Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft
File:                     zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft (raw, json)
Hash identifier:          hwzTSh80gEck0IUeFyp/jpeop/iufOJ5DhBe2LX6VRU=
Subject key identifier:   14:45:B8:7A:6C:CE:BD:FB:EA:95:83:91:86:4C:98:F9:42:FD:B1:29
Authority key identifier: CC:54:19:C8:A7:8B:CD:53:AD:17:1C:5B:74:A4:07:1D:95:39:50:49
Certificate issuer:       /CN=A91ED8E0/serialNumber=CC5419C8A78BCD53AD171C5B74A4071D95395049
Certificate serial:       0885
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFQZyKeLzVOtFxxbdKQHHZU5UEk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft
Manifest number:          0873
Signing time:             Thu 30 Jan 2025 20:41:44 +0000
Manifest this update:     Thu 30 Jan 2025 20:41:44 +0000
Manifest next update:     Thu 06 Feb 2025 20:41:44 +0000
Files and hashes:         1: zFQZyKeLzVOtFxxbdKQHHZU5UEk.crl (hash: GS3onpiY4Cc5stB2sbfXCrHm4sqdZo+SAbK4ZcikkpE=)
                          2: 2BEC62FA5DA011EF8E541175C4F9AE02.roa (hash: j0i0jOhZZOWP9s/TIb9RjR+IPetIqCuM8Ixx2VI3fzI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2181 (0x885)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED8E0/serialNumber=CC5419C8A78BCD53AD171C5B74A4071D95395049
        Validity
            Not Before: Jan 30 20:41:44 2025 GMT
            Not After : Feb  6 20:41:44 2025 GMT
        Subject: CN=679be408-78f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c5:0e:57:8d:e2:ba:83:b3:8e:6a:d9:55:fc:
                    38:37:06:b8:d9:51:31:3d:0f:30:1c:7b:aa:72:9c:
                    54:ee:26:e9:60:7d:f0:02:3f:97:50:32:ce:d7:fd:
                    bd:f1:80:b7:e3:a2:d8:49:35:e2:f5:9f:75:cf:c0:
                    2c:20:1b:f3:64:a4:d9:91:21:0e:32:51:ef:82:64:
                    84:5d:14:67:45:e4:75:fc:44:50:10:f7:d3:dc:b2:
                    14:31:6c:20:49:fa:82:2a:91:4a:f5:3d:af:a9:13:
                    90:42:5e:86:17:31:cc:5b:ed:5b:d0:2f:f1:ab:e4:
                    3c:b1:6a:41:bb:d1:5f:f1:84:8f:20:c7:96:ab:25:
                    3c:95:01:04:41:b0:e6:24:1c:5e:71:6c:47:c4:d5:
                    23:8a:2a:a8:f7:c0:db:c3:79:b8:ee:a9:8f:57:31:
                    7d:63:ae:9a:e7:10:51:08:68:e5:5f:61:fd:50:21:
                    4b:85:87:3e:c9:06:55:35:1a:4e:48:f4:49:f1:3d:
                    ec:4a:a5:b4:4e:57:e5:e3:b1:c6:05:17:ef:40:25:
                    43:9c:d8:a5:66:f7:3a:74:e1:24:68:e6:28:97:90:
                    10:12:52:60:02:d0:73:df:10:33:5f:68:fd:01:d7:
                    9e:59:e4:4f:21:a7:1d:35:0b:1e:10:ae:b7:83:0f:
                    56:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:45:B8:7A:6C:CE:BD:FB:EA:95:83:91:86:4C:98:F9:42:FD:B1:29
            X509v3 Authority Key Identifier:
                keyid:CC:54:19:C8:A7:8B:CD:53:AD:17:1C:5B:74:A4:07:1D:95:39:50:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFQZyKeLzVOtFxxbdKQHHZU5UEk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:23:fc:8d:05:82:90:e4:7a:22:cc:13:8c:c1:b8:25:ce:e2:
         ac:8a:46:65:dd:58:ab:14:f9:66:e9:dd:bf:28:03:a2:6a:de:
         7a:cc:65:2e:61:d6:40:2e:b1:bd:23:10:b4:9f:f7:7c:f0:bc:
         56:6a:34:6f:f3:29:e1:bf:cf:95:6e:f7:2b:e6:5b:8a:50:16:
         7c:3c:b9:d0:69:ac:60:84:2b:16:58:48:ef:3a:a1:cd:61:5f:
         30:dc:d9:e7:b0:bd:5b:70:c0:83:55:40:b9:e1:31:b2:cc:92:
         95:83:c7:e6:a7:6e:c7:c1:db:0c:0d:8f:67:91:ac:72:77:90:
         4c:49:d7:21:e6:dd:0c:74:ab:53:11:af:d3:e8:98:c5:ef:d8:
         7e:72:0d:fa:03:5f:8e:e1:49:33:96:9e:9c:a2:ef:32:46:f2:
         4a:8c:b3:f3:8e:ad:b8:90:fc:d4:23:d2:31:56:e8:aa:f9:4d:
         d9:88:55:91:8e:eb:2a:97:58:07:7b:0c:45:12:65:58:7d:a5:
         8a:22:65:3d:e6:0b:bd:c8:05:fc:65:43:e9:24:de:06:a1:18:
         da:5a:63:5e:10:35:b6:45:8b:91:4d:b2:0c:f9:d3:39:31:88:
         f7:6a:14:9f:19:11:67:a5:fa:c1:9a:ea:f3:a4:a9:03:3f:87:
         95:28:4d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----