Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft
File:                     B6YH3KkzMh_3j-xozXpMFJVDel8.mft (raw, json)
Hash identifier:          xx5GTF8Xtbu18+nd/ZRQuJU1zC+aqbfA6f3X1x9uWXU=
Subject key identifier:   E1:59:4A:83:1B:85:4A:B7:6F:F9:6C:55:E3:9E:D2:36:61:11:D1:E6
Authority key identifier: 07:A6:07:DC:A9:33:32:1F:F7:8F:EC:68:CD:7A:4C:14:95:43:7A:5F
Certificate issuer:       /CN=A9129DCB/serialNumber=07A607DCA933321FF78FEC68CD7A4C1495437A5F
Certificate serial:       096C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft
Manifest number:          095E
Signing time:             Thu 30 Jan 2025 20:18:01 +0000
Manifest this update:     Thu 30 Jan 2025 20:18:00 +0000
Manifest next update:     Thu 06 Feb 2025 20:18:00 +0000
Files and hashes:         1: B6YH3KkzMh_3j-xozXpMFJVDel8.crl (hash: kIu12Wa69KygDE0wZukoBH7gMGspcmN0wnjOy3CrX8Y=)
                          2: BAA6E77E852D11ED9A1A8D47C4F9AE02.roa (hash: LpYZeCMqtoq3Zi6VrSOzNbUcfWQzSLEFLO1bEbqVHyo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2412 (0x96c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129DCB/serialNumber=07A607DCA933321FF78FEC68CD7A4C1495437A5F
        Validity
            Not Before: Jan 30 20:18:00 2025 GMT
            Not After : Feb  6 20:18:00 2025 GMT
        Subject: CN=679bde78-dfc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5f:24:ca:8d:c8:f4:1a:33:c8:ad:49:d5:f5:
                    ee:a2:a2:b4:6f:37:cf:07:48:45:fc:d6:c9:70:71:
                    c1:df:cd:b5:95:b6:8a:45:53:a0:80:d0:8c:26:28:
                    db:b1:88:13:b6:d0:c1:ad:59:57:a8:87:d7:26:01:
                    8a:bc:0b:56:fb:98:b0:23:98:73:db:53:5d:c7:4d:
                    72:c5:a8:49:5e:63:ba:41:20:a9:bb:4f:b7:61:0c:
                    a6:de:de:a9:b0:4e:b4:22:53:86:4e:de:c6:a6:bf:
                    b0:e4:70:bb:59:78:ea:81:86:f4:eb:3c:bd:58:67:
                    26:b4:31:4b:e2:e0:58:92:fc:33:3e:98:71:9c:d0:
                    1e:23:37:7c:69:38:e4:d9:df:6d:ad:37:71:8e:2d:
                    7b:34:d9:21:85:c4:bf:c6:99:95:ab:21:87:f2:25:
                    5a:f5:07:5b:06:1d:10:b6:51:c6:86:56:b1:0b:79:
                    97:8f:3d:7a:78:9f:44:f5:7c:2d:ee:7b:7e:c0:af:
                    da:a1:51:75:7e:63:02:66:e9:f9:4c:a0:93:95:9f:
                    50:7d:ae:52:b1:7e:62:c3:d5:2e:18:9a:9d:02:5e:
                    f7:25:ce:7a:82:e1:a5:bb:2b:49:08:12:fb:f2:73:
                    cc:18:42:68:f1:74:4c:fb:b1:43:61:79:bc:61:75:
                    e3:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:59:4A:83:1B:85:4A:B7:6F:F9:6C:55:E3:9E:D2:36:61:11:D1:E6
            X509v3 Authority Key Identifier:
                keyid:07:A6:07:DC:A9:33:32:1F:F7:8F:EC:68:CD:7A:4C:14:95:43:7A:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:1e:de:b3:91:d4:c5:c1:ad:cb:4d:d5:8a:f1:1e:8e:da:dc:
         dd:5e:7d:2a:2a:6c:72:b1:3f:e2:de:44:05:f6:75:df:7f:1c:
         64:42:6c:b4:41:69:60:04:b2:ca:37:cf:d2:f8:29:3c:7a:0f:
         2e:8e:75:9e:92:07:d0:b2:ae:e2:e6:90:dd:31:69:c4:ab:ef:
         93:b9:8b:ff:1f:d4:42:59:78:95:d8:ef:82:c2:aa:92:7b:35:
         12:61:17:e3:28:19:03:06:7f:be:15:aa:b7:ae:52:3a:3a:4b:
         91:53:ef:f8:28:a6:8e:50:7b:dc:0b:6a:16:27:f9:c2:74:44:
         cf:75:4b:52:65:e3:af:ca:82:aa:d8:fd:2d:86:0c:f7:f5:b3:
         14:2a:80:b3:e9:3e:d6:60:13:16:d6:f9:ef:84:fc:41:9e:62:
         9a:ad:cd:9e:30:c9:aa:4d:ad:a8:a8:db:0c:1b:1c:6d:48:51:
         7f:ea:35:62:fc:7c:67:45:a8:25:4f:66:cd:bc:40:a2:c4:3c:
         08:1c:f0:9d:35:cc:22:aa:8d:27:13:c1:73:fd:09:89:7f:25:
         64:f5:f6:ee:0a:49:c1:6b:68:38:15:75:c4:af:37:6c:56:a8:
         78:a7:62:7d:f6:bc:0f:14:28:33:a7:d4:62:d8:c9:6a:07:5a:
         1f:65:b1:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----