Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.mft
File:                     Y_wvXeCUyDltyLyXRO1oL_SyOIE.mft (raw, json)
Hash identifier:          JNuJArkOHwy0kLT/LJ8lTLDu8smc5UrGofnsKSnCngk=
Subject key identifier:   E9:E6:88:13:A9:77:1A:9B:B9:AB:5A:84:D4:16:95:8F:AC:31:CC:18
Authority key identifier: 63:FC:2F:5D:E0:94:C8:39:6D:C8:BC:97:44:ED:68:2F:F4:B2:38:81
Certificate issuer:       /CN=A9118689/serialNumber=63FC2F5DE094C8396DC8BC9744ED682FF4B23881
Certificate serial:       BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_wvXeCUyDltyLyXRO1oL_SyOIE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.mft
Manifest number:          BB
Signing time:             Fri 31 Jan 2025 05:03:58 +0000
Manifest this update:     Fri 31 Jan 2025 05:03:57 +0000
Manifest next update:     Fri 07 Feb 2025 05:03:57 +0000
Files and hashes:         1: Y_wvXeCUyDltyLyXRO1oL_SyOIE.crl (hash: ZLlqCO5dSx/Hfnqa5ymFRtRJb/FAEn3skbWzm9BfrTQ=)
                          2: D1D880A6C4FB11EEA30ECF34C4F9AE02.roa (hash: HaM1uGW7CpLpf57Ix2SDrMkVRudstrm9oD5WtSudmS8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 189 (0xbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118689/serialNumber=63FC2F5DE094C8396DC8BC9744ED682FF4B23881
        Validity
            Not Before: Jan 31 05:03:57 2025 GMT
            Not After : Feb  7 05:03:57 2025 GMT
        Subject: CN=679c59be-f998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:af:26:15:e3:5b:c0:01:8e:f7:2d:79:00:70:
                    c0:fc:b7:78:3d:6c:27:b9:71:19:8c:ad:c9:1e:82:
                    51:2f:0c:53:e9:ec:1c:57:5d:46:84:b9:24:7b:af:
                    e5:7a:9e:72:7d:fc:84:82:f4:59:06:11:75:b2:f0:
                    5e:f0:62:32:02:ca:63:6e:d9:d7:81:42:6e:f6:c0:
                    7f:ab:89:a8:34:26:11:f4:34:42:7b:75:26:a0:86:
                    b9:bb:4e:8c:5b:90:ca:52:e7:0c:d2:f5:3a:e9:cf:
                    59:91:b5:a5:3e:d9:2e:b3:41:18:30:43:a4:a5:fb:
                    c9:d2:17:b7:0a:99:d7:e6:ee:dd:11:40:90:ff:ce:
                    ff:8f:ce:af:dd:c0:b9:3a:05:8f:e6:1f:41:a0:77:
                    89:5a:3a:51:4e:bd:e9:39:aa:91:f9:16:04:01:d7:
                    dd:c0:e8:66:30:0e:f5:4f:df:8f:44:48:28:79:91:
                    83:48:f2:1a:51:ea:d7:19:97:15:1b:ae:dd:4f:fb:
                    61:c5:e0:7b:29:10:b0:16:d5:d8:4f:ba:99:b3:ce:
                    c6:8a:ed:7c:b5:ca:76:6c:90:56:93:3a:e3:a6:a9:
                    1b:44:5c:ca:2b:96:d4:eb:73:75:08:d9:d4:6f:f0:
                    e0:69:8f:79:42:d8:17:5e:07:1f:59:f9:ee:eb:8d:
                    5b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E6:88:13:A9:77:1A:9B:B9:AB:5A:84:D4:16:95:8F:AC:31:CC:18
            X509v3 Authority Key Identifier:
                keyid:63:FC:2F:5D:E0:94:C8:39:6D:C8:BC:97:44:ED:68:2F:F4:B2:38:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_wvXeCUyDltyLyXRO1oL_SyOIE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:5c:ce:8c:1a:35:fb:d1:39:ff:e3:8d:28:58:61:96:40:af:
         71:80:95:f8:8a:52:92:d4:a5:3b:f2:15:ec:ef:f0:5d:ab:a7:
         c1:f1:f6:58:65:eb:cb:5c:c4:c3:03:b4:57:30:db:69:a7:b0:
         8f:5d:65:cd:c4:60:83:a0:78:0c:87:4f:68:27:a8:01:38:37:
         9b:28:94:51:b8:ae:a4:3c:5a:97:67:4f:9f:de:33:0c:96:c8:
         e9:43:16:05:6e:14:54:02:2c:0f:26:58:8d:e6:80:29:88:a0:
         9e:47:5e:4c:68:c8:39:b6:94:a7:67:c7:5f:5a:43:65:88:7c:
         0b:5f:23:eb:78:ed:eb:c5:a5:73:57:61:b4:e5:69:d5:15:e4:
         66:fa:ac:10:d3:91:59:13:2a:58:c4:76:45:9a:6b:74:e6:b9:
         35:80:ed:cc:1a:aa:ff:9b:28:8f:52:24:5f:10:de:16:f9:cf:
         07:43:61:d5:41:08:24:48:c3:46:38:be:0d:b1:e5:f8:44:ac:
         1b:dc:d5:ec:0e:b3:b2:5c:03:d9:b6:4a:e9:51:37:e9:c6:58:
         ad:75:45:9d:13:b4:e0:f5:c9:f8:39:e3:92:47:fb:71:6e:a1:
         58:55:50:b9:5f:90:ae:c4:d5:ab:75:19:40:4d:8e:18:76:d6:
         d5:22:c6:b6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTg2ODkxMTAvBgNVBAUTKDYzRkMyRjVERTA5NEM4Mzk2REM4QkM5NzQ0RUQ2ODJG
RjRCMjM4ODEwHhcNMjUwMTMxMDUwMzU3WhcNMjUwMjA3MDUwMzU3WjAYMRYwFAYD
VQQDEw02NzljNTliZS1mOTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApa8mFeNbwAGO9y15AHDA/Ld4PWwnuXEZjK3JHoJRLwxT6ewcV11GhLkke6/l
ep5yffyEgvRZBhF1svBe8GIyAspjbtnXgUJu9sB/q4moNCYR9DRCe3UmoIa5u06M
W5DKUucM0vU66c9ZkbWlPtkus0EYMEOkpfvJ0he3CpnX5u7dEUCQ/87/j86v3cC5
OgWP5h9BoHeJWjpRTr3pOaqR+RYEAdfdwOhmMA71T9+PREgoeZGDSPIaUerXGZcV
G67dT/thxeB7KRCwFtXYT7qZs87Giu18tcp2bJBWkzrjpqkbRFzKK5bU63N1CNnU
b/DgaY95QtgXXgcfWfnu641bXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOnmiBOp
dxqbuatahNQWlY+sMcwYMB8GA1UdIwQYMBaAFGP8L13glMg5bci8l0TtaC/0sjiB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODY4OS81MTVFQ0IzMkM0
QTcxMUVFODc1RDA4MkNDNEY5QUUwMi9ZX3d2WGVDVXlEbHR5THlYUk8xb0xfU3lP
SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lfd3ZYZUNVeURsdHlMeVhSTzFvTF9TeU9JRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
ODY4OS81MTVFQ0IzMkM0QTcxMUVFODc1RDA4MkNDNEY5QUUwMi9ZX3d2WGVDVXlE
bHR5THlYUk8xb0xfU3lPSUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCrXM6MGjX70Tn/440oWGGWQK9xgJX4ilKS1KU78hXs7/Bdq6fB8fZY
ZevLXMTDA7RXMNtpp7CPXWXNxGCDoHgMh09oJ6gBODebKJRRuK6kPFqXZ0+f3jMM
lsjpQxYFbhRUAiwPJliN5oApiKCeR15MaMg5tpSnZ8dfWkNliHwLXyPreO3rxaVz
V2G05WnVFeRm+qwQ05FZEypYxHZFmmt05rk1gO3MGqr/myiPUiRfEN4W+c8HQ2HV
QQgkSMNGOL4NseX4RKwb3NXsDrOyXAPZtkrpUTfpxlitdUWdE7Tg9cn4OeOSR/tx
bqFYVVC5X5CuxNWrdRlATY4YdtbVIsa2
-----END CERTIFICATE-----