Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.mft
File:                     agTrNKPf8GX9DvMS4s44P6tQJN4.mft (raw, json)
Hash identifier:          vayjDPGI7Q0ykEdg5OzJPkyCyR2Z/xLaV0ksPqnnTtY=
Subject key identifier:   38:45:57:A0:4A:B0:F6:CA:B5:ED:EA:D6:F5:3C:57:73:35:6B:0C:74
Authority key identifier: 6A:04:EB:34:A3:DF:F0:65:FD:0E:F3:12:E2:CE:38:3F:AB:50:24:DE
Certificate issuer:       /CN=A911691A/serialNumber=6A04EB34A3DFF065FD0EF312E2CE383FAB5024DE
Certificate serial:       2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agTrNKPf8GX9DvMS4s44P6tQJN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.mft
Manifest number:          2E
Signing time:             Fri 31 Jan 2025 06:47:18 +0000
Manifest this update:     Fri 31 Jan 2025 06:47:18 +0000
Manifest next update:     Fri 07 Feb 2025 06:47:18 +0000
Files and hashes:         1: agTrNKPf8GX9DvMS4s44P6tQJN4.crl (hash: UBHMYy0rxhmmHdMJ126/jYVeNO8BfalZlQ5nJhuXdUQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911691A/serialNumber=6A04EB34A3DFF065FD0EF312E2CE383FAB5024DE
        Validity
            Not Before: Jan 31 06:47:18 2025 GMT
            Not After : Feb  7 06:47:18 2025 GMT
        Subject: CN=679c71f6-d2cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:39:fa:48:f9:93:92:22:c8:bc:17:c8:da:95:
                    47:d1:5a:82:47:54:79:5a:f6:0a:05:ff:17:f3:21:
                    5c:74:0a:11:87:44:da:81:8a:14:4c:f1:88:bc:7d:
                    25:29:b3:37:48:d4:c8:f8:ca:fc:f8:46:c6:b1:64:
                    28:40:e1:2f:9b:45:a4:c8:4d:b4:c2:45:f7:9d:3a:
                    b1:8f:4b:4e:53:7b:3b:c9:08:36:e5:bf:05:81:33:
                    55:15:79:ed:4c:b5:6a:50:fd:c9:9a:1e:e0:29:95:
                    e7:b3:b1:75:d4:ab:ed:50:41:55:8d:06:cb:59:d2:
                    87:59:dd:5d:d1:b6:78:9b:cb:b0:bf:ca:a1:fc:ce:
                    70:68:20:9d:9e:b8:37:61:82:2b:b8:9e:21:09:5f:
                    d0:da:d2:9c:8f:50:2d:b1:20:7e:d1:71:26:04:96:
                    0b:ff:d1:7c:9f:91:c2:a4:b4:0e:c1:97:74:9c:a0:
                    ff:b8:3f:89:20:76:f6:b5:12:52:13:43:06:7b:64:
                    24:fc:d6:0b:8e:2e:7e:75:d0:c1:1f:34:38:25:3c:
                    1b:d7:a3:48:8e:dc:fc:84:98:06:eb:69:93:e5:d0:
                    e7:8f:63:e0:d8:c3:71:47:3d:ef:f2:46:53:18:de:
                    cb:11:bf:05:38:02:7e:7b:e1:2d:5b:d8:35:d7:be:
                    15:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:45:57:A0:4A:B0:F6:CA:B5:ED:EA:D6:F5:3C:57:73:35:6B:0C:74
            X509v3 Authority Key Identifier:
                keyid:6A:04:EB:34:A3:DF:F0:65:FD:0E:F3:12:E2:CE:38:3F:AB:50:24:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agTrNKPf8GX9DvMS4s44P6tQJN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:54:b8:42:de:9f:60:55:23:13:ee:d2:85:30:d0:06:c6:ef:
         63:27:96:8a:97:9d:9b:7e:ad:23:f5:d0:72:7e:75:f3:cf:2f:
         53:19:d4:ff:c9:dc:a7:c8:ba:d2:db:e1:2a:7a:c8:fe:14:70:
         f1:c7:88:c1:5d:5c:54:6f:12:73:da:0b:5b:2f:bd:4f:25:95:
         bf:f3:1a:ab:3c:fb:2d:58:28:46:46:52:52:d1:66:7a:ea:56:
         40:e0:68:dc:6c:b7:0c:72:d3:2a:a5:ed:ca:0f:c3:ef:62:cd:
         28:ec:99:58:24:78:1c:fc:4f:0b:5c:cb:98:d4:a8:f8:fb:cd:
         e5:89:d9:c1:f1:50:89:e3:46:2d:6f:e2:a2:fb:46:8d:19:a2:
         7b:58:07:72:1b:eb:64:16:e1:64:98:5c:ff:ef:c8:9f:38:c8:
         0c:e1:56:0c:2c:a7:4b:38:7f:53:d4:5c:14:d6:11:5d:ac:4f:
         f3:c0:6d:c3:4b:b3:7d:79:6e:0f:fc:09:be:ef:d8:81:af:e3:
         d1:9a:99:c6:ab:89:34:d5:65:57:0f:40:4b:1a:b7:40:74:7e:
         27:b5:0e:51:9f:a5:d2:0f:48:83:7d:87:ca:30:26:27:ad:34:
         25:b8:4e:7a:d8:31:3c:2d:15:52:b0:10:d5:b4:2c:33:4c:cb:
         49:73:be:f8
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
NjkxQTExMC8GA1UEBRMoNkEwNEVCMzRBM0RGRjA2NUZEMEVGMzEyRTJDRTM4M0ZB
QjUwMjRERTAeFw0yNTAxMzEwNjQ3MThaFw0yNTAyMDcwNjQ3MThaMBgxFjAUBgNV
BAMTDTY3OWM3MWY2LWQyY2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCpOfpI+ZOSIsi8F8jalUfRWoJHVHla9goF/xfzIVx0ChGHRNqBihRM8Yi8fSUp
szdI1Mj4yvz4RsaxZChA4S+bRaTITbTCRfedOrGPS05TezvJCDblvwWBM1UVee1M
tWpQ/cmaHuApleezsXXUq+1QQVWNBstZ0odZ3V3Rtniby7C/yqH8znBoIJ2euDdh
giu4niEJX9Da0pyPUC2xIH7RcSYElgv/0XyfkcKktA7Bl3ScoP+4P4kgdva1ElIT
QwZ7ZCT81guOLn510MEfNDglPBvXo0iO3PyEmAbraZPl0OePY+DYw3FHPe/yRlMY
3ssRvwU4An574S1b2DXXvhUlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOEVXoEqw
9sq17erW9TxXczVrDHQwHwYDVR0jBBgwFoAUagTrNKPf8GX9DvMS4s44P6tQJN4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2OTFBLzQ3ODkzMTc4QTE5
RDExRUZCRUI1Njk3REM0RjlBRTAyL2FnVHJOS1BmOEdYOUR2TVM0czQ0UDZ0UUpO
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvYWdUck5LUGY4R1g5RHZNUzRzNDRQNnRRSk40LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2
OTFBLzQ3ODkzMTc4QTE5RDExRUZCRUI1Njk3REM0RjlBRTAyL2FnVHJOS1BmOEdY
OUR2TVM0czQ0UDZ0UUpONC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAE5UuELen2BVIxPu0oUw0AbG72MnloqXnZt+rSP10HJ+dfPPL1MZ1P/J
3KfIutLb4Sp6yP4UcPHHiMFdXFRvEnPaC1svvU8llb/zGqs8+y1YKEZGUlLRZnrq
VkDgaNxstwxy0yql7coPw+9izSjsmVgkeBz8Twtcy5jUqPj7zeWJ2cHxUInjRi1v
4qL7Ro0ZontYB3Ib62QW4WSYXP/vyJ84yAzhVgwsp0s4f1PUXBTWEV2sT/PAbcNL
s315bg/8Cb7v2IGv49GamcariTTVZVcPQEsat0B0fie1DlGfpdIPSIN9h8owJiet
NCW4TnrYMTwtFVKwENW0LDNMy0lzvvg=
-----END CERTIFICATE-----