Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
File:                     q9Q1SGWcuydu-NNbghL4OOjOt18.mft (raw, json)
Hash identifier:          8muKsluOKhH1bkfqZXI2kRk3/sfudGYkPOYAUuJS+uQ=
Subject key identifier:   AE:A8:92:4F:6E:A1:F0:84:A4:8B:B4:AF:A4:ED:2B:4E:C4:36:39:48
Authority key identifier: AB:D4:35:48:65:9C:BB:27:6E:F8:D3:5B:82:12:F8:38:E8:CE:B7:5F
Certificate issuer:       /CN=A9132B1E/serialNumber=ABD43548659CBB276EF8D35B8212F838E8CEB75F
Certificate serial:       0A50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
Manifest number:          09CB
Signing time:             Thu 30 Jan 2025 20:15:38 +0000
Manifest this update:     Thu 30 Jan 2025 20:15:37 +0000
Manifest next update:     Thu 06 Feb 2025 20:15:37 +0000
Files and hashes:         1: q9Q1SGWcuydu-NNbghL4OOjOt18.crl (hash: du5YKZ8w4Vx0nUMzNGvPiS2wy6dywHaeAhD+VOPhf/8=)
                          2: 690F19C87A0111ECA0BAAA6AC4F9AE02.roa (hash: eOflK2NC8wnqQQDOtn92wjxpOTzjNZbiaBcaMy1lgAg=)
                          3: C09E796C50EB11EB86E24A3DC4F9AE02.roa (hash: IKZDGcPoz2ZTyjAKxTlyXJlRj+UtVtLciBcR7qZTioA=)
                          4: 0B0485A250B811EBA8A3C670C4F9AE02.roa (hash: uJygWd52jCSDDQwzNFdfFy56jnQ/FexCJi3lv3fNL2E=)
                          5: 6580E03C79E511EC99DA1B51C4F9AE02.roa (hash: SiyXp8s8/hAXjY68zK9BtwMRoILRvuLxj/zVeKFswVk=)
                          6: ED4952AAEA5F11EE914FC26AC4F9AE02.roa (hash: Xeve6NkXZU1IXwo8IzcOdYST6NusVo4ExNoKnDZH5cA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2640 (0xa50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132B1E/serialNumber=ABD43548659CBB276EF8D35B8212F838E8CEB75F
        Validity
            Not Before: Jan 30 20:15:37 2025 GMT
            Not After : Feb  6 20:15:37 2025 GMT
        Subject: CN=679bddea-5287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:10:cb:e5:ec:6d:ad:85:ba:47:ac:ff:15:2b:
                    8f:87:e2:c7:c2:08:8c:91:08:b9:9e:f5:c5:ac:51:
                    5b:ee:4d:7e:f3:19:4b:0c:fd:cb:8b:08:88:53:4f:
                    93:6d:27:85:cf:15:b9:3f:05:e6:68:c6:71:a2:ed:
                    7e:76:83:86:2d:e6:3f:6b:25:f9:f8:70:20:1d:3a:
                    76:00:7c:ce:46:0c:c4:d7:6f:8c:64:b9:ba:0d:b8:
                    08:ee:49:79:26:50:e9:d9:3c:2c:50:29:fe:58:f1:
                    49:30:8e:59:f0:9e:a8:4b:9c:3a:34:37:0f:ad:de:
                    e6:3a:cc:ad:04:e7:78:1a:2e:4a:fc:01:2e:f7:5e:
                    3e:0b:ee:e7:d1:f4:0b:5a:9f:72:0b:97:e7:a9:c8:
                    c2:b2:72:84:9b:b1:c3:42:78:9f:b6:27:d1:e7:9c:
                    ea:60:76:96:8b:e5:0c:48:80:0d:e7:1a:80:81:fd:
                    36:ab:27:92:86:cf:0f:e7:c2:9d:c4:eb:ef:6a:ba:
                    39:d9:37:dd:5d:74:02:7c:a0:de:83:45:17:ba:ce:
                    64:f6:91:6f:9c:e1:06:81:ee:a7:2c:0f:1f:98:e3:
                    2c:c4:bc:11:00:a5:43:05:8a:5f:da:e2:ae:46:a6:
                    cb:74:b4:25:1e:c6:87:4c:96:10:61:bf:15:ac:10:
                    98:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:A8:92:4F:6E:A1:F0:84:A4:8B:B4:AF:A4:ED:2B:4E:C4:36:39:48
            X509v3 Authority Key Identifier:
                keyid:AB:D4:35:48:65:9C:BB:27:6E:F8:D3:5B:82:12:F8:38:E8:CE:B7:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:eb:ef:b6:fc:c1:dc:a1:12:10:7f:3c:fc:ae:de:ed:5a:dc:
         66:bc:45:0a:99:62:cf:c3:db:83:d6:7a:28:2a:42:e1:31:5a:
         8f:d1:b7:f4:f3:b7:9e:60:82:a2:0e:fc:35:11:27:a6:6e:8f:
         5e:84:a0:11:5e:a3:69:d1:c6:b4:51:f4:e1:78:6b:08:6c:68:
         b0:8b:0c:9b:ed:7a:7d:4e:b7:a8:34:df:91:dd:82:a7:38:9a:
         f4:9c:56:06:b4:0f:c1:47:7d:8b:55:1f:17:7e:d0:97:a9:0f:
         3c:00:b3:ba:d3:88:56:77:88:52:94:6c:4d:51:2f:e2:cf:bc:
         ac:58:0c:4d:1e:2d:0f:6f:de:c3:8e:f4:8b:a6:a3:e1:dc:85:
         c9:24:46:10:4a:de:8a:ae:03:23:db:29:c1:41:a3:1d:5b:f9:
         52:09:a9:99:59:21:d2:c1:1d:9a:22:c7:00:17:b6:3f:ca:14:
         bb:d6:aa:91:4d:31:03:d8:86:17:f6:14:f5:c6:ff:de:cb:f9:
         73:82:37:64:4d:ab:90:be:3c:86:16:5f:39:17:d3:ba:eb:3d:
         dc:35:29:69:cb:d3:7d:de:b9:60:e1:85:ae:c3:74:8a:48:8d:
         1f:5d:fd:5d:ea:49:d8:80:3d:79:fb:b5:2f:7d:63:58:a5:b3:
         90:42:b2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----