Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft
File:                     xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft (raw, json)
Hash identifier:          qBUyEfgPa/DGIhC4FJQb8EHY2a8PTj5NzUpOX2AdRIg=
Subject key identifier:   EA:D4:F3:06:D7:63:90:67:69:CB:96:20:EC:53:6D:B4:69:EC:8B:85
Authority key identifier: C6:D0:06:7F:24:28:1C:E1:F4:9C:90:81:2D:15:B1:F5:61:B9:5D:DE
Certificate issuer:       /CN=A9118166/serialNumber=C6D0067F24281CE1F49C90812D15B1F561B95DDE
Certificate serial:       077B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft
Manifest number:          0776
Signing time:             Thu 30 Jan 2025 21:19:49 +0000
Manifest this update:     Thu 30 Jan 2025 21:19:49 +0000
Manifest next update:     Thu 06 Feb 2025 21:19:49 +0000
Files and hashes:         1: xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl (hash: jKm3c6ZwwrAoPsDdx2aszK8OpmFccPhQWuUj0ZUNiB4=)
                          2: 6AF8F822FDAB11EAAAB1FB37C4F9AE02.roa (hash: pS3E0icAhyYawyxkXSLUFbWuAzA0NV/jlalvE1DTh1U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1915 (0x77b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118166/serialNumber=C6D0067F24281CE1F49C90812D15B1F561B95DDE
        Validity
            Not Before: Jan 30 21:19:49 2025 GMT
            Not After : Feb  6 21:19:49 2025 GMT
        Subject: CN=679becf5-e423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:dd:b6:98:bd:90:6d:6b:16:52:ff:08:b9:d1:
                    68:a1:c6:17:9d:9f:cd:c5:b6:98:33:8d:e2:79:e5:
                    3a:ce:57:f9:08:ce:ed:70:66:c6:f4:35:a7:ec:75:
                    e5:cc:7a:b6:1a:eb:f6:5e:21:6b:2c:67:d0:f0:d8:
                    58:e5:28:8f:7c:d2:f7:04:b9:56:4a:ce:0d:b9:a0:
                    29:36:2f:a3:84:33:49:2b:3b:fb:9f:79:e3:89:38:
                    4f:e3:c2:ed:28:ff:a8:3b:04:d9:ef:e9:5b:d0:94:
                    4e:4b:e8:65:53:0a:d8:59:b8:9c:f0:af:37:9f:ae:
                    a1:e4:14:51:b8:2a:3b:00:2d:f2:27:64:b4:90:6b:
                    a0:11:a5:ac:6b:d9:65:a5:2b:1f:9b:07:2d:e2:60:
                    00:9c:69:14:50:3e:2b:03:f4:b3:96:87:d0:9d:0b:
                    ea:7d:dd:96:c6:39:99:c1:8a:1f:3a:de:0a:15:08:
                    4f:cf:17:23:f4:c1:21:41:9f:a9:b4:49:b6:9b:7c:
                    38:36:fb:e5:a1:6c:9e:28:1b:bc:8d:00:82:46:0f:
                    26:80:5e:44:bc:5f:0b:d7:29:6a:4b:57:75:21:04:
                    63:66:f5:82:9d:79:16:d4:b5:3b:df:57:93:01:d7:
                    92:8c:77:c1:86:4f:13:56:86:bc:48:f5:db:ca:00:
                    1e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:D4:F3:06:D7:63:90:67:69:CB:96:20:EC:53:6D:B4:69:EC:8B:85
            X509v3 Authority Key Identifier:
                keyid:C6:D0:06:7F:24:28:1C:E1:F4:9C:90:81:2D:15:B1:F5:61:B9:5D:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:2e:7f:ea:72:96:56:ed:1d:81:4d:3a:a4:a4:73:55:a9:f2:
         30:61:f4:0a:f1:0f:cf:54:67:bb:e9:cc:15:21:ce:35:f9:eb:
         5e:1f:cf:20:2b:fb:8c:26:0c:02:33:2a:a0:5a:94:7d:31:83:
         4a:43:4a:e6:73:f2:5c:71:36:4c:86:f1:b7:63:98:5f:04:3c:
         f0:52:af:59:25:58:89:33:c2:0c:50:31:5c:42:9e:be:73:9c:
         bd:d2:79:c5:30:eb:27:e2:bf:87:d0:bc:35:c5:79:c9:4f:3f:
         25:6c:2e:db:c6:59:dd:93:35:13:0c:08:77:9b:db:99:85:c4:
         2d:de:cb:47:f3:f8:58:3a:db:81:e6:d7:54:78:28:9c:c6:70:
         a5:1f:5a:c1:c3:cb:22:c7:53:e6:60:ca:3a:e1:d5:0f:31:4a:
         79:58:50:8c:05:ad:da:cc:1b:b7:1c:5a:30:7c:68:c7:89:0c:
         3b:9e:08:d3:5e:96:1d:01:5a:bf:e6:1e:1c:de:91:e1:87:03:
         9b:83:28:14:7d:98:73:9d:aa:00:7e:b9:bc:8e:86:e7:63:f0:
         41:17:03:73:fc:a1:f9:b7:7c:36:9b:f7:1d:16:c3:d6:2b:b2:
         41:fc:bf:ff:99:44:8f:32:f0:d7:7a:f1:5d:68:1f:fc:7f:50:
         c5:c8:29:8c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB3swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTgxNjYxMTAvBgNVBAUTKEM2RDAwNjdGMjQyODFDRTFGNDlDOTA4MTJEMTVCMUY1
NjFCOTVEREUwHhcNMjUwMTMwMjExOTQ5WhcNMjUwMjA2MjExOTQ5WjAYMRYwFAYD
VQQDEw02NzliZWNmNS1lNDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2N22mL2QbWsWUv8IudFoocYXnZ/NxbaYM43ieeU6zlf5CM7tcGbG9DWn7HXl
zHq2Guv2XiFrLGfQ8NhY5SiPfNL3BLlWSs4NuaApNi+jhDNJKzv7n3njiThP48Lt
KP+oOwTZ7+lb0JROS+hlUwrYWbic8K83n66h5BRRuCo7AC3yJ2S0kGugEaWsa9ll
pSsfmwct4mAAnGkUUD4rA/SzlofQnQvqfd2WxjmZwYofOt4KFQhPzxcj9MEhQZ+p
tEm2m3w4NvvloWyeKBu8jQCCRg8mgF5EvF8L1ylqS1d1IQRjZvWCnXkW1LU731eT
AdeSjHfBhk8TVoa8SPXbygAe4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOrU8wbX
Y5BnacuWIOxTbbRp7IuFMB8GA1UdIwQYMBaAFMbQBn8kKBzh9JyQgS0VsfVhuV3e
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODE2Ni8yOEMxRDAyMkZE
ODkxMUVBOTQ2M0I2MzVDNEY5QUUwMi94dEFHZnlRb0hPSDBuSkNCTFJXeDlXRzVY
ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3h0QUdmeVFvSE9IMG5KQ0JMUld4OVdHNVhkNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
ODE2Ni8yOEMxRDAyMkZEODkxMUVBOTQ2M0I2MzVDNEY5QUUwMi94dEFHZnlRb0hP
SDBuSkNCTFJXeDlXRzVYZDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBULn/qcpZW7R2BTTqkpHNVqfIwYfQK8Q/PVGe76cwVIc41+eteH88g
K/uMJgwCMyqgWpR9MYNKQ0rmc/JccTZMhvG3Y5hfBDzwUq9ZJViJM8IMUDFcQp6+
c5y90nnFMOsn4r+H0Lw1xXnJTz8lbC7bxlndkzUTDAh3m9uZhcQt3stH8/hYOtuB
5tdUeCicxnClH1rBw8six1PmYMo64dUPMUp5WFCMBa3azBu3HFowfGjHiQw7ngjT
XpYdAVq/5h4c3pHhhwObgygUfZhznaoAfrm8jobnY/BBFwNz/KH5t3w2m/cdFsPW
K7JB/L//mUSPMvDXevFdaB/8f1DFyCmM
-----END CERTIFICATE-----