Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAFBA/D4420E90C1F511EBAB77977BC4F9AE02/o93avj1GtEgCYdq75SmgZrYgXYs.mft
File:                     o93avj1GtEgCYdq75SmgZrYgXYs.mft (raw, json)
Hash identifier:          836e4NPzGRtXq6xyrNPezSCD5iOZC/b5hv2dawrUeRA=
Subject key identifier:   66:C9:65:F5:B7:83:20:D9:B5:49:A7:B5:7B:97:42:7A:06:BA:35:2B
Authority key identifier: A3:DD:DA:BE:3D:46:B4:48:02:61:DA:BB:E5:29:A0:66:B6:20:5D:8B
Certificate issuer:       /CN=A91FAFBA/serialNumber=A3DDDABE3D46B4480261DABBE529A066B6205D8B
Certificate serial:       0588
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o93avj1GtEgCYdq75SmgZrYgXYs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FAFBA/D4420E90C1F511EBAB77977BC4F9AE02/o93avj1GtEgCYdq75SmgZrYgXYs.mft
Manifest number:          0584
Signing time:             Thu 30 Jan 2025 23:17:13 +0000
Manifest this update:     Thu 30 Jan 2025 23:17:12 +0000
Manifest next update:     Thu 06 Feb 2025 23:17:12 +0000
Files and hashes:         1: o93avj1GtEgCYdq75SmgZrYgXYs.crl (hash: xvgHrJQnDNM0IVdUG3XTpPkJ4Q6Ye4Qyv/QuWD9C9XI=)
                          2: 416E569CC1F911EB91796381C4F9AE02.roa (hash: 5vQ2oiYzVHXdBsJ9DpcL2UsxvsKvGcybvYrqXzoGtt0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1416 (0x588)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FAFBA/serialNumber=A3DDDABE3D46B4480261DABBE529A066B6205D8B
        Validity
            Not Before: Jan 30 23:17:12 2025 GMT
            Not After : Feb  6 23:17:12 2025 GMT
        Subject: CN=679c0879-122f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b2:95:3f:e2:83:87:48:d1:ea:6d:48:ab:ec:
                    3b:1b:59:37:21:26:1d:4f:e4:a7:83:79:72:13:cf:
                    41:e3:cf:2d:b4:39:e6:4a:44:92:14:f2:19:cf:f4:
                    2a:97:95:e7:ce:42:e4:7b:ed:0a:10:8e:3a:1d:29:
                    cb:99:0f:50:01:87:0c:91:cc:59:a3:b9:f3:5b:32:
                    a1:c3:90:2c:d4:91:1d:c8:f8:aa:58:fc:c9:52:78:
                    0b:43:d7:43:1c:56:d2:96:8b:dd:22:c7:f7:90:90:
                    c3:02:33:07:f9:1c:01:c8:b1:aa:40:0a:0f:7b:4f:
                    ad:3c:93:41:a4:59:f1:fe:27:cc:99:0c:2f:37:19:
                    ee:c0:91:53:ca:0a:bf:65:c1:c9:81:9e:6e:3f:7b:
                    21:29:b4:b3:3b:be:c6:9d:89:5a:4a:c0:bb:e1:83:
                    09:56:3f:62:39:dc:16:8e:27:41:d7:5a:2d:38:6a:
                    15:38:98:ce:6e:04:fe:44:3a:49:5c:e0:95:5a:e0:
                    14:f2:50:b3:13:56:38:8d:41:4b:7c:7e:63:73:43:
                    b3:6b:91:13:c2:28:dc:99:6d:50:11:5b:fe:8e:ae:
                    1d:e8:8b:a8:ce:19:8a:20:66:6a:26:07:74:bd:e7:
                    2e:7f:1c:d7:45:4e:6d:b5:1b:6d:49:82:1c:fc:2a:
                    12:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:C9:65:F5:B7:83:20:D9:B5:49:A7:B5:7B:97:42:7A:06:BA:35:2B
            X509v3 Authority Key Identifier:
                keyid:A3:DD:DA:BE:3D:46:B4:48:02:61:DA:BB:E5:29:A0:66:B6:20:5D:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FAFBA/D4420E90C1F511EBAB77977BC4F9AE02/o93avj1GtEgCYdq75SmgZrYgXYs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o93avj1GtEgCYdq75SmgZrYgXYs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAFBA/D4420E90C1F511EBAB77977BC4F9AE02/o93avj1GtEgCYdq75SmgZrYgXYs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:0b:17:4b:8c:c8:2c:5e:a4:35:0c:29:e6:88:f7:27:d9:2c:
         98:ab:59:50:b0:5b:30:c5:a7:67:9e:f7:47:53:c3:ec:78:0f:
         ef:18:f0:1f:b5:d0:a9:9f:ee:0f:f0:a8:cd:6f:b6:23:47:63:
         c8:f0:2c:a0:18:3c:07:77:4b:9f:cc:0e:60:e8:60:8b:57:1c:
         89:01:ba:9a:e4:f6:4c:26:e5:4e:6a:94:3b:0c:d0:22:a4:9e:
         90:a3:f4:bc:09:03:8b:0c:97:2e:bc:26:f0:9e:38:54:39:10:
         df:01:a3:db:35:89:0f:bc:15:80:93:0a:7f:d3:b3:1a:2a:1a:
         c0:6a:ad:f4:75:8a:e3:67:d3:ae:1c:9c:14:96:e6:46:43:96:
         55:18:3d:b7:c2:2d:b6:ba:8a:53:ca:0a:85:be:7c:13:b1:40:
         63:31:58:f4:70:1b:81:e2:8b:b3:6b:3d:dc:04:5e:48:46:02:
         ff:6a:ff:58:ff:71:c5:31:3e:d9:cb:ed:1d:ef:d7:0b:37:57:
         4f:c7:f1:f5:49:37:28:c0:19:a8:f4:c6:e0:24:ad:95:bd:60:
         45:e0:8c:3a:b8:ad:ad:19:e0:5a:b8:64:f6:f5:97:92:4d:45:
         70:7d:16:86:9f:b2:26:c4:99:1b:e7:79:00:d9:8d:ff:d4:c3:
         29:b7:8e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----