Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.mft
File:                     gf_yFQBdoa-sXiSrvMA8pw9mS1Y.mft (raw, json)
Hash identifier:          i8dteBYR7Iz4GeDxZiAfq9O5HYSkClM/sAJXOJShX5M=
Subject key identifier:   C4:20:81:AB:93:BE:5F:21:5E:D3:B5:D4:43:53:78:99:81:DC:CF:2F
Authority key identifier: 81:FF:F2:15:00:5D:A1:AF:AC:5E:24:AB:BC:C0:3C:A7:0F:66:4B:56
Certificate issuer:       /CN=A91EEBAD/serialNumber=81FFF215005DA1AFAC5E24ABBCC03CA70F664B56
Certificate serial:       05D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.mft
Manifest number:          05D2
Signing time:             Thu 30 Jan 2025 23:03:17 +0000
Manifest this update:     Thu 30 Jan 2025 23:03:17 +0000
Manifest next update:     Thu 06 Feb 2025 23:03:17 +0000
Files and hashes:         1: gf_yFQBdoa-sXiSrvMA8pw9mS1Y.crl (hash: MvQhWGWBGBnC4HRm5Iz29k3v6/9w/3AcsPd7KaIVgIk=)
                          2: 9FCD0EE6A34411EB94DFE619C4F9AE02.roa (hash: XXm7dEPWN7PeNwcSEocHHcyLGZ98umw2siGVr4odclk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1495 (0x5d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EEBAD/serialNumber=81FFF215005DA1AFAC5E24ABBCC03CA70F664B56
        Validity
            Not Before: Jan 30 23:03:17 2025 GMT
            Not After : Feb  6 23:03:17 2025 GMT
        Subject: CN=679c0535-b0c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:34:4e:9f:b8:64:cf:86:b0:7f:19:c5:8c:b0:
                    b3:83:22:49:9a:da:e9:f3:59:7b:be:b8:69:f0:69:
                    8a:3c:09:72:bd:c6:50:d2:31:ef:1a:b5:a7:18:89:
                    05:2d:dd:38:60:64:a6:e4:a7:cf:66:df:ce:3a:34:
                    e9:bc:74:3a:70:db:a4:66:08:0b:62:e8:e5:6d:14:
                    e1:b0:d9:04:42:a0:39:f4:dc:4a:be:20:a4:38:46:
                    30:ff:77:bb:ad:44:4d:ed:fd:54:06:70:c9:d7:c2:
                    5b:3c:2c:5d:16:71:a5:b4:1a:b6:7b:2c:22:30:47:
                    1e:54:32:f3:cb:2d:ac:29:ec:ef:36:84:d4:c2:a3:
                    e5:13:de:9b:d2:39:90:43:fd:2b:a4:02:6b:94:4b:
                    99:80:1a:44:76:f1:7a:8e:53:c4:89:08:f5:aa:0d:
                    6a:e4:61:6d:24:3e:48:f2:a3:dc:8c:4b:f6:a6:8b:
                    52:e0:7e:ce:2e:f1:82:df:cc:c8:26:16:89:b6:f1:
                    d4:be:01:99:5d:97:59:93:c9:74:71:06:bc:40:a4:
                    90:9c:fa:51:a2:9b:a2:44:a1:92:e2:9b:72:ea:d2:
                    73:b1:16:48:93:4d:ac:0b:4c:c9:be:09:69:d9:17:
                    30:4a:e1:c5:c5:c2:18:2a:9a:20:2f:d9:46:5f:c7:
                    f8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:20:81:AB:93:BE:5F:21:5E:D3:B5:D4:43:53:78:99:81:DC:CF:2F
            X509v3 Authority Key Identifier:
                keyid:81:FF:F2:15:00:5D:A1:AF:AC:5E:24:AB:BC:C0:3C:A7:0F:66:4B:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:19:91:e5:4b:83:f3:d3:d8:a4:30:1c:2a:96:ee:25:87:1a:
         44:11:b9:8e:fc:b8:d1:df:0a:a5:1a:ad:9f:e1:14:74:b3:37:
         e2:a6:51:60:b1:fc:98:e8:49:d6:c7:88:47:1d:ba:99:80:21:
         fa:bc:e7:86:b0:39:37:74:5e:e9:4c:b4:83:93:61:83:dd:61:
         c0:76:b5:3a:38:e0:7a:b5:3b:e3:8f:b9:d7:b4:9a:7e:4e:fe:
         d3:57:85:fe:69:c3:e4:21:c6:28:26:5c:68:ae:32:1d:2a:06:
         04:a5:6d:ee:cf:7c:92:04:8c:20:ad:65:a2:5b:fb:b4:be:97:
         3a:db:16:f9:19:4a:d3:8a:7d:52:5b:4e:74:0d:8c:a9:54:c3:
         c5:ce:90:9e:bd:6e:5a:f5:5d:92:d7:3e:57:5a:13:65:9e:d0:
         09:d8:61:f8:7b:cd:c8:3d:62:bc:62:cf:24:00:d3:a2:a7:14:
         b9:b7:63:77:e2:83:2e:a4:f7:6d:5a:29:f4:68:72:84:d9:6b:
         06:3e:d3:ff:49:ea:f2:b8:d1:13:61:a7:df:38:50:ba:f2:8d:
         92:7b:d6:74:ac:e7:c0:38:9c:d3:04:4e:90:ca:aa:a6:ec:21:
         b0:96:55:92:32:bc:b7:59:ac:0b:c2:1b:6a:0c:42:84:69:49:
         74:60:2e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----