Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.mft
File:                     iUgJYwlWkkOCzDnUYPpHZLAXWTQ.mft (raw, json)
Hash identifier:          5IkLrJV2qhQi9+elTUw1i/8Vzmjo5RzUCyfHnWx6jR8=
Subject key identifier:   52:3A:7C:D8:F0:25:75:35:88:4A:5D:84:4D:42:20:EC:0A:1E:22:6A
Authority key identifier: 89:48:09:63:09:56:92:43:82:CC:39:D4:60:FA:47:64:B0:17:59:34
Certificate issuer:       /CN=A91F2046/serialNumber=894809630956924382CC39D460FA4764B0175934
Certificate serial:       0BBD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.mft
Manifest number:          0BB6
Signing time:             Fri 31 Jan 2025 18:45:00 +0000
Manifest this update:     Fri 31 Jan 2025 18:44:59 +0000
Manifest next update:     Fri 07 Feb 2025 18:44:59 +0000
Files and hashes:         1: iUgJYwlWkkOCzDnUYPpHZLAXWTQ.crl (hash: 35D3fvrCLMG2G38sVdeHgdNkOm3EJBn31uF19+T+8r0=)
                          2: 0D2573FA173E11EA947B2976C4F9AE02.roa (hash: LIAL0RVUWvTNgpPqawClJ1GtfpOkeD0nFPnq/+uTw9c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3005 (0xbbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2046/serialNumber=894809630956924382CC39D460FA4764B0175934
        Validity
            Not Before: Jan 31 18:44:59 2025 GMT
            Not After : Feb  7 18:44:59 2025 GMT
        Subject: CN=679d1a2c-0bdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:03:7a:2a:0c:0b:e9:ad:46:96:85:c3:bc:41:
                    56:a7:dc:d7:fc:26:3b:92:af:db:30:e2:78:9a:52:
                    4e:ca:29:f7:86:83:5e:a2:9c:a0:17:61:c6:fc:50:
                    98:8a:23:83:2a:ac:99:52:5b:c7:95:59:e1:1e:f8:
                    c4:1d:21:5e:a6:31:bb:40:82:a5:b0:88:1f:7f:23:
                    71:ea:5b:83:a7:7d:a2:a9:5a:1a:46:6c:e6:2f:b6:
                    fc:03:ad:c9:54:37:92:d9:77:48:c7:e1:c7:b7:e7:
                    70:7a:cb:24:2d:b2:b2:48:be:d4:03:eb:19:48:28:
                    91:0b:68:4c:6d:70:39:0c:7a:b8:fc:03:1a:a0:7a:
                    83:49:0c:59:fe:73:36:b4:5e:9b:16:f5:29:74:27:
                    b4:40:0e:a6:f7:6b:5a:af:3e:72:ba:33:e8:25:5c:
                    bb:20:2b:74:e8:5b:f6:19:92:8a:e5:0d:72:0b:ea:
                    b5:3f:fc:e9:17:ab:52:83:3e:18:5c:b2:01:ab:b3:
                    33:dd:34:f7:5c:40:82:94:9a:c4:87:55:59:a3:8c:
                    c3:b7:c7:b8:d6:2f:f5:84:63:fe:af:d1:c5:22:2b:
                    79:0d:14:53:b5:5e:b1:92:ac:56:e3:ba:cb:05:4d:
                    e8:0d:c9:41:5c:c3:10:97:d7:80:ad:a3:a3:dd:33:
                    21:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:3A:7C:D8:F0:25:75:35:88:4A:5D:84:4D:42:20:EC:0A:1E:22:6A
            X509v3 Authority Key Identifier:
                keyid:89:48:09:63:09:56:92:43:82:CC:39:D4:60:FA:47:64:B0:17:59:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:ea:41:d5:26:4e:8b:99:bf:44:43:73:ee:bc:7c:96:b9:07:
         d7:39:a9:e2:ed:34:a4:cd:d3:7d:42:26:ad:77:b7:96:d5:85:
         08:13:9d:fb:96:bd:13:0e:06:c1:8a:3e:26:51:ab:20:c7:ab:
         f9:21:e7:3a:ce:41:d4:70:57:b4:9b:28:10:58:b7:43:8c:f5:
         bb:43:f7:80:8a:80:9a:6d:16:87:47:3d:14:4c:5f:11:cc:d4:
         1f:7d:7d:02:51:76:e2:50:f8:f3:9f:46:32:0b:bd:03:47:95:
         c1:dc:4d:33:e1:35:a6:0d:38:6e:41:33:8d:cd:e5:19:77:fa:
         39:b6:8e:7d:b9:ed:0e:ff:fa:42:f2:c9:d1:cf:5e:49:75:71:
         95:80:3e:e9:6e:47:2b:36:e0:c7:28:34:09:74:26:f0:64:41:
         19:eb:27:53:86:6c:a5:ec:33:57:2e:7e:83:2d:22:25:7c:77:
         3c:cb:02:c8:62:a4:0c:98:87:65:7c:d6:a8:e5:bb:19:d3:5c:
         c3:5b:68:7e:e1:0d:6c:7c:34:7e:b3:59:e5:d9:db:68:18:87:
         e1:e5:1e:c0:29:7c:b6:96:e5:ef:18:e8:94:f4:fb:e6:d8:2f:
         a0:ef:7d:08:97:89:6b:ef:cb:fc:ec:40:e9:ba:89:67:be:08:
         76:2b:22:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----