Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0443/9C09BCA872D411E89B1EBA25C4F9AE02/T0N-Fx5Z94FDLE7C-v5Jvn8Vfs0.mft
File:                     T0N-Fx5Z94FDLE7C-v5Jvn8Vfs0.mft (raw, json)
Hash identifier:          RbvDjab933HgwkVgjkGEmVNhCKg9tHUxWjLrdjzzRU8=
Subject key identifier:   DF:2A:F9:33:7F:C8:92:5B:C2:CD:3C:8D:D7:F0:67:E8:CB:49:69:C9
Authority key identifier: 4F:43:7E:17:1E:59:F7:81:43:2C:4E:C2:FA:FE:49:BE:7F:15:7E:CD
Certificate issuer:       /CN=A91C0443/serialNumber=4F437E171E59F781432C4EC2FAFE49BE7F157ECD
Certificate serial:       1373
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T0N-Fx5Z94FDLE7C-v5Jvn8Vfs0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0443/9C09BCA872D411E89B1EBA25C4F9AE02/T0N-Fx5Z94FDLE7C-v5Jvn8Vfs0.mft
Manifest number:          136B
Signing time:             Mon 01 Apr 2024 23:25:26 +0000
Manifest this update:     Mon 01 Apr 2024 23:25:26 +0000
Manifest next update:     Mon 08 Apr 2024 23:25:26 +0000
Files and hashes:         1: T0N-Fx5Z94FDLE7C-v5Jvn8Vfs0.crl (hash: mKVHdPWIlLmZeZHd5s8DFQG9lSEWshKTAJcvwFkcSgY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4979 (0x1373)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0443/serialNumber=4F437E171E59F781432C4EC2FAFE49BE7F157ECD
        Validity
            Not Before: Apr  1 23:25:26 2024 GMT
            Not After : Apr  8 23:25:26 2024 GMT
        Subject: CN=660b4266-2d99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:66:d9:38:54:bf:ea:d1:a6:87:69:c4:c5:5a:
                    96:26:e0:19:61:a0:24:3c:e1:ed:06:87:34:4d:cf:
                    e8:77:3b:22:da:9c:ae:61:aa:55:7b:fa:a9:5a:e0:
                    b8:8a:79:c0:0e:cf:04:75:99:8d:2e:f3:2f:c6:c3:
                    98:87:ed:e3:4b:f9:50:47:8b:34:91:45:65:f1:13:
                    cd:f5:b3:29:b2:31:d9:7e:4a:fb:f7:0d:3e:56:0d:
                    9e:a3:55:7d:bc:c3:79:2e:9c:7a:c7:81:fa:3c:f5:
                    37:02:0f:34:af:b4:4a:8d:15:7e:7b:0e:43:6b:b8:
                    a0:15:24:6d:2c:bd:15:e9:a0:8a:de:a3:0a:2a:0e:
                    dc:5a:c4:9b:85:6b:5a:92:7b:fb:b3:62:35:5e:ea:
                    5e:17:09:50:6b:8c:ea:12:b6:49:42:d0:6a:25:36:
                    5a:5a:54:a8:ce:52:34:d1:c9:02:f3:39:2e:81:75:
                    97:e9:40:d2:c3:99:b5:f9:6e:19:50:18:c4:cd:2c:
                    2f:fb:56:ad:d3:70:0b:62:e3:b5:7f:62:ea:06:61:
                    fa:a5:71:16:45:91:8c:42:38:eb:31:49:cb:e9:3b:
                    26:51:02:63:8b:fc:49:ab:c4:81:cf:a1:2f:8e:fb:
                    a9:cd:b7:81:a5:b5:2d:d7:f3:a9:d2:da:ff:f7:e1:
                    1f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:2A:F9:33:7F:C8:92:5B:C2:CD:3C:8D:D7:F0:67:E8:CB:49:69:C9
            X509v3 Authority Key Identifier:
                keyid:4F:43:7E:17:1E:59:F7:81:43:2C:4E:C2:FA:FE:49:BE:7F:15:7E:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0443/9C09BCA872D411E89B1EBA25C4F9AE02/T0N-Fx5Z94FDLE7C-v5Jvn8Vfs0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T0N-Fx5Z94FDLE7C-v5Jvn8Vfs0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0443/9C09BCA872D411E89B1EBA25C4F9AE02/T0N-Fx5Z94FDLE7C-v5Jvn8Vfs0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:ac:6f:e7:e8:04:c3:1f:b1:7f:75:af:2b:58:8c:f5:ab:3f:
         6b:05:fc:5a:37:50:61:ff:2a:2d:94:7b:70:33:9b:9d:5c:c1:
         79:5e:31:ec:40:70:01:4d:9b:93:64:16:fb:ca:69:c4:a5:f0:
         b1:f9:18:e0:15:86:e4:7e:90:0b:cd:ed:e7:8b:c1:01:6f:5c:
         8e:e5:22:fe:f5:72:46:5f:fa:ab:f0:33:15:c5:4c:4d:c9:47:
         5f:b9:9e:5b:a6:48:16:59:f7:f4:69:75:41:a1:85:c1:c5:7d:
         69:65:37:c1:e1:ed:97:b1:f9:f1:9c:68:4f:74:a1:e2:ea:72:
         53:61:29:52:05:a1:e5:bf:73:fd:57:33:77:57:85:2f:27:a5:
         d2:34:db:19:1e:b5:2c:dc:a0:56:da:a6:48:4a:62:a2:d3:30:
         08:e2:9b:3f:c3:38:20:51:f2:41:71:aa:00:55:99:ed:2f:67:
         1e:c7:d2:a8:1f:a0:c0:1e:07:92:0d:cf:92:d3:d0:1e:f8:7b:
         3f:30:29:d5:c4:a3:bc:dc:db:9d:c4:73:f1:13:91:77:d6:72:
         dd:d3:3a:5d:1c:1d:60:e2:37:25:7d:ae:6c:07:57:e2:ce:84:
         9b:2e:8d:0d:63:d4:38:c2:77:69:96:d2:0d:d8:80:be:8e:13:
         19:c5:7c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----