Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft
File:                     z3rG54U-SVgocAZDAHZYRlfgyVA.mft (raw, json)
Hash identifier:          MmicSLrHXnqpm+j8ufcARJQZ9JtIwWZC/SV/5EeAtLs=
Subject key identifier:   81:2C:51:0C:4A:91:78:8B:9A:4F:C5:F1:E3:F7:25:12:B8:47:43:C9
Authority key identifier: CF:7A:C6:E7:85:3E:49:58:28:70:06:43:00:76:58:46:57:E0:C9:50
Certificate issuer:       /CN=A91F916A/serialNumber=CF7AC6E7853E4958287006430076584657E0C950
Certificate serial:       2462
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft
Manifest number:          244B
Signing time:             Fri 31 Jan 2025 15:48:22 +0000
Manifest this update:     Fri 31 Jan 2025 15:48:22 +0000
Manifest next update:     Fri 07 Feb 2025 15:48:22 +0000
Files and hashes:         1: z3rG54U-SVgocAZDAHZYRlfgyVA.crl (hash: 46LnPxcgRnnITjgrHUyaWmKHcTvBh1fMeJerLW6kmdY=)
                          2: 93957C3A25B211ECB5356475C4F9AE02.roa (hash: rxXFLYO2jOx+4E1gXwptPALsOETYyiBrkxClqr3viBA=)
                          3: 81C0C29CB0F311E5AB30F151C4F9AE02.roa (hash: 2riXC0FO7TMtR4S3u1D3k+k65Q5x7dYqk1A2MagfmPs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9314 (0x2462)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F916A/serialNumber=CF7AC6E7853E4958287006430076584657E0C950
        Validity
            Not Before: Jan 31 15:48:22 2025 GMT
            Not After : Feb  7 15:48:22 2025 GMT
        Subject: CN=679cf0c6-95ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2f:eb:7d:7c:a4:f8:94:23:0b:36:2c:9d:8a:
                    cb:b7:11:b8:b4:b5:6e:b0:c9:be:b5:b4:96:0b:28:
                    e6:7a:76:1a:f3:c8:53:60:3a:3a:dc:e0:26:81:1d:
                    ae:54:c4:1a:87:39:a6:9b:2a:78:e6:77:db:ee:ad:
                    0e:80:b7:0a:be:62:53:65:dd:ae:da:1d:fb:3e:58:
                    21:87:b8:63:6e:60:20:bf:c0:12:d3:c5:e1:6d:27:
                    24:19:d6:9d:28:04:aa:9f:d3:d6:9a:76:a7:cd:60:
                    bf:63:aa:bc:c8:74:5f:02:b4:4d:35:ea:da:a0:c3:
                    dc:1c:c6:c0:17:b4:b1:12:ce:97:00:1f:68:d0:35:
                    f4:5f:ff:a6:be:03:7c:66:ab:d3:95:fa:1a:b0:75:
                    e8:42:79:c7:4f:84:95:31:78:29:ec:9e:47:9a:2a:
                    ba:44:1e:2a:58:d1:8f:44:09:0e:9f:32:fc:81:d2:
                    68:ee:19:02:74:2b:e5:43:0e:0c:f3:4c:d7:7b:90:
                    fc:6c:be:f4:75:57:04:3b:a1:6c:c1:7f:c5:34:84:
                    06:c4:f1:9d:55:18:32:69:28:89:e1:c4:41:2d:0e:
                    d0:d2:44:2d:0b:19:32:14:b2:7c:2f:f2:9c:ee:57:
                    8e:2c:67:ac:b9:32:26:93:2a:54:64:7f:56:b6:92:
                    eb:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:2C:51:0C:4A:91:78:8B:9A:4F:C5:F1:E3:F7:25:12:B8:47:43:C9
            X509v3 Authority Key Identifier:
                keyid:CF:7A:C6:E7:85:3E:49:58:28:70:06:43:00:76:58:46:57:E0:C9:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:27:23:b0:bc:4d:0d:db:ac:17:22:ee:cb:d8:97:d0:5a:5d:
         c0:b1:1a:5e:f2:f3:0e:1f:f1:b8:9a:3d:b4:0f:23:a0:8e:b2:
         40:ca:0d:9d:bc:4b:ba:c7:19:88:c8:80:a0:dc:33:d0:54:3e:
         ef:59:2f:46:63:82:7b:db:a7:46:8f:02:ae:a5:8f:42:20:0a:
         db:b7:33:95:f2:8d:a3:e5:1f:9a:f5:27:1c:27:48:9b:ae:1d:
         6e:28:fa:3c:3b:71:43:ef:68:37:91:de:06:78:3f:1b:69:9f:
         7c:ab:fe:ae:60:1a:40:5e:d6:6e:53:a6:ed:62:5e:db:1d:b6:
         a3:08:b1:4e:3a:cb:08:89:de:e4:8f:d4:e9:44:6c:97:8b:2e:
         05:3c:9d:b8:93:b4:aa:48:4a:bb:8b:d2:94:99:d7:77:f2:11:
         9a:df:6c:a9:4a:9a:cd:68:8c:32:43:9c:ab:84:3f:c2:a0:c6:
         cf:15:cc:c7:ba:bc:43:ac:98:38:ff:21:d5:c4:31:dc:5f:25:
         e6:f8:b9:1b:02:b8:0b:32:9a:64:ea:56:dd:94:cf:5b:fe:a1:
         e1:7c:35:56:69:d0:61:7a:df:d9:e4:74:57:b3:58:ea:f9:8d:
         ad:db:28:15:e2:3c:67:0b:5f:42:dc:80:eb:62:a2:50:ad:87:
         05:f1:7d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----