Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.mft
File:                     10XhyGsYGPfQVj-Q6LoSvosa43g.mft (raw, json)
Hash identifier:          n2H7QzQEb2k5WtLWNGiY7gddz/s/nCjIW8Ix821YgPo=
Subject key identifier:   95:3E:D1:36:47:83:C1:EA:E8:93:D1:3B:D2:DA:FD:DC:8F:81:FA:48
Authority key identifier: D7:45:E1:C8:6B:18:18:F7:D0:56:3F:90:E8:BA:12:BE:8B:1A:E3:78
Certificate issuer:       /CN=A91D97C4/serialNumber=D745E1C86B1818F7D0563F90E8BA12BE8B1AE378
Certificate serial:       011A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10XhyGsYGPfQVj-Q6LoSvosa43g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.mft
Manifest number:          0117
Signing time:             Fri 31 Jan 2025 04:00:15 +0000
Manifest this update:     Fri 31 Jan 2025 04:00:14 +0000
Manifest next update:     Fri 07 Feb 2025 04:00:14 +0000
Files and hashes:         1: 10XhyGsYGPfQVj-Q6LoSvosa43g.crl (hash: 4qu3ndB0pCqXdVa6TnDtWJAM+aOM07M3K6lJgBtQ4xo=)
                          2: 12DD779467A211EEA8239268C4F9AE02.roa (hash: 7lqdZ2FcePrtK+ORkGuFUebt7bprHrcQU1BOkcrtW3A=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 282 (0x11a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D97C4/serialNumber=D745E1C86B1818F7D0563F90E8BA12BE8B1AE378
        Validity
            Not Before: Jan 31 04:00:14 2025 GMT
            Not After : Feb  7 04:00:14 2025 GMT
        Subject: CN=679c4acf-d6fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d8:72:51:84:cb:78:89:f6:39:4a:4b:b2:04:
                    d9:a9:d9:e0:b0:35:7e:b5:1c:b0:03:dc:96:8e:42:
                    54:72:6f:90:0a:78:fe:6c:48:cf:9f:f6:24:1a:b3:
                    ed:a2:88:19:bd:44:a1:b3:61:84:29:19:e4:dd:d4:
                    b9:fa:f5:4c:a1:f4:4a:d8:b9:51:17:f4:80:b2:26:
                    45:7f:b1:c2:d0:e3:a5:a0:23:2a:dc:5f:22:aa:3f:
                    df:ec:a6:56:a3:aa:20:35:0d:cb:37:f5:bb:8f:67:
                    c2:4f:83:9e:26:69:8e:d6:f8:dd:4b:a4:91:cb:b9:
                    90:fc:da:0e:84:f4:40:8b:2e:74:88:2b:4c:9d:d4:
                    fa:22:d5:ff:00:19:3e:5f:37:79:73:c2:49:f9:dd:
                    66:77:0d:ca:57:a0:38:50:3f:12:52:50:6f:6f:b1:
                    2b:78:a5:28:9e:52:85:5e:a2:09:4f:64:c2:1d:2c:
                    eb:ef:aa:d4:86:7d:a6:5a:f6:58:19:7a:37:c2:7f:
                    8f:20:24:7c:7b:18:69:06:4f:00:eb:59:96:86:04:
                    db:cf:7a:91:e4:4e:13:bf:42:e2:f2:c4:c9:6f:02:
                    41:fb:ae:41:8f:cf:3a:bc:87:dd:33:ec:ba:5e:20:
                    fd:7b:5a:d4:d6:8e:65:d1:21:23:8f:47:c0:fe:ee:
                    91:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:3E:D1:36:47:83:C1:EA:E8:93:D1:3B:D2:DA:FD:DC:8F:81:FA:48
            X509v3 Authority Key Identifier:
                keyid:D7:45:E1:C8:6B:18:18:F7:D0:56:3F:90:E8:BA:12:BE:8B:1A:E3:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10XhyGsYGPfQVj-Q6LoSvosa43g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:a8:61:03:da:71:b1:67:87:80:a5:91:c1:85:26:7e:5a:c4:
         13:f6:11:a8:f5:a2:3c:a4:7e:ea:3d:73:af:5b:ed:b7:03:1f:
         2e:cc:2d:31:4d:9f:c2:79:26:b4:26:9d:08:81:d9:46:c9:12:
         dd:3c:48:7c:74:20:6a:f7:1f:57:09:b5:cd:ab:b8:e5:25:78:
         79:87:2f:60:d8:ce:92:fa:31:ae:8d:8d:9b:bd:77:0e:ba:cc:
         06:03:13:54:a0:6c:9f:88:b0:b5:9b:e5:9a:23:61:9e:bf:8b:
         b2:1a:a4:61:91:c1:53:64:a2:66:83:37:6f:c2:8f:fd:fa:e3:
         99:38:15:5f:04:ad:42:ea:6e:ef:4b:ca:aa:e5:d4:01:92:1d:
         58:4f:a0:e4:1e:94:95:7f:e1:11:af:1e:bb:09:b8:cc:b3:01:
         b2:9f:98:65:1b:a5:23:c8:e2:68:be:9e:ae:20:4e:0f:e5:80:
         2e:a9:b4:9f:40:76:7e:e9:7a:5d:fc:0b:8d:fa:8c:47:dc:b5:
         22:11:42:f2:9d:b8:b6:7e:93:cf:b7:1f:08:e4:01:3b:8b:13:
         b1:28:ce:ee:77:60:ff:3b:42:27:01:e6:ed:d7:07:5b:0e:37:
         cb:9b:8d:62:af:9d:98:5c:92:4f:af:3c:72:93:91:6c:bb:45:
         ba:ab:f8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----