Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft
File:                     G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft (raw, json)
Hash identifier:          TAO1RMn0ClZEZid244i99zYe6zEF6jyOk6V25ZcpgJI=
Subject key identifier:   9D:45:55:25:EA:42:CE:6C:2B:64:CA:60:21:19:A8:5A:DE:F8:B8:2F
Authority key identifier: 1B:F5:A8:D9:4C:E0:6C:E3:01:FC:35:D8:69:F7:0D:74:0D:70:97:52
Certificate issuer:       /CN=A91F67BB/serialNumber=1BF5A8D94CE06CE301FC35D869F70D740D709752
Certificate serial:       1122
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft
Manifest number:          10FB
Signing time:             Fri 31 Jan 2025 17:17:19 +0000
Manifest this update:     Fri 31 Jan 2025 17:17:18 +0000
Manifest next update:     Fri 07 Feb 2025 17:17:18 +0000
Files and hashes:         1: G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl (hash: VCJXb5JiKuLgESqA1dVH1p9uWN+vFG5HDyKrOVIS784=)
                          2: 294F19380E5111E988F3C34BC4F9AE02.roa (hash: QAHQPcFmHI85jnhx3yTg0Uyrxvkcct/mLJCXfcGhkyU=)
                          3: FB675E140F0311E997412A4EC4F9AE02.roa (hash: nR4PLCRvWUgAotRGtX9lE5KuM6BWBXj0rPbeaYR4XNg=)
                          4: FAC7FE320F0311E997412A4EC4F9AE02.roa (hash: V2NhhwUM+gXJ6K0MxfFES/mwWiEj/nQp8QceYienoFY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4386 (0x1122)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F67BB/serialNumber=1BF5A8D94CE06CE301FC35D869F70D740D709752
        Validity
            Not Before: Jan 31 17:17:18 2025 GMT
            Not After : Feb  7 17:17:18 2025 GMT
        Subject: CN=679d059e-1608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:72:4f:3e:69:7e:20:be:7a:a8:cb:a9:43:d0:
                    2e:1b:ab:6e:b8:11:9b:38:2b:47:13:bf:4d:dc:c5:
                    a5:f2:39:f1:18:59:21:03:c1:3d:25:8d:69:3f:4b:
                    24:a2:0d:27:bd:ac:45:1f:c3:5f:0a:6b:42:26:41:
                    34:44:fe:34:3b:17:af:22:0e:0b:b5:c5:c8:22:b3:
                    b4:43:21:aa:28:24:d8:ba:0f:b0:40:f2:be:a1:d5:
                    07:31:02:7f:cc:34:ab:3d:2e:3d:e7:88:2b:82:26:
                    cc:38:6f:b7:68:1a:87:67:f0:10:87:0f:e7:05:b6:
                    cb:5d:05:72:63:42:98:15:b6:0f:70:04:d8:89:e3:
                    1b:5e:f4:1b:b5:f8:2b:af:1c:35:d6:75:9d:b1:58:
                    0c:15:9a:15:66:cf:70:18:b7:39:88:32:2a:cf:17:
                    0f:3a:d6:3c:fa:f4:68:87:2e:d6:3c:d6:04:e2:d9:
                    8a:ec:5e:86:b9:8e:0e:9d:d9:dd:c4:db:08:fd:f4:
                    36:9a:a8:92:01:c5:db:88:3d:74:43:97:b5:58:23:
                    f5:43:39:fb:0e:16:02:a8:37:8b:40:25:00:03:40:
                    55:62:c6:69:9b:22:8d:77:6f:13:47:6c:ee:f9:d3:
                    4c:67:aa:47:b2:47:60:d4:37:dd:b2:4e:bb:10:0e:
                    ae:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:45:55:25:EA:42:CE:6C:2B:64:CA:60:21:19:A8:5A:DE:F8:B8:2F
            X509v3 Authority Key Identifier:
                keyid:1B:F5:A8:D9:4C:E0:6C:E3:01:FC:35:D8:69:F7:0D:74:0D:70:97:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:fb:32:e3:d6:7f:fc:cd:ce:64:11:59:d5:f7:3c:d4:e0:d7:
         03:ad:d0:5b:6a:a9:ec:e2:09:37:d9:95:c1:eb:8d:c0:2b:87:
         82:46:dc:2f:a9:6e:cd:2c:b1:96:ba:eb:22:07:2a:34:ad:10:
         c9:c7:4c:2f:01:91:19:79:a7:57:fa:cc:61:ba:fb:1f:1d:86:
         cb:23:03:bb:6d:05:9f:e8:29:d0:ae:f6:b7:a3:06:56:d4:22:
         70:ec:38:86:ad:4e:5b:95:05:1d:f6:c1:08:56:21:c2:ab:8a:
         88:db:d5:98:f5:0d:f3:7f:27:71:f5:e3:f5:92:c8:75:9b:e1:
         7c:a0:0b:0a:04:12:13:9d:05:ba:e9:31:c1:82:3c:5b:58:e4:
         db:e0:4a:a0:78:9e:11:09:4e:a8:eb:12:93:38:70:a2:51:9b:
         de:33:db:4d:2e:57:bf:7f:02:13:71:c5:fd:f6:33:6d:0c:ed:
         a0:52:9d:b5:47:d0:b0:56:82:1a:d6:c5:11:19:49:6d:84:e2:
         fe:96:de:d7:a8:a4:fa:c0:02:4c:a0:6e:c8:a9:e2:b1:f6:be:
         aa:a6:3b:ef:3d:d1:15:e6:9c:4d:6e:ea:9d:62:a8:7d:03:db:
         82:31:9f:8c:8e:e9:7f:30:9e:c1:6d:12:ab:57:95:94:26:1f:
         c9:8a:52:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----