Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft
File:                     2jyR-PFV2QuZh8kTskxPnlRF6cw.mft (raw, json)
Hash identifier:          ZZ/VJwskxocFC1qJPo2rFuB9TB9S2w3NLlxutvTlyXA=
Subject key identifier:   47:3C:07:EC:50:82:20:A2:CB:5C:87:67:FD:8F:1E:A0:E9:61:E2:EE
Authority key identifier: DA:3C:91:F8:F1:55:D9:0B:99:87:C9:13:B2:4C:4F:9E:54:45:E9:CC
Certificate issuer:       /CN=A91E70ED/serialNumber=DA3C91F8F155D90B9987C913B24C4F9E5445E9CC
Certificate serial:       0CAF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft
Manifest number:          0C9C
Signing time:             Fri 31 Jan 2025 18:08:13 +0000
Manifest this update:     Fri 31 Jan 2025 18:08:12 +0000
Manifest next update:     Fri 07 Feb 2025 18:08:12 +0000
Files and hashes:         1: 2jyR-PFV2QuZh8kTskxPnlRF6cw.crl (hash: OvEQzn1wZxHBpn9Cm803EJ39B8Ysm49dWlHt5yFU1Fc=)
                          2: 8D9FFB3EEB2911EB9891D01DC4F9AE02.roa (hash: mgW7VeujR3wQCY2FOQTLD+1AfxSaJAkPmJmO0oMCuHQ=)
                          3: FEB624F6B94911EE897F7947C4F9AE02.roa (hash: rybbZdEyPr2dvKbIGHG7PjXC8DWgHoGfpQtIcH3SNoo=)
                          4: 8E4647E6EB2911EB9891D01DC4F9AE02.roa (hash: adFrZ9wVUFL/q70xYlPOLV2jTwKmfI9/GoGFtthCxcw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3247 (0xcaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E70ED/serialNumber=DA3C91F8F155D90B9987C913B24C4F9E5445E9CC
        Validity
            Not Before: Jan 31 18:08:12 2025 GMT
            Not After : Feb  7 18:08:12 2025 GMT
        Subject: CN=679d118d-1511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c7:82:0f:cb:a6:d8:f9:98:e2:36:e2:b0:58:
                    c2:50:a3:3b:44:d4:30:a7:41:9d:90:c6:fb:9f:02:
                    d7:ad:35:d3:f7:b3:aa:12:bc:1e:fc:b7:9a:df:6e:
                    52:52:38:e5:83:d9:cf:84:cf:43:5d:a4:d5:d6:45:
                    50:b4:7a:9f:99:f5:56:69:37:94:4d:c6:94:6c:4a:
                    5e:be:59:8b:df:ac:52:69:99:82:47:19:bd:ab:34:
                    e8:37:94:61:18:24:cd:52:4a:d4:4f:98:88:7c:55:
                    1f:5d:93:f5:45:7d:77:2a:7e:ab:ae:92:10:fc:3c:
                    a3:10:ed:a3:d4:21:13:9d:19:33:e0:04:5f:40:e3:
                    e9:e7:45:5d:82:36:ae:cb:ac:ae:12:44:a2:ca:ba:
                    1c:7b:0c:b1:04:c5:77:0e:d6:9b:87:7b:e3:c3:7d:
                    92:67:e0:cf:3d:c0:93:9e:30:5e:5b:5e:7f:fc:e3:
                    b5:16:40:89:79:03:77:48:2b:b5:57:4c:0e:8e:1b:
                    0e:7c:e2:ab:f0:8e:92:c8:e2:bd:c0:97:0a:ad:60:
                    1e:e4:0f:cc:e9:94:79:4a:e8:78:10:4b:e6:16:a6:
                    6c:ef:64:8e:45:39:79:37:e7:45:d1:fc:28:23:2d:
                    18:61:d9:3d:98:36:d3:92:17:65:32:1e:d2:a9:a1:
                    3a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:3C:07:EC:50:82:20:A2:CB:5C:87:67:FD:8F:1E:A0:E9:61:E2:EE
            X509v3 Authority Key Identifier:
                keyid:DA:3C:91:F8:F1:55:D9:0B:99:87:C9:13:B2:4C:4F:9E:54:45:E9:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:8c:00:ba:39:b3:c3:9f:16:41:4e:bf:76:1b:c8:a3:44:c4:
         ac:9b:3f:50:33:10:36:63:56:fd:ec:55:11:54:2c:a9:ed:d0:
         b9:8d:46:35:90:07:42:0c:98:c4:f4:1a:49:b8:e0:4f:18:c3:
         39:4c:b6:2d:13:aa:3b:c7:42:77:99:51:81:ab:53:23:0b:87:
         24:8d:82:a4:87:8c:43:0b:54:f6:6d:b1:25:72:70:e9:33:d6:
         cd:61:17:86:9a:ba:c9:bc:e2:83:5f:4d:39:f6:a9:1d:b3:ed:
         49:af:8e:6b:40:f4:0a:a5:0e:cf:72:1e:6a:26:ae:b9:42:4c:
         52:7b:72:44:09:fa:c0:3b:bf:b7:84:54:01:66:71:1c:39:6c:
         b8:6e:1a:e3:b3:b4:cb:df:8a:b7:05:87:8b:97:8d:4c:24:a7:
         25:6e:98:5d:c1:1a:7d:d1:6b:12:e5:5e:83:00:da:8f:0a:05:
         b6:06:73:d0:e0:b0:7e:21:ae:76:f3:cf:7e:82:ec:1f:97:f4:
         78:04:4e:8d:30:35:5e:ee:49:ee:4c:16:f8:8e:d4:e1:3e:42:
         97:93:9e:fb:ce:b4:d2:aa:7b:a3:bb:40:32:2c:40:63:82:e1:
         26:06:0e:f9:ce:4f:01:3b:5f:4b:60:bb:9d:68:cd:8d:7c:57:
         6f:73:e6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----