Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft
File:                     1QwK07StgdVVlFzH8_HuHB-t5hc.mft (raw, json)
Hash identifier:          7+w4hQA9dFs4bXzH7LepI3/x3WGJL4y9rmvo8ytjO40=
Subject key identifier:   F1:BF:85:B6:97:46:B5:CE:A5:B4:B1:04:6F:66:10:3E:64:84:A1:DD
Authority key identifier: D5:0C:0A:D3:B4:AD:81:D5:55:94:5C:C7:F3:F1:EE:1C:1F:AD:E6:17
Certificate issuer:       /CN=A91DB475/serialNumber=D50C0AD3B4AD81D555945CC7F3F1EE1C1FADE617
Certificate serial:       0AE0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft
Manifest number:          0AD6
Signing time:             Thu 30 Jan 2025 19:28:56 +0000
Manifest this update:     Thu 30 Jan 2025 19:28:56 +0000
Manifest next update:     Thu 06 Feb 2025 19:28:56 +0000
Files and hashes:         1: 1QwK07StgdVVlFzH8_HuHB-t5hc.crl (hash: UMJQyQy2Qsr0T8IKFNBtYs+RUc8hYq4B6Jc+dfFPVL8=)
                          2: A94E757C9C9711EF8F00DA2BC4F9AE02.roa (hash: U7ffc7ZXisWahkvJPDkqyWJk/t0jbsB+lj2p4qsoTik=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2784 (0xae0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB475/serialNumber=D50C0AD3B4AD81D555945CC7F3F1EE1C1FADE617
        Validity
            Not Before: Jan 30 19:28:56 2025 GMT
            Not After : Feb  6 19:28:56 2025 GMT
        Subject: CN=679bd2f8-43f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a9:20:39:73:80:15:4f:01:5f:ee:84:b6:12:
                    a0:e7:8b:54:db:83:50:84:a7:f7:3d:c7:15:7f:19:
                    5d:74:82:e7:6f:61:6b:df:5c:b6:2f:af:0c:62:15:
                    66:ec:85:8a:ee:6e:86:f7:3e:10:58:73:b9:3a:87:
                    11:5a:ca:49:e8:c4:c9:fb:21:33:4f:7c:ac:3d:cf:
                    a2:78:6c:6b:68:c7:ee:a0:89:94:f4:eb:fe:e7:04:
                    44:5b:4d:28:90:61:a3:c0:c4:0c:02:a0:d5:7b:25:
                    d4:2d:56:48:78:f7:83:8f:35:6f:03:e9:9c:47:a3:
                    a1:24:c8:0e:d8:53:7f:d2:6f:76:09:5e:c8:22:0f:
                    20:c1:9a:76:0e:8b:09:35:c6:1f:50:80:ab:2f:77:
                    01:1c:fc:66:0f:26:5f:ce:56:b7:0e:44:53:af:02:
                    8b:7b:96:44:4c:52:7f:6a:6d:86:6d:6f:07:3e:db:
                    98:ef:37:f1:49:08:b0:c6:9a:8b:f5:ac:e7:03:33:
                    67:c3:75:60:9b:d6:aa:e1:3b:d5:2f:4d:97:80:2f:
                    56:c8:8a:0c:43:8f:71:fe:24:81:b5:07:23:fe:a2:
                    95:62:02:fb:09:95:fd:8d:3a:b6:22:ae:bd:d6:b7:
                    16:90:67:e7:8b:f0:ae:41:b2:d0:7e:ca:6c:ef:43:
                    e4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:BF:85:B6:97:46:B5:CE:A5:B4:B1:04:6F:66:10:3E:64:84:A1:DD
            X509v3 Authority Key Identifier:
                keyid:D5:0C:0A:D3:B4:AD:81:D5:55:94:5C:C7:F3:F1:EE:1C:1F:AD:E6:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:e0:7b:bf:ac:61:aa:31:d4:5b:7f:68:71:00:70:3c:01:dc:
         e7:e9:10:4b:e4:d8:b6:3b:d6:6a:64:48:26:fc:28:bf:ce:bb:
         e1:6f:6d:59:b7:05:49:50:0d:ed:bf:1c:39:23:ca:a8:20:65:
         a2:8a:f3:f3:de:75:8b:e5:c2:db:6c:d7:94:48:e0:5f:8a:d5:
         b0:23:88:4b:cb:94:93:5c:60:ea:c9:7a:0f:a0:3b:8c:f9:25:
         a4:60:f4:3e:b3:30:76:7e:8f:ee:dc:44:2a:d7:c8:16:4e:eb:
         cc:37:d5:63:e0:97:98:72:2b:43:66:31:bc:9e:2f:4a:dc:cf:
         3e:60:86:44:32:1d:be:ee:15:a4:31:b1:00:7d:1e:e0:4a:1a:
         a5:98:c7:10:df:ab:0b:3a:23:75:f3:37:fb:1c:fe:08:e1:46:
         67:70:fd:9d:f4:52:b4:7f:01:b5:c3:76:aa:d3:b8:c8:d7:23:
         c6:9d:94:8d:9d:3d:80:9a:9d:56:0b:40:7c:ab:36:f5:84:d3:
         28:2b:e8:33:27:47:fe:d5:80:55:68:ae:8e:72:0d:ca:a9:3a:
         dc:70:e1:65:8d:e5:a8:17:4d:b5:f3:4e:e7:11:d8:30:91:22:
         a6:c4:e4:16:79:6f:05:64:2b:3e:59:da:34:f2:80:fe:46:b7:
         56:11:00:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----