Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.mft
File:                     Qql4rYPdXtKaTl3bYbVvExelpaQ.mft (raw, json)
Hash identifier:          o6GXnLfsgTUWManT3qZs8mgCBhL37dXveEu9jsEU+1s=
Subject key identifier:   0F:5C:03:9A:0E:BC:78:B3:00:4D:B2:D3:8A:4A:68:FE:12:6E:CC:FC
Authority key identifier: 42:A9:78:AD:83:DD:5E:D2:9A:4E:5D:DB:61:B5:6F:13:17:A5:A5:A4
Certificate issuer:       /CN=A91D4803/serialNumber=42A978AD83DD5ED29A4E5DDB61B56F1317A5A5A4
Certificate serial:       04FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qql4rYPdXtKaTl3bYbVvExelpaQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.mft
Manifest number:          04F6
Signing time:             Thu 30 Jan 2025 23:43:28 +0000
Manifest this update:     Thu 30 Jan 2025 23:43:27 +0000
Manifest next update:     Thu 06 Feb 2025 23:43:27 +0000
Files and hashes:         1: Qql4rYPdXtKaTl3bYbVvExelpaQ.crl (hash: dynyfZN0YojSJ8TqvILyhpdFhrnXgGxK5mgKPAx6Gm8=)
                          2: 2B1B8C92F9E511EBBB9B5D22C4F9AE02.roa (hash: hZNj0hXIhx7iHvLN1BguzuArYcQdXQGnTsHHjJIXTSA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1277 (0x4fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4803/serialNumber=42A978AD83DD5ED29A4E5DDB61B56F1317A5A5A4
        Validity
            Not Before: Jan 30 23:43:27 2025 GMT
            Not After : Feb  6 23:43:27 2025 GMT
        Subject: CN=679c0ea0-b4cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f9:08:d7:85:e5:7f:4c:90:e9:66:e5:17:1a:
                    37:19:5c:74:ec:16:ef:33:d1:09:9f:a7:a6:68:9e:
                    91:26:59:15:6c:91:bf:e0:31:6e:34:7c:73:60:b6:
                    99:03:d1:12:78:1f:47:87:93:6e:bb:36:9c:0c:3e:
                    f0:52:2f:8b:43:6f:52:7f:dc:7d:95:53:9d:35:16:
                    f2:55:0b:a4:c9:e8:e7:bf:cf:ff:11:4c:90:96:42:
                    a6:e5:d3:31:59:23:81:28:92:80:ca:44:c4:31:a9:
                    24:31:2c:14:8d:57:f8:79:79:d5:77:95:2f:70:89:
                    c1:89:28:7f:75:9d:e9:f8:f8:e5:20:1c:7a:2e:97:
                    72:5b:9e:38:9a:b8:9a:f1:15:a3:66:e3:5e:cf:c1:
                    34:d5:11:78:11:68:6e:63:b1:79:15:e2:4d:9e:89:
                    31:4a:a4:91:a1:07:3c:e0:be:e1:31:17:b1:f6:85:
                    17:cc:1b:ce:76:c5:3d:9c:27:ef:18:b1:1e:1b:58:
                    d0:14:3e:ac:eb:ad:df:94:52:f6:78:b6:91:20:4a:
                    24:b7:eb:87:ba:9e:fb:c1:54:e6:58:a2:93:8a:11:
                    81:49:13:f1:50:bd:41:ea:f9:ba:7c:1f:c1:d7:f9:
                    7f:d5:2b:8c:67:b7:57:80:c5:df:be:77:1c:a0:b3:
                    de:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:5C:03:9A:0E:BC:78:B3:00:4D:B2:D3:8A:4A:68:FE:12:6E:CC:FC
            X509v3 Authority Key Identifier:
                keyid:42:A9:78:AD:83:DD:5E:D2:9A:4E:5D:DB:61:B5:6F:13:17:A5:A5:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qql4rYPdXtKaTl3bYbVvExelpaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:e6:d5:00:de:d9:b9:5d:6e:b0:57:4a:be:fa:86:81:d2:9c:
         17:c3:ca:cc:3e:9d:ac:82:ac:76:b3:38:08:9b:62:3e:6b:b4:
         69:9e:dd:a7:74:60:c7:d5:66:c5:81:8c:7e:7f:3f:23:18:bf:
         bf:7f:59:3d:1d:2b:75:52:af:4d:85:f7:97:c9:a5:2d:1e:62:
         bf:7f:b7:e9:a7:9c:64:9a:40:a8:bb:81:b6:0a:a3:2a:c5:e8:
         87:f8:52:b6:e9:ec:2d:80:86:b1:db:26:72:13:03:87:df:47:
         da:b5:da:6b:46:90:bd:b7:bd:92:1f:75:ec:7e:52:a8:c8:60:
         3e:d2:e1:ac:63:3b:93:6b:86:04:7b:de:76:06:e4:e9:67:c7:
         55:78:80:50:d4:53:43:4a:de:ac:0d:5c:22:4b:09:d1:81:5c:
         c1:e7:d6:b9:1f:42:13:b8:43:4a:15:ee:26:c4:c9:86:3d:f0:
         e9:a8:db:43:e2:8f:3b:57:6c:4b:84:78:51:3f:d2:e7:03:0c:
         78:b5:9d:b9:82:c8:ac:c1:b9:69:da:66:86:9d:47:99:4d:4e:
         ca:1b:e0:04:b7:69:44:72:34:fc:7e:2f:f7:f6:68:99:85:90:
         ad:60:b6:22:61:83:36:a9:fa:54:d9:86:b4:1e:ac:39:21:86:
         e1:43:13:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----