Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft
File:                     pxA_0z9simRI_GOUCql9k_gfgQU.mft (raw, json)
Hash identifier:          aMZWsPxMAJgpf4f/DvqoGXYMuhWyCbKlq+8fX3YPjE0=
Subject key identifier:   09:1B:29:1C:8D:C4:61:C7:18:FB:5C:55:DF:30:46:63:4C:9C:B1:FC
Authority key identifier: A7:10:3F:D3:3F:6C:8A:64:48:FC:63:94:0A:A9:7D:93:F8:1F:81:05
Certificate issuer:       /CN=A9126D40/serialNumber=A7103FD33F6C8A6448FC63940AA97D93F81F8105
Certificate serial:       0506
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pxA_0z9simRI_GOUCql9k_gfgQU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft
Manifest number:          0502
Signing time:             Thu 30 Jan 2025 23:39:56 +0000
Manifest this update:     Thu 30 Jan 2025 23:39:55 +0000
Manifest next update:     Thu 06 Feb 2025 23:39:55 +0000
Files and hashes:         1: pxA_0z9simRI_GOUCql9k_gfgQU.crl (hash: cg5Oo03YSmPnHcqAff4bFrRrKW9pBZJ3b9v8pPYCNyI=)
                          2: 5B0A7AFCF3F611EB8DD81585C4F9AE02.roa (hash: mmb+6qMWLAl/o5ujhFGq4lHoA5XfllDMtxdPhnJR8HM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1286 (0x506)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126D40/serialNumber=A7103FD33F6C8A6448FC63940AA97D93F81F8105
        Validity
            Not Before: Jan 30 23:39:55 2025 GMT
            Not After : Feb  6 23:39:55 2025 GMT
        Subject: CN=679c0dcc-2f0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:dd:c7:99:4a:af:ad:f7:69:71:fa:25:ec:25:
                    2a:58:15:90:88:ab:fe:8d:d5:0e:d1:da:a8:fb:cb:
                    05:ab:33:cf:51:2f:c9:0e:e8:e8:ee:14:c6:de:48:
                    b4:f5:ca:30:35:7a:ba:07:58:a6:99:4a:d4:0a:b7:
                    ad:63:e5:06:47:78:35:15:7f:92:8d:9b:2f:f1:fb:
                    a5:e8:7c:bc:9d:a4:b6:28:15:3b:af:45:11:9a:c8:
                    d8:15:13:de:02:17:13:fb:74:96:5f:27:61:17:6d:
                    e9:26:e2:86:85:f1:ec:2c:08:45:9b:da:cb:69:de:
                    9f:a3:84:4f:5e:6c:f8:d9:0d:b2:05:83:b6:52:70:
                    c6:89:fe:8c:36:68:5a:3a:fe:8a:c5:6d:f3:97:46:
                    3d:f9:f5:f8:ff:1c:a2:5a:92:9e:c8:dc:71:a6:cd:
                    4f:df:52:c7:23:d8:f2:f9:ab:09:a1:8a:a7:41:2d:
                    78:07:2d:96:8d:2d:f3:d8:cf:d2:14:20:e6:2a:ee:
                    a1:5f:bf:d6:c7:93:0b:ce:ba:65:93:c3:60:b0:42:
                    78:83:ae:ce:b9:97:9b:36:43:65:b1:b0:19:6b:ac:
                    38:ad:42:47:c2:60:7d:19:25:64:a8:af:c0:f1:72:
                    70:89:8d:83:01:e7:fa:35:72:03:c2:fa:e6:03:ea:
                    8e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:1B:29:1C:8D:C4:61:C7:18:FB:5C:55:DF:30:46:63:4C:9C:B1:FC
            X509v3 Authority Key Identifier:
                keyid:A7:10:3F:D3:3F:6C:8A:64:48:FC:63:94:0A:A9:7D:93:F8:1F:81:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pxA_0z9simRI_GOUCql9k_gfgQU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:66:63:64:07:12:56:42:29:b8:15:6b:52:15:60:30:90:3d:
         1c:a9:37:3b:bd:46:13:82:08:5b:23:0a:74:f3:4b:dd:1c:4a:
         89:bd:0a:0b:07:6f:fa:bc:67:6d:b8:c5:20:5e:bf:d4:29:58:
         d0:0a:68:b6:92:9d:d6:a0:4c:36:db:20:ac:06:d8:20:38:65:
         4c:7b:38:f8:95:05:a4:16:36:7b:a3:8b:69:cf:2a:a1:9d:a5:
         33:e1:1e:1f:a6:ad:cb:26:57:4b:9b:3c:fb:2f:ae:d8:13:8f:
         a3:f2:6f:30:6c:80:af:5f:8d:b5:8d:29:98:19:0b:1c:d2:76:
         fa:0a:fe:02:65:06:7a:e0:5c:ed:b4:9e:88:11:39:cc:29:f7:
         98:7f:c5:04:70:0c:33:ed:97:20:64:99:f4:20:44:76:d1:38:
         d3:2c:7a:ee:b6:f1:e7:ae:2c:79:95:8b:16:7c:83:fa:2f:73:
         57:33:57:57:e7:d3:66:3f:23:2a:d5:53:21:9f:82:08:60:80:
         86:e5:82:22:d9:e8:de:02:17:27:c5:e5:66:3a:bf:70:dc:f0:
         2e:34:d1:5a:67:f8:aa:92:6f:f7:9c:47:9a:c8:ff:00:d1:e0:
         5c:fe:a3:43:14:0c:36:1d:6d:0b:7a:ac:bb:42:7a:fa:2e:86:
         2d:2b:6a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----