Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft
File:                     I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft (raw, json)
Hash identifier:          U53DAImT/7HgZWFenVjEnB/xz7ksWXKuumOzGcie3rU=
Subject key identifier:   5D:E7:11:12:E2:B5:81:13:E5:21:2A:67:DD:7C:A2:34:DC:FD:FB:26
Authority key identifier: 23:B9:60:37:AB:8A:D2:37:E6:32:6F:7E:D0:F8:1E:31:8E:8A:14:AB
Certificate issuer:       /CN=A91E892A/serialNumber=23B96037AB8AD237E6326F7ED0F81E318E8A14AB
Certificate serial:       18BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft
Manifest number:          18B0
Signing time:             Fri 31 Jan 2025 16:28:55 +0000
Manifest this update:     Fri 31 Jan 2025 16:28:54 +0000
Manifest next update:     Fri 07 Feb 2025 16:28:54 +0000
Files and hashes:         1: I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl (hash: FEuorYS8HggC0Kwl1Jmgo1oyu40S0MHwnD++9ovFca0=)
                          2: D421D958881611E78B9B0850C4F9AE02.roa (hash: CS+09tEdeSx7uIOBkaLSiPeVYQX/xw7ybPJk0cnYVHY=)
                          3: D57C98A88C0311EFAA53FF12C4F9AE02.roa (hash: mbcYtTY7pzkjLAPzzBYkqLR1semAFFI9aiFhIVq/OQg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6330 (0x18ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E892A/serialNumber=23B96037AB8AD237E6326F7ED0F81E318E8A14AB
        Validity
            Not Before: Jan 31 16:28:54 2025 GMT
            Not After : Feb  7 16:28:54 2025 GMT
        Subject: CN=679cfa47-f1ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e1:a6:d3:60:c4:3e:38:e8:82:ee:f9:ac:a1:
                    36:c7:ca:13:53:07:dc:c0:f3:f3:5a:1a:5e:31:e9:
                    11:56:46:9a:b1:a6:13:9f:84:47:15:cf:5b:22:1a:
                    9e:da:ad:73:27:fd:02:2a:74:e2:1b:e9:03:54:11:
                    48:0a:ca:42:c2:f6:9c:f0:af:38:00:66:4e:72:f2:
                    75:c2:3e:9d:48:aa:4d:ea:ef:bb:b3:ce:c2:03:d2:
                    1e:ef:ef:7e:06:68:77:60:b2:72:4f:82:c8:8e:36:
                    14:d3:64:bf:2f:df:26:ae:c8:b3:9f:be:32:5f:1b:
                    44:57:3b:06:b1:f6:7b:84:c6:75:32:c7:17:25:35:
                    d6:28:f1:f7:6e:15:e3:7c:5e:63:de:a9:10:14:28:
                    ce:6b:59:7c:3d:58:5d:fd:63:42:9d:c2:35:d5:ef:
                    ee:8a:fa:f6:90:d7:e3:c2:e5:c9:15:bc:41:87:28:
                    a9:a5:27:13:1f:82:2b:42:d4:87:5c:fb:9f:2a:0c:
                    28:63:10:2c:a5:df:f4:7e:a5:d1:26:6e:23:93:e9:
                    3e:fd:60:2d:94:c7:ce:7a:71:81:e5:cc:2e:59:ce:
                    9e:94:7d:b6:6e:05:de:5e:0b:93:a7:4d:a9:a1:29:
                    24:a1:cf:89:79:2e:0f:48:80:3d:95:aa:0d:b9:09:
                    74:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:E7:11:12:E2:B5:81:13:E5:21:2A:67:DD:7C:A2:34:DC:FD:FB:26
            X509v3 Authority Key Identifier:
                keyid:23:B9:60:37:AB:8A:D2:37:E6:32:6F:7E:D0:F8:1E:31:8E:8A:14:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:68:ff:bf:ee:54:ab:a7:75:f9:e9:3c:37:c2:cb:6d:d4:a1:
         42:7f:95:9f:a9:d3:27:08:47:88:ae:d7:02:5c:16:a2:46:f2:
         85:b7:aa:fd:f1:3b:42:a3:f1:95:5d:30:73:2c:d6:eb:48:17:
         cd:c3:33:e2:f2:75:91:9a:92:45:53:ac:11:96:42:2b:f8:7d:
         59:b9:d0:da:d9:84:48:4f:40:de:8c:8a:3b:32:e3:e8:e2:b0:
         39:01:ce:a6:75:a6:7c:e7:5d:68:a5:9d:f4:e1:f3:39:73:64:
         2c:c5:d7:02:46:22:61:56:8b:1c:2f:9b:af:fe:b5:72:90:a3:
         fb:95:57:6b:f9:d5:ce:2d:c9:07:55:ab:0f:16:31:1f:5f:d4:
         77:fd:e0:14:7e:10:9a:51:f9:4f:6c:4c:c8:c6:d6:7b:13:6f:
         01:82:db:5e:d8:c0:42:ab:db:c3:04:f9:45:ec:70:54:8a:10:
         3b:68:38:f8:a5:11:c9:b9:8a:70:ba:bc:51:46:50:24:52:77:
         e0:56:31:f0:05:e3:24:54:36:ee:c1:35:97:70:21:8d:e8:9f:
         0d:3f:2f:98:97:de:9a:8a:a1:61:d4:33:04:8c:5c:fa:28:ca:
         83:67:70:70:6a:70:e3:6b:a1:a2:f2:7f:41:27:06:7f:36:a3:
         16:12:e2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----