Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft
File:                     _rhjYz3rcT99klaMcXmFhLC61mY.mft (raw, json)
Hash identifier:          OpVXdywJXeo/KQzNp0DpFEShrnPdwj93LUznKekBqwo=
Subject key identifier:   D6:C8:6E:67:EF:58:DB:F3:30:03:BD:19:9E:CF:9D:70:E2:50:26:9E
Authority key identifier: FE:B8:63:63:3D:EB:71:3F:7D:92:56:8C:71:79:85:84:B0:BA:D6:66
Certificate issuer:       /CN=A91D50A2/serialNumber=FEB863633DEB713F7D92568C71798584B0BAD666
Certificate serial:       B2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_rhjYz3rcT99klaMcXmFhLC61mY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft
Manifest number:          B1
Signing time:             Fri 31 Jan 2025 05:09:52 +0000
Manifest this update:     Fri 31 Jan 2025 05:09:52 +0000
Manifest next update:     Fri 07 Feb 2025 05:09:52 +0000
Files and hashes:         1: _rhjYz3rcT99klaMcXmFhLC61mY.crl (hash: Cnl+UPbQblGjUCRGBeo2e/TGeXg8PypVY5uEodGO8yc=)
                          2: 249FA95E9D4111EFA3DA7F75C4F9AE02.roa (hash: RjAnkgsXYLCqoCPEa7Dh8sDLDDkGHUa+8B9sBZhUxd4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178 (0xb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D50A2/serialNumber=FEB863633DEB713F7D92568C71798584B0BAD666
        Validity
            Not Before: Jan 31 05:09:52 2025 GMT
            Not After : Feb  7 05:09:52 2025 GMT
        Subject: CN=679c5b20-850e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d5:d5:bf:76:1f:27:a0:c7:37:70:7f:41:e4:
                    d3:66:f1:e5:c9:38:9f:f7:19:7b:f1:26:49:a7:ef:
                    9b:37:45:d8:37:65:5d:89:7e:3b:dd:f1:de:d8:14:
                    09:b8:06:af:04:db:01:a0:35:1e:3f:6e:e3:7c:62:
                    4f:17:07:48:37:5e:53:e3:d9:41:ff:74:cc:29:18:
                    2c:b9:2c:0d:63:3b:85:37:a0:95:44:8b:f5:a6:84:
                    be:17:7e:79:e1:7d:c1:56:6d:f6:55:c4:8e:1b:1a:
                    f4:ad:b1:0b:93:f9:81:5c:c2:b8:c1:7f:35:17:30:
                    6f:7f:bc:24:b9:83:39:0f:5d:9d:d1:c6:c7:c9:39:
                    bf:81:54:57:b0:3b:5a:6f:88:e9:14:a5:fa:bb:1d:
                    5b:5f:5f:80:25:2a:cc:fe:b1:ee:ba:7b:3f:c9:c3:
                    11:3a:e6:28:23:41:6d:7c:d7:38:91:8a:ef:f2:fd:
                    f3:9f:5c:5b:d2:5b:d0:d7:52:d8:bf:39:24:42:1a:
                    ee:51:de:83:51:66:cc:39:35:e9:03:4b:7a:39:71:
                    90:16:ff:18:87:45:59:10:81:92:3a:ae:73:54:ca:
                    32:c4:e5:70:77:e0:d1:e1:70:cd:56:75:fb:d9:3d:
                    af:56:8e:47:06:3c:5d:ec:8b:14:fc:72:47:51:fe:
                    12:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:C8:6E:67:EF:58:DB:F3:30:03:BD:19:9E:CF:9D:70:E2:50:26:9E
            X509v3 Authority Key Identifier:
                keyid:FE:B8:63:63:3D:EB:71:3F:7D:92:56:8C:71:79:85:84:B0:BA:D6:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_rhjYz3rcT99klaMcXmFhLC61mY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:49:6d:6a:fc:af:49:ea:fd:38:97:91:22:2a:36:d1:41:65:
         db:3f:62:94:dd:a1:d2:14:a2:39:f7:8d:75:57:e8:36:37:0b:
         e9:3d:d7:82:34:27:23:7d:21:e3:fe:aa:60:27:32:d7:a6:88:
         38:f8:8d:71:f5:1f:2b:b3:b3:34:40:73:1c:26:22:7f:4f:83:
         24:01:b8:a8:3a:72:a3:d5:a4:e2:ba:9b:ea:2d:1a:d7:c2:0d:
         ef:ec:e1:16:3b:dc:e1:09:6f:f6:01:f6:f2:e9:0b:8f:5c:3f:
         3e:44:b8:43:30:80:1b:37:39:67:ea:0a:ac:57:1a:5b:41:9b:
         9c:fe:db:fd:44:e6:67:c0:fb:09:13:bf:e8:d4:64:02:b4:09:
         3b:e9:7e:55:df:9b:c7:23:1b:3d:13:4b:b2:ff:7d:66:4b:c4:
         e6:5d:c4:fe:2c:63:d6:e3:12:4b:81:97:52:ea:f5:1e:65:fa:
         29:10:76:88:ec:da:90:76:61:3d:a5:68:84:a5:d5:11:f0:0c:
         15:6f:36:e9:45:8c:b1:de:8c:72:ff:ef:fb:87:e6:a7:e1:ae:
         a3:c9:b7:31:44:27:b5:4c:b0:57:1c:91:50:b9:9a:21:5d:14:
         68:2a:d6:d3:11:ac:5f:f0:42:ab:23:4e:0b:ef:27:7b:d4:4e:
         ac:30:1e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----