Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
File:                     acgZi9o_0JBT9CVT1z7qFRIdJBw.mft (raw, json)
Hash identifier:          Gj0B4Q+KhiLs5xtyt5nJz7qwstTCCV/dHVjGx9JafoE=
Subject key identifier:   5A:28:ED:BA:CA:3C:E4:BF:62:73:34:A3:06:26:09:E5:6C:98:80:36
Authority key identifier: 69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C
Certificate issuer:       /CN=A91E4F66/serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C
Certificate serial:       0B19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
Manifest number:          0B0D
Signing time:             Thu 30 Jan 2025 19:18:25 +0000
Manifest this update:     Thu 30 Jan 2025 19:18:24 +0000
Manifest next update:     Thu 06 Feb 2025 19:18:24 +0000
Files and hashes:         1: acgZi9o_0JBT9CVT1z7qFRIdJBw.crl (hash: gf6rW5qMLSvse0gCIY+sfZ4scSs4y2/5iBB87DYUiwc=)
                          2: A3BE70CCD5AE11EE909D5C40C4F9AE02.roa (hash: It+EzOgB+4GwVpz41BOeTUKf/RikBUyvJSCbvGF22zE=)
                          3: C53629FEEACE11EEA8513D34C4F9AE02.roa (hash: m2mZEmy+jYi2Exf5MsZvNb+d8UP/lXqWFf7D/THaytE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2841 (0xb19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4F66/serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C
        Validity
            Not Before: Jan 30 19:18:24 2025 GMT
            Not After : Feb  6 19:18:24 2025 GMT
        Subject: CN=679bd080-010a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8f:2f:21:8e:18:2f:d7:ce:be:ad:32:01:33:
                    d3:b5:f5:08:fd:ac:04:01:02:f5:67:58:ee:c2:e0:
                    83:11:39:9c:08:3f:6e:bd:78:83:ea:38:3c:bf:cf:
                    d7:c5:21:47:f7:dd:c3:9d:d1:1f:ea:cb:b0:17:5e:
                    ce:8a:db:96:54:b0:23:06:75:38:6b:f7:1e:7f:7a:
                    77:fd:9e:00:ce:ac:28:e6:bf:b5:25:5e:42:b9:4c:
                    7e:ac:f6:58:5f:af:bd:08:d6:6a:dd:0c:a1:b8:1f:
                    3f:ca:41:1d:5a:47:0c:2d:84:6d:e7:80:ef:47:f4:
                    35:8a:17:84:e4:26:b7:2a:6c:e1:51:9c:9f:3e:f1:
                    a2:74:ab:1f:db:ac:61:3c:1b:c0:88:ef:9e:9a:e4:
                    bc:9f:5b:73:33:ce:f4:03:31:4a:86:b1:b1:cc:92:
                    c3:e4:7c:50:c9:7b:3e:d2:40:6c:f2:d1:f0:64:01:
                    c0:c3:05:6f:3c:12:f5:ed:ad:c4:2a:e6:79:25:44:
                    9d:9b:37:12:df:19:60:58:91:c1:1f:b4:29:3e:15:
                    12:0c:74:0c:4d:f9:48:8b:d4:ff:e2:b8:1d:33:33:
                    9d:f6:1f:5f:4e:1c:e4:bd:61:7e:69:a8:a3:4a:1d:
                    89:b3:92:47:36:8f:63:e2:d6:da:f8:67:f5:b8:48:
                    08:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:28:ED:BA:CA:3C:E4:BF:62:73:34:A3:06:26:09:E5:6C:98:80:36
            X509v3 Authority Key Identifier:
                keyid:69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:bb:3a:48:ca:78:3a:20:64:89:ec:13:b1:bb:65:8d:35:53:
         9f:33:fc:5f:5c:9c:de:f9:6c:8f:51:4f:e5:6c:e5:60:d5:a5:
         a3:59:a3:44:83:4c:e8:d8:76:14:a4:7b:ef:9d:d8:8d:34:f7:
         ce:68:35:70:ee:1a:f7:f8:56:40:77:1b:6c:28:f9:53:e1:c0:
         43:40:58:a2:0a:9d:02:82:50:32:74:64:30:9b:4c:2d:7d:d4:
         25:80:19:97:39:41:49:94:4c:42:29:70:4c:ca:00:26:ec:09:
         47:79:e7:38:55:51:ae:f5:27:8c:e1:07:c6:52:4f:79:d6:7d:
         cb:29:cb:b0:e3:3d:c4:d3:49:3b:0c:05:29:08:e3:62:1f:f4:
         b1:18:53:30:09:14:a1:94:9a:1a:b0:bf:d8:2d:9e:57:0f:51:
         8c:02:65:c4:af:df:a8:b3:6d:28:cb:46:89:6e:43:12:96:68:
         1f:75:ab:c7:1e:07:ed:fd:fc:48:d5:ae:1f:f9:46:f3:df:ab:
         7c:16:80:be:cc:1b:81:87:98:fc:0d:d3:94:22:30:81:ab:4a:
         d2:3d:b5:ea:18:b9:19:1c:54:f6:14:8d:43:6b:97:b4:a0:65:
         4d:29:f7:04:c5:f6:5d:b0:5c:14:c6:4c:c4:55:6e:1e:d6:ae:
         77:69:b7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----