Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft
File:                     Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft (raw, json)
Hash identifier:          gNsBv3k2dvQi2kN+7xe298oiG+aX8UCmj5EJVMrJves=
Subject key identifier:   8A:06:2F:2A:C5:30:D9:13:E8:87:C5:6C:8E:2F:32:D1:16:BB:55:95
Authority key identifier: 42:4E:0A:38:43:F3:FA:1F:44:B6:AF:2E:F3:EE:11:81:5C:4B:52:09
Certificate issuer:       /CN=A912C8AF/serialNumber=424E0A3843F3FA1F44B6AF2EF3EE11815C4B5209
Certificate serial:       06E9
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft
Manifest number:          06E0
Signing time:             Thu 30 Jan 2025 19:50:45 +0000
Manifest this update:     Thu 30 Jan 2025 19:50:44 +0000
Manifest next update:     Thu 06 Feb 2025 19:50:44 +0000
Files and hashes:         1: Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl (hash: xwmBtuQw6o4pub+PlKjGxQV2M9Epq8qZ4QCG3xDa87U=)
                          2: 510308503E8211EBA910FF57C4F9AE02.roa (hash: wuKDqTU6tn7/5jHE2t79EVQ5kpnRehQRwOUq9/41axU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1769 (0x6e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C8AF/serialNumber=424E0A3843F3FA1F44B6AF2EF3EE11815C4B5209
        Validity
            Not Before: Jan 30 19:50:44 2025 GMT
            Not After : Feb  6 19:50:44 2025 GMT
        Subject: CN=679bd815-5d1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:6c:f6:fa:ec:92:a6:56:bf:97:f9:41:b1:e1:
                    c2:f7:83:78:4e:fb:f7:01:fd:44:ef:8e:80:2e:f9:
                    f3:4a:a4:2e:91:c9:f0:fb:11:df:40:95:30:c8:07:
                    18:31:09:6b:96:cb:55:52:e5:31:8a:8a:9e:4b:c7:
                    0a:e9:d1:88:60:dd:5e:38:32:48:20:39:dd:3c:dd:
                    5d:64:a6:bc:18:23:97:93:31:d9:ee:62:06:ee:96:
                    f0:88:05:83:1b:f7:03:5b:4a:67:14:3f:09:4b:49:
                    ec:fd:72:0d:c6:a5:ed:10:09:41:6a:49:96:36:a0:
                    0b:ce:35:c7:2e:68:1e:f1:2f:9c:e3:4d:82:1f:25:
                    92:ab:bc:f0:16:88:a6:77:50:0c:b6:c6:c0:f8:1b:
                    23:40:c3:3c:fc:0c:88:b7:06:97:c0:c3:a2:00:50:
                    71:59:19:bf:7f:11:01:19:3c:4d:7c:8d:12:58:c9:
                    d1:06:18:32:8a:1a:36:ff:42:00:de:0c:01:fe:55:
                    11:6a:28:c3:c6:7e:f0:ee:72:1b:c3:ae:ac:ab:d8:
                    65:75:62:04:0c:86:52:d0:c8:2c:13:3d:f6:87:f4:
                    15:5b:ca:d7:bb:88:ac:4f:f8:35:0f:c1:0a:16:6c:
                    4c:17:1f:95:e0:6b:7c:35:50:b8:e3:f5:3f:76:1d:
                    ef:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:06:2F:2A:C5:30:D9:13:E8:87:C5:6C:8E:2F:32:D1:16:BB:55:95
            X509v3 Authority Key Identifier:
                keyid:42:4E:0A:38:43:F3:FA:1F:44:B6:AF:2E:F3:EE:11:81:5C:4B:52:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:79:b6:9f:8e:98:e2:12:79:bb:1a:49:dc:e0:94:e8:2e:a5:
         1c:5c:ec:b8:91:38:5e:6f:b2:f7:47:9c:a4:99:c9:dc:c1:9a:
         d5:62:44:5b:97:cd:fd:a0:fe:d5:60:04:4d:a0:9b:d2:8c:98:
         65:80:fa:e2:26:3c:0b:e4:36:5e:ab:8d:18:38:13:e4:a9:96:
         a4:4c:ee:3a:a3:27:a8:94:71:77:a8:3b:5c:30:f3:07:f7:7c:
         72:22:fa:ce:38:81:44:eb:15:14:5d:60:20:d0:fa:83:f6:45:
         f2:41:eb:01:95:0f:c2:3e:5b:33:dc:29:a8:8e:f1:e6:54:92:
         51:7d:e0:52:13:b8:99:86:33:28:fb:54:f4:c7:06:e1:13:d8:
         78:fd:3f:1c:16:47:46:09:d1:be:f7:d2:e5:db:70:41:4e:55:
         4e:fb:82:59:56:f6:4c:78:62:0b:e9:df:01:32:d3:63:75:b4:
         c0:26:ab:66:f0:61:74:37:9e:0a:1c:7b:65:ac:05:62:5e:3a:
         c4:21:d4:f1:87:1e:df:47:dc:8e:ba:53:d4:d0:7e:4e:92:8e:
         fd:0f:2c:83:a6:34:bb:f3:c6:77:b8:f7:b3:a7:1d:4f:46:27:
         34:9a:c8:37:33:ab:49:60:79:19:1f:74:eb:1a:b2:bd:0b:78:
         31:35:ac:41
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBukwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkM4QUYxMTAvBgNVBAUTKDQyNEUwQTM4NDNGM0ZBMUY0NEI2QUYyRUYzRUUxMTgx
NUM0QjUyMDkwHhcNMjUwMTMwMTk1MDQ0WhcNMjUwMjA2MTk1MDQ0WjAYMRYwFAYD
VQQDEw02NzliZDgxNS01ZDFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7Gz2+uySpla/l/lBseHC94N4Tvv3Af1E746ALvnzSqQukcnw+xHfQJUwyAcY
MQlrlstVUuUxioqeS8cK6dGIYN1eODJIIDndPN1dZKa8GCOXkzHZ7mIG7pbwiAWD
G/cDW0pnFD8JS0ns/XINxqXtEAlBakmWNqALzjXHLmge8S+c402CHyWSq7zwFoim
d1AMtsbA+BsjQMM8/AyItwaXwMOiAFBxWRm/fxEBGTxNfI0SWMnRBhgyiho2/0IA
3gwB/lURaijDxn7w7nIbw66sq9hldWIEDIZS0MgsEz32h/QVW8rXu4isT/g1D8EK
FmxMFx+V4Gt8NVC44/U/dh3vRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIoGLyrF
MNkT6IfFbI4vMtEWu1WVMB8GA1UdIwQYMBaAFEJOCjhD8/ofRLavLvPuEYFcS1IJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhBRi9FRTBBRUVDQTNF
ODExMUVCOUFCRDkyMEZDNEY5QUUwMi9RazRLT0VQei1oOUV0cTh1OC00UmdWeExV
Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL1FrNEtPRVB6LWg5RXRxOHU4LTRSZ1Z4TFVnay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QzhBRi9FRTBBRUVDQTNFODExMUVCOUFCRDkyMEZDNEY5QUUwMi9RazRLT0VQei1o
OUV0cTh1OC00UmdWeExVZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCMebafjpjiEnm7Gknc4JToLqUcXOy4kTheb7L3R5ykmcncwZrVYkRb
l839oP7VYARNoJvSjJhlgPriJjwL5DZeq40YOBPkqZakTO46oyeolHF3qDtcMPMH
93xyIvrOOIFE6xUUXWAg0PqD9kXyQesBlQ/CPlsz3CmojvHmVJJRfeBSE7iZhjMo
+1T0xwbhE9h4/T8cFkdGCdG+99Ll23BBTlVO+4JZVvZMeGIL6d8BMtNjdbTAJqtm
8GF0N54KHHtlrAViXjrEIdTxhx7fR9yOulPU0H5Oko79DyyDpjS788Z3uPezpx1P
Ric0msg3M6tJYHkZH3TrGrK9C3gxNaxB
-----END CERTIFICATE-----