Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft
File:                     aK5b6xu35ELO4KfgFAKf9y49tB8.mft (raw, json)
Hash identifier:          pDVLi8tr4+rXpOI8HaBsHf6lPnIlMgukcXcFApdMIuA=
Subject key identifier:   21:AE:F8:94:3E:8D:94:9B:B6:A5:36:A5:10:70:92:07:60:53:6B:64
Authority key identifier: 68:AE:5B:EB:1B:B7:E4:42:CE:E0:A7:E0:14:02:9F:F7:2E:3D:B4:1F
Certificate issuer:       /CN=A91104C9/serialNumber=68AE5BEB1BB7E442CEE0A7E014029FF72E3DB41F
Certificate serial:       0BC4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK5b6xu35ELO4KfgFAKf9y49tB8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft
Manifest number:          0BB9
Signing time:             Thu 30 Jan 2025 18:53:26 +0000
Manifest this update:     Thu 30 Jan 2025 18:53:25 +0000
Manifest next update:     Thu 06 Feb 2025 18:53:25 +0000
Files and hashes:         1: aK5b6xu35ELO4KfgFAKf9y49tB8.crl (hash: WBPsAN2d3IIDy4W5pkh7tOP6EzJB1afoI6n7GY5Sm1Y=)
                          2: 4C1F013E5AF511EFBAB1F86CC4F9AE02.roa (hash: 5YnlbFiESO7UmvUP8KNkIgeb7OYcXBskhmx0foLpcp0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3012 (0xbc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91104C9/serialNumber=68AE5BEB1BB7E442CEE0A7E014029FF72E3DB41F
        Validity
            Not Before: Jan 30 18:53:25 2025 GMT
            Not After : Feb  6 18:53:25 2025 GMT
        Subject: CN=679bcaa5-d489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:50:6b:3c:6e:08:37:62:45:d9:62:bd:d9:30:
                    b3:d9:58:66:cf:31:f5:0b:21:60:63:23:99:ab:5a:
                    e6:a7:1f:18:f3:ec:c4:08:68:81:70:ab:47:58:c5:
                    4e:b1:44:a8:51:60:a1:81:5b:56:23:bb:af:ba:13:
                    23:cd:a8:f8:6d:02:e1:25:ce:e7:15:c3:dc:c2:23:
                    bf:36:50:d7:45:24:21:db:53:52:aa:7d:ef:2f:df:
                    b7:96:09:2f:13:2a:fb:4f:11:ea:96:22:f4:8b:72:
                    b2:77:1d:5e:30:85:f3:4e:ca:d3:26:fc:56:cb:f3:
                    08:7d:0c:54:1a:32:9c:92:69:21:fb:54:7b:46:b6:
                    5c:b3:0a:38:7b:de:d0:9a:b8:1d:67:c6:98:bc:2d:
                    2c:a1:5e:09:8c:8d:d0:04:a8:d2:1d:93:25:bc:53:
                    99:fb:99:e9:21:8a:8f:63:e5:5a:08:83:3f:92:8b:
                    fc:2c:c9:f0:70:30:01:b2:c7:87:8c:89:5f:ff:18:
                    3b:52:1a:20:1a:bc:9d:f0:66:da:1b:a3:01:8d:91:
                    4d:d3:4b:20:ea:97:67:72:39:86:76:63:b8:ae:a0:
                    eb:0a:f0:5f:09:9f:36:27:50:48:bd:0c:c3:0c:08:
                    8b:7a:04:9f:65:74:63:d7:ef:39:c2:12:51:6f:dc:
                    28:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:AE:F8:94:3E:8D:94:9B:B6:A5:36:A5:10:70:92:07:60:53:6B:64
            X509v3 Authority Key Identifier:
                keyid:68:AE:5B:EB:1B:B7:E4:42:CE:E0:A7:E0:14:02:9F:F7:2E:3D:B4:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK5b6xu35ELO4KfgFAKf9y49tB8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:bc:58:3f:87:ba:b8:eb:2b:ef:2d:0e:ed:96:82:e8:d3:68:
         c4:3a:cc:92:f8:5a:80:e4:8b:f3:61:91:73:f8:85:ae:53:87:
         56:40:d3:76:58:b6:03:7a:59:8e:9d:ea:94:7b:35:6f:32:36:
         bd:03:9d:da:24:87:2a:3d:f0:61:fd:f9:aa:69:86:f0:e8:cd:
         21:98:33:b6:14:95:84:d9:ee:72:53:7d:2c:cd:42:26:5e:8a:
         01:2e:a0:96:72:f9:8c:93:6a:77:e4:d1:e4:02:47:64:29:b0:
         74:5f:e5:a1:14:03:0e:13:80:b2:b3:58:31:cf:3b:96:46:a5:
         3f:eb:11:55:58:a1:87:cc:57:1c:53:06:f2:0d:a4:15:83:7c:
         f4:81:be:c9:0d:4c:70:cf:e1:f2:a1:f1:c0:8d:0b:28:51:b9:
         1e:dd:8f:f3:03:f6:fa:aa:49:8b:e8:e0:38:13:c2:4d:bd:0b:
         42:bb:f7:6f:fb:fb:ac:74:34:12:b6:99:11:a4:c2:e2:57:f5:
         97:a7:30:b0:3e:dd:4f:7b:54:33:4d:88:7d:dd:f7:6a:6e:97:
         23:0c:76:9e:22:7c:01:8b:94:8b:02:3f:90:9a:60:11:dd:61:
         74:f9:ef:6f:65:ae:bc:33:e0:5d:4e:aa:14:45:a5:bf:97:47:
         ce:12:ca:26
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC8QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTA0QzkxMTAvBgNVBAUTKDY4QUU1QkVCMUJCN0U0NDJDRUUwQTdFMDE0MDI5RkY3
MkUzREI0MUYwHhcNMjUwMTMwMTg1MzI1WhcNMjUwMjA2MTg1MzI1WjAYMRYwFAYD
VQQDEw02NzliY2FhNS1kNDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtlBrPG4IN2JF2WK92TCz2VhmzzH1CyFgYyOZq1rmpx8Y8+zECGiBcKtHWMVO
sUSoUWChgVtWI7uvuhMjzaj4bQLhJc7nFcPcwiO/NlDXRSQh21NSqn3vL9+3lgkv
Eyr7TxHqliL0i3Kydx1eMIXzTsrTJvxWy/MIfQxUGjKckmkh+1R7RrZcswo4e97Q
mrgdZ8aYvC0soV4JjI3QBKjSHZMlvFOZ+5npIYqPY+VaCIM/kov8LMnwcDABsseH
jIlf/xg7UhogGryd8GbaG6MBjZFN00sg6pdncjmGdmO4rqDrCvBfCZ82J1BIvQzD
DAiLegSfZXRj1+85whJRb9wolQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCGu+JQ+
jZSbtqU2pRBwkgdgU2tkMB8GA1UdIwQYMBaAFGiuW+sbt+RCzuCn4BQCn/cuPbQf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDRDOS8yQUE4QjM4ODE0
QzgxMUVBODdEMTUxNkNDNEY5QUUwMi9hSzViNnh1MzVFTE80S2ZnRkFLZjl5NDl0
QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FLNWI2eHUzNUVMTzRLZmdGQUtmOXk0OXRCOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MDRDOS8yQUE4QjM4ODE0QzgxMUVBODdEMTUxNkNDNEY5QUUwMi9hSzViNnh1MzVF
TE80S2ZnRkFLZjl5NDl0QjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAwvFg/h7q46yvvLQ7tloLo02jEOsyS+FqA5IvzYZFz+IWuU4dWQNN2
WLYDelmOneqUezVvMja9A53aJIcqPfBh/fmqaYbw6M0hmDO2FJWE2e5yU30szUIm
XooBLqCWcvmMk2p35NHkAkdkKbB0X+WhFAMOE4Cys1gxzzuWRqU/6xFVWKGHzFcc
UwbyDaQVg3z0gb7JDUxwz+HyofHAjQsoUbke3Y/zA/b6qkmL6OA4E8JNvQtCu/dv
+/usdDQStpkRpMLiV/WXpzCwPt1Pe1QzTYh93fdqbpcjDHaeInwBi5SLAj+QmmAR
3WF0+e9vZa68M+BdTqoURaW/l0fOEsom
-----END CERTIFICATE-----