Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft
File:                     PV2GR6upu0BiXDxkPNg2fxUHgBo.mft (raw, json)
Hash identifier:          t3sYwydDEqgfmbsO2x2FkOMr9Chy7PAhlL5XKNesT70=
Subject key identifier:   76:61:C1:D2:D9:BA:3F:76:72:4B:D0:4D:EC:35:79:23:BC:B2:C9:06
Authority key identifier: 3D:5D:86:47:AB:A9:BB:40:62:5C:3C:64:3C:D8:36:7F:15:07:80:1A
Certificate issuer:       /CN=A91E0EF2/serialNumber=3D5D8647ABA9BB40625C3C643CD8367F1507801A
Certificate serial:       0400
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PV2GR6upu0BiXDxkPNg2fxUHgBo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft
Manifest number:          03FB
Signing time:             Fri 31 Jan 2025 00:34:38 +0000
Manifest this update:     Fri 31 Jan 2025 00:34:37 +0000
Manifest next update:     Fri 07 Feb 2025 00:34:37 +0000
Files and hashes:         1: PV2GR6upu0BiXDxkPNg2fxUHgBo.crl (hash: eGv7sTMb/3kUK8ePi9t58ub328fSZtbYrqQ7KfIaOy4=)
                          2: CA7DCCFE5EE511ECA6B8CA48C4F9AE02.roa (hash: iehwdc5g9sl8RTSyVN8ksy1mA6Zv+UzQYUuHN7LzFHs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1024 (0x400)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0EF2/serialNumber=3D5D8647ABA9BB40625C3C643CD8367F1507801A
        Validity
            Not Before: Jan 31 00:34:37 2025 GMT
            Not After : Feb  7 00:34:37 2025 GMT
        Subject: CN=679c1a9e-d006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ea:46:c0:4e:84:53:64:5e:4b:9f:96:94:b1:
                    07:5d:e1:46:d1:f7:dd:01:a8:63:05:e5:10:9f:30:
                    d0:6b:9d:a9:6d:06:8e:35:2a:d5:5d:da:4c:0d:47:
                    30:36:80:c2:d4:a8:76:27:ad:39:8f:6b:39:a7:f7:
                    a2:11:72:79:cd:f6:25:15:c8:cf:fa:3f:59:e4:d2:
                    3e:24:8d:54:97:4d:89:ea:0c:b8:2d:56:54:3b:44:
                    47:12:c9:93:47:09:b8:10:e0:a5:17:f2:16:13:63:
                    87:e3:9c:68:bc:bc:2b:8e:26:39:a0:2a:93:8c:bd:
                    5d:66:38:dc:e6:a4:f0:0e:dc:34:d3:fc:75:b7:4e:
                    4b:85:ee:56:31:c6:25:ec:f2:fb:0c:f2:24:09:98:
                    dc:e6:dc:4e:6f:1f:28:4d:2c:c0:58:18:6e:c0:c4:
                    63:d3:36:83:0a:6b:91:dd:ae:c4:5c:a9:af:80:60:
                    47:04:a1:54:bb:c6:58:82:a8:86:2b:32:b6:37:d7:
                    07:79:2e:79:bb:d9:56:79:35:20:01:c6:89:20:bc:
                    98:64:50:9c:a0:d4:68:87:84:53:30:44:b9:c4:a7:
                    e9:79:4b:64:02:75:e1:e0:43:7c:5d:8f:07:ec:3c:
                    fa:a6:03:47:14:fd:f9:fb:12:bc:42:27:3c:be:19:
                    11:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:61:C1:D2:D9:BA:3F:76:72:4B:D0:4D:EC:35:79:23:BC:B2:C9:06
            X509v3 Authority Key Identifier:
                keyid:3D:5D:86:47:AB:A9:BB:40:62:5C:3C:64:3C:D8:36:7F:15:07:80:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PV2GR6upu0BiXDxkPNg2fxUHgBo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:3c:1a:0d:af:23:75:d2:16:5a:69:53:d3:6c:19:b5:ca:81:
         36:ee:b0:b5:2a:72:a0:09:be:fa:5f:4e:98:85:ca:0e:f5:b7:
         31:25:18:32:ca:d6:7a:b9:83:7b:f2:b2:64:89:8a:9d:82:c9:
         f5:c6:14:1b:20:ac:e1:14:17:45:2d:88:96:30:96:ba:07:84:
         72:d2:cb:ab:7c:c8:0e:1a:0c:5a:25:fb:16:6b:d4:b6:fe:58:
         df:ea:e2:54:69:b1:04:99:bf:9b:80:c9:f4:b9:d5:16:d4:a3:
         cf:0a:65:43:89:c3:12:e0:09:54:e9:3e:e7:ce:a3:0f:3d:d5:
         fa:b6:67:1d:b9:41:54:69:7f:52:9b:c0:60:82:58:39:d6:1e:
         44:13:04:f6:ed:43:d2:2b:84:85:74:72:6d:43:22:89:bb:04:
         54:90:77:cb:49:2e:e8:92:7d:61:63:ef:f0:0d:0f:f6:a5:2e:
         8d:b6:c4:ca:94:e7:5d:2e:4b:2f:96:f2:85:db:5a:e1:b2:2c:
         8d:68:af:7c:67:24:42:60:0a:6e:a2:ee:2d:ef:d0:c0:da:85:
         08:da:02:c9:19:23:95:1c:a8:b9:04:dd:4f:31:b5:70:8b:f9:
         06:c0:8b:92:47:86:45:ce:96:1b:24:ea:89:be:cf:40:b6:0f:
         3c:81:66:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----