Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.mft
File:                     WTnpc8iL_GpBqjWondhG-w0Wi8w.mft (raw, json)
Hash identifier:          bykk/Q+jiGWo/EcdwumLZtdKppxU84MEV7sL0t9u/G8=
Subject key identifier:   F9:5B:83:1C:31:04:0C:F9:C1:2F:42:09:B8:F1:34:83:68:41:AE:C2
Authority key identifier: 59:39:E9:73:C8:8B:FC:6A:41:AA:35:A8:9D:D8:46:FB:0D:16:8B:CC
Certificate issuer:       /CN=A91E6776/serialNumber=5939E973C88BFC6A41AA35A89DD846FB0D168BCC
Certificate serial:       0E86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WTnpc8iL_GpBqjWondhG-w0Wi8w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.mft
Manifest number:          0E80
Signing time:             Fri 31 Jan 2025 17:40:43 +0000
Manifest this update:     Fri 31 Jan 2025 17:40:43 +0000
Manifest next update:     Fri 07 Feb 2025 17:40:43 +0000
Files and hashes:         1: WTnpc8iL_GpBqjWondhG-w0Wi8w.crl (hash: XPIO1aujCtRWUsdY6Y+DnnoCFiqfu/bTYaROIH0GzMA=)
                          2: 7DAD1584881811E99CA76437C4F9AE02.roa (hash: kQ1ecN3du3BFvR7/Vwlq9mllQVMxIS/rTwYJnbfcfck=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3718 (0xe86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6776/serialNumber=5939E973C88BFC6A41AA35A89DD846FB0D168BCC
        Validity
            Not Before: Jan 31 17:40:43 2025 GMT
            Not After : Feb  7 17:40:43 2025 GMT
        Subject: CN=679d0b1b-2b9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f5:35:31:b2:69:83:93:6b:ab:cb:8f:0f:76:
                    b0:05:09:9f:77:e3:a2:a3:82:7f:c5:4f:25:b4:3c:
                    49:e7:78:b9:f6:37:d8:0a:fe:7b:ba:0d:0d:da:12:
                    06:79:ca:ca:a2:10:05:6c:98:bf:4d:34:4f:ee:29:
                    c8:ae:fd:9c:c2:f3:f4:a7:31:4d:3d:61:ca:47:48:
                    bf:83:1d:17:af:6c:c6:f1:e7:9c:48:ae:d5:70:34:
                    fa:3d:c7:e4:32:e1:79:81:ee:3b:a9:e1:63:61:ff:
                    14:57:07:db:4d:c6:9b:3b:ce:4c:6d:85:9f:eb:87:
                    c7:2a:2d:46:5d:55:8b:c5:32:6d:01:7f:50:91:de:
                    04:42:75:fd:d2:ac:5e:bc:f5:23:8a:8a:cb:cf:b3:
                    64:73:4c:30:0a:70:12:d9:2d:fb:5a:cb:8b:ac:ff:
                    c8:3a:15:1b:ae:e8:d8:31:38:3a:7d:ad:ef:af:85:
                    d6:1f:c2:bc:d3:eb:13:14:32:f5:da:f0:44:01:93:
                    07:f9:bf:0f:a7:68:e5:33:62:f6:e1:a3:12:c2:89:
                    27:8a:17:d4:bb:c8:87:63:d3:42:43:01:ce:f6:1c:
                    11:d0:3c:6e:4a:e7:59:12:b4:e3:81:95:4e:2a:df:
                    58:91:5b:58:96:4e:c6:fe:0b:52:87:bb:20:18:48:
                    80:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:5B:83:1C:31:04:0C:F9:C1:2F:42:09:B8:F1:34:83:68:41:AE:C2
            X509v3 Authority Key Identifier:
                keyid:59:39:E9:73:C8:8B:FC:6A:41:AA:35:A8:9D:D8:46:FB:0D:16:8B:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WTnpc8iL_GpBqjWondhG-w0Wi8w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:e7:08:59:ce:70:bf:82:dc:39:da:19:37:73:98:8c:dc:27:
         ab:05:b7:c0:e8:c5:4f:cf:8b:92:a2:f7:dd:af:72:30:f9:b3:
         79:27:6a:be:41:cf:eb:0e:09:07:5c:75:a8:67:0a:6d:9c:89:
         94:35:d7:78:87:26:01:4c:3b:c9:46:72:e2:c1:a5:0e:3f:db:
         78:7f:9a:c4:82:74:d5:96:48:33:e6:27:e6:c5:58:5c:17:b9:
         a0:29:e4:d8:20:c4:3b:66:79:54:1f:01:5d:a3:77:78:cf:e6:
         ad:8a:38:db:45:d6:8e:1d:67:e0:45:80:d2:31:0a:4f:6d:2b:
         ec:39:aa:5a:ca:df:9c:2a:98:bd:c3:b4:cf:52:eb:2f:eb:68:
         38:8e:9c:8f:10:b4:67:3c:7c:ce:05:a7:15:f7:fb:fe:cc:84:
         a3:d2:aa:2d:0f:98:5e:ef:ae:3c:67:0f:df:89:14:d6:be:b3:
         4e:19:5c:6b:ad:e0:b3:ad:70:8b:70:bb:7e:67:ce:e2:ca:52:
         85:31:6a:1d:0c:e1:03:00:d4:82:11:d3:f3:c1:cf:02:ae:56:
         c2:2a:e9:f1:d5:b2:2c:7a:b0:95:4d:2d:12:8a:0e:4e:eb:13:
         54:7c:71:95:3e:5a:d6:f0:b9:2d:d7:7e:df:f6:da:bf:3a:55:
         bc:cf:65:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----