Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft
File:                     YmINYNuoUorqQhLM7bcpYTqZFVw.mft (raw, json)
Hash identifier:          Pi8uMlCVHK/xuFavH3PP7aT0IXj2VH8/iyWRCw8lsgU=
Subject key identifier:   AC:D0:7C:BF:BD:E2:CF:70:F9:62:B2:9F:7F:6C:68:CC:0C:20:A2:79
Authority key identifier: 62:62:0D:60:DB:A8:52:8A:EA:42:12:CC:ED:B7:29:61:3A:99:15:5C
Certificate issuer:       /CN=A912CDC5/serialNumber=62620D60DBA8528AEA4212CCEDB729613A99155C
Certificate serial:       0319
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YmINYNuoUorqQhLM7bcpYTqZFVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft
Manifest number:          0314
Signing time:             Thu 30 Jan 2025 22:38:18 +0000
Manifest this update:     Thu 30 Jan 2025 22:38:18 +0000
Manifest next update:     Thu 06 Feb 2025 22:38:18 +0000
Files and hashes:         1: YmINYNuoUorqQhLM7bcpYTqZFVw.crl (hash: XN/mXTUShrZ2aHPxZR2fEC3Cbauoy2uwhd8Zur3sAO0=)
                          2: C9E2B406804111EEA6703F81C4F9AE02.roa (hash: Y6irjrKKHKY/zWiKAS27Fm2Vi8M6r+kieeDoyEvMRvU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 793 (0x319)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CDC5/serialNumber=62620D60DBA8528AEA4212CCEDB729613A99155C
        Validity
            Not Before: Jan 30 22:38:18 2025 GMT
            Not After : Feb  6 22:38:18 2025 GMT
        Subject: CN=679bff5a-ce19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:35:42:e1:f7:d8:bd:0a:85:9b:f8:48:ca:16:
                    3f:a0:1e:49:bc:e3:49:c8:c0:56:19:3d:e1:a1:69:
                    01:7d:90:d6:85:1d:53:07:3f:f9:da:a7:1c:b2:6a:
                    c1:2d:10:4e:8e:41:79:1e:a6:d9:21:79:95:c8:c4:
                    f6:71:95:b4:a0:aa:b9:b1:07:69:ff:18:5e:fd:6f:
                    f9:cf:fc:5e:39:47:ba:f0:6b:3e:2f:c9:d0:9a:d0:
                    a1:b2:da:64:6a:fe:12:cb:46:a8:ac:34:17:ba:66:
                    67:ec:c8:89:54:08:0b:fd:8f:e5:a3:4f:9f:f7:27:
                    27:50:e8:f5:36:0a:e5:14:87:dc:0a:c6:1c:8e:6b:
                    b8:45:69:6f:5e:58:a8:01:46:01:31:a0:54:63:b7:
                    60:f0:68:89:ae:10:32:55:ce:4f:9e:ec:1f:cc:67:
                    4d:2b:4c:bd:ee:a3:4c:e4:4e:e3:95:fa:66:ef:46:
                    cd:d2:df:e4:e9:a0:41:f6:f3:bc:9f:d3:89:06:fe:
                    8f:1e:a1:1f:2e:fd:79:84:36:5a:e5:37:8a:30:bc:
                    b4:e1:94:2a:69:d5:15:f6:8a:d0:be:c9:42:bd:78:
                    e7:d6:7d:32:8d:21:3b:33:65:1d:50:18:31:84:10:
                    ff:94:68:f8:00:93:dc:33:17:b9:0d:b2:e1:dd:b8:
                    e8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:D0:7C:BF:BD:E2:CF:70:F9:62:B2:9F:7F:6C:68:CC:0C:20:A2:79
            X509v3 Authority Key Identifier:
                keyid:62:62:0D:60:DB:A8:52:8A:EA:42:12:CC:ED:B7:29:61:3A:99:15:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YmINYNuoUorqQhLM7bcpYTqZFVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:6c:23:25:d1:17:17:6f:e5:69:9d:5f:9a:4b:bf:07:03:ce:
         ec:4d:4a:34:28:33:5d:54:0f:21:6d:64:cd:7e:9c:78:35:7a:
         26:f9:e6:d2:31:9f:e6:20:f9:98:b5:79:b9:14:e0:39:ff:aa:
         03:b4:27:6d:c8:96:81:7d:a9:6a:51:6a:77:eb:6c:75:06:50:
         a2:28:23:b2:6a:42:4d:4a:fc:6d:db:bb:10:e8:9b:26:76:4a:
         26:d1:28:0b:e1:4c:05:b7:f7:2d:22:95:b8:ac:d7:4b:d4:be:
         2a:da:db:a6:93:d7:d4:af:c1:dc:31:03:16:29:fc:5a:20:b7:
         79:86:d9:cd:26:99:ab:77:c7:b6:5f:84:4a:a2:47:9d:50:8b:
         88:06:27:49:c8:03:6a:a1:62:20:8e:0e:ea:ec:a5:c4:9d:bb:
         21:cf:98:76:09:c0:2b:16:2d:41:bf:cd:54:c0:f6:00:df:de:
         7a:4d:fa:65:3d:77:e3:36:af:03:45:c1:cc:ed:61:b3:de:4b:
         86:0c:0b:d5:b7:88:24:22:ab:e6:b9:50:e7:da:b6:24:56:60:
         12:63:d2:da:68:86:9a:55:9b:ee:db:78:ce:30:5d:ae:e7:3a:
         7f:94:6c:8b:75:77:66:d5:2a:cb:8d:67:aa:a8:82:63:88:f8:
         46:c9:71:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----