Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft
File:                     fvLsMxvWVD0y25gMUGJsBAfKiYI.mft (raw, json)
Hash identifier:          8zGHiqe7DIvCk8IPyqHAGDSsCn40PdiFT17ID0WT5n0=
Subject key identifier:   D6:DD:0A:C6:3B:E0:0E:F5:AA:0B:0D:60:9D:B7:4F:AD:F7:FE:8C:60
Authority key identifier: 7E:F2:EC:33:1B:D6:54:3D:32:DB:98:0C:50:62:6C:04:07:CA:89:82
Certificate issuer:       /CN=A91D5E23/serialNumber=7EF2EC331BD6543D32DB980C50626C0407CA8982
Certificate serial:       089D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvLsMxvWVD0y25gMUGJsBAfKiYI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft
Manifest number:          0897
Signing time:             Thu 30 Jan 2025 20:36:57 +0000
Manifest this update:     Thu 30 Jan 2025 20:36:56 +0000
Manifest next update:     Thu 06 Feb 2025 20:36:56 +0000
Files and hashes:         1: fvLsMxvWVD0y25gMUGJsBAfKiYI.crl (hash: KYzIN/XlCVWZYeXjrj+xotOeMcaPFWul2vBXUFvD8U4=)
                          2: 70C35E88B07511EA8C0EC372C4F9AE02.roa (hash: uh8Xk70gWxRTmNYaCNUAB+Hh9CL9zqsYHo9ULlX8dpo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2205 (0x89d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5E23/serialNumber=7EF2EC331BD6543D32DB980C50626C0407CA8982
        Validity
            Not Before: Jan 30 20:36:56 2025 GMT
            Not After : Feb  6 20:36:56 2025 GMT
        Subject: CN=679be2e9-0757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:46:8d:28:49:04:da:12:ad:17:e1:37:54:e0:
                    40:39:ed:bc:dc:7d:ff:f4:e0:63:9b:93:c8:8e:34:
                    19:90:17:1f:64:30:98:11:9c:4e:d4:4a:3e:26:10:
                    c7:15:60:50:d6:77:ab:a6:ea:45:e5:46:45:a3:39:
                    28:42:5f:31:ce:ce:3f:f5:5a:af:af:c5:dd:ac:af:
                    56:2a:2c:cf:b7:88:29:f7:23:ca:49:e4:8d:3f:b9:
                    c2:fc:d8:09:5a:db:89:e3:a6:5b:0b:c4:e1:83:53:
                    da:80:c7:87:04:af:b8:23:82:da:ff:7b:5a:d1:0a:
                    40:6c:00:d3:6e:ad:e2:6e:09:58:7b:36:aa:15:87:
                    dd:ce:8a:dd:8d:9b:62:43:a8:ec:11:95:a7:d6:d5:
                    b9:57:d6:f9:76:53:33:32:88:32:e8:5c:18:77:76:
                    15:7b:6e:d1:f2:22:da:6d:6a:d1:1a:aa:c9:aa:00:
                    8f:5b:80:1e:38:6d:5a:b8:1b:c7:00:dd:11:d2:00:
                    41:d1:80:14:07:91:75:98:63:fd:c4:1b:9b:7d:6e:
                    b7:ca:fc:cc:aa:20:02:d9:c4:c7:fb:40:41:ad:ff:
                    04:e1:61:d5:b0:0f:a8:e7:01:99:20:11:d6:21:f0:
                    92:ff:87:4b:31:37:c4:36:f6:46:71:56:7f:44:a3:
                    d9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:DD:0A:C6:3B:E0:0E:F5:AA:0B:0D:60:9D:B7:4F:AD:F7:FE:8C:60
            X509v3 Authority Key Identifier:
                keyid:7E:F2:EC:33:1B:D6:54:3D:32:DB:98:0C:50:62:6C:04:07:CA:89:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvLsMxvWVD0y25gMUGJsBAfKiYI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:66:2f:95:4d:1c:a7:29:f3:13:3d:02:bb:6a:22:62:66:64:
         3d:d3:78:b8:dc:a2:70:43:44:76:c6:63:b1:37:c4:45:b7:4c:
         cf:7c:f5:eb:2d:b2:d0:4a:09:ac:e9:dc:bd:96:fd:34:c0:1f:
         d1:ff:a4:c2:62:70:18:61:b9:29:8d:90:84:ba:ba:a4:7a:51:
         ce:49:c6:e0:fe:86:a7:b5:29:80:84:8e:e7:b1:77:cd:f2:ca:
         92:94:9e:87:60:dd:e6:c7:33:1e:14:93:50:08:62:3d:e6:96:
         70:1e:ef:51:27:c1:a1:5a:27:24:2e:bf:94:8b:e4:29:95:3a:
         71:de:d7:ff:6f:94:ee:ce:5c:76:81:64:60:39:66:5a:ab:c6:
         38:16:d2:04:88:6a:c8:40:61:0b:1d:81:fb:23:31:ae:19:df:
         2c:87:26:e4:f6:40:81:a6:de:3b:c3:8c:9f:a6:21:81:4e:0c:
         75:1e:e7:a6:23:01:f8:25:25:0b:cb:46:97:27:4e:c0:b3:74:
         54:8b:f3:41:76:89:71:ef:dd:ac:fb:77:f7:d4:2e:5a:7d:da:
         31:43:fe:54:f8:68:31:69:c1:36:e7:9c:19:43:b7:70:03:c2:
         e3:70:7c:7f:49:83:b5:af:6c:73:f9:47:7d:99:a5:d8:91:84:
         24:db:5d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----