Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125C22/FACCBC5C7FAD11EB977B5335C4F9AE02/xwtOBHyqc3ckuJ1YTbXAwahY0o4.mft
File:                     xwtOBHyqc3ckuJ1YTbXAwahY0o4.mft (raw, json)
Hash identifier:          a6J1mV/fs2Y4FWDCGTP2pAWJVtxm0jgHJjg1Qti5gig=
Subject key identifier:   AA:89:C6:3E:8B:3B:C9:1E:EF:4A:66:3F:38:8E:35:CD:DA:7F:EE:92
Authority key identifier: C7:0B:4E:04:7C:AA:73:77:24:B8:9D:58:4D:B5:C0:C1:A8:58:D2:8E
Certificate issuer:       /CN=A9125C22/serialNumber=C70B4E047CAA737724B89D584DB5C0C1A858D28E
Certificate serial:       0630
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xwtOBHyqc3ckuJ1YTbXAwahY0o4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125C22/FACCBC5C7FAD11EB977B5335C4F9AE02/xwtOBHyqc3ckuJ1YTbXAwahY0o4.mft
Manifest number:          062C
Signing time:             Thu 30 Jan 2025 22:36:33 +0000
Manifest this update:     Thu 30 Jan 2025 22:36:33 +0000
Manifest next update:     Thu 06 Feb 2025 22:36:33 +0000
Files and hashes:         1: xwtOBHyqc3ckuJ1YTbXAwahY0o4.crl (hash: R2xMogfV2kOVKjURC1ZLS+2ESWUfCfcUHzfVtcxnzlA=)
                          2: 485D694A454911EEB8718378C4F9AE02.roa (hash: DpNVsF8S1R1VahxgyAnkQsdhv9Y/GOwsBJQM35rMSJ0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1584 (0x630)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125C22/serialNumber=C70B4E047CAA737724B89D584DB5C0C1A858D28E
        Validity
            Not Before: Jan 30 22:36:33 2025 GMT
            Not After : Feb  6 22:36:33 2025 GMT
        Subject: CN=679bfef1-4621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:62:b6:99:ab:5c:e1:3f:5f:bb:eb:c5:83:f9:
                    d6:f2:20:ae:4c:da:ff:21:08:00:f6:c6:e7:34:e4:
                    f4:63:11:c6:1c:80:c4:39:f7:69:29:43:c1:aa:31:
                    01:ca:c4:ee:92:09:2e:eb:a2:25:48:c4:18:44:bd:
                    17:41:4b:d6:05:a1:75:4f:91:b7:9d:3f:2f:e3:9a:
                    df:f3:5d:7d:35:4b:f5:68:43:bd:5e:e2:74:3e:c7:
                    a2:d6:5c:90:0d:22:cc:a6:65:36:73:ae:eb:98:09:
                    90:83:5c:70:5c:07:a8:e9:c1:4c:a0:25:c1:5e:29:
                    9b:2e:2e:8e:48:f2:03:70:10:6a:48:e4:83:4e:97:
                    a5:f7:a9:71:b3:97:17:6f:b0:00:80:ac:87:07:2a:
                    7f:91:80:1c:63:d2:20:39:07:65:d9:f8:5f:ee:cb:
                    49:e5:4e:e3:b5:f6:0a:d2:97:5f:60:bd:cc:15:70:
                    c1:07:e6:2e:04:a8:db:5c:50:d3:a0:3f:3e:7f:c4:
                    b6:45:3a:bf:6d:1c:13:c6:fe:3c:4b:35:db:4e:ed:
                    82:03:f3:0d:89:ea:31:6d:93:86:1c:12:bc:1d:09:
                    b1:56:aa:1b:82:dd:1a:97:0c:fe:ee:52:5a:f1:fd:
                    2f:d5:fe:c1:89:24:3a:17:e5:aa:2d:7b:16:61:0f:
                    4a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:89:C6:3E:8B:3B:C9:1E:EF:4A:66:3F:38:8E:35:CD:DA:7F:EE:92
            X509v3 Authority Key Identifier:
                keyid:C7:0B:4E:04:7C:AA:73:77:24:B8:9D:58:4D:B5:C0:C1:A8:58:D2:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125C22/FACCBC5C7FAD11EB977B5335C4F9AE02/xwtOBHyqc3ckuJ1YTbXAwahY0o4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xwtOBHyqc3ckuJ1YTbXAwahY0o4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125C22/FACCBC5C7FAD11EB977B5335C4F9AE02/xwtOBHyqc3ckuJ1YTbXAwahY0o4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:47:7e:e6:06:dd:81:d5:60:c0:6f:d9:d7:e3:57:85:cd:ef:
         c3:c0:e3:ec:cc:5e:58:01:78:e8:38:49:57:9c:73:c6:a5:e9:
         ab:48:9b:23:0a:bd:a9:6e:9d:58:de:9f:72:16:1b:64:c9:9a:
         fa:80:df:41:ea:73:a1:eb:b3:94:7e:75:31:87:d3:4d:cb:c5:
         ac:11:a9:34:62:63:16:ba:e0:26:36:26:e2:9f:5b:08:30:cc:
         b0:f5:58:f2:2c:3e:57:1d:47:e5:2e:13:70:e1:6d:eb:96:cd:
         db:b2:34:0a:16:f9:77:bb:4c:8e:af:7a:e6:1a:3e:15:91:75:
         16:9f:1d:66:44:a1:64:2f:a1:30:84:17:0b:ea:29:36:8d:0d:
         9f:31:58:39:cb:b9:5f:6b:90:3a:2f:65:ef:0f:dd:e3:c8:9a:
         7a:48:01:18:7d:d4:df:0a:3f:de:d6:f5:e8:11:d1:19:b4:bc:
         2b:dd:e1:02:aa:60:be:7a:83:2b:17:68:1a:0b:24:87:32:84:
         44:b3:a2:57:8c:2a:8a:9a:e7:ca:7d:85:9b:b1:14:9d:81:df:
         ed:1e:9a:df:0b:4a:16:0b:dd:e2:ed:2d:09:a2:8c:f6:40:b0:
         54:e9:3b:c0:00:74:42:0a:f4:ce:9b:6f:38:c5:b3:c8:a8:81:
         9b:4e:47:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----