Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft
File:                     xIKbbAf9gE3wklz_wWHGcCgHoCY.mft (raw, json)
Hash identifier:          q2btXZwJ7F1W00Kcq3Js9YyWydefqyy0Y/FVqCUwUY4=
Subject key identifier:   66:CC:18:3A:BE:44:D8:B9:E6:04:3F:B8:CC:26:C0:2F:7C:6A:3A:2C
Authority key identifier: C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26
Certificate issuer:       /CN=A91E7E45/serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026
Certificate serial:       09C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft
Manifest number:          0994
Signing time:             Thu 30 Jan 2025 20:13:08 +0000
Manifest this update:     Thu 30 Jan 2025 20:13:07 +0000
Manifest next update:     Thu 06 Feb 2025 20:13:07 +0000
Files and hashes:         1: xIKbbAf9gE3wklz_wWHGcCgHoCY.crl (hash: TvOXHX5cY13Myj4EBGJdfmUxRe+Pvh04wDBlypFL10Y=)
                          2: 0FD437CAC11811EE8328EF7AC4F9AE02.roa (hash: fbYOGjHMohkB40Ip5nHSIZM+X/jub17JqWsOkKhOWSY=)
                          3: 9406C1209FDB11EDB88C5662C4F9AE02.roa (hash: YZEuoke/CkJiGAVUdW9nROMmjBJVKYrECNHv0AzIy0U=)
                          4: E8137EDEA29011EAA7A47878C4F9AE02.roa (hash: 2gLVXHr34ksm7UG4jmg1c/bwz/Ta19pU2wRXas1eM5o=)
                          5: FBA017C0B26F11EF9B327759C4F9AE02.roa (hash: 5A6IAAzEfyFmLpSUVEIHJSkpY2daBj3hF3klFk9LYUg=)
                          6: B16C9766F97711EEB642002CC4F9AE02.roa (hash: QK/3IPLlLHpJzMAh9LEu9wBTyMjDq5axIgBNT1XfyTo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2499 (0x9c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7E45/serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026
        Validity
            Not Before: Jan 30 20:13:07 2025 GMT
            Not After : Feb  6 20:13:07 2025 GMT
        Subject: CN=679bdd54-0749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:51:cd:7d:e9:f9:5f:c1:b8:36:65:06:c7:3d:
                    34:35:2b:1b:0f:fb:80:49:f1:5d:99:b2:5f:03:eb:
                    11:d4:d6:53:d5:ce:54:60:66:10:4a:cd:ee:3b:75:
                    91:0c:05:01:72:c1:23:d1:06:9f:de:08:3d:13:f4:
                    da:25:ad:48:79:5b:d5:b9:2a:f0:79:aa:13:4f:e4:
                    55:c9:84:30:bf:4e:92:23:12:e2:4b:8d:0c:e1:a3:
                    07:04:a3:f5:9e:49:9d:2e:1a:2a:0a:c3:63:2f:c1:
                    65:4c:8e:4f:3e:fc:cd:4e:25:19:82:8c:c4:d3:ed:
                    3a:c1:31:6d:66:dd:35:e7:1e:d2:ed:09:7a:bb:70:
                    d5:6f:98:87:07:31:cc:af:88:a4:74:7b:2e:72:be:
                    1d:72:9e:c8:55:c3:a6:15:35:f4:d8:a1:8f:eb:8d:
                    b0:44:53:e5:99:1d:4b:a8:5d:d3:66:a6:49:d3:a2:
                    42:90:b2:ab:ce:6b:f0:d8:bd:05:a6:4e:5b:f0:06:
                    39:6f:89:f9:7c:07:81:87:f8:47:90:7b:d8:b7:55:
                    ec:95:46:aa:77:ad:4d:50:70:f3:a5:82:08:8e:1c:
                    91:73:3d:2e:f1:1b:ab:7e:fd:ee:ca:91:61:db:7e:
                    84:2b:c3:5b:4b:5d:3b:fe:9d:0d:9b:c5:07:14:1e:
                    ba:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:CC:18:3A:BE:44:D8:B9:E6:04:3F:B8:CC:26:C0:2F:7C:6A:3A:2C
            X509v3 Authority Key Identifier:
                keyid:C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:d5:02:1c:31:de:57:60:60:85:07:67:c1:b5:69:6c:f7:91:
         ca:15:2b:65:be:08:b8:83:23:46:46:ed:4e:1c:c9:84:6c:02:
         94:c7:32:2d:4f:7d:78:4a:f7:c6:7e:45:8e:53:4d:16:4e:73:
         c4:88:e1:86:bc:36:e5:90:17:6e:99:75:4d:ee:af:9a:a5:6a:
         c4:41:d6:e4:e7:97:19:65:73:a6:67:16:29:c0:a2:4e:87:b8:
         d7:49:44:53:ed:99:1a:e9:f0:05:40:b8:fd:34:98:b9:87:cf:
         8e:e3:98:0f:2f:7c:de:a2:a4:dc:3b:70:69:b1:e1:cc:13:5b:
         9e:54:51:55:0d:55:dd:f0:c0:d3:61:6f:c4:41:a6:55:af:6b:
         ab:f3:a6:19:db:d6:8c:aa:66:96:2b:66:29:78:f4:ce:d5:fc:
         48:a2:c2:3c:6c:a5:a1:ae:7c:3d:ac:fa:c7:c8:03:29:0a:38:
         5d:68:87:39:3e:e0:f8:2f:78:59:a2:ae:b3:f5:d1:bc:ab:8d:
         6a:fb:c5:6c:c4:ee:53:2e:74:19:ea:f0:9b:0f:58:ad:28:85:
         51:c3:ed:d0:2e:bd:8f:08:80:72:03:76:e8:c7:cd:18:b5:51:
         f1:2f:4d:1f:41:67:09:e6:f1:2f:b2:ca:c0:a4:50:1a:72:9f:
         b2:4c:6f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----