f5:6b:9f:46:3a:6e:75:36:b0:13:eb:
                    54:90:b3:dc:4a:0a:99:de:4f:47:0a:23:e6:d3:da:
                    79:0c:90:26:70:8e:3e:c1:5e:bd:79:18:dc:27:69:
                    bb:92:0e:e9:75:ae:30:5c:d6:be:41:e4:50:71:7c:
                    32:72:77:01:a4:32:26:61:dc:16:fe:1a:55:81:da:
                    c6:04:9c:5a:29:98:75:75:2f:31:9f:6d:b3:02:1e:
                    4a:2f:90:ef:8d:18:02:55:c9:8d:20:ef:84:8b:13:
                    6e:1f:5e:40:b0:bf:39:09:d0:96:68:1a:5d:99:51:
                    57:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:03:7C:B7:EA:9D:4B:2D:09:18:F4:74:0F:A4:CD:01:1C:4D:4F:79
            X509v3 Authority Key Identifier:
                keyid:E3:E8:FF:07:9E:03:FD:A4:33:46:88:9D:93:76:5B:95:9F:6E:1D:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D09B8/6AB99E262C7211EFB89B0F84C4F9AE02/4-j_B54D_aQzRoidk3ZblZ9uHVk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-j_B54D_aQzRoidk3ZblZ9uHVk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09B8/6AB99E262C7211EFB89B0F84C4F9AE02/4-j_B54D_aQzRoidk3ZblZ9uHVk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:62:98:58:79:da:a9:39:c1:ea:8e:0f:f7:f4:1a:db:47:d8:
         c7:98:94:32:15:45:cc:6b:ce:51:5e:34:b2:43:37:fe:74:7e:
         6b:d7:d1:58:c1:fb:ce:fe:aa:c8:6c:8b:27:50:62:c6:dd:cd:
         60:29:fd:64:e1:23:b9:fb:85:1c:37:4b:7c:e4:98:9c:cb:05:
         0a:0d:dd:4d:6d:c7:b2:53:d7:61:9b:c2:3c:1b:07:da:16:89:
         ce:cc:e7:d6:63:30:1c:fd:5b:97:d4:1e:72:1b:ba:43:40:ed:
         53:34:f9:4f:59:ca:b9:34:41:01:5d:79:cf:be:f5:df:d1:1e:
         a1:3c:82:bb:cc:88:c7:44:b7:c2:f4:95:5c:d5:27:4e:8d:f0:
         67:fa:b2:b6:53:6a:6d:71:dd:54:2e:55:de:42:af:ec:8c:6b:
         39:5c:1e:1f:39:da:1e:f0:74:d0:7f:db:b9:17:13:eb:c2:a5:
         e2:23:59:69:7b:4d:d3:f3:30:68:d1:73:bc:86:cb:00:a9:e6:
         85:7f:30:78:ef:43:32:63:c3:33:4e:20:2a:ce:56:37:e4:47:
         ac:29:35:a5:e6:95:81:37:c8:c1:76:97:37:52:59:0c:8a:47:
         1f:a6:bf:a3:75:38:b4:31:78:c5:17:c9:7c:8c:2a:8f:d6:79:
         d8:ad:29:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----