Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft
File:                     4x5nyg5b7bJI-Xplfe_2LshvUks.mft (raw, json)
Hash identifier:          jMWnQd2WzAXXLl6VoWB5xwcUyK3yBv8Jj7yfH7OFJ/w=
Subject key identifier:   5E:90:8D:AE:D8:06:2F:E6:2B:E9:03:3C:3F:0B:42:6C:97:8F:4D:EA
Authority key identifier: E3:1E:67:CA:0E:5B:ED:B2:48:F9:7A:65:7D:EF:F6:2E:C8:6F:52:4B
Certificate issuer:       /CN=A91ED5D9/serialNumber=E31E67CA0E5BEDB248F97A657DEFF62EC86F524B
Certificate serial:       0242
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft
Manifest number:          023E
Signing time:             Fri 31 Jan 2025 01:58:25 +0000
Manifest this update:     Fri 31 Jan 2025 01:58:25 +0000
Manifest next update:     Fri 07 Feb 2025 01:58:25 +0000
Files and hashes:         1: 4x5nyg5b7bJI-Xplfe_2LshvUks.crl (hash: LvgicIidLJD8o00CA0FfAPOxidKew2jJaojELauN/hY=)
                          2: A3013D2A0CCB11ED97820077C4F9AE02.roa (hash: h+ue+R5DGdF0uaqUXBTnmoh/DYvzHxp90t2bN+4sANk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 578 (0x242)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED5D9/serialNumber=E31E67CA0E5BEDB248F97A657DEFF62EC86F524B
        Validity
            Not Before: Jan 31 01:58:25 2025 GMT
            Not After : Feb  7 01:58:25 2025 GMT
        Subject: CN=679c2e41-2a3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5c:e5:aa:ec:bb:01:da:0c:b1:c6:84:b9:49:
                    fb:1f:75:a0:86:0e:b4:49:0e:f1:6e:1a:4e:90:30:
                    27:a9:e1:e1:0b:79:2c:b8:9c:b5:87:c9:cc:a2:91:
                    35:f1:69:f4:4b:c9:28:3b:82:30:e5:20:7d:40:3b:
                    ee:4b:58:33:3f:44:87:51:94:e4:8a:82:98:47:d3:
                    bd:80:52:79:b4:6d:31:c0:4f:6a:2d:aa:cb:64:45:
                    87:bd:ef:03:dc:96:b0:aa:99:f8:32:97:28:44:8f:
                    32:1a:34:15:d1:25:fe:e4:35:1d:67:af:ef:02:eb:
                    5c:05:ee:d8:55:e2:f5:2c:44:19:35:61:60:94:4a:
                    e4:47:a8:b1:a1:6e:6d:cb:d1:13:c1:f5:6a:03:55:
                    03:76:dd:28:71:86:b7:c6:aa:54:b5:4f:65:7d:73:
                    1a:f0:48:3d:6b:f8:d9:dc:88:f8:27:fe:48:1a:a1:
                    e9:6a:e1:60:e8:ed:9f:5f:56:e0:4f:6a:09:99:66:
                    26:11:e3:39:1d:b2:c4:4a:f8:b3:06:3a:6b:f6:dc:
                    0e:bb:ef:af:f1:a3:8e:8f:5d:f1:3f:20:6f:d5:1c:
                    c5:8a:28:41:f3:d0:17:39:6f:93:fe:4c:f0:dc:3a:
                    80:97:c6:be:57:f9:71:cf:c3:f8:f6:0c:6b:92:cf:
                    c4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:90:8D:AE:D8:06:2F:E6:2B:E9:03:3C:3F:0B:42:6C:97:8F:4D:EA
            X509v3 Authority Key Identifier:
                keyid:E3:1E:67:CA:0E:5B:ED:B2:48:F9:7A:65:7D:EF:F6:2E:C8:6F:52:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:ff:ca:19:f1:37:19:6b:da:ad:5d:59:ef:8a:0c:86:84:cb:
         8b:97:3f:66:88:81:7a:5a:7e:95:c7:8b:1d:d3:ed:04:2f:2f:
         a0:a7:f8:68:96:b0:19:88:db:e3:92:7e:d1:b9:33:ff:32:02:
         85:63:2c:38:78:0f:1e:82:c2:45:b6:f6:9f:bc:8f:70:e8:04:
         64:29:65:75:ba:eb:19:94:6a:e9:8e:69:ca:51:ef:a7:60:09:
         21:85:e9:a4:7b:0c:1e:29:a7:db:80:75:04:2d:d6:82:3f:98:
         30:a5:8f:c7:20:b9:34:85:57:1e:61:bb:43:73:83:71:a4:2f:
         f6:9d:bf:61:02:89:30:9e:39:c9:e9:d0:c6:7e:f6:21:39:b5:
         28:d5:17:50:db:1e:1f:62:91:d9:f8:cc:1a:22:c6:e0:da:2f:
         b1:70:d5:3e:6c:6d:f3:40:b3:22:36:31:4c:f2:75:e4:67:67:
         20:1c:15:61:21:5d:d6:d3:6c:05:c8:98:58:3f:2b:94:91:a4:
         c2:34:02:ee:08:51:d9:a5:d0:98:e3:1e:ae:3c:d5:c4:06:b9:
         de:66:a9:67:f4:70:fe:ef:0a:d6:b5:da:8d:9f:51:a4:9f:d1:
         ce:6e:4c:f2:63:81:9a:8a:50:55:8d:c2:8e:13:d0:f7:42:12:
         e9:f7:5a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----