Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft
File:                     5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft (raw, json)
Hash identifier:          NQd6fYEVaiFcNwq8mS/FlHWQfmkkRrQ5HpL5kz9QbX0=
Subject key identifier:   CE:E8:B1:3B:CF:25:BE:A2:83:F2:FF:11:68:25:AF:BF:46:65:E2:77
Authority key identifier: E6:75:8B:9A:37:59:82:C2:C4:D1:C7:64:9A:31:E4:CF:27:D5:A6:80
Certificate issuer:       /CN=A91E554A/serialNumber=E6758B9A375982C2C4D1C7649A31E4CF27D5A680
Certificate serial:       37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nWLmjdZgsLE0cdkmjHkzyfVpoA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft
Manifest number:          36
Signing time:             Fri 31 Jan 2025 06:40:28 +0000
Manifest this update:     Fri 31 Jan 2025 06:40:28 +0000
Manifest next update:     Fri 07 Feb 2025 06:40:28 +0000
Files and hashes:         1: 5nWLmjdZgsLE0cdkmjHkzyfVpoA.crl (hash: 1Jtw2zjRZMVa/jFNOioszy/vxv4KEsvfPD47QEMSQzA=)
                          2: 388A91E0985A11EFA6912B0EC4F9AE02.roa (hash: JjgqoANmsusAqQnFWaBmauCJuNgw+HQl/ZcBjvaDkfs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E554A/serialNumber=E6758B9A375982C2C4D1C7649A31E4CF27D5A680
        Validity
            Not Before: Jan 31 06:40:28 2025 GMT
            Not After : Feb  7 06:40:28 2025 GMT
        Subject: CN=679c705c-6d74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:00:4e:c3:31:eb:6c:26:b3:d0:60:09:a1:6c:
                    d3:98:e8:e8:2f:d6:48:05:4e:a6:d6:40:5e:dc:7c:
                    b8:44:a2:da:d9:76:66:d5:84:73:74:50:2a:61:03:
                    31:ee:40:4f:5d:29:e2:8d:a6:01:25:9f:20:35:9c:
                    e1:39:d0:f8:f8:57:a4:fd:3f:fa:1e:b5:60:22:f8:
                    01:58:40:07:6a:da:d1:6d:1a:78:58:48:59:62:a4:
                    fc:fa:da:17:c7:2f:b7:b3:b5:a7:cb:94:6c:bd:7b:
                    86:7b:ad:2d:47:4d:97:de:06:8c:2e:40:c2:c3:fd:
                    e8:f1:d0:5d:a3:1b:4b:14:eb:d3:61:9a:34:e9:7d:
                    da:a4:8a:fe:21:da:39:9c:77:16:ff:d5:4d:22:e0:
                    a5:71:91:69:b8:dc:d1:60:3c:12:2a:fb:2a:ea:e5:
                    4b:eb:ce:08:d1:64:82:10:aa:3f:32:22:00:63:60:
                    61:d3:da:28:5a:9a:47:db:c2:0a:33:04:e5:b9:c1:
                    f8:6b:73:a5:b3:c7:6b:d0:ea:ff:db:9f:ab:df:ea:
                    d6:85:97:f1:a2:99:d7:b0:9e:79:03:e5:9e:68:6f:
                    f3:fd:d5:1c:3e:29:9b:0d:0c:4a:13:9c:ea:ff:d2:
                    c4:97:9f:ae:fc:fe:1b:3b:8a:ac:6e:35:4a:60:b7:
                    0c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:E8:B1:3B:CF:25:BE:A2:83:F2:FF:11:68:25:AF:BF:46:65:E2:77
            X509v3 Authority Key Identifier:
                keyid:E6:75:8B:9A:37:59:82:C2:C4:D1:C7:64:9A:31:E4:CF:27:D5:A6:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nWLmjdZgsLE0cdkmjHkzyfVpoA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:1c:92:04:25:a4:1c:75:19:af:82:29:ce:ff:90:b1:59:40:
         f7:45:a5:d9:a4:88:ec:02:0c:68:30:3f:f0:6b:40:07:f3:12:
         57:3d:52:51:cd:68:a5:9b:b8:72:a2:38:56:62:43:f1:19:19:
         d7:3d:b0:3e:90:1e:be:50:d1:a0:c6:b8:35:40:fc:67:5b:00:
         98:89:72:0f:a9:60:bf:75:36:97:47:c1:0e:92:55:c8:0e:0c:
         34:06:f3:0e:b7:5d:17:7b:46:e0:c0:53:2e:2e:ff:62:1f:af:
         e0:43:c4:09:a8:26:e4:c0:38:b2:1d:db:44:9a:1c:3e:ba:25:
         3f:46:31:c9:53:78:ce:58:49:45:7c:ee:ca:56:73:64:06:95:
         8a:1a:6e:f0:07:2c:5f:1b:0f:0d:79:36:8e:61:d9:3f:1f:21:
         e1:85:a8:1b:ab:f9:68:35:04:84:de:e0:59:b6:6b:dc:43:89:
         9c:3e:1c:8e:77:75:32:6a:f7:01:a5:fe:df:03:1b:c7:64:51:
         b4:3c:55:93:8f:4a:6f:c8:f3:f0:27:09:0b:c0:9b:10:77:58:
         96:ba:da:14:09:7c:6c:c9:66:13:2a:49:49:fa:cb:c7:84:6f:
         13:4a:d0:bc:ce:0e:b8:0f:85:28:cf:b1:c9:99:d7:52:a7:65:
         3e:31:02:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----