Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.mft
File:                     k8C6F5rKocB50zxmk_RGcBBPzZg.mft (raw, json)
Hash identifier:          bTzh85Mo14qnA6AMPcCA+fWtU6AHww6v6TiV+8H83f0=
Subject key identifier:   C6:04:90:F7:1A:2A:55:9A:3A:29:0B:73:23:37:A9:DC:77:D1:3D:DC
Authority key identifier: 93:C0:BA:17:9A:CA:A1:C0:79:D3:3C:66:93:F4:46:70:10:4F:CD:98
Certificate issuer:       /CN=A9111788/serialNumber=93C0BA179ACAA1C079D33C6693F44670104FCD98
Certificate serial:       01AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8C6F5rKocB50zxmk_RGcBBPzZg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.mft
Manifest number:          01A8
Signing time:             Fri 31 Jan 2025 02:29:57 +0000
Manifest this update:     Fri 31 Jan 2025 02:29:56 +0000
Manifest next update:     Fri 07 Feb 2025 02:29:56 +0000
Files and hashes:         1: k8C6F5rKocB50zxmk_RGcBBPzZg.crl (hash: WbjodtZjXFLUuDGRvxhC/Pd+AiZq8B36SZJ8utWg17w=)
                          2: 6F57F77659AF11EDB5683587C4F9AE02.roa (hash: Hz4MNEz2iKlBVZUTwXmU+LHuAvQlzMxEja9uy8vjPy4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 428 (0x1ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111788/serialNumber=93C0BA179ACAA1C079D33C6693F44670104FCD98
        Validity
            Not Before: Jan 31 02:29:56 2025 GMT
            Not After : Feb  7 02:29:56 2025 GMT
        Subject: CN=679c35a5-d307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:08:62:c3:4a:30:51:56:39:bb:12:a3:d0:d7:
                    46:76:f2:91:ed:62:33:6e:19:93:89:48:6c:4e:6c:
                    f7:a4:b1:20:39:f0:da:3a:5a:3a:8f:68:cb:0e:73:
                    73:a4:ed:80:bf:b4:56:0a:d7:0b:a9:63:59:4d:74:
                    d4:8d:5c:c9:5d:44:e5:13:29:9d:5c:97:b0:08:08:
                    15:be:48:91:7c:cf:9b:f6:fd:29:da:2e:a5:c6:17:
                    58:72:e3:45:42:ce:46:6b:34:ac:50:83:6d:04:96:
                    ca:a0:57:74:33:6d:c6:0e:c7:0a:2f:68:5d:2e:b5:
                    52:b1:16:57:5e:96:ca:d7:71:14:ea:67:e0:eb:9e:
                    fc:d3:88:2d:86:19:0b:b8:a2:5b:a4:6d:3c:87:9b:
                    1b:ed:87:c9:0d:50:67:d8:ee:09:ed:9c:fb:12:08:
                    be:9b:5c:db:80:30:51:86:17:b7:b0:03:dd:0f:de:
                    6c:ef:e9:dd:05:47:21:98:26:18:67:b5:2b:78:a1:
                    78:93:36:89:b6:41:5b:b3:50:54:bf:51:ba:5b:16:
                    82:e4:cf:6d:a8:71:6e:64:67:b4:ff:cd:eb:4e:a9:
                    fd:bc:94:8f:8b:27:53:31:4a:75:19:f7:4c:80:6a:
                    76:ec:d3:67:aa:7c:24:4f:8f:04:ed:6c:a3:c6:78:
                    e3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:04:90:F7:1A:2A:55:9A:3A:29:0B:73:23:37:A9:DC:77:D1:3D:DC
            X509v3 Authority Key Identifier:
                keyid:93:C0:BA:17:9A:CA:A1:C0:79:D3:3C:66:93:F4:46:70:10:4F:CD:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8C6F5rKocB50zxmk_RGcBBPzZg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:f4:62:d7:ab:1e:77:e7:71:c6:51:e9:7b:18:2a:9b:0d:9a:
         5e:ec:a4:c1:d6:15:0a:f3:6a:37:28:ba:8c:5c:92:0c:1e:97:
         74:28:4d:dc:99:00:c7:0e:ff:4e:8e:43:74:12:fd:04:ff:33:
         65:6e:8a:f0:fe:26:6c:d1:45:0f:c1:ee:9f:cb:56:3e:92:cc:
         b7:39:8d:bd:e2:0a:0b:e2:3b:ed:0e:f9:3d:47:b9:b9:c7:45:
         44:67:13:16:85:75:62:5e:ce:f6:19:4a:40:c5:c5:b6:ab:ac:
         ef:3d:c9:58:ab:59:e9:11:5e:c4:35:3e:9e:6a:8c:76:52:d0:
         19:18:7c:c7:25:e4:2e:aa:d9:10:b0:3f:63:20:32:63:9a:cb:
         63:a7:48:2a:35:71:ed:1f:27:46:4e:00:e5:5d:0b:a7:f0:30:
         d6:cd:11:cc:15:61:6f:79:80:4f:98:c8:1d:c7:22:f4:a9:cc:
         4a:a9:40:21:9d:05:ee:eb:fd:ed:e4:ba:99:3b:2f:78:22:f1:
         c4:c8:77:5a:4d:75:82:ea:29:98:93:30:89:b9:34:5c:49:7d:
         f9:9f:86:55:ed:d1:ac:23:37:3b:8a:5f:06:bc:61:97:64:c3:
         bf:88:4b:95:a5:6d:03:d7:da:6a:31:fb:8c:37:4e:e5:a6:b7:
         02:6d:3c:e0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTE3ODgxMTAvBgNVBAUTKDkzQzBCQTE3OUFDQUExQzA3OUQzM0M2NjkzRjQ0Njcw
MTA0RkNEOTgwHhcNMjUwMTMxMDIyOTU2WhcNMjUwMjA3MDIyOTU2WjAYMRYwFAYD
VQQDEw02NzljMzVhNS1kMzA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvghiw0owUVY5uxKj0NdGdvKR7WIzbhmTiUhsTmz3pLEgOfDaOlo6j2jLDnNz
pO2Av7RWCtcLqWNZTXTUjVzJXUTlEymdXJewCAgVvkiRfM+b9v0p2i6lxhdYcuNF
Qs5GazSsUINtBJbKoFd0M23GDscKL2hdLrVSsRZXXpbK13EU6mfg657804gthhkL
uKJbpG08h5sb7YfJDVBn2O4J7Zz7Egi+m1zbgDBRhhe3sAPdD95s7+ndBUchmCYY
Z7UreKF4kzaJtkFbs1BUv1G6WxaC5M9tqHFuZGe0/83rTqn9vJSPiydTMUp1GfdM
gGp27NNnqnwkT48E7WyjxnjjHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMYEkPca
KlWaOikLcyM3qdx30T3cMB8GA1UdIwQYMBaAFJPAuheayqHAedM8ZpP0RnAQT82Y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTc4OC8zRDA1MTVBMDU5
QUIxMUVEOEVFQkE0NTZDNEY5QUUwMi9rOEM2RjVyS29jQjUwenhta19SR2NCQlB6
WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2s4QzZGNXJLb2NCNTB6eG1rX1JHY0JCUHpaZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MTc4OC8zRDA1MTVBMDU5QUIxMUVEOEVFQkE0NTZDNEY5QUUwMi9rOEM2RjVyS29j
QjUwenhta19SR2NCQlB6WmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBq9GLXqx5353HGUel7GCqbDZpe7KTB1hUK82o3KLqMXJIMHpd0KE3c
mQDHDv9OjkN0Ev0E/zNlborw/iZs0UUPwe6fy1Y+ksy3OY294goL4jvtDvk9R7m5
x0VEZxMWhXViXs72GUpAxcW2q6zvPclYq1npEV7ENT6eaox2UtAZGHzHJeQuqtkQ
sD9jIDJjmstjp0gqNXHtHydGTgDlXQun8DDWzRHMFWFveYBPmMgdxyL0qcxKqUAh
nQXu6/3t5LqZOy94IvHEyHdaTXWC6imYkzCJuTRcSX35n4ZV7dGsIzc7il8GvGGX
ZMO/iEuVpW0D19pqMfuMN07lprcCbTzg
-----END CERTIFICATE-----