Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft
File:                     zFfgNkMaXqPBcqpyg0Aa88StXFk.mft (raw, json)
Hash identifier:          JmpVWW1LMehjAB3nFFY3ixLRBiWgAZec9cyoviQvt2w=
Subject key identifier:   15:3D:40:AC:A5:A0:4D:EA:67:3E:32:D2:47:FE:16:E7:0C:16:D1:2E
Authority key identifier: CC:57:E0:36:43:1A:5E:A3:C1:72:AA:72:83:40:1A:F3:C4:AD:5C:59
Certificate issuer:       /CN=A91FDC78/serialNumber=CC57E036431A5EA3C172AA7283401AF3C4AD5C59
Certificate serial:       08B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft
Manifest number:          08AB
Signing time:             Thu 30 Jan 2025 20:35:58 +0000
Manifest this update:     Thu 30 Jan 2025 20:35:57 +0000
Manifest next update:     Thu 06 Feb 2025 20:35:57 +0000
Files and hashes:         1: zFfgNkMaXqPBcqpyg0Aa88StXFk.crl (hash: SnCOvrnA8RvczChMu5OHo6d8S2KwKuL9p2I9Tn+VHOA=)
                          2: 6BC3CFFCAEAF11EAB092EE6BC4F9AE02.roa (hash: XGbDDV66bAzoojuwchkvz9g9032oFFLBbcaVWzJ0vHs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2232 (0x8b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDC78/serialNumber=CC57E036431A5EA3C172AA7283401AF3C4AD5C59
        Validity
            Not Before: Jan 30 20:35:57 2025 GMT
            Not After : Feb  6 20:35:57 2025 GMT
        Subject: CN=679be2ad-a5af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:a3:5a:03:4d:bd:85:cf:62:e3:ee:e3:2e:dd:
                    da:22:c2:ad:65:73:a0:20:01:cc:14:f8:3a:24:bc:
                    48:dd:b8:32:07:1b:d3:2e:ae:c3:5a:d3:0f:b8:61:
                    49:42:0f:26:cb:13:49:5f:3a:26:04:df:a4:84:da:
                    5c:8a:ec:db:de:de:00:07:06:3a:11:6a:33:01:a9:
                    2b:92:f3:2c:48:c4:0d:98:d0:3b:56:0f:c0:bc:b6:
                    10:4b:80:3b:25:b9:ac:5c:a4:c3:8f:6d:b6:89:77:
                    32:88:bb:9f:46:b7:48:44:2e:46:e8:b8:69:dc:15:
                    bd:cb:14:12:92:79:dc:c2:c6:04:fb:7c:71:40:51:
                    bf:c2:a6:e0:5c:36:e7:8e:fe:af:8b:82:93:b1:2a:
                    00:bb:dd:d8:36:ff:82:9b:05:76:99:ad:0e:77:a3:
                    c3:d9:8a:41:b7:93:ce:09:b9:64:78:18:ae:e9:21:
                    15:2e:a0:cc:88:76:63:cc:ee:fb:38:f6:d4:00:d2:
                    cf:4e:b3:32:4b:ec:00:7c:4c:02:c6:40:75:7b:90:
                    94:b1:10:9f:7f:22:60:51:ea:b1:4e:50:9b:0b:a8:
                    3b:b8:24:9b:11:53:8e:85:b3:63:57:ab:47:c6:f8:
                    16:af:45:1b:f3:78:83:5d:3d:88:28:32:d5:f0:4f:
                    b4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:3D:40:AC:A5:A0:4D:EA:67:3E:32:D2:47:FE:16:E7:0C:16:D1:2E
            X509v3 Authority Key Identifier:
                keyid:CC:57:E0:36:43:1A:5E:A3:C1:72:AA:72:83:40:1A:F3:C4:AD:5C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:e3:61:7b:a6:38:1d:cc:f6:85:cd:5f:15:8d:71:77:cc:64:
         d9:ad:1e:b3:6b:9f:31:a4:55:36:7d:70:09:4a:09:95:59:38:
         3a:d6:ab:32:c0:23:a0:51:6d:b0:30:47:4b:26:55:2d:7e:0d:
         b4:ae:9f:43:90:90:18:d8:66:75:2d:a4:80:4a:f3:20:07:bb:
         e6:ef:f0:33:d7:0d:51:24:64:8a:44:33:44:4e:67:b1:95:77:
         2a:83:36:33:d9:44:16:6e:13:6e:6d:52:60:f4:b1:5f:03:4e:
         fb:36:e5:06:55:51:54:bf:43:83:89:ad:c8:60:87:58:16:33:
         05:63:86:f2:f2:1a:d8:68:7b:13:1a:93:bc:50:e9:e0:06:9d:
         4b:79:e2:c8:90:0b:d5:be:4a:68:16:96:d8:04:c6:ef:51:cc:
         83:2b:eb:c2:20:98:8e:b0:6e:da:cb:f6:fc:59:94:9f:8a:e0:
         0f:1e:d2:3f:56:99:24:eb:11:46:fb:ef:01:2e:fc:c7:b4:b3:
         f7:bd:09:48:f9:a6:aa:75:8b:1d:25:10:d5:2b:d8:26:bd:64:
         8b:04:55:0b:f8:26:24:c0:7e:ee:1a:8c:81:f8:66:c6:d9:88:
         c3:7d:08:4a:dd:61:2a:41:20:4d:99:22:04:46:dd:ae:db:91:
         71:b6:dc:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----