Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft
File:                     AaQS70FsiE9vY38b2oAOtu9nttY.mft (raw, json)
Hash identifier:          bcaadfR1LQDqPbXmAqX7iVIlOSWC/iHSpRoRx5C9F8M=
Subject key identifier:   8E:C1:2B:81:3C:11:CA:14:E3:2E:21:C2:7E:B4:6B:2F:7F:AC:1D:2E
Authority key identifier: 01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6
Certificate issuer:       /CN=A91E4845/serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6
Certificate serial:       21BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft
Manifest number:          2196
Signing time:             Fri 31 Jan 2025 15:54:39 +0000
Manifest this update:     Fri 31 Jan 2025 15:54:39 +0000
Manifest next update:     Fri 07 Feb 2025 15:54:39 +0000
Files and hashes:         1: AaQS70FsiE9vY38b2oAOtu9nttY.crl (hash: m4RKy397VDhy412vJKaM0CQ1w+WVHDet2fZUxdRUJM0=)
                          2: 1DE1EBA25F0E11EF88D4A280C4F9AE02.roa (hash: CHZ8BUCP+ogBpGKfLieugzwCJ7wbfBVhmhSN5UggfIs=)
                          3: EA7EF77860BB11EF98A27D59C4F9AE02.roa (hash: gD7iFebAgkAY9IUPNKXCwnTZXnscQVACePU7q6AjDEc=)
                          4: 6875130A75D011EFAEA8B95DC4F9AE02.roa (hash: HgZSww0YjaKoV/OpCY1UNM5o/7USPMBbgqLK+V2f6pU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8638 (0x21be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4845/serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6
        Validity
            Not Before: Jan 31 15:54:39 2025 GMT
            Not After : Feb  7 15:54:39 2025 GMT
        Subject: CN=679cf23f-2cc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:dc:fc:56:3c:4b:07:74:ad:12:ca:ec:3a:78:
                    49:09:e5:69:53:65:4f:75:0b:4e:9e:3f:e2:46:51:
                    ce:32:da:e3:03:73:a0:e6:67:ac:4a:98:0b:3d:7e:
                    a1:7f:11:40:83:d9:c1:0d:2b:3f:c4:36:be:cb:55:
                    7f:6f:c3:9f:b0:03:76:dc:22:65:38:c2:dc:52:27:
                    c6:65:af:7e:e0:49:80:48:e7:31:56:f9:0e:95:ec:
                    11:79:7a:c4:33:f5:18:a1:31:bb:1b:cb:aa:a4:83:
                    73:7d:fc:3b:e1:7c:fe:84:5a:bb:15:c5:06:a6:54:
                    62:19:8a:d4:5b:62:b1:da:9e:7f:3e:c6:ab:12:b6:
                    fe:b8:5b:e8:80:16:ea:6d:67:c8:d0:92:d6:0a:72:
                    82:62:2a:2a:92:4d:29:bc:0b:99:ec:10:28:2e:6c:
                    ca:b2:2e:14:b8:f2:25:8f:4a:46:44:75:f0:37:71:
                    9f:1a:fd:89:3d:6d:bf:3c:51:3b:a8:b4:48:80:da:
                    c1:2d:b6:21:53:aa:03:7d:aa:bb:fa:8f:9e:cb:a5:
                    03:09:91:ff:9d:2c:ef:2b:1c:a1:6c:4f:9f:21:14:
                    f6:a5:1b:dc:7d:fd:96:f6:2c:2b:f7:12:dd:b5:ca:
                    50:31:27:7e:bc:c8:80:3b:78:d5:c4:4a:84:40:eb:
                    22:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:C1:2B:81:3C:11:CA:14:E3:2E:21:C2:7E:B4:6B:2F:7F:AC:1D:2E
            X509v3 Authority Key Identifier:
                keyid:01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:10:9e:9c:d9:08:37:26:a5:ca:65:2f:30:a3:ed:95:1f:5b:
         c4:fe:dc:9b:7d:1c:f6:b8:64:d4:5b:ae:63:fb:4e:a6:17:94:
         18:df:3d:6f:19:01:de:f6:fc:9d:a1:63:52:30:4d:c9:cc:ab:
         0b:53:5e:6d:82:23:f9:ee:14:d1:b2:8a:6d:01:7f:bc:c7:af:
         82:f7:f2:57:68:fc:5d:de:9d:69:77:1e:75:61:31:cb:32:68:
         b7:ff:68:8e:f3:4a:25:1c:69:68:34:eb:30:48:5c:7b:a4:44:
         b5:de:d9:8c:b9:ea:d5:40:c8:ec:a0:2b:69:ea:40:9d:f9:62:
         e2:13:68:f2:d7:a9:55:1e:02:0a:f8:d6:b2:bd:44:25:89:4e:
         dc:67:31:15:94:ab:e4:d4:3a:de:29:2e:dc:7c:89:43:6a:5f:
         26:d9:2f:14:77:9a:5b:0c:bf:12:c0:ad:dc:3b:57:8e:26:d4:
         ee:38:0c:5c:ff:3c:62:4c:76:f4:e2:3e:69:60:a5:c4:06:65:
         7b:98:ef:39:35:13:0f:67:c9:ff:73:3f:d8:df:00:21:02:0a:
         db:4f:72:29:e4:95:ce:91:72:1d:8e:2c:e5:5b:07:b8:22:30:
         4a:c1:9c:5c:87:6b:95:93:64:0a:e6:c0:c9:25:0e:e7:dc:ce:
         39:4a:52:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----