Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91850E2/76A01640BF3411ED9FC02E87C4F9AE02/f4zGhHEilLZfAYtxngcvRCoBW9E.mft
File:                     f4zGhHEilLZfAYtxngcvRCoBW9E.mft (raw, json)
Hash identifier:          qymgN4veXW0jFL1i9jEn9Mb8ypDUEEi8mJkc5z6ixcE=
Subject key identifier:   08:97:35:80:17:11:BE:04:92:08:44:59:B3:4B:17:EC:8A:7A:9A:E4
Authority key identifier: 7F:8C:C6:84:71:22:94:B6:5F:01:8B:71:9E:07:2F:44:2A:01:5B:D1
Certificate issuer:       /CN=A91850E2/serialNumber=7F8CC684712294B65F018B719E072F442A015BD1
Certificate serial:       013B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f4zGhHEilLZfAYtxngcvRCoBW9E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91850E2/76A01640BF3411ED9FC02E87C4F9AE02/f4zGhHEilLZfAYtxngcvRCoBW9E.mft
Manifest number:          0139
Signing time:             Tue 05 Nov 2024 02:39:19 +0000
Manifest this update:     Tue 05 Nov 2024 02:39:18 +0000
Manifest next update:     Tue 12 Nov 2024 02:39:18 +0000
Files and hashes:         1: f4zGhHEilLZfAYtxngcvRCoBW9E.crl (hash: pACi59iZJZLnwbwmzmY90gfZuix27KDT23v4zsLoGn0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 315 (0x13b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91850E2/serialNumber=7F8CC684712294B65F018B719E072F442A015BD1
        Validity
            Not Before: Nov  5 02:39:18 2024 GMT
            Not After : Nov 12 02:39:18 2024 GMT
        Subject: CN=67298557-7fe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f1:e2:59:99:45:ce:43:a0:35:44:8d:12:ab:
                    08:23:ec:c2:09:bc:25:52:6a:8b:b8:0d:e0:55:d2:
                    85:e0:da:da:62:da:20:33:72:42:7a:fb:5f:47:75:
                    9f:40:6c:2c:90:88:34:af:03:51:48:c8:52:0a:ac:
                    5e:44:55:8d:fb:42:34:53:43:66:84:cb:d0:5d:00:
                    53:74:cd:c9:b5:90:14:7b:96:05:69:16:f4:a1:aa:
                    aa:48:3c:23:61:f9:ea:5d:fc:07:23:16:4b:b7:98:
                    7a:ed:e4:0c:65:e9:f6:16:3e:e2:6b:dc:e6:58:8e:
                    57:75:b4:96:67:09:1c:c3:1b:68:64:25:4f:02:b4:
                    77:f4:6a:db:f3:4e:ee:f3:c6:6c:a5:d8:9a:ee:3f:
                    12:7b:b9:74:f4:5a:e6:45:2b:39:42:57:f6:4d:d1:
                    20:94:a1:5e:21:ea:aa:8b:0e:20:83:23:86:03:e8:
                    9e:50:9a:07:4d:1a:7c:f8:3c:e1:93:ec:f3:6a:df:
                    00:62:3d:ba:98:1f:ed:bc:6f:94:ba:4f:5f:79:df:
                    c0:c9:8e:85:0e:6a:13:85:b2:51:5b:eb:d1:7a:f8:
                    2c:a1:b4:75:9b:fb:c2:ce:01:65:e6:42:61:a4:7a:
                    02:75:a1:5c:64:da:30:f2:62:68:9a:f3:1a:89:d8:
                    69:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:97:35:80:17:11:BE:04:92:08:44:59:B3:4B:17:EC:8A:7A:9A:E4
            X509v3 Authority Key Identifier:
                keyid:7F:8C:C6:84:71:22:94:B6:5F:01:8B:71:9E:07:2F:44:2A:01:5B:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91850E2/76A01640BF3411ED9FC02E87C4F9AE02/f4zGhHEilLZfAYtxngcvRCoBW9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f4zGhHEilLZfAYtxngcvRCoBW9E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91850E2/76A01640BF3411ED9FC02E87C4F9AE02/f4zGhHEilLZfAYtxngcvRCoBW9E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:c2:c7:9f:23:68:11:83:a0:dd:14:76:83:4c:81:df:c4:67:
         23:19:7f:91:fe:7d:0f:30:81:eb:da:cf:d9:c8:42:77:9e:af:
         79:ff:d5:3d:c1:93:22:cd:e5:17:05:e8:69:cc:75:00:31:3e:
         fd:27:34:cd:cd:8c:6d:de:95:25:58:04:d9:8f:4e:c9:5c:cc:
         ea:35:0e:a6:ac:dd:91:c5:12:c2:20:41:04:df:d5:6b:a8:aa:
         92:e8:fa:a0:90:fc:b6:72:ca:de:5c:05:18:c7:e3:33:d0:2a:
         ad:8c:41:e3:c3:62:b5:77:75:e3:21:6a:15:61:d8:fa:68:db:
         de:62:b7:76:e5:de:90:62:9a:2a:98:9d:2d:3c:4f:62:f4:fc:
         7a:05:e5:06:4a:63:a5:a5:a8:31:44:2d:a3:ca:f5:90:d5:f2:
         74:fc:9c:dc:43:6f:35:a8:92:2b:1c:4b:de:40:a6:b4:1f:49:
         2e:0b:de:af:31:65:96:d2:a3:ea:d2:cd:ff:dd:8a:52:7d:d7:
         02:b0:71:f2:55:a1:08:d6:f9:27:6a:be:55:4c:85:8d:10:3d:
         66:2d:eb:be:08:7d:5e:8f:89:9b:84:d6:dd:65:1c:64:11:5f:
         be:c4:6a:0b:8a:1e:ac:ce:f0:c2:f5:36:b4:2c:d2:f8:9e:fe:
         fb:f0:c2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----