Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.mft
File:                     qg08vlkeG_ZBGL9vA2QSX6abipA.mft (raw, json)
Hash identifier:          AxQiIo+MHKRgIJIfGB7Uv5BPAbcZkU5pg4umRpie3SQ=
Subject key identifier:   D5:5E:15:60:29:97:B9:3E:EB:A9:0E:39:13:06:1A:B4:77:85:FC:B6
Authority key identifier: AA:0D:3C:BE:59:1E:1B:F6:41:18:BF:6F:03:64:12:5F:A6:9B:8A:90
Certificate issuer:       /CN=A91D6E35/serialNumber=AA0D3CBE591E1BF64118BF6F0364125FA69B8A90
Certificate serial:       0649
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qg08vlkeG_ZBGL9vA2QSX6abipA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.mft
Manifest number:          0641
Signing time:             Thu 30 Jan 2025 22:29:57 +0000
Manifest this update:     Thu 30 Jan 2025 22:29:57 +0000
Manifest next update:     Thu 06 Feb 2025 22:29:57 +0000
Files and hashes:         1: qg08vlkeG_ZBGL9vA2QSX6abipA.crl (hash: yCFjGsRlPYwskq1dzbYkw8Vm2LIBeF31Am4sT2lkEBo=)
                          2: EE188D209F2B11EDBB1C587AC4F9AE02.roa (hash: n4lT+gWmvtn9anqCH3BPKg8IGWZd3CwkT2CnrdkmB4M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1609 (0x649)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6E35/serialNumber=AA0D3CBE591E1BF64118BF6F0364125FA69B8A90
        Validity
            Not Before: Jan 30 22:29:57 2025 GMT
            Not After : Feb  6 22:29:57 2025 GMT
        Subject: CN=679bfd65-2386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:10:f3:1c:3b:d2:ca:4f:bc:f0:27:21:72:df:
                    4e:96:15:90:ab:88:19:d9:52:d5:dd:4d:87:33:8f:
                    64:1f:7e:53:3c:58:50:b1:4a:6d:95:81:91:1e:f7:
                    77:27:91:13:94:7b:66:e8:47:c4:03:41:bc:33:d6:
                    fe:4f:43:3d:70:6d:a6:77:81:2c:5f:7d:ee:19:88:
                    15:af:06:0d:0a:ea:17:2d:dc:21:f7:65:14:23:f2:
                    70:40:dd:97:70:69:03:6c:03:6c:06:5b:93:c4:d0:
                    9a:18:c4:dc:84:34:ec:21:9f:b4:7a:2b:d7:bb:cf:
                    22:9f:04:f0:5e:30:a8:d4:d1:47:d9:96:ec:a3:80:
                    08:15:e2:58:2e:f7:62:3c:5a:81:00:fe:cd:40:7e:
                    d6:45:12:48:20:51:4b:4e:14:ac:13:86:1f:e2:82:
                    30:52:98:f4:0c:f6:d8:9a:38:46:82:d1:fb:1c:4b:
                    f2:fb:fb:02:b4:1e:f0:3c:5f:bd:4a:d5:33:7b:25:
                    f2:fa:b3:ec:70:7c:cf:04:f4:63:8b:b2:9b:26:ef:
                    a6:b6:c2:2f:f6:08:6b:99:50:e3:e7:f8:f5:47:60:
                    8f:1f:41:75:fd:53:e4:e3:09:ad:3e:d0:3b:81:a4:
                    9f:35:57:c6:98:2f:09:81:c2:ef:dd:44:b9:92:e9:
                    c7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:5E:15:60:29:97:B9:3E:EB:A9:0E:39:13:06:1A:B4:77:85:FC:B6
            X509v3 Authority Key Identifier:
                keyid:AA:0D:3C:BE:59:1E:1B:F6:41:18:BF:6F:03:64:12:5F:A6:9B:8A:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qg08vlkeG_ZBGL9vA2QSX6abipA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:9f:e7:28:ec:84:06:92:7f:fd:e5:bf:41:4b:74:0e:f5:31:
         be:16:17:94:ec:8c:36:58:c9:64:f0:55:57:52:3c:c1:57:82:
         2c:1d:17:6f:ca:df:23:ef:f4:34:cb:b7:65:12:db:86:9a:6e:
         c7:8b:73:cc:2b:1f:23:fd:7f:a8:48:81:a3:61:20:f5:da:54:
         72:f8:e8:1f:9c:fa:a9:c7:dd:12:24:8e:5e:c6:5a:4c:05:b6:
         d7:c7:51:93:b0:2d:01:64:7e:7a:bd:79:fb:b7:11:79:59:1e:
         b1:7a:28:4a:6f:5f:e9:b7:bf:d7:b5:99:c4:1d:6f:cb:37:ef:
         ec:b2:69:32:7e:cf:6b:c3:12:c3:fa:08:7b:f7:43:1d:88:e7:
         bd:f6:52:45:c0:ab:10:00:13:47:d1:09:18:d2:97:3e:09:77:
         6c:8e:47:b4:19:70:27:cb:43:de:63:22:56:54:13:40:53:60:
         b8:b1:df:b4:94:b7:8b:3e:a6:03:6d:6e:3f:b5:81:af:57:97:
         da:26:5c:9e:a9:ed:e6:f7:c6:88:b4:1d:71:bc:0c:4e:bc:7a:
         b7:42:da:55:35:17:1b:9b:54:56:8e:89:5e:c1:01:bc:f8:ab:
         14:e4:eb:c9:e7:8b:f1:91:83:80:07:be:88:9d:ce:c6:6a:fa:
         67:b9:6a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----