Manifest

$ rpki-client -vvf rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft
File:                     C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft (raw, json)
Hash identifier:          ZbGnqWly0v4+dGbr+WhhyAkn4T9O0j56HqkDNcpDCLM=
Subject key identifier:   A2:16:A5:47:D4:7B:FF:FC:65:E4:4C:B8:AB:B2:E9:3D:63:BA:10:81
Authority key identifier: C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1
Certificate issuer:       /CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1
Certificate serial:       77CCF06667990EBA386350FA2DD36D7F1EADB120
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer
Subject info access:      rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft
Manifest number:          05A2
Signing time:             Fri 31 Jan 2025 17:27:37 +0000
Manifest this update:     Fri 31 Jan 2025 17:22:37 +0000
Manifest next update:     Sat 01 Feb 2025 17:41:37 +0000
Files and hashes:         1: 3230332e31302e36312e302f32342d3234203d3e203435313633.roa (hash: h5d4nm6UDVIM1mHpAmBBMuYbnv7Z434/dGxh/e5XEXM=)
                          2: 323430383a323030303a3a2f32342d3234203d3e2034363038.roa (hash: xvKfJAUQahRZdnZG06aeSaekVC7XFXOs5bCAlRAA2tM=)
                          3: 3230332e3134372e3130392e302f32342d3234203d3e203234303231.roa (hash: 4JLtXOVAXpPqX6hxUny4rYQ+KzHdr2B7l5TXdy0MdRU=)
                          4: 3230332e3134372e3130382e302f32342d3234203d3e203234303231.roa (hash: BU8Bua231WXjTpoYm2Q4rTG4i8ZpYs4lZ3VI+83DR98=)
                          5: C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl (hash: HLbcMT4t87FXf9EY4ckJ+bLlMC6aB/ISSz0FY9xcXNE=)
                          6: 3230332e3134372e3130382e302f32332d3233203d3e203234303231.roa (hash: M9amZRFlZIVyv74hPyoxLtzTDhCa5zzzhcGQgg547zc=)
                          7: 3130332e302e302e302f31362d3136203d3e2034363038.roa (hash: s+okMfZXtj3SK5Jzt/y85zlQTo28EGbzbEC4cKwM5bQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:cc:f0:66:67:99:0e:ba:38:63:50:fa:2d:d3:6d:7f:1e:ad:b1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1
        Validity
            Not Before: Jan 31 17:22:37 2025 GMT
            Not After : Feb  1 17:41:37 2025 GMT
        Subject: CN=A216A547D47BFFFC65E44CB8ABB2E93D63BA1081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:d9:73:29:47:85:d5:a9:4e:76:f9:7c:63:42:
                    7a:8d:20:c0:3c:8e:93:7e:8a:c5:40:93:52:3a:6d:
                    dc:6b:65:07:8d:4e:b3:d2:82:26:bf:b1:f4:0b:d7:
                    27:d2:68:e6:b4:1a:77:69:1e:eb:ba:b7:84:98:db:
                    90:b9:9d:97:8a:c8:02:42:6e:28:64:42:14:fc:41:
                    f1:34:1a:c0:94:e7:b2:c2:64:08:19:2f:38:2f:0d:
                    d7:93:24:3f:73:7f:9b:9c:dc:fe:51:0d:06:4d:ef:
                    9f:8f:7b:c5:31:f5:19:31:df:98:6f:a7:1c:b8:6a:
                    2b:bc:fb:ce:5d:6e:c5:55:80:d5:1d:51:bf:3a:b9:
                    a8:72:a7:fe:11:e1:9f:1e:ef:93:b6:93:3f:b3:94:
                    ca:58:d6:33:9b:f3:51:4f:24:54:20:c6:d3:8c:af:
                    2f:4d:8e:94:d3:19:71:05:05:7b:73:2e:5f:e1:ef:
                    e0:5b:a9:75:2d:be:c2:ce:43:18:22:cd:7f:0d:80:
                    63:26:fb:e2:b4:86:57:b5:34:b9:c3:35:9f:70:38:
                    9b:09:b5:2a:75:52:d6:66:93:8c:46:bd:7d:31:a8:
                    aa:92:45:a2:28:7b:c1:d0:24:50:fb:d5:e5:4e:f4:
                    cb:91:94:18:f5:2d:d3:c7:31:95:86:84:39:75:98:
                    43:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:16:A5:47:D4:7B:FF:FC:65:E4:4C:B8:AB:B2:E9:3D:63:BA:10:81
            X509v3 Authority Key Identifier:
                keyid:C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:82:75:f2:f7:d6:47:fb:56:77:c0:00:b9:46:d3:05:e4:6f:
         fc:5a:22:1e:b6:54:c6:79:b1:3f:56:ed:2a:7c:a4:6c:9c:6c:
         92:e6:53:1b:23:ac:68:05:f0:9c:31:3e:07:2b:d0:66:97:96:
         a0:16:1e:e3:3f:0a:c7:5a:9f:6d:49:35:14:d3:e9:aa:37:fa:
         b8:4f:a6:98:21:35:86:cd:6d:76:75:e1:48:c0:44:6e:c9:c6:
         70:72:6e:55:d3:0c:6d:4c:9b:9a:d2:f7:a1:7f:0a:38:c9:46:
         a0:4b:27:43:9a:8a:3d:88:90:2c:60:80:81:25:e4:c9:e8:61:
         15:48:5e:7c:f4:86:65:ea:be:21:d9:ee:80:fc:d4:e4:73:01:
         2e:96:93:ab:c2:99:17:7a:84:c1:b0:d3:b9:81:c1:f4:49:1f:
         ad:ea:d7:4a:9d:15:71:9a:e2:44:d2:22:5a:9f:12:16:80:5c:
         b9:7f:95:20:60:9b:67:59:16:f4:69:41:d3:7a:4e:30:58:5b:
         49:7e:cc:14:52:65:c1:d1:8e:5e:66:25:1c:ab:62:9a:21:61:
         46:e2:8c:1a:84:b7:d5:dc:ef:65:bb:48:54:66:1f:c6:07:ee:
         c3:24:33:97:57:91:67:1a:01:22:8a:c2:bf:82:bf:eb:cf:fb:
         25:87:7e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----