Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
File:                     voUqizt-pcWsWlKqy4UqAaTN0II.mft (raw, json)
Hash identifier:          q7MlyuMdoohBujr+E9EdIXilGv1+rcHc727LAe2dcQQ=
Subject key identifier:   57:D7:1B:D1:88:AD:67:78:6A:63:21:D4:6F:9D:99:9A:2B:EB:92:A1
Authority key identifier: BE:85:2A:8B:3B:7E:A5:C5:AC:5A:52:AA:CB:85:2A:01:A4:CD:D0:82
Certificate issuer:       /CN=A91FF428/serialNumber=BE852A8B3B7EA5C5AC5A52AACB852A01A4CDD082
Certificate serial:       0424
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
Manifest number:          040E
Signing time:             Fri 31 Jan 2025 00:33:56 +0000
Manifest this update:     Fri 31 Jan 2025 00:33:56 +0000
Manifest next update:     Fri 07 Feb 2025 00:33:56 +0000
Files and hashes:         1: voUqizt-pcWsWlKqy4UqAaTN0II.crl (hash: /pOk8qrw1g8yB5PS6ksccxOmaoNbk0F9s+DrgOWAUJM=)
                          2: D717B9F0B7E511EFB5F63E6DC4F9AE02.roa (hash: R/nnjeAR+tZePhFeIgEDIZOhg5pi4qQT+4iwQfx8ekU=)
                          3: D254B444679111EF8A2C9062C4F9AE02.roa (hash: KIM/sEwaQaYFPC8qF/5+qRUkUFtySui4RoXzgpLXzmc=)
                          4: 14F55DEAB7E611EF9B9D9F6DC4F9AE02.roa (hash: BIPMm9ibDgvfx7NU935+UV2sEA5f17RgI+qcbtg58kw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1060 (0x424)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF428/serialNumber=BE852A8B3B7EA5C5AC5A52AACB852A01A4CDD082
        Validity
            Not Before: Jan 31 00:33:56 2025 GMT
            Not After : Feb  7 00:33:56 2025 GMT
        Subject: CN=679c1a74-ee45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b4:a9:ba:e8:a8:0a:21:e4:5a:10:3f:1d:9d:
                    00:22:9d:e8:19:f0:43:2c:1e:e9:95:51:43:bf:72:
                    cb:1d:f1:27:4d:b5:c0:a6:10:21:6e:70:54:53:0a:
                    bf:62:2f:52:6a:aa:d9:6f:dd:63:33:cd:71:5b:78:
                    89:e7:cb:74:4b:a9:ee:6d:e0:ae:45:c6:87:8f:25:
                    53:1e:0d:76:59:7d:ce:67:1f:90:27:27:12:be:6f:
                    d7:2e:44:00:9c:37:27:f8:4e:d5:52:8b:13:04:f7:
                    11:b8:cb:60:6c:66:da:6e:d3:cb:2c:3c:7e:9f:10:
                    01:ef:b2:96:5d:d6:b7:30:54:73:76:53:0b:eb:15:
                    7b:b1:d0:e0:ba:19:eb:7f:d0:92:5f:0b:71:cd:10:
                    e3:2a:91:ff:54:f0:b2:32:16:bd:80:ee:7b:55:9c:
                    e4:5d:41:1b:4a:6b:0b:ce:b8:db:18:b4:6f:d4:4b:
                    fb:73:fd:9b:1f:b9:98:80:02:5b:d4:3b:68:19:bc:
                    d4:c0:13:66:30:e6:9a:63:57:0c:5b:83:d1:64:32:
                    c8:35:83:d3:bb:c2:14:32:b7:51:10:45:ff:31:28:
                    8a:cf:5d:0c:10:9e:7e:41:56:44:b7:6c:eb:ab:31:
                    1f:39:67:97:d9:1f:7f:51:08:33:11:6b:c1:81:a4:
                    7c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D7:1B:D1:88:AD:67:78:6A:63:21:D4:6F:9D:99:9A:2B:EB:92:A1
            X509v3 Authority Key Identifier:
                keyid:BE:85:2A:8B:3B:7E:A5:C5:AC:5A:52:AA:CB:85:2A:01:A4:CD:D0:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:cb:f2:da:a3:9e:58:a1:16:a2:a6:c1:d0:e0:2c:71:f2:e2:
         60:b6:70:c7:7d:60:19:11:0b:98:1e:30:3f:49:bc:9d:9c:fc:
         46:a1:50:fc:68:0c:16:fb:1a:c7:23:a8:93:e4:30:9c:bb:7c:
         4b:98:f3:29:a7:6c:78:bf:98:1d:e6:74:01:06:56:21:8c:0a:
         3a:c3:a7:c8:05:71:db:e5:56:28:3f:0a:f2:20:fd:49:92:5e:
         df:39:89:96:cd:3d:fd:81:61:3a:83:8c:9f:da:e7:35:f9:2c:
         f5:fb:75:d3:be:52:d5:b4:ed:32:a4:b2:df:5e:6c:a7:3c:c3:
         23:79:96:c6:c6:b8:b0:32:b6:e7:a1:25:95:89:04:db:3c:12:
         04:82:84:d5:0a:5e:c4:1e:43:2d:b1:15:06:f5:ae:ea:43:24:
         06:b6:48:2a:58:16:ef:b9:89:58:ba:16:f9:a2:c4:3f:96:2b:
         37:a0:85:5f:fa:48:b7:92:8c:a2:db:2d:f1:1b:ce:0f:8e:e2:
         c6:a2:87:c8:5a:30:10:a0:26:06:ef:33:d4:5b:ec:67:eb:6d:
         63:60:97:67:98:c4:26:cf:8f:c1:e5:f5:87:3e:ad:70:d4:70:
         c4:89:e2:f5:10:e6:6a:d7:dc:57:16:ba:ec:41:a9:90:bf:85:
         5c:26:2d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----