Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft
File:                     tO2w1sy18AyTBDdO6B9eJhrmcck.mft (raw, json)
Hash identifier:          OZiyxU+icoFlw1whV7YzUgqTakGa5/VuISJgvUWwEDY=
Subject key identifier:   92:E8:A8:AB:B3:A7:5B:C7:9B:0E:48:5B:BF:B4:66:94:D1:52:12:E5
Authority key identifier: B4:ED:B0:D6:CC:B5:F0:0C:93:04:37:4E:E8:1F:5E:26:1A:E6:71:C9
Certificate issuer:       /CN=A9116AC6/serialNumber=B4EDB0D6CCB5F00C9304374EE81F5E261AE671C9
Certificate serial:       F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft
Manifest number:          EE
Signing time:             Fri 31 Jan 2025 04:29:46 +0000
Manifest this update:     Fri 31 Jan 2025 04:29:46 +0000
Manifest next update:     Fri 07 Feb 2025 04:29:46 +0000
Files and hashes:         1: tO2w1sy18AyTBDdO6B9eJhrmcck.crl (hash: PmdQKnoiZOMXKkxqbwU6ukthpsUdB0G0sImZxoCi/Ok=)
                          2: 34DED1A2798711EEA7D73423C4F9AE02.roa (hash: SUwPdVpyD78LluiuQbCbX3WP+GiH5YDeeAZtixdrMe0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 242 (0xf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116AC6/serialNumber=B4EDB0D6CCB5F00C9304374EE81F5E261AE671C9
        Validity
            Not Before: Jan 31 04:29:46 2025 GMT
            Not After : Feb  7 04:29:46 2025 GMT
        Subject: CN=679c51ba-cc6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:91:5b:cd:a1:61:db:1a:51:69:23:f2:b1:f2:
                    a4:f8:36:f5:21:a5:c5:c4:34:e9:85:c1:d2:94:0b:
                    1f:94:0f:af:45:1a:58:9d:29:da:3a:43:e0:3f:cd:
                    09:28:60:65:fe:20:c4:9b:f0:7e:3f:c5:f8:ae:6b:
                    df:89:bf:c0:61:96:50:7a:e1:b8:87:2a:11:40:66:
                    f0:75:66:79:f1:99:f3:15:8b:be:95:fe:00:6a:19:
                    07:f4:72:5c:bf:5f:72:aa:e0:8e:78:93:85:5f:8e:
                    a3:f1:1d:59:71:a9:bc:11:d9:51:05:93:8d:6c:44:
                    3d:c3:2b:ef:d7:86:49:11:75:50:ea:b9:9e:47:c6:
                    55:f3:f0:cf:a3:cb:6f:1c:1a:97:38:08:b0:64:b3:
                    e7:98:5b:6b:35:94:b9:9f:95:68:85:26:cb:18:9c:
                    74:d9:9a:fe:48:d5:ce:77:b2:09:1f:1b:98:22:33:
                    7b:6f:ff:0d:13:7b:e8:ca:01:f3:bc:ab:57:f8:b1:
                    15:4e:aa:5f:95:68:f2:37:5b:8b:a1:11:df:54:1b:
                    2d:37:a3:9b:21:09:c0:74:d5:18:86:33:78:ec:d6:
                    08:80:38:fa:65:2a:34:84:a2:7f:fc:95:57:de:9e:
                    dd:03:9a:f4:54:d4:27:6a:fc:66:19:b3:91:7e:4f:
                    7f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:E8:A8:AB:B3:A7:5B:C7:9B:0E:48:5B:BF:B4:66:94:D1:52:12:E5
            X509v3 Authority Key Identifier:
                keyid:B4:ED:B0:D6:CC:B5:F0:0C:93:04:37:4E:E8:1F:5E:26:1A:E6:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:d0:ae:98:cb:7d:fa:0c:81:dd:e1:3d:7d:75:9f:77:6a:24:
         cc:4e:0f:25:96:96:1d:c9:60:f6:27:f3:67:39:6d:8e:83:c0:
         37:f8:55:3f:39:c8:6e:d9:50:ad:7a:4c:ff:f3:f1:ec:db:49:
         c7:e1:1b:c0:d2:7c:75:16:e0:58:27:13:1e:43:fb:12:f8:6b:
         e4:3d:9c:bf:eb:b2:36:74:55:db:30:a7:1e:c3:71:bc:8d:4c:
         4a:5a:12:ee:1d:ba:40:a7:76:bf:88:e8:df:f5:a7:5e:3b:35:
         93:0d:dd:bd:c9:cf:79:58:92:88:d2:05:86:32:21:ae:a5:db:
         e6:89:54:67:67:92:1f:0c:9c:4f:c0:5e:23:bb:40:19:12:7a:
         6f:95:59:02:42:d8:d7:48:9a:fc:1f:d1:4d:d3:b6:dd:d8:a1:
         94:27:5b:62:c3:dd:46:77:79:b1:2e:3a:14:fa:57:5c:13:2b:
         6f:cf:c8:52:b7:19:e0:18:9b:3a:c8:2f:eb:50:fa:a5:7b:d0:
         06:ef:ae:f2:07:72:85:e9:90:22:02:77:be:03:44:72:61:32:
         37:45:4d:2a:49:55:cc:ae:62:b5:0d:bf:4b:d4:12:0c:f1:0e:
         a2:b0:43:f2:e3:b8:eb:8b:5a:e9:5a:77:17:f0:d5:26:61:57:
         54:b4:e2:6e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTZBQzYxMTAvBgNVBAUTKEI0RURCMEQ2Q0NCNUYwMEM5MzA0Mzc0RUU4MUY1RTI2
MUFFNjcxQzkwHhcNMjUwMTMxMDQyOTQ2WhcNMjUwMjA3MDQyOTQ2WjAYMRYwFAYD
VQQDEw02NzljNTFiYS1jYzZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArpFbzaFh2xpRaSPysfKk+Db1IaXFxDTphcHSlAsflA+vRRpYnSnaOkPgP80J
KGBl/iDEm/B+P8X4rmvfib/AYZZQeuG4hyoRQGbwdWZ58ZnzFYu+lf4AahkH9HJc
v19yquCOeJOFX46j8R1Zcam8EdlRBZONbEQ9wyvv14ZJEXVQ6rmeR8ZV8/DPo8tv
HBqXOAiwZLPnmFtrNZS5n5VohSbLGJx02Zr+SNXOd7IJHxuYIjN7b/8NE3voygHz
vKtX+LEVTqpflWjyN1uLoRHfVBstN6ObIQnAdNUYhjN47NYIgDj6ZSo0hKJ//JVX
3p7dA5r0VNQnavxmGbORfk9/ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJLoqKuz
p1vHmw5IW7+0ZpTRUhLlMB8GA1UdIwQYMBaAFLTtsNbMtfAMkwQ3TugfXiYa5nHJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkFDNi9BMUI2Q0JFQTc5
N0QxMUVFOTk0OUIwNzNDNEY5QUUwMi90TzJ3MXN5MThBeVRCRGRPNkI5ZUpocm1j
Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RPMncxc3kxOEF5VEJEZE82QjllSmhybWNjay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NkFDNi9BMUI2Q0JFQTc5N0QxMUVFOTk0OUIwNzNDNEY5QUUwMi90TzJ3MXN5MThB
eVRCRGRPNkI5ZUpocm1jY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCV0K6Yy336DIHd4T19dZ93aiTMTg8llpYdyWD2J/NnOW2Og8A3+FU/
Ochu2VCtekz/8/Hs20nH4RvA0nx1FuBYJxMeQ/sS+GvkPZy/67I2dFXbMKcew3G8
jUxKWhLuHbpAp3a/iOjf9adeOzWTDd29yc95WJKI0gWGMiGupdvmiVRnZ5IfDJxP
wF4ju0AZEnpvlVkCQtjXSJr8H9FN07bd2KGUJ1tiw91Gd3mxLjoU+ldcEytvz8hS
txngGJs6yC/rUPqle9AG767yB3KF6ZAiAne+A0RyYTI3RU0qSVXMrmK1Db9L1BIM
8Q6isEPy47jri1rpWncX8NUmYVdUtOJu
-----END CERTIFICATE-----