Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913992F/629B7990EBAF11E792899E4EC4F9AE02/H1-zpde1ywQ-nZwbNgjUsmNZFvQ.mft
File:                     H1-zpde1ywQ-nZwbNgjUsmNZFvQ.mft (raw, json)
Hash identifier:          tifTJQI+PZvMRoODD9Imw1ihM5CwaDRo3KITAwIBWak=
Subject key identifier:   D0:77:50:72:27:1C:6B:EA:26:F7:DB:BB:CF:9E:C6:5E:51:47:1F:B8
Authority key identifier: 1F:5F:B3:A5:D7:B5:CB:04:3E:9D:9C:1B:36:08:D4:B2:63:59:16:F4
Certificate issuer:       /CN=A913992F/serialNumber=1F5FB3A5D7B5CB043E9D9C1B3608D4B2635916F4
Certificate serial:       16D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1-zpde1ywQ-nZwbNgjUsmNZFvQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913992F/629B7990EBAF11E792899E4EC4F9AE02/H1-zpde1ywQ-nZwbNgjUsmNZFvQ.mft
Manifest number:          16C0
Signing time:             Wed 15 Jan 2025 07:54:54 +0000
Manifest this update:     Wed 15 Jan 2025 07:54:53 +0000
Manifest next update:     Wed 22 Jan 2025 07:54:53 +0000
Files and hashes:         1: H1-zpde1ywQ-nZwbNgjUsmNZFvQ.crl (hash: zMZ+f0wUHUuw/1RlrJqY22pXhieAQM3CcKYeRvj2csM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5849 (0x16d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913992F, serialNumber=1F5FB3A5D7B5CB043E9D9C1B3608D4B2635916F4
        Validity
            Not Before: Jan 15 07:54:53 2025 GMT
            Not After : Jan 22 07:54:53 2025 GMT
        Subject: CN=678769cd-c39b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:00:e0:3f:78:0e:80:99:0e:84:ab:20:6b:21:
                    ab:48:48:fa:72:5f:99:c5:8b:a7:9e:af:ae:bb:c4:
                    38:16:78:ab:0b:8f:6f:4e:2b:f0:57:a4:14:3d:2f:
                    5c:9a:7b:f7:7b:b5:2d:41:e5:f9:72:37:b8:53:e6:
                    ed:49:55:c8:a5:81:68:d0:cd:c2:e0:5b:65:c0:1f:
                    fa:96:a4:d7:ee:e8:6b:35:e2:54:a9:40:d2:27:3e:
                    d8:38:4e:c3:8c:7d:9a:6a:55:80:dd:fe:c4:14:bc:
                    60:75:3f:ba:52:0b:1e:7a:2b:7d:62:17:b7:03:a8:
                    d8:66:85:cd:85:5e:44:2d:db:0d:9d:ec:6c:86:70:
                    a1:e2:af:c6:15:5d:64:87:94:23:1e:1b:d3:59:b5:
                    7f:47:bd:19:72:07:f6:20:5f:dc:29:c5:e0:35:ab:
                    fe:e9:f1:d9:44:97:55:a6:bd:20:69:83:7e:eb:6d:
                    8c:88:23:a2:cf:f9:85:26:06:a0:8a:7c:e4:d4:4b:
                    5c:01:3e:0a:e9:50:f7:ef:16:24:bf:f0:36:59:c8:
                    a2:e0:a7:50:fe:c4:4e:c7:f7:b0:a4:4b:67:07:71:
                    44:b3:68:51:c5:88:d6:c7:3e:b2:1d:93:02:36:f5:
                    ff:6d:0d:89:27:b2:ec:ce:71:b7:0e:b6:59:92:41:
                    2b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:77:50:72:27:1C:6B:EA:26:F7:DB:BB:CF:9E:C6:5E:51:47:1F:B8
            X509v3 Authority Key Identifier:
                keyid:1F:5F:B3:A5:D7:B5:CB:04:3E:9D:9C:1B:36:08:D4:B2:63:59:16:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913992F/629B7990EBAF11E792899E4EC4F9AE02/H1-zpde1ywQ-nZwbNgjUsmNZFvQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1-zpde1ywQ-nZwbNgjUsmNZFvQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913992F/629B7990EBAF11E792899E4EC4F9AE02/H1-zpde1ywQ-nZwbNgjUsmNZFvQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:b7:16:e9:21:e0:a6:66:aa:3b:35:41:32:9f:47:f3:b8:a8:
         fc:c3:0a:0d:c4:4c:2b:70:dd:14:3c:88:1e:d7:64:39:25:fd:
         07:78:dd:a6:03:2b:5d:03:1a:b0:48:d5:38:36:c0:88:a5:c9:
         8d:01:a2:56:8b:80:f4:f3:34:83:25:61:5b:96:79:79:a8:e0:
         5c:21:f1:83:73:20:76:9e:e3:37:9a:8c:7f:44:49:d9:26:dc:
         ac:fc:da:f3:05:c0:44:92:5e:ab:b8:22:d7:b7:51:8c:d3:e7:
         14:78:b7:db:2c:b7:8e:0a:04:11:c7:fc:0b:27:76:21:58:20:
         da:a5:3c:e3:02:39:1f:86:78:5f:de:47:c5:29:56:e1:d0:b8:
         a5:2d:dc:51:c2:30:17:27:78:4b:f6:a3:64:45:8c:a4:ab:18:
         e8:b2:fe:dd:b5:45:56:3c:ba:90:f7:64:e1:43:2f:65:4f:26:
         9b:1f:16:9c:45:f5:1f:15:8c:a4:a3:90:fd:67:c5:ef:59:97:
         2d:c9:09:e4:a9:95:77:e1:74:39:2c:53:1f:25:f2:96:5b:f8:
         de:ed:0f:d7:70:b3:ae:29:d9:9e:cc:f1:45:a1:74:e7:b8:c4:
         5e:62:65:76:ee:0c:4f:cf:a5:41:86:5d:53:ed:58:c5:57:b5:
         16:6e:42:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----