Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft
File:                     mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft (raw, json)
Hash identifier:          8ExZogd9CN3kAx7cIIA4a4AHDvsZBoofWR7yKgudR7Q=
Subject key identifier:   2B:C3:A7:3F:DF:32:4C:DF:F8:CA:0C:2A:EB:8C:11:78:E0:A2:B0:94
Authority key identifier: 9B:1F:3A:83:5F:B4:25:55:76:81:CF:D6:67:6B:72:1B:E7:A2:38:C5
Certificate issuer:       /CN=A9121348/serialNumber=9B1F3A835FB425557681CFD6676B721BE7A238C5
Certificate serial:       0278
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx86g1-0JVV2gc_WZ2tyG-eiOMU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft
Manifest number:          0274
Signing time:             Fri 31 Jan 2025 01:43:50 +0000
Manifest this update:     Fri 31 Jan 2025 01:43:49 +0000
Manifest next update:     Fri 07 Feb 2025 01:43:49 +0000
Files and hashes:         1: mx86g1-0JVV2gc_WZ2tyG-eiOMU.crl (hash: 9hvT6uD/Q+LC+RBNLHsP8gc0Qo78Y0v+AYGQuKwwj4M=)
                          2: 3E251228F81711ECBF85A038C4F9AE02.roa (hash: UgAj2CxLYzSG9xICUOGQnuTvII7f5bwTJDXx/aWs0m0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 632 (0x278)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121348/serialNumber=9B1F3A835FB425557681CFD6676B721BE7A238C5
        Validity
            Not Before: Jan 31 01:43:49 2025 GMT
            Not After : Feb  7 01:43:49 2025 GMT
        Subject: CN=679c2ad5-8af5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b1:6e:28:ff:a3:0f:f9:07:d1:82:96:35:7c:
                    c7:0d:f7:69:10:df:48:8b:19:77:6d:56:e1:b2:23:
                    26:e1:1b:ea:16:c3:72:71:29:2c:31:c7:78:91:7a:
                    77:63:5b:a7:15:8b:a1:60:b4:7a:ef:f3:69:02:9f:
                    3a:dc:63:d1:0b:dd:9e:53:24:99:0f:8f:15:31:bc:
                    4a:e6:af:b9:f2:0d:c6:c3:d6:86:31:60:e1:b2:a2:
                    ad:fa:8c:4c:db:ee:22:b4:a0:85:fd:65:24:12:38:
                    3e:3d:22:7f:c1:f4:02:8f:1c:bb:9f:4a:ca:9e:87:
                    bc:f1:30:b2:79:9c:fb:dd:cd:ee:b9:47:76:c2:d1:
                    b7:b1:b9:bc:35:01:51:26:a0:50:3f:da:fa:2e:aa:
                    47:de:bb:95:cd:90:4d:3f:55:ac:40:63:dc:f1:08:
                    b0:31:50:b1:3b:b8:02:56:92:d8:f3:f4:61:03:58:
                    55:8a:44:ff:63:7d:f5:07:db:c4:5f:88:fe:32:2a:
                    d0:ca:1a:76:f3:5c:c5:4e:f1:a5:db:2c:27:2a:8e:
                    46:eb:a9:8a:c3:74:8f:67:74:f6:2c:d1:65:9e:45:
                    d4:d3:3d:68:3b:80:87:79:24:e4:39:b9:13:42:e6:
                    92:d6:a8:e7:13:19:52:20:00:2d:85:e6:25:53:a5:
                    7c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:C3:A7:3F:DF:32:4C:DF:F8:CA:0C:2A:EB:8C:11:78:E0:A2:B0:94
            X509v3 Authority Key Identifier:
                keyid:9B:1F:3A:83:5F:B4:25:55:76:81:CF:D6:67:6B:72:1B:E7:A2:38:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx86g1-0JVV2gc_WZ2tyG-eiOMU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:e2:f7:e2:dd:a0:de:d6:af:e5:b0:bd:85:c2:8b:ac:af:7b:
         60:b8:09:3c:f1:b7:41:68:c6:0d:9b:dc:e0:14:b5:9f:08:22:
         b3:9f:90:1d:33:9a:c4:7c:5d:df:d9:cc:d2:34:9f:e3:a2:12:
         b6:84:fa:b1:28:63:cd:8f:da:1e:92:79:25:26:dc:30:f8:e0:
         70:b7:49:be:02:e1:01:8c:68:09:f5:94:13:aa:f9:3a:32:30:
         8b:83:cb:8a:be:a2:c8:98:73:06:64:21:b3:5f:25:dc:5f:0a:
         26:55:7e:0e:8d:ec:2d:c5:41:b6:d1:ba:be:c9:5e:7a:c5:42:
         7b:81:f6:4f:81:36:96:3e:e5:db:2b:d2:72:01:5f:b5:d7:4f:
         d5:3d:3a:1d:c1:6c:20:f4:2b:17:86:29:44:3e:85:ea:4b:42:
         d3:60:09:91:1d:0a:31:3d:64:85:8b:ea:ca:a7:02:15:f1:42:
         09:95:36:92:a5:1e:39:d8:c4:f3:e9:94:68:76:0d:a2:c1:b9:
         4d:86:d6:3f:b8:46:64:37:86:bb:01:9f:7c:1c:d7:08:a9:57:
         ac:c6:70:eb:3d:25:d9:11:99:49:72:ac:c2:a9:79:af:19:43:
         69:dc:ad:da:78:e3:48:56:7a:e6:6e:82:62:a5:1e:80:9a:41:
         53:de:bd:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----