Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.mft
File:                     trtjZLzkhc7AbTOZSRWHpIJZHLw.mft (raw, json)
Hash identifier:          KFLucNEZyE5fHpRoZG18d/YEs/4GBRgTlbsu85B2s64=
Subject key identifier:   C4:55:86:18:EF:05:BB:53:57:56:8C:64:29:89:28:40:11:16:96:D3
Authority key identifier: B6:BB:63:64:BC:E4:85:CE:C0:6D:33:99:49:15:87:A4:82:59:1C:BC
Certificate issuer:       /CN=A9123B8B/serialNumber=B6BB6364BCE485CEC06D3399491587A482591CBC
Certificate serial:       0911
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/trtjZLzkhc7AbTOZSRWHpIJZHLw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.mft
Manifest number:          0908
Signing time:             Thu 30 Jan 2025 20:26:21 +0000
Manifest this update:     Thu 30 Jan 2025 20:26:20 +0000
Manifest next update:     Thu 06 Feb 2025 20:26:20 +0000
Files and hashes:         1: trtjZLzkhc7AbTOZSRWHpIJZHLw.crl (hash: RaYjsHAwSz7faw64JDkR3AvhvXzxlBPB+iS1foTqhFY=)
                          2: 25295764036811ED9D8E5F3EC4F9AE02.roa (hash: EalLcrhJ2pf9J6rJzGCAE06JbZRtA/SwMcMPpTqGCFo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2321 (0x911)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123B8B/serialNumber=B6BB6364BCE485CEC06D3399491587A482591CBC
        Validity
            Not Before: Jan 30 20:26:20 2025 GMT
            Not After : Feb  6 20:26:20 2025 GMT
        Subject: CN=679be06c-045f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4b:fc:d0:db:86:15:ef:3a:87:2a:30:24:08:
                    ac:b9:86:b0:bd:3d:05:56:8a:aa:06:17:9a:58:98:
                    f4:44:95:a8:00:c0:3f:f6:7f:e1:2c:7e:c5:33:0f:
                    fa:62:47:d2:80:fc:69:47:57:c4:40:13:fd:7b:ec:
                    c9:60:c0:2c:5f:ca:6d:42:6d:e2:60:44:9f:09:bf:
                    d0:4c:e0:fb:85:3d:41:d2:58:8c:78:55:ad:2e:b3:
                    16:47:f1:a2:9a:d4:cd:09:6f:40:6b:63:02:eb:e7:
                    91:80:58:c6:c3:7b:dc:ff:70:5b:e8:63:54:ca:d8:
                    ee:ac:e7:9c:c6:4f:3b:fd:d6:27:f9:32:fb:01:a3:
                    fd:cd:79:07:e6:4a:62:e1:d3:38:50:69:ac:ad:49:
                    98:ce:d2:d1:e6:98:b9:8e:00:36:85:8b:e7:3f:c7:
                    ed:cf:45:07:35:ff:23:78:06:21:27:75:e5:2f:0b:
                    8f:ca:dc:6a:ed:24:74:91:7d:14:3a:c8:8a:2f:6e:
                    6a:da:e8:96:aa:dc:ef:1b:cf:46:2f:c5:c2:99:81:
                    52:23:97:46:5c:70:1a:a1:86:b5:b5:00:78:fa:05:
                    71:ee:2a:15:d6:77:c8:eb:79:f4:ed:a9:da:07:0f:
                    db:f4:38:04:57:e4:6b:b8:c3:c4:36:29:53:78:dc:
                    7b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:55:86:18:EF:05:BB:53:57:56:8C:64:29:89:28:40:11:16:96:D3
            X509v3 Authority Key Identifier:
                keyid:B6:BB:63:64:BC:E4:85:CE:C0:6D:33:99:49:15:87:A4:82:59:1C:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/trtjZLzkhc7AbTOZSRWHpIJZHLw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:91:1f:4f:23:9f:65:52:ad:7c:a9:37:bd:13:b1:be:f5:ba:
         f5:4b:3b:25:a5:6b:16:bd:4e:96:8d:c5:5d:46:ae:02:93:7d:
         88:4d:ad:7f:75:80:24:fc:17:87:f2:01:c4:bc:67:0a:0f:9d:
         a9:e7:ca:b7:ce:3e:05:62:3c:7a:94:67:20:77:dc:44:49:dd:
         a3:73:89:95:36:a8:5e:cd:91:d0:0d:89:c3:51:4c:55:a0:8a:
         f2:3e:e3:75:bc:8c:06:c9:d6:3c:2c:20:29:34:37:5b:1e:a7:
         2d:a0:e8:1c:35:a5:e8:d9:16:17:c4:ab:4a:b3:2b:92:a2:99:
         6a:0c:8c:0d:1f:50:7b:dd:5b:08:11:29:ad:58:c3:76:3f:d0:
         15:5f:dc:de:9b:0d:5e:e4:79:dd:71:d9:08:0d:af:cc:bd:0b:
         0a:53:81:94:8a:21:7e:24:38:49:85:1a:25:3b:f5:87:d3:58:
         87:79:57:85:74:76:6d:0b:09:b3:b7:74:0c:d4:b9:b0:a2:9e:
         70:06:fa:de:76:e8:b9:cb:1b:ed:93:ce:7c:76:bd:2b:6d:89:
         45:8b:e8:0e:bd:fc:91:47:7e:aa:1a:1c:ec:48:78:b2:00:14:
         ec:90:bc:d4:c0:64:35:a8:bf:9c:53:1e:89:62:8c:3d:84:94:
         db:45:59:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----