Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.mft
File:                     oB0j94Ho_zU7GL0YgoTJrfzZ45Y.mft (raw, json)
Hash identifier:          w7GVi+PHDIHPkWiQwnJzRvaxWP4DZq/5+3aboGnqNHE=
Subject key identifier:   64:70:A9:B2:B3:6D:19:40:35:DD:4A:0B:A1:B5:C8:38:86:CA:28:CF
Authority key identifier: A0:1D:23:F7:81:E8:FF:35:3B:18:BD:18:82:84:C9:AD:FC:D9:E3:96
Certificate issuer:       /CN=A91E0267/serialNumber=A01D23F781E8FF353B18BD188284C9ADFCD9E396
Certificate serial:       344C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.mft
Manifest number:          3449
Signing time:             Fri 31 Jan 2025 14:54:15 +0000
Manifest this update:     Fri 31 Jan 2025 14:54:14 +0000
Manifest next update:     Fri 07 Feb 2025 14:54:14 +0000
Files and hashes:         1: oB0j94Ho_zU7GL0YgoTJrfzZ45Y.crl (hash: PNCiNuXXHeOJTjoDYm9CMHSi45fWmQw23PDSPfeUn6I=)
                          2: 77C9E89A3CDC11EEBFA0475EC4F9AE02.roa (hash: As2LymjqIDH0cOS124NvImUruw0ZeoIg/jht9yiAhvI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13388 (0x344c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0267/serialNumber=A01D23F781E8FF353B18BD188284C9ADFCD9E396
        Validity
            Not Before: Jan 31 14:54:14 2025 GMT
            Not After : Feb  7 14:54:14 2025 GMT
        Subject: CN=679ce417-47e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:22:ca:15:34:e4:ff:08:ab:78:06:4c:97:68:
                    29:aa:d5:fb:3f:30:53:7d:c9:13:57:68:d1:03:3c:
                    42:69:a3:22:bf:1e:68:16:3b:d0:ac:70:73:66:7b:
                    ca:35:7a:7a:e1:f8:ee:67:db:a7:13:71:d9:3d:84:
                    fa:84:9e:a0:18:78:6f:36:4d:44:b9:d7:85:8d:a6:
                    04:4a:1b:85:72:ff:6f:68:e3:e1:87:a6:9d:e0:ff:
                    4a:09:97:0f:1f:62:53:21:b5:50:ac:77:85:1d:fc:
                    73:40:36:f5:8d:f1:7e:a5:7c:6c:ae:28:a6:81:c6:
                    04:f4:6c:58:ce:e3:8a:ca:49:a1:a9:e3:a1:e4:c1:
                    09:52:c8:10:25:f2:1e:60:2e:de:06:5e:53:f4:cf:
                    27:92:0f:20:c5:4f:b1:77:41:97:01:38:61:34:db:
                    d5:84:c6:30:c4:37:d6:c6:cd:85:b1:eb:e2:5b:9c:
                    fb:ed:db:d3:e4:61:6c:c6:7c:f1:6e:bb:cb:32:d5:
                    a8:b2:2a:28:b5:52:38:75:5c:a1:6f:4e:50:84:b0:
                    7c:fc:78:9f:bd:b3:50:3f:61:ef:f9:fe:2c:37:b1:
                    56:8a:66:a2:47:b4:fe:76:a2:5f:23:96:e8:8c:97:
                    a7:65:ef:c8:e4:61:d0:b0:de:17:19:2b:90:c1:8c:
                    f4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:70:A9:B2:B3:6D:19:40:35:DD:4A:0B:A1:B5:C8:38:86:CA:28:CF
            X509v3 Authority Key Identifier:
                keyid:A0:1D:23:F7:81:E8:FF:35:3B:18:BD:18:82:84:C9:AD:FC:D9:E3:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:bb:57:ac:d0:12:20:e1:fc:cd:71:33:3f:82:87:f3:6c:44:
         db:65:8d:53:4e:fd:79:74:20:91:08:84:ef:45:a5:4a:fe:9e:
         5b:79:88:4f:59:d0:49:26:25:ff:45:38:bb:66:2a:9c:c4:e3:
         af:f9:0e:59:e1:0d:98:f7:b8:a9:7d:6d:58:71:6b:eb:7d:df:
         80:e6:19:ec:24:d9:f7:3b:e1:61:7d:b2:6c:e5:dd:db:2e:a4:
         48:31:75:5a:2e:47:09:c0:f4:5b:56:64:c9:91:d2:eb:01:65:
         1d:59:26:b7:ec:dc:e8:d8:ca:a7:7c:2e:2f:ec:64:f1:5a:66:
         a4:52:3d:77:fa:03:30:25:a2:5b:4e:3d:7f:24:f1:ea:6e:b4:
         8d:e1:a2:d8:29:78:53:e3:70:78:46:0b:4a:2a:a4:26:8e:5b:
         cc:ab:0b:82:d9:3a:26:12:c2:8f:f7:19:31:0d:76:f0:4d:d7:
         2d:9d:d6:ec:69:fc:77:d6:b3:19:7f:e0:ac:de:ae:84:98:c9:
         1d:4c:3d:ba:c9:a5:bc:80:6b:54:6e:2f:b0:79:c8:21:69:4f:
         bf:a9:fd:8f:67:65:e7:02:6a:bc:ec:ca:71:56:db:a5:fb:fb:
         21:61:21:85:c8:cb:5c:2c:01:26:38:5d:ba:0a:d2:8c:e7:2a:
         7c:9a:26:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----