Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.mft
File:                     p_4ShlaCLyYhpKD_lWNCeAeYxPA.mft (raw, json)
Hash identifier:          JnnOkqZRvPdVoyCPBpgNVODxL0n0iQiC948EMSygAGc=
Subject key identifier:   B0:41:3F:E2:FE:33:A4:3B:46:C4:F4:66:DC:C9:45:16:92:4B:D0:00
Authority key identifier: A7:FE:12:86:56:82:2F:26:21:A4:A0:FF:95:63:42:78:07:98:C4:F0
Certificate issuer:       /CN=A9132933/serialNumber=A7FE128656822F2621A4A0FF956342780798C4F0
Certificate serial:       06D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_4ShlaCLyYhpKD_lWNCeAeYxPA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.mft
Manifest number:          06D0
Signing time:             Thu 30 Jan 2025 22:02:10 +0000
Manifest this update:     Thu 30 Jan 2025 22:02:09 +0000
Manifest next update:     Thu 06 Feb 2025 22:02:09 +0000
Files and hashes:         1: p_4ShlaCLyYhpKD_lWNCeAeYxPA.crl (hash: pIN9EMRVpEoJEOBBY9xvEdm8ATNWD07PwCWVYwbDhk0=)
                          2: F2A90B8C3ECD11EBADC7D32AC4F9AE02.roa (hash: H0kHP8pBoH+bwHmlcJ0nDAtlDVRXDuWl/zy2MYQJc/k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1749 (0x6d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132933/serialNumber=A7FE128656822F2621A4A0FF956342780798C4F0
        Validity
            Not Before: Jan 30 22:02:09 2025 GMT
            Not After : Feb  6 22:02:09 2025 GMT
        Subject: CN=679bf6e1-d63b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bc:72:04:9d:e7:ec:ec:a3:73:d5:08:b5:2a:
                    d4:34:73:26:36:32:e1:20:0a:f8:f6:5e:80:97:50:
                    98:62:7e:73:32:b6:b8:1a:1f:1f:06:db:7a:63:aa:
                    cd:7e:83:1a:0b:7b:2a:56:26:d7:9d:52:f0:17:ba:
                    4d:ee:92:ca:14:48:39:02:06:7f:6d:2a:d8:63:e3:
                    7d:a9:0f:b3:37:8f:7e:e2:23:a2:03:ba:45:77:df:
                    95:eb:54:a1:45:38:69:e6:5c:b1:80:2d:d5:d2:b7:
                    23:c2:87:30:1b:39:c7:d2:3c:19:b8:5e:1b:49:f9:
                    5e:4b:66:ef:ac:67:38:03:59:ca:7f:04:d7:3c:fd:
                    fb:29:77:41:42:b2:79:53:02:d9:cc:63:73:52:00:
                    2f:bc:30:b3:d1:f2:8c:66:bf:31:e6:5d:4e:1e:6b:
                    5f:63:53:c8:22:0e:b4:da:b1:11:be:64:9c:4a:85:
                    a3:f2:2d:32:86:37:22:9d:a7:1b:90:04:96:5c:6b:
                    aa:4e:f8:28:c4:2f:fa:02:2d:75:9e:d5:2a:f5:e9:
                    19:3a:95:97:83:63:c6:0f:5f:7f:ae:3b:a5:ca:85:
                    27:ad:33:9b:82:d8:3e:6c:e6:c0:e6:a6:d8:c0:7e:
                    95:89:d4:9f:ec:a0:b7:cb:5b:03:8d:ab:1a:a3:11:
                    d1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:41:3F:E2:FE:33:A4:3B:46:C4:F4:66:DC:C9:45:16:92:4B:D0:00
            X509v3 Authority Key Identifier:
                keyid:A7:FE:12:86:56:82:2F:26:21:A4:A0:FF:95:63:42:78:07:98:C4:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_4ShlaCLyYhpKD_lWNCeAeYxPA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:04:34:60:7e:cc:65:4c:b2:5a:45:5e:cc:d3:9e:a9:ef:b2:
         01:9c:ed:c3:97:fc:0d:69:e7:d2:23:85:3d:64:e9:86:6b:00:
         f8:44:17:ba:6c:9a:6b:59:b7:e8:2a:35:e0:89:56:30:16:5b:
         da:cf:ac:85:7c:71:e5:74:6f:e4:8f:a7:af:2e:18:c8:37:d9:
         23:8a:0d:01:2e:72:89:35:9f:46:3c:75:29:c0:65:c9:47:fd:
         e8:1d:e5:76:1a:a7:17:a6:cf:ff:54:78:d3:d9:ae:22:08:83:
         59:f8:c6:09:f5:75:fd:c9:22:7e:6d:f7:95:d8:4e:ce:32:b6:
         3e:ae:10:f6:d7:60:6b:b6:0a:a9:ce:2a:5b:93:5a:39:b8:8c:
         c2:10:ec:18:da:6b:6d:cf:36:11:77:99:14:42:8a:15:5e:5b:
         4a:df:62:07:e1:67:7b:e4:d9:0b:fd:2e:2f:77:50:b1:a0:63:
         03:b2:21:f6:1f:4c:c8:3c:84:81:57:1c:a2:1b:55:78:ae:65:
         9e:4a:89:24:35:c1:24:b1:b1:61:93:0a:50:91:d2:7b:1b:4b:
         36:3f:8a:3f:42:7b:7f:30:7c:20:92:d6:49:4b:3a:4b:4f:3c:
         0c:f7:a9:cf:c6:f3:18:da:03:8f:9a:02:a9:2c:a8:a7:d9:5b:
         88:6a:be:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----