Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0C24/18C8B692443211EA9CADFD1CC4F9AE02/byZ-RWYIP-sjaiw5I7cDlgC955Q.mft
File:                     byZ-RWYIP-sjaiw5I7cDlgC955Q.mft (raw, json)
Hash identifier:          FojkE85DCYvVHy+o6I+++pv+oUfpKTAPruGl06mSbHo=
Subject key identifier:   D2:D0:D3:38:80:45:C5:E3:8F:90:5F:87:5D:D3:62:A1:81:25:A3:76
Authority key identifier: 6F:26:7E:45:66:08:3F:EB:23:6A:2C:39:23:B7:03:96:00:BD:E7:94
Certificate issuer:       /CN=A91E0C24/serialNumber=6F267E4566083FEB236A2C3923B7039600BDE794
Certificate serial:       0AE0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byZ-RWYIP-sjaiw5I7cDlgC955Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0C24/18C8B692443211EA9CADFD1CC4F9AE02/byZ-RWYIP-sjaiw5I7cDlgC955Q.mft
Manifest number:          0ACB
Signing time:             Thu 30 Jan 2025 19:32:39 +0000
Manifest this update:     Thu 30 Jan 2025 19:32:38 +0000
Manifest next update:     Thu 06 Feb 2025 19:32:38 +0000
Files and hashes:         1: byZ-RWYIP-sjaiw5I7cDlgC955Q.crl (hash: 7yR9gxtsb4PAqDmBUF6p+b7rO0gl0mbef2wdCOADfDs=)
                          2: A86EF6C8C9AF11EAA26C015FC4F9AE02.roa (hash: kONUJBoxY/BhLOEc4dA2tylYELY1wDWg8sTmx/gxQHk=)
                          3: 40569A6AC9AE11EAA7F2915BC4F9AE02.roa (hash: wgftKb4IInisu650djsPHH84sPf1yKI2QWeFmfVp8Yw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2784 (0xae0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0C24/serialNumber=6F267E4566083FEB236A2C3923B7039600BDE794
        Validity
            Not Before: Jan 30 19:32:38 2025 GMT
            Not After : Feb  6 19:32:38 2025 GMT
        Subject: CN=679bd3d7-e76b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3b:dc:b4:ec:26:89:f7:82:64:eb:9c:91:8e:
                    1c:f7:59:9e:1c:3d:7f:3d:b9:02:83:a6:d7:f1:2a:
                    93:75:8b:97:a7:61:40:5e:7d:94:69:48:87:15:5e:
                    e5:09:79:a4:ec:af:c8:da:c2:80:34:fa:ca:7a:a9:
                    db:ae:9d:5c:1e:d2:c5:02:f3:9a:67:fd:95:44:9e:
                    1d:54:0a:97:bf:25:4d:97:27:28:77:c9:6f:df:63:
                    55:80:e2:fc:0c:b7:94:d8:0e:9c:44:5f:1c:46:3a:
                    3a:2a:92:7f:e7:3b:51:12:7c:cb:07:2b:73:8b:c0:
                    31:69:80:47:df:71:3b:b2:42:1d:ca:62:1f:bc:f3:
                    32:78:15:e7:f9:09:2d:c9:1f:fd:15:9b:37:61:da:
                    a5:45:8f:8d:c9:34:03:42:f2:34:09:74:1e:4e:61:
                    9c:8e:4d:d7:5f:de:c1:b0:ac:26:53:30:44:2a:f2:
                    26:1f:69:15:bf:66:66:f8:ca:42:f6:a8:b2:03:a6:
                    8f:aa:b4:ba:4a:df:c9:2c:19:cb:a6:ae:f8:73:a5:
                    d5:8d:f5:8e:97:f4:c4:d6:ac:c6:c8:5b:d9:a3:b3:
                    1d:9f:bf:f1:78:68:f6:76:83:ff:90:9f:2d:b8:3e:
                    2a:da:3c:3e:0f:67:9d:a6:8d:87:f4:9f:a4:ab:2f:
                    67:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:D0:D3:38:80:45:C5:E3:8F:90:5F:87:5D:D3:62:A1:81:25:A3:76
            X509v3 Authority Key Identifier:
                keyid:6F:26:7E:45:66:08:3F:EB:23:6A:2C:39:23:B7:03:96:00:BD:E7:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0C24/18C8B692443211EA9CADFD1CC4F9AE02/byZ-RWYIP-sjaiw5I7cDlgC955Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byZ-RWYIP-sjaiw5I7cDlgC955Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0C24/18C8B692443211EA9CADFD1CC4F9AE02/byZ-RWYIP-sjaiw5I7cDlgC955Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:93:96:e3:14:d5:96:41:67:ed:ea:9f:92:de:9b:f7:1b:f4:
         4d:b8:f9:0a:03:8d:75:4f:7b:a6:ee:8d:b9:3f:3d:de:dc:ea:
         4c:a8:fd:3d:23:7b:a3:59:95:5e:50:dd:ea:fc:fc:63:33:39:
         5e:82:d7:ed:45:3e:0d:2b:2b:3e:1f:80:f5:a9:67:6a:15:d0:
         64:f6:04:10:08:5b:6f:8c:b0:06:fa:1d:5d:64:66:27:eb:c2:
         84:6d:ec:dc:e6:0f:d2:db:f9:e6:0f:13:e2:ed:17:d9:45:b7:
         ef:4f:28:83:47:aa:e5:32:a3:5c:dd:7c:b6:ba:c9:d1:3a:c1:
         53:de:29:d4:4c:69:96:42:f3:7b:e1:8d:07:a3:73:a4:ba:96:
         75:40:ad:9f:c8:e1:39:ad:4c:b6:d8:65:57:b2:37:91:44:c2:
         70:87:97:f3:86:1c:ac:19:eb:08:25:44:f6:41:80:79:7c:f4:
         5d:3b:96:53:d5:df:d8:b7:0b:b3:c5:2f:f2:96:40:5e:8b:5f:
         28:f4:7e:24:2c:94:ae:dc:c3:fe:b1:f0:ad:b9:82:cd:5b:b9:
         bb:55:a5:b0:4d:42:66:b3:64:45:ff:b0:0c:4d:c0:10:99:8b:
         40:c6:a3:ad:f7:0d:7a:00:dd:33:9b:83:85:67:59:7a:93:44:
         bc:5a:77:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----