Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.mft
File:                     6C0Q0tocmL9oykxkkbkP_Q-rM5Q.mft (raw, json)
Hash identifier:          U6z+8vT1ZTTS8U852Ad3XjDIK4Ick5pt0l+WmK79g2Q=
Subject key identifier:   F6:92:D4:99:D1:D6:2D:56:B6:F4:78:1A:1F:E8:A2:FF:63:49:1F:DC
Authority key identifier: E8:2D:10:D2:DA:1C:98:BF:68:CA:4C:64:91:B9:0F:FD:0F:AB:33:94
Certificate issuer:       /CN=A912D5C1/serialNumber=E82D10D2DA1C98BF68CA4C6491B90FFD0FAB3394
Certificate serial:       0C46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.mft
Manifest number:          0C31
Signing time:             Fri 31 Jan 2025 18:18:50 +0000
Manifest this update:     Fri 31 Jan 2025 18:18:50 +0000
Manifest next update:     Fri 07 Feb 2025 18:18:50 +0000
Files and hashes:         1: 6C0Q0tocmL9oykxkkbkP_Q-rM5Q.crl (hash: piIsHjN3GML3R/y2333AQ8krJ3seiaH3blIuaAYg2UM=)
                          2: D7F98876520B11EE8B85DB63C4F9AE02.roa (hash: BvjqspRO5HaHZk8MDrrn9sDV9WNZa1iIeNw3qkNnjXQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3142 (0xc46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D5C1/serialNumber=E82D10D2DA1C98BF68CA4C6491B90FFD0FAB3394
        Validity
            Not Before: Jan 31 18:18:50 2025 GMT
            Not After : Feb  7 18:18:50 2025 GMT
        Subject: CN=679d140a-d26e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a7:b7:b5:e2:65:84:e8:6f:9c:e3:01:21:39:
                    b4:75:d9:d3:7a:f6:4a:60:b6:3a:5f:74:f8:c2:d9:
                    d9:58:8c:cb:a3:f7:d0:9e:f1:1d:80:8a:6a:99:b4:
                    5b:7f:db:26:f8:27:25:01:38:b9:63:3c:27:ac:66:
                    ff:b0:8b:83:af:84:f5:cb:e5:a3:e4:95:f0:09:61:
                    b0:bd:79:37:6a:21:c5:ea:09:d2:5f:67:dc:a1:69:
                    54:4d:b2:3f:18:38:14:a4:4c:53:72:eb:03:d4:04:
                    7a:4e:19:9f:0f:86:8a:0c:5e:44:76:7b:01:3f:92:
                    e9:d6:88:51:27:9b:c5:dd:9f:f9:21:11:58:c2:ec:
                    a4:5d:2b:da:61:c9:61:c7:dd:2c:37:80:d4:94:70:
                    6f:86:d1:5d:34:8e:dc:4e:3a:85:42:73:d9:8e:6e:
                    96:22:77:56:57:02:27:b5:8a:ac:79:18:25:a2:69:
                    a1:54:63:bc:ab:96:5d:a8:4f:04:6b:2a:d2:01:02:
                    01:b5:b0:a9:75:2a:cb:f7:68:d6:40:08:b5:ba:dd:
                    96:44:a8:c8:9b:c0:29:c8:8f:3b:eb:10:48:99:17:
                    63:80:25:ec:1e:24:69:dc:ce:99:86:1a:9f:4c:46:
                    2e:65:7d:5c:9e:72:f3:78:21:29:7a:47:cd:6d:98:
                    bd:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:92:D4:99:D1:D6:2D:56:B6:F4:78:1A:1F:E8:A2:FF:63:49:1F:DC
            X509v3 Authority Key Identifier:
                keyid:E8:2D:10:D2:DA:1C:98:BF:68:CA:4C:64:91:B9:0F:FD:0F:AB:33:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:be:31:1f:98:4a:28:d1:df:2a:dc:89:16:08:89:ed:25:f9:
         76:b5:74:f7:41:bd:91:15:ac:dc:de:80:7a:ca:82:43:e2:4f:
         8b:eb:fd:54:1d:bb:2a:71:95:f5:3b:19:31:e0:13:1e:b5:eb:
         49:6e:e8:b9:9b:08:7d:84:c3:52:40:84:5b:6e:84:53:cd:a4:
         6b:4d:f0:91:e1:01:d0:27:c6:26:67:a8:bb:cf:c4:9e:7d:71:
         e6:d3:18:29:f9:14:95:8a:d9:e6:91:aa:47:c6:95:35:e3:f3:
         ad:bb:f0:9d:0e:66:24:a8:f1:0a:75:90:39:50:ca:62:46:eb:
         17:74:ea:7b:5c:d5:12:3a:e7:71:5e:52:85:54:53:7c:24:e0:
         5b:ab:1a:e6:92:32:f2:1a:ed:f5:68:a6:e4:90:e3:79:13:e6:
         fd:23:fc:ac:78:6f:26:99:32:e2:e9:cc:a9:90:49:ee:b1:8a:
         c7:bd:a1:45:fd:c7:57:13:c8:ac:24:20:8f:0d:a9:7a:00:21:
         ca:81:a6:98:c4:b2:38:54:f6:c2:15:99:96:9e:11:61:e0:7e:
         b2:63:a5:26:b0:16:60:28:97:fd:3f:b0:7f:56:5b:a6:1b:62:
         33:52:03:f0:d2:01:1f:12:63:85:15:7a:fb:23:8a:f3:ba:db:
         23:44:7c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----