Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.mft
File:                     GlXbYnoqLksmZy7g4ddRL4ZBToM.mft (raw, json)
Hash identifier:          rDBUO6CNGyFxS0SFlQD3W1ewozMA/PxME+q/t5RXEUM=
Subject key identifier:   D3:C3:D2:D8:FD:3D:E3:BF:89:A3:A8:87:3F:58:C1:17:AA:5E:33:FA
Authority key identifier: 1A:55:DB:62:7A:2A:2E:4B:26:67:2E:E0:E1:D7:51:2F:86:41:4E:83
Certificate issuer:       /CN=A91DA898/serialNumber=1A55DB627A2A2E4B26672EE0E1D7512F86414E83
Certificate serial:       347B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GlXbYnoqLksmZy7g4ddRL4ZBToM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.mft
Manifest number:          3466
Signing time:             Fri 31 Jan 2025 14:37:54 +0000
Manifest this update:     Fri 31 Jan 2025 14:37:53 +0000
Manifest next update:     Fri 07 Feb 2025 14:37:53 +0000
Files and hashes:         1: GlXbYnoqLksmZy7g4ddRL4ZBToM.crl (hash: fcu0zCSDQlL9Wtuj5YbXpl2C3YFerUZGwbXo/W7aIxc=)
                          2: AB9A0D320D6011EDA50DFA25C4F9AE02.roa (hash: Ml46u2z0U+I2ZQaPPsePPmtgvCBhdMDLTPQJk8d3bl4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13435 (0x347b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA898/serialNumber=1A55DB627A2A2E4B26672EE0E1D7512F86414E83
        Validity
            Not Before: Jan 31 14:37:53 2025 GMT
            Not After : Feb  7 14:37:53 2025 GMT
        Subject: CN=679ce041-ba4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0a:7a:5e:0f:6c:87:f5:58:f0:e6:9c:da:58:
                    24:b6:09:11:2a:fc:6f:4c:c8:50:11:88:ec:80:4b:
                    db:42:79:38:b7:13:88:25:5a:a4:68:7a:36:2b:0e:
                    09:1e:3d:60:d3:9f:f8:9f:ef:d7:6a:bb:cb:e4:c4:
                    62:ee:81:63:bc:15:02:75:ec:74:9d:b8:94:4f:7e:
                    b1:2d:de:82:48:9e:e3:65:61:89:bc:30:fd:85:b0:
                    43:a1:04:66:9e:28:be:d0:17:c9:02:52:e9:59:04:
                    90:9b:5b:4e:ba:a5:77:04:ec:dd:07:8d:39:31:54:
                    82:42:f8:19:cd:84:35:14:71:46:15:69:3f:c5:54:
                    61:ca:78:59:90:97:60:17:75:f1:66:ce:0e:0b:2d:
                    6b:0f:59:d9:12:7a:be:85:56:c6:e4:33:de:96:3f:
                    c0:c6:ff:2d:1a:62:4b:4b:c0:d8:06:c0:fc:f2:95:
                    7d:af:9d:48:39:19:29:81:c5:3b:4e:e8:44:2e:ad:
                    0c:b9:97:b3:1f:7d:51:72:2a:ad:21:f0:e1:c5:f5:
                    d0:5a:8a:21:d8:57:98:e0:6b:fa:ab:b0:62:9e:92:
                    a4:1f:ac:6e:03:ca:82:8e:d1:c9:98:f7:b3:15:98:
                    24:8e:28:3f:40:d5:6d:ab:b8:ac:2c:a5:2c:ee:cc:
                    63:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:C3:D2:D8:FD:3D:E3:BF:89:A3:A8:87:3F:58:C1:17:AA:5E:33:FA
            X509v3 Authority Key Identifier:
                keyid:1A:55:DB:62:7A:2A:2E:4B:26:67:2E:E0:E1:D7:51:2F:86:41:4E:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GlXbYnoqLksmZy7g4ddRL4ZBToM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:be:c3:25:17:3d:1f:2b:bf:4f:05:69:81:cf:c7:c7:a5:6c:
         49:42:5d:1b:56:89:37:c9:fc:2f:f4:9d:90:28:4e:26:a3:13:
         41:3c:51:51:f8:0e:94:6a:6f:5e:d6:70:3c:95:c7:62:e4:67:
         40:5a:c8:58:85:29:b0:df:e3:7c:b3:6c:c3:b0:d1:76:35:ab:
         0a:48:8a:83:23:51:d6:fc:38:61:78:ea:b3:d5:02:fb:79:51:
         94:36:71:b8:4c:1b:09:ad:9d:db:f7:d6:d1:89:f7:32:e4:18:
         8e:f5:a7:26:85:2c:d8:ff:87:a1:ec:8b:73:34:a5:dd:d5:d4:
         2a:a0:55:6a:dd:80:b6:2c:62:5e:74:90:06:b1:a8:68:2d:a9:
         55:f5:89:b8:36:9f:f6:a0:f6:ed:a7:bb:3e:89:0f:41:8d:5c:
         e5:ef:f9:e2:d4:94:22:c8:80:94:cf:b3:3a:ca:29:15:89:4f:
         07:34:b1:75:c0:37:33:d8:b3:5f:38:dd:3b:20:40:1e:8f:51:
         51:3c:68:07:41:02:b2:19:24:fb:74:2a:d5:b6:53:17:97:ca:
         98:e7:cc:e8:42:4f:e0:f3:da:50:eb:d1:4b:d2:17:40:30:49:
         39:b5:30:9c:1e:c5:f0:ec:6b:1e:b8:b8:39:34:7f:96:01:29:
         49:e4:c9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----