Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft
File:                     A4zy4oB33yytpFdW-12ZpuJA_Qk.mft (raw, json)
Hash identifier:          uH6sL/q/pNhs/7WvZjVP2vbGwhjOdjc98PSq9kWaTGc=
Subject key identifier:   5B:70:13:CF:4A:6E:C7:3B:2D:4D:71:0B:29:B6:78:D0:30:BC:FE:F1
Authority key identifier: 03:8C:F2:E2:80:77:DF:2C:AD:A4:57:56:FB:5D:99:A6:E2:40:FD:09
Certificate issuer:       /CN=A9112CEC/serialNumber=038CF2E28077DF2CADA45756FB5D99A6E240FD09
Certificate serial:       3456
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4zy4oB33yytpFdW-12ZpuJA_Qk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft
Manifest number:          344C
Signing time:             Fri 31 Jan 2025 15:13:11 +0000
Manifest this update:     Fri 31 Jan 2025 15:13:11 +0000
Manifest next update:     Fri 07 Feb 2025 15:13:11 +0000
Files and hashes:         1: A4zy4oB33yytpFdW-12ZpuJA_Qk.crl (hash: PG6uVdUXkp79bMxydjh2X+ia05Cy38NG8jhlhntdrFI=)
                          2: 55A4C5C004AA11E8935B7021C4F9AE02.roa (hash: Hux71er2Qs5CKXElMxsIIOBK+KutGucMBDid93LFsCU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13398 (0x3456)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112CEC/serialNumber=038CF2E28077DF2CADA45756FB5D99A6E240FD09
        Validity
            Not Before: Jan 31 15:13:11 2025 GMT
            Not After : Feb  7 15:13:11 2025 GMT
        Subject: CN=679ce887-a56a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:db:45:17:b0:0c:5b:21:a6:bb:86:38:1d:c2:
                    c4:80:54:c0:82:53:d9:84:25:d8:55:f7:7a:3f:52:
                    97:f1:ea:da:b3:b6:03:68:16:51:61:60:fd:87:66:
                    11:00:35:2d:f8:50:1f:12:35:05:6c:9f:e5:cd:2b:
                    b2:37:63:38:c3:27:f4:75:f0:7c:7a:a3:f7:f9:42:
                    db:06:b3:8c:12:22:64:68:29:06:c6:a5:f4:b7:cd:
                    d3:12:16:12:12:4b:ae:d0:eb:f6:6d:cd:5d:a3:d5:
                    d2:ec:40:91:7b:a0:15:d9:33:b9:51:4d:81:90:fb:
                    31:8a:f8:44:e7:7a:23:e6:a7:18:06:f8:08:67:f9:
                    de:da:9f:0f:72:7c:5d:2d:08:99:2c:20:bb:e2:58:
                    ae:64:71:b9:d9:e5:3f:72:c7:48:cc:ed:65:cc:f2:
                    76:fd:37:a3:aa:14:cf:ec:5a:23:06:d3:00:eb:82:
                    d3:49:68:d5:c7:41:c0:50:6b:13:40:76:0a:e7:84:
                    bc:45:f8:e1:6b:b9:63:d3:b6:0d:19:a3:43:11:67:
                    99:4b:c7:ac:cb:b7:26:90:93:a1:53:15:82:46:a9:
                    1d:f8:f3:e1:7c:89:cb:d0:04:83:73:50:54:f6:4f:
                    1f:fa:5e:9d:9e:3c:34:a5:0d:49:4c:bc:7a:96:fb:
                    db:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:70:13:CF:4A:6E:C7:3B:2D:4D:71:0B:29:B6:78:D0:30:BC:FE:F1
            X509v3 Authority Key Identifier:
                keyid:03:8C:F2:E2:80:77:DF:2C:AD:A4:57:56:FB:5D:99:A6:E2:40:FD:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4zy4oB33yytpFdW-12ZpuJA_Qk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:d1:58:a4:50:d3:1d:e1:f7:ce:27:d0:7c:da:db:ab:dd:43:
         86:6a:f6:21:50:57:c6:2a:7a:7b:6f:33:c5:b7:3e:dc:e3:cc:
         9a:73:7c:4a:6f:52:29:04:27:c3:2d:2b:ee:7d:32:18:6e:29:
         8d:2a:8e:2d:0f:47:04:30:3e:9a:bc:10:c0:ed:18:0d:18:de:
         94:59:99:ce:27:12:91:6b:e7:83:47:d7:94:ec:c3:db:f2:65:
         e2:dc:8e:f7:28:79:96:98:b4:7f:ac:bf:95:f2:dc:09:13:92:
         14:c7:18:6b:d8:ec:7c:d7:6e:03:8e:98:b7:8f:48:fc:33:3f:
         fb:b3:c3:14:22:bc:12:6d:b8:79:db:ac:dc:23:3e:f7:e5:c9:
         54:f0:37:7e:85:e2:93:18:9a:ba:f8:ac:e2:44:d1:d6:b4:e3:
         55:d2:9a:22:e1:f9:2c:ea:e2:6f:6e:f2:53:62:6f:74:7a:d6:
         62:88:e1:fb:a2:f7:5f:6f:84:43:73:ba:6c:a1:f0:0e:89:7f:
         bf:11:91:7c:df:09:97:92:82:a9:2d:7c:d7:27:cd:90:47:b0:
         58:5d:bc:f3:d1:06:cf:53:60:d7:9a:47:2e:ea:11:31:4b:fb:
         a9:d8:f8:e9:8c:4d:4d:dd:fc:3c:89:b9:d5:5d:21:a7:05:b0:
         e7:7f:90:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----