Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft
File:                     6f6DqUwBuxPVNX83DHZZc-mX9NA.mft (raw, json)
Hash identifier:          5vLvPrW83j7AQPuukN436f1rds3ji6pf94u+IE+H8HU=
Subject key identifier:   D7:1F:5B:64:E9:AF:32:B1:BB:07:43:D2:10:2D:A5:7A:25:A0:17:4E
Authority key identifier: E9:FE:83:A9:4C:01:BB:13:D5:35:7F:37:0C:76:59:73:E9:97:F4:D0
Certificate issuer:       /CN=A911BDAE/serialNumber=E9FE83A94C01BB13D5357F370C765973E997F4D0
Certificate serial:       0244
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f6DqUwBuxPVNX83DHZZc-mX9NA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft
Manifest number:          023F
Signing time:             Fri 31 Jan 2025 01:57:52 +0000
Manifest this update:     Fri 31 Jan 2025 01:57:52 +0000
Manifest next update:     Fri 07 Feb 2025 01:57:52 +0000
Files and hashes:         1: 6f6DqUwBuxPVNX83DHZZc-mX9NA.crl (hash: J8XcKpsiWCrxIjsTIu4zk9Bm4vfEAhme16/Ac2eZEks=)
                          2: 23803F800C9C11ED82C8955BC4F9AE02.roa (hash: Ny3HF6QiqyIBzWklmUHinHzimYgWUBmeHFmleIQ1/IQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 580 (0x244)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BDAE/serialNumber=E9FE83A94C01BB13D5357F370C765973E997F4D0
        Validity
            Not Before: Jan 31 01:57:52 2025 GMT
            Not After : Feb  7 01:57:52 2025 GMT
        Subject: CN=679c2e20-08b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:5d:95:c0:82:26:63:5f:28:58:b0:bc:26:41:
                    c2:d5:e1:6c:78:0d:d7:cb:11:99:c6:fb:2c:31:c9:
                    7d:2c:dc:6b:22:28:ba:71:f3:12:33:57:db:99:3b:
                    6b:6e:0e:8c:43:8d:99:d7:0f:18:40:45:a2:ea:7d:
                    eb:b3:ee:f8:75:51:9d:df:b3:64:a9:7f:27:9f:67:
                    2e:4c:7d:9d:e3:c9:f3:d5:e5:8d:93:df:e3:f1:bb:
                    4f:85:73:68:b9:78:64:a1:88:92:52:e8:63:e8:22:
                    fa:59:fa:7e:a0:c9:c9:ab:6b:7a:33:6c:cf:3b:af:
                    50:05:5f:2a:48:30:dc:5d:b0:0d:50:b3:b2:29:be:
                    3e:cc:4d:86:66:9e:fc:80:9c:cc:4d:99:ad:34:97:
                    5f:a8:3a:ef:1d:ab:c6:45:36:77:08:fe:75:b8:47:
                    21:68:c5:aa:6d:a7:ba:7a:c9:d2:c7:c0:6f:95:33:
                    59:8c:84:61:dd:3c:ec:8f:b6:a2:b3:e7:1e:bf:d1:
                    56:c8:fa:2d:96:2a:af:7a:57:6a:43:94:0b:0a:38:
                    2e:eb:4c:62:07:cf:13:7e:7e:62:75:4d:9a:ed:82:
                    78:1e:a1:b1:b4:f4:eb:66:03:ad:82:4a:2b:c4:0b:
                    98:a7:23:92:13:6c:04:c4:df:c9:62:6b:a0:f5:d5:
                    65:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:1F:5B:64:E9:AF:32:B1:BB:07:43:D2:10:2D:A5:7A:25:A0:17:4E
            X509v3 Authority Key Identifier:
                keyid:E9:FE:83:A9:4C:01:BB:13:D5:35:7F:37:0C:76:59:73:E9:97:F4:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f6DqUwBuxPVNX83DHZZc-mX9NA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:1c:ce:72:da:6e:8c:34:34:8d:fb:14:7c:29:fe:4f:fd:17:
         37:00:0e:cc:af:23:30:0b:7a:a9:36:a3:b9:21:92:8f:6a:3b:
         f8:71:5d:ac:5a:9c:42:ba:f4:d1:4a:93:89:8a:5c:bf:5e:df:
         47:f8:de:04:a5:ef:57:75:fa:06:2c:fb:ba:c7:8f:da:34:e0:
         ab:b9:0c:4b:f1:e6:43:1a:37:6e:8c:23:52:46:94:82:eb:a1:
         30:6a:a8:ad:5c:45:87:65:a0:54:c7:f2:43:24:82:bd:76:32:
         b1:35:01:5c:d7:65:3d:54:2d:ca:49:7c:3f:07:dd:97:3f:d9:
         78:12:fc:11:fc:ff:55:b2:c1:3d:aa:1a:c7:f2:6e:79:d9:29:
         c5:b3:1b:d8:ee:ce:5b:2d:1b:c0:ae:8e:f5:39:2f:aa:10:7a:
         e6:f0:73:b2:48:d3:da:b2:be:90:9d:65:fb:12:5a:78:ab:d8:
         16:b6:88:f8:d5:1b:33:a5:32:3f:93:ee:95:8f:61:3a:23:ab:
         9e:17:22:e8:16:56:8e:24:71:2a:4c:b4:5b:99:80:2a:44:dd:
         ad:58:50:4f:43:ab:3d:5a:0d:8d:49:8f:97:1b:14:a4:95:60:
         14:03:d3:a7:fc:79:5e:29:a4:7e:13:55:46:3c:3f:6c:fb:56:
         a1:cc:af:77
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUJEQUUxMTAvBgNVBAUTKEU5RkU4M0E5NEMwMUJCMTNENTM1N0YzNzBDNzY1OTcz
RTk5N0Y0RDAwHhcNMjUwMTMxMDE1NzUyWhcNMjUwMjA3MDE1NzUyWjAYMRYwFAYD
VQQDEw02NzljMmUyMC0wOGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4l2VwIImY18oWLC8JkHC1eFseA3XyxGZxvssMcl9LNxrIii6cfMSM1fbmTtr
bg6MQ42Z1w8YQEWi6n3rs+74dVGd37NkqX8nn2cuTH2d48nz1eWNk9/j8btPhXNo
uXhkoYiSUuhj6CL6Wfp+oMnJq2t6M2zPO69QBV8qSDDcXbANULOyKb4+zE2GZp78
gJzMTZmtNJdfqDrvHavGRTZ3CP51uEchaMWqbae6esnSx8BvlTNZjIRh3Tzsj7ai
s+cev9FWyPotliqveldqQ5QLCjgu60xiB88Tfn5idU2a7YJ4HqGxtPTrZgOtgkor
xAuYpyOSE2wExN/JYmug9dVlBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNcfW2Tp
rzKxuwdD0hAtpXoloBdOMB8GA1UdIwQYMBaAFOn+g6lMAbsT1TV/Nwx2WXPpl/TQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkRBRS9FOEYxMjk5ODBD
OTUxMUVEODg2MjU2MzRDNEY5QUUwMi82ZjZEcVV3QnV4UFZOWDgzREhaWmMtbVg5
TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZmNkRxVXdCdXhQVk5YODNESFpaYy1tWDlOQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QkRBRS9FOEYxMjk5ODBDOTUxMUVEODg2MjU2MzRDNEY5QUUwMi82ZjZEcVV3QnV4
UFZOWDgzREhaWmMtbVg5TkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBmHM5y2m6MNDSN+xR8Kf5P/Rc3AA7MryMwC3qpNqO5IZKPajv4cV2s
WpxCuvTRSpOJily/Xt9H+N4Epe9XdfoGLPu6x4/aNOCruQxL8eZDGjdujCNSRpSC
66EwaqitXEWHZaBUx/JDJIK9djKxNQFc12U9VC3KSXw/B92XP9l4EvwR/P9VssE9
qhrH8m552SnFsxvY7s5bLRvAro71OS+qEHrm8HOySNPasr6QnWX7Elp4q9gWtoj4
1RszpTI/k+6Vj2E6I6ueFyLoFlaOJHEqTLRbmYAqRN2tWFBPQ6s9Wg2NSY+XGxSk
lWAUA9On/HleKaR+E1VGPD9s+1ahzK93
-----END CERTIFICATE-----