Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft
File:                     fqwMLLJ6MKE47kdbB_6X6Okz_co.mft (raw, json)
Hash identifier:          JOWGHqR+i2qtb1S2gR2sJgIoYcByyxThX7qKVHO2Ahw=
Subject key identifier:   71:50:3E:54:4B:DE:EB:37:EF:A2:74:E6:18:83:6C:FA:54:F5:32:15
Authority key identifier: 7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA
Certificate issuer:       /CN=A91F13B9/serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA
Certificate serial:       2866
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft
Manifest number:          27F4
Signing time:             Fri 31 Jan 2025 15:38:40 +0000
Manifest this update:     Fri 31 Jan 2025 15:38:39 +0000
Manifest next update:     Fri 07 Feb 2025 15:38:39 +0000
Files and hashes:         1: fqwMLLJ6MKE47kdbB_6X6Okz_co.crl (hash: VBik2dRz1IpVieita6Msz/NLF7WEzOZj9D8/VlSdZfQ=)
                          2: 313D676CC0DE11EFB07C954CC4F9AE02.roa (hash: K1lxhDpacxKdc14B0FvDeadhs8Vven5kmYsXDaArlNs=)
                          3: F9B7A3BEB0A911EF8706BE26C4F9AE02.roa (hash: qjrZgvPz0JrFG9Wn1XQqIINgClH8kerS1ZkagSq1RJI=)
                          4: BF9C655E7A4711EF9C7A0E5AC4F9AE02.roa (hash: uQ0xM+tf9Zdt224mn5nQbkjtgHrQ+h9vkVs1cgS+enE=)
                          5: BED96242DDF311EFA58AE748C4F9AE02.roa (hash: wUvJSDotbZhZHQPy1zxdHdL5g6ulFwKPUKeTSqdbMXA=)
                          6: 1FE14D26C0DE11EFABA0764CC4F9AE02.roa (hash: lv71/hPc+SdyJJ+Qsj0ZA++03lOcEBdgSqlqqbWS7Ac=)
                          7: 46E91B3AB31211EFA6BAAF1EC4F9AE02.roa (hash: b6/17IHmfruCEiR6p/M2eZlPFy6KYLkqGlsr9DlXeXk=)
                          8: 69448F24901811EFAD307C71C4F9AE02.roa (hash: Hzh3xVvRRKPzv+kWPsFSNzqLMIeNZk0IRUe+axzlVNw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10342 (0x2866)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F13B9/serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA
        Validity
            Not Before: Jan 31 15:38:39 2025 GMT
            Not After : Feb  7 15:38:39 2025 GMT
        Subject: CN=679cee80-ffbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:fd:a9:fb:e2:d3:d0:41:70:ec:32:98:03:73:
                    06:90:a1:df:e6:c7:c4:55:29:71:3f:fd:9a:e5:3a:
                    6e:02:89:f4:80:fc:e4:aa:c5:b4:d8:20:c8:20:56:
                    06:79:c4:54:33:40:fb:4a:7f:bf:22:39:49:81:86:
                    c7:a1:f7:62:8a:f2:90:58:8e:98:d1:46:62:6d:66:
                    34:30:06:d6:24:b7:b0:e7:b2:6f:51:78:3d:30:66:
                    70:8c:31:ac:e2:2d:7e:a9:0c:1f:ef:18:7c:f7:ce:
                    1b:1b:71:24:d3:43:a5:0a:46:aa:7a:24:c3:eb:98:
                    94:a1:97:34:8b:34:d0:5c:a9:e1:a1:b3:28:f8:37:
                    b4:c5:cc:a2:60:de:65:e3:e3:bf:ea:fc:94:e6:14:
                    0e:99:2b:c1:48:9f:14:a9:71:72:50:da:82:1c:53:
                    8f:84:01:0b:ca:9c:92:c1:91:b6:62:aa:d6:dd:1c:
                    8a:cc:32:e0:7e:0b:67:d9:c2:1d:9a:ce:8d:5a:ad:
                    ed:15:b4:1e:f5:ca:d8:3a:6a:a8:35:87:2c:8d:88:
                    f4:c2:62:a8:77:30:a5:98:e7:01:b5:37:7f:ad:54:
                    67:84:11:c3:f4:d2:67:d9:15:de:c9:e7:e0:09:22:
                    00:55:99:e4:14:4b:e9:ec:52:f3:06:df:84:6d:59:
                    94:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:50:3E:54:4B:DE:EB:37:EF:A2:74:E6:18:83:6C:FA:54:F5:32:15
            X509v3 Authority Key Identifier:
                keyid:7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:18:ee:fa:50:2a:0e:7b:a0:60:c2:93:69:25:49:8f:97:35:
         93:62:47:76:52:04:5a:52:a9:13:3b:49:5d:17:43:2c:f6:e8:
         54:b6:5b:63:36:c6:ac:83:c2:a7:44:05:1e:ea:73:a1:fd:36:
         0c:e4:55:93:cc:fb:36:88:ae:a1:5f:6b:c9:e4:16:f2:ea:0d:
         78:8f:7c:96:d7:5d:f4:4b:cf:62:c8:2f:e5:50:ae:28:61:74:
         e8:3a:ce:40:8a:3d:f3:e3:36:51:57:9a:ab:f1:f4:fc:cb:d8:
         97:c2:20:17:c7:fe:ef:8e:0d:c0:29:79:ed:50:6b:0f:ee:bd:
         7c:dd:3b:1d:d0:00:21:b0:6b:1f:3b:98:6f:05:a0:38:84:b3:
         e5:5b:7c:4d:4f:79:92:95:3d:25:04:52:2e:33:80:58:f1:63:
         be:4e:cb:71:b6:2f:2d:31:5e:89:ed:72:12:d8:ad:cf:3a:ad:
         72:f6:73:84:85:af:4f:21:66:11:32:11:e8:30:bc:30:1c:27:
         7d:73:7e:b3:53:03:0b:01:29:55:24:e5:09:02:5f:93:6a:a4:
         7b:9e:95:d5:86:52:1a:a4:c7:10:65:35:c8:49:99:e5:ca:c2:
         24:51:fb:6d:8b:d4:50:e6:fe:22:db:af:6d:76:65:bc:00:a6:
         32:ed:d7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----