Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.mft
File:                     4190GdVyqG920uv3gpq22dA0CQU.mft (raw, json)
Hash identifier:          WP+b58PqaBFHcPghUw/A9cHNSpqqpQvhzGWP3jkaU84=
Subject key identifier:   D0:73:01:A9:4E:F4:5A:2A:C6:4A:5F:5C:32:9D:8A:29:8C:D2:F4:84
Authority key identifier: E3:5F:74:19:D5:72:A8:6F:76:D2:EB:F7:82:9A:B6:D9:D0:34:09:05
Certificate issuer:       /CN=A91E8AF5/serialNumber=E35F7419D572A86F76D2EBF7829AB6D9D0340905
Certificate serial:       011E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4190GdVyqG920uv3gpq22dA0CQU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.mft
Manifest number:          011C
Signing time:             Fri 31 Jan 2025 03:53:49 +0000
Manifest this update:     Fri 31 Jan 2025 03:53:48 +0000
Manifest next update:     Fri 07 Feb 2025 03:53:48 +0000
Files and hashes:         1: 4190GdVyqG920uv3gpq22dA0CQU.crl (hash: eIVgvGM5PPxCe/8XHW2dTDhonp5YYW0H/9pyq9BVQwA=)
                          2: 9985244A2D1411EEAA9EA45DC4F9AE02.roa (hash: VdVGiGXj8WmtMijPMpgRK+Rb6MVhazNJnLJSMdY7Rjs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 286 (0x11e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8AF5/serialNumber=E35F7419D572A86F76D2EBF7829AB6D9D0340905
        Validity
            Not Before: Jan 31 03:53:48 2025 GMT
            Not After : Feb  7 03:53:48 2025 GMT
        Subject: CN=679c494d-10bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ab:7c:83:c6:af:f7:7c:82:d4:38:e6:26:75:
                    dd:bf:30:5f:c2:21:21:7a:77:8e:66:3d:d1:06:6d:
                    a3:20:4e:f1:36:8f:7e:11:76:6b:e5:fc:cd:50:86:
                    bc:f8:39:18:d4:ec:47:b7:2d:b6:ef:7c:91:43:6f:
                    93:18:4f:65:b5:72:cd:da:94:3b:a5:6a:09:f9:40:
                    77:65:1e:4b:16:d7:99:31:07:24:8f:f2:67:95:8a:
                    ad:76:67:2c:b2:0b:8a:38:ef:92:22:d2:60:f2:aa:
                    e9:bd:de:37:2e:f4:b1:c9:10:1a:c0:b3:75:12:61:
                    59:d7:d4:1c:c5:3c:d4:1e:e0:aa:17:06:a0:51:44:
                    6d:66:d3:a2:fa:24:86:b9:c1:c2:d2:2b:96:69:55:
                    b3:15:5b:bc:c8:60:b8:56:bb:89:93:c2:a3:55:ed:
                    61:19:0a:0c:98:71:75:38:f3:76:81:ae:df:3e:e9:
                    35:86:ae:c2:9c:cd:d6:8c:14:65:67:7d:09:95:fd:
                    8f:1d:1a:a3:e2:06:f6:48:8b:34:27:f6:be:0b:a9:
                    51:82:f0:8f:b2:6c:28:4a:6b:f1:1a:f3:29:4c:55:
                    5b:84:bc:61:89:5f:0e:a9:f4:cf:83:d6:af:69:ab:
                    48:64:e1:91:3f:3a:15:40:04:55:1e:d7:c7:62:23:
                    e0:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:73:01:A9:4E:F4:5A:2A:C6:4A:5F:5C:32:9D:8A:29:8C:D2:F4:84
            X509v3 Authority Key Identifier:
                keyid:E3:5F:74:19:D5:72:A8:6F:76:D2:EB:F7:82:9A:B6:D9:D0:34:09:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4190GdVyqG920uv3gpq22dA0CQU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:9f:e3:c7:59:e2:51:04:ac:99:9b:d9:70:de:83:b3:b8:37:
         aa:39:c8:f3:7d:00:e1:0b:2f:00:23:7e:d6:97:26:b4:a0:ca:
         46:ef:42:1f:b1:51:25:0f:9c:c4:97:3f:5c:65:41:87:a9:2c:
         5c:79:4e:4c:ce:8c:74:10:cc:1f:e8:ed:8f:45:ec:f0:7a:38:
         32:36:7b:20:36:54:bc:88:a6:3c:7e:11:ea:d6:55:2b:ff:59:
         74:38:bd:a3:e4:7a:c9:57:f9:c3:52:84:66:47:c7:96:1d:d7:
         e4:a8:21:26:14:f2:c0:cf:b2:68:27:42:e7:23:7c:ed:62:73:
         f1:72:bd:cf:ea:79:83:fe:b1:5a:e3:e1:6a:42:22:8e:51:7b:
         52:5b:4a:c2:6d:4e:ce:4b:ae:95:8b:bb:2a:1b:7e:61:aa:57:
         e7:6e:b7:b7:96:f2:48:c0:20:70:78:7b:06:54:f7:75:b6:d7:
         37:86:37:1b:3f:1e:e6:b4:57:ad:9b:15:0c:31:9d:df:b0:47:
         41:97:e1:76:5c:12:91:e4:cb:7c:31:1c:dc:09:35:36:10:36:
         5d:d6:ce:39:7e:58:ac:29:52:7d:c0:10:ff:87:74:0d:fe:6c:
         90:42:ad:ad:26:7a:d6:d9:2a:db:b4:4b:69:75:eb:e4:d8:17:
         d4:08:fd:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----