Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft
File:                     tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft (raw, json)
Hash identifier:          auL6z5buutHwVn5Nh7gHQuEQWVO4MkS4CXnuEtoJC04=
Subject key identifier:   B6:52:7F:6F:48:BF:19:EA:C4:0F:1D:3E:28:A0:DC:DF:60:53:89:1B
Authority key identifier: B6:20:A9:C4:96:37:66:CC:3C:58:06:06:94:92:2E:9F:67:88:11:DE
Certificate issuer:       /CN=A91FD38A/serialNumber=B620A9C4963766CC3C58060694922E9F678811DE
Certificate serial:       0C0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft
Manifest number:          0C05
Signing time:             Fri 31 Jan 2025 18:28:32 +0000
Manifest this update:     Fri 31 Jan 2025 18:28:32 +0000
Manifest next update:     Fri 07 Feb 2025 18:28:32 +0000
Files and hashes:         1: tiCpxJY3Zsw8WAYGlJIun2eIEd4.crl (hash: Owlp69W7/nOtHv0cXvngcGGLqNoCOo/U7gCm/ZQASkY=)
                          2: AA5D86B2381311EA998E103FC4F9AE02.roa (hash: SvZjqtxcRIhPhrqiLm27nklXEkCJpvMYZMwhSGgkVOM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3086 (0xc0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD38A/serialNumber=B620A9C4963766CC3C58060694922E9F678811DE
        Validity
            Not Before: Jan 31 18:28:32 2025 GMT
            Not After : Feb  7 18:28:32 2025 GMT
        Subject: CN=679d1650-eae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5f:7d:98:01:41:f5:c3:0e:c4:07:30:71:50:
                    8d:af:2c:2c:24:c9:26:15:98:1b:9b:ac:d1:d9:d2:
                    d0:ce:4d:fa:ea:ab:06:2d:46:5f:cf:ae:67:e8:41:
                    97:6d:f1:91:b7:6c:10:7c:61:b8:ef:8f:5d:6d:40:
                    d6:17:a8:d1:cf:90:e8:7c:d8:e5:37:a0:49:c2:9c:
                    17:8c:0f:5b:63:0d:34:da:ed:25:1d:90:b9:21:a8:
                    84:13:e3:1a:e1:71:e4:2f:82:1a:fc:67:8e:a6:48:
                    3a:d8:26:bd:01:1b:de:73:d1:37:06:a5:2d:42:a7:
                    06:e0:43:ed:be:8e:95:a3:c2:6f:ce:e3:4f:14:1c:
                    35:ec:e5:23:3a:76:cd:13:cf:aa:8d:f9:cd:0e:9e:
                    fc:4a:27:ce:bd:43:3b:11:e2:7a:76:a2:c8:43:0d:
                    80:dc:d7:48:fd:b8:45:88:9f:c7:96:b9:58:fc:d5:
                    7b:90:d6:a1:af:49:c5:56:1e:46:04:d9:03:36:85:
                    55:91:e9:34:47:c0:bf:85:78:ee:59:f0:f8:11:06:
                    89:b2:fa:0b:0c:bf:fa:e5:fd:84:7b:e3:65:28:57:
                    c2:8c:c0:2d:a0:2a:e8:41:01:5b:ea:f0:3d:6a:8c:
                    ae:eb:6c:1a:bb:2c:af:1f:e7:12:8c:b4:bc:b5:c5:
                    f1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:52:7F:6F:48:BF:19:EA:C4:0F:1D:3E:28:A0:DC:DF:60:53:89:1B
            X509v3 Authority Key Identifier:
                keyid:B6:20:A9:C4:96:37:66:CC:3C:58:06:06:94:92:2E:9F:67:88:11:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:b9:3f:7b:f7:2f:b4:62:ae:d4:ff:d6:49:07:eb:f7:87:53:
         57:ed:09:28:42:48:9d:22:a4:9a:b2:89:3e:33:97:c4:90:e9:
         0b:a3:e4:1c:59:2a:c6:f7:ce:af:31:87:88:d0:8d:dc:68:31:
         8e:f4:9b:60:e6:38:f5:72:12:10:21:e1:85:65:ce:02:6a:3f:
         36:bc:ea:96:49:7c:d9:a8:19:ee:54:66:46:84:17:75:40:24:
         b7:2e:a4:55:fc:ca:1b:ef:85:c7:8f:a3:35:18:4b:e0:28:49:
         14:47:88:51:ac:c2:e6:e4:7a:3a:2e:44:f5:c2:cf:df:41:2f:
         18:55:79:f1:b9:e3:cd:44:ad:55:34:86:b4:18:bd:bb:53:8f:
         62:03:0e:3f:0f:13:ff:dc:91:ef:16:6c:1c:a0:bd:05:6a:b5:
         f3:c8:01:57:93:7a:bd:77:1e:bd:7b:d3:89:d4:49:3b:e7:58:
         ac:bd:41:ac:63:6d:95:a1:ee:0d:30:fc:08:11:20:de:dc:bc:
         09:18:63:05:0b:34:1c:6a:7a:15:33:66:e9:10:bb:0d:13:15:
         13:6b:8a:32:3e:4c:23:47:a1:d9:c1:b0:07:7e:59:5c:59:75:
         02:5a:ed:70:39:ec:b6:48:75:d6:79:1f:a3:8d:26:07:ce:00:
         30:56:8a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----