Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.mft
File:                     SBcgosjubOySR3dhkymcEP63ykQ.mft (raw, json)
Hash identifier:          8XkvIheKpvHiFG/yeeu1s/0utpU8K6oGHObUd7M42fU=
Subject key identifier:   E8:8D:67:DA:DE:BA:02:E9:F7:3A:7C:B0:59:16:4D:D8:28:D9:1B:37
Authority key identifier: 48:17:20:A2:C8:EE:6C:EC:92:47:77:61:93:29:9C:10:FE:B7:CA:44
Certificate issuer:       /CN=A91FD2E3/serialNumber=481720A2C8EE6CEC9247776193299C10FEB7CA44
Certificate serial:       F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SBcgosjubOySR3dhkymcEP63ykQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.mft
Manifest number:          F0
Signing time:             Fri 31 Jan 2025 04:27:29 +0000
Manifest this update:     Fri 31 Jan 2025 04:27:28 +0000
Manifest next update:     Fri 07 Feb 2025 04:27:28 +0000
Files and hashes:         1: SBcgosjubOySR3dhkymcEP63ykQ.crl (hash: ZLFEniXbQod2tVoXHGwOh2TwpkmRZLdZgXQCt0BRIQc=)
                          2: A38F041873C011EEB1A68245C4F9AE02.roa (hash: 1J6SBhKfyTeug2CS1rB/AAJ6IDeL/Dzh4xQR/iFRSiE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 243 (0xf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD2E3/serialNumber=481720A2C8EE6CEC9247776193299C10FEB7CA44
        Validity
            Not Before: Jan 31 04:27:28 2025 GMT
            Not After : Feb  7 04:27:28 2025 GMT
        Subject: CN=679c5130-670f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:64:c1:be:88:31:43:9b:3e:81:0f:f2:7f:84:
                    3a:bd:7d:ae:58:56:1a:68:fd:f4:5c:49:79:07:a8:
                    d3:13:b1:93:25:f1:31:ea:0b:be:6a:bb:dc:bf:f1:
                    22:8e:94:6e:05:fc:17:ed:4a:eb:e5:01:02:a1:40:
                    15:6e:99:b8:ef:ed:b7:20:80:a6:41:e3:3c:14:55:
                    72:c0:d2:06:9e:ea:97:ea:8d:19:87:d4:98:26:8e:
                    46:90:b5:7c:d5:c0:e9:10:6c:59:bb:37:74:92:df:
                    c0:b6:cb:9a:ca:e4:1c:f0:be:3e:37:b9:55:a3:9a:
                    4a:07:6b:79:c2:69:c2:ea:b2:de:7c:11:07:11:cb:
                    d6:c8:95:f5:da:3e:58:95:ce:ec:ce:9f:79:e8:d5:
                    b5:3e:16:37:36:00:9d:b7:66:ed:12:2f:9f:a5:00:
                    93:fa:bb:88:df:3d:c8:33:d7:10:cf:d1:63:c1:52:
                    b9:93:84:4c:81:31:6e:c0:d9:02:fc:e0:d5:80:17:
                    ed:c3:19:49:b4:ef:04:77:ba:8a:9b:07:39:03:22:
                    1d:a1:b7:f2:b7:87:16:e6:3b:25:9f:d3:2c:88:10:
                    06:ad:35:8a:6b:4a:61:9c:4d:97:26:01:f6:a3:b8:
                    d9:93:4f:4e:31:51:a3:16:eb:ad:29:bd:89:30:53:
                    c8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:8D:67:DA:DE:BA:02:E9:F7:3A:7C:B0:59:16:4D:D8:28:D9:1B:37
            X509v3 Authority Key Identifier:
                keyid:48:17:20:A2:C8:EE:6C:EC:92:47:77:61:93:29:9C:10:FE:B7:CA:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SBcgosjubOySR3dhkymcEP63ykQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:94:ff:3b:8b:7a:45:eb:60:c8:42:3e:58:ef:df:e0:e9:22:
         7f:92:db:ae:95:90:2a:85:ad:9a:9a:45:da:20:44:46:b3:ed:
         27:f0:03:c7:fd:98:cf:63:b0:a3:e0:f8:13:76:cc:35:fe:d8:
         b7:af:1e:dd:eb:32:d6:09:9b:01:dd:ea:db:1b:b8:42:de:c7:
         a9:4a:c4:1f:02:f8:fe:23:0b:f9:a3:15:e0:3f:91:d6:a4:41:
         0a:fb:4a:ad:87:29:0f:7f:5f:ef:5b:b8:cd:2f:0e:30:57:c1:
         95:71:1a:f3:ca:99:4c:ef:85:4c:40:2a:e4:b8:fd:f5:88:1f:
         34:d2:4a:ed:c3:32:07:ae:51:6f:04:ef:53:70:64:e7:a3:d0:
         fa:51:57:95:4d:f6:4c:02:46:df:35:8e:9c:7b:6d:b9:b2:19:
         0e:cd:f2:3d:d4:88:53:b9:df:ea:22:e9:9d:4e:cf:32:c2:7d:
         94:c1:25:03:db:42:10:4a:32:bb:e4:74:ad:e4:1a:ee:82:3f:
         48:ed:2d:0e:89:da:c0:06:cf:6d:50:41:5a:e4:29:32:ae:d8:
         4c:f3:29:30:85:27:5c:94:9d:e4:d8:5b:a9:8a:5c:88:d4:ae:
         66:79:df:73:ce:2b:a9:2c:f3:20:10:0f:46:4e:58:05:00:32:
         7f:ab:ee:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----