Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft
File:                     7SPwf-AyVEbdDVoZwaF-PIhh75c.mft (raw, json)
Hash identifier:          I6jgpS1eRtHMeiGaPBz/OWVJj6ldOyhaaCfIUE3/AbU=
Subject key identifier:   7E:88:1C:B0:CB:59:74:D1:0A:70:E8:C7:42:CD:91:9B:61:DA:8B:42
Authority key identifier: ED:23:F0:7F:E0:32:54:46:DD:0D:5A:19:C1:A1:7E:3C:88:61:EF:97
Certificate issuer:       /CN=A9136A3E/serialNumber=ED23F07FE0325446DD0D5A19C1A17E3C8861EF97
Certificate serial:       0C0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SPwf-AyVEbdDVoZwaF-PIhh75c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft
Manifest number:          0C06
Signing time:             Fri 31 Jan 2025 18:28:39 +0000
Manifest this update:     Fri 31 Jan 2025 18:28:39 +0000
Manifest next update:     Fri 07 Feb 2025 18:28:39 +0000
Files and hashes:         1: 7SPwf-AyVEbdDVoZwaF-PIhh75c.crl (hash: 3vFGiEVDrBS78n9ChkehVag+szRehcSdhM1H9wyYCKQ=)
                          2: 83EDB54420E811EE97989E0DC4F9AE02.roa (hash: 03PZ9RQjgxD40nMbJ2eys41ohZjgGWxawEredJUIf/A=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3087 (0xc0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136A3E/serialNumber=ED23F07FE0325446DD0D5A19C1A17E3C8861EF97
        Validity
            Not Before: Jan 31 18:28:39 2025 GMT
            Not After : Feb  7 18:28:39 2025 GMT
        Subject: CN=679d1657-307a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fe:87:c8:f2:d7:e5:3b:52:20:4a:1d:f2:1f:
                    fd:0e:2f:97:fb:02:0f:fb:38:ae:17:e5:b4:e6:6f:
                    24:9c:a2:f6:91:db:33:a2:c4:54:5b:7e:de:9c:b8:
                    21:37:81:03:79:ba:14:1c:fe:09:f1:05:3b:00:6b:
                    6e:6b:10:2f:d3:92:51:88:5c:87:72:d7:fa:68:d6:
                    8b:fe:f8:90:6d:72:6f:d4:56:e2:33:b8:21:3e:9c:
                    ac:24:07:0a:13:98:da:9a:8f:5a:0e:66:55:1f:78:
                    42:cf:4e:58:2a:3c:0c:0f:ac:93:f1:52:95:aa:e0:
                    bc:ba:08:e1:c0:bb:54:c8:ec:e4:34:e4:b8:fc:74:
                    b3:d8:26:44:7a:1e:c2:d4:bd:b5:f5:84:e3:13:76:
                    2c:8d:b6:2c:5e:f7:f2:0e:e7:21:3b:21:84:d8:ae:
                    90:83:74:f7:06:bd:aa:16:fc:f2:dc:cc:f4:e5:77:
                    77:04:c0:1b:26:5b:52:8f:52:2e:19:af:1b:48:d6:
                    83:dc:27:ce:2d:79:ba:d1:24:ea:02:7a:41:5d:d0:
                    c4:99:4a:9a:73:ef:bb:1f:b8:c3:52:b5:cd:3c:73:
                    13:12:69:45:f4:91:85:ff:09:63:cf:db:87:9b:7b:
                    bd:f9:76:ef:75:bd:b3:31:9f:15:cf:73:fa:70:a8:
                    fb:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:88:1C:B0:CB:59:74:D1:0A:70:E8:C7:42:CD:91:9B:61:DA:8B:42
            X509v3 Authority Key Identifier:
                keyid:ED:23:F0:7F:E0:32:54:46:DD:0D:5A:19:C1:A1:7E:3C:88:61:EF:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SPwf-AyVEbdDVoZwaF-PIhh75c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:f5:db:c8:00:98:89:5c:c1:a9:c2:f5:12:fc:14:83:ef:c2:
         b5:a3:11:1d:c3:47:26:cb:f7:71:eb:a6:16:92:8b:cb:7e:c0:
         82:90:6c:84:c3:6c:a5:c2:24:c7:f8:0a:4a:f3:75:2a:16:02:
         39:88:0f:33:25:0c:2c:fb:06:0b:81:3d:ba:f0:9d:3e:9e:48:
         4a:7c:ff:2e:25:13:dd:a8:d4:5b:04:76:4e:36:18:d1:48:a7:
         2c:c3:0a:5b:e4:dc:bc:ea:82:0e:3c:c9:20:63:7d:92:51:49:
         0b:a5:ec:38:03:de:ac:eb:f7:85:6b:eb:3f:f9:fa:0a:d5:0e:
         bb:91:e0:b6:c4:06:fa:d6:79:7a:b9:9b:aa:d9:e8:57:5b:e3:
         62:a5:0b:52:7f:ab:8e:5c:6f:47:74:b5:3e:eb:dd:e2:39:e9:
         d5:f1:a1:89:d0:d2:62:68:1d:7f:08:0b:5a:55:5c:89:c3:7e:
         a3:27:55:21:6c:b4:c1:43:ff:13:8c:a7:fb:b1:a8:55:61:51:
         19:a3:6e:0e:f3:bf:03:a9:97:bd:5d:c7:70:b1:19:0f:c9:02:
         7a:16:b9:b3:c6:0b:73:b8:0c:6b:14:62:cb:70:a8:bb:6a:3d:
         68:ec:48:3f:73:62:d2:ae:be:dc:1e:60:ad:a7:c2:15:0a:cb:
         b7:df:84:c4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDA8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzZBM0UxMTAvBgNVBAUTKEVEMjNGMDdGRTAzMjU0NDZERDBENUExOUMxQTE3RTND
ODg2MUVGOTcwHhcNMjUwMTMxMTgyODM5WhcNMjUwMjA3MTgyODM5WjAYMRYwFAYD
VQQDEw02NzlkMTY1Ny0zMDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu/6HyPLX5TtSIEod8h/9Di+X+wIP+ziuF+W05m8knKL2kdszosRUW37enLgh
N4EDeboUHP4J8QU7AGtuaxAv05JRiFyHctf6aNaL/viQbXJv1FbiM7ghPpysJAcK
E5jamo9aDmZVH3hCz05YKjwMD6yT8VKVquC8ugjhwLtUyOzkNOS4/HSz2CZEeh7C
1L219YTjE3YsjbYsXvfyDuchOyGE2K6Qg3T3Br2qFvzy3Mz05Xd3BMAbJltSj1Iu
Ga8bSNaD3CfOLXm60STqAnpBXdDEmUqac++7H7jDUrXNPHMTEmlF9JGF/wljz9uH
m3u9+Xbvdb2zMZ8Vz3P6cKj7IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH6IHLDL
WXTRCnDox0LNkZth2otCMB8GA1UdIwQYMBaAFO0j8H/gMlRG3Q1aGcGhfjyIYe+X
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkEzRS8xOTM3NjE1MjA1
RjYxMUVBODkxMkMxMjlDNEY5QUUwMi83U1B3Zi1BeVZFYmREVm9ad2FGLVBJaGg3
NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdTUHdmLUF5VkViZERWb1p3YUYtUEloaDc1Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NkEzRS8xOTM3NjE1MjA1RjYxMUVBODkxMkMxMjlDNEY5QUUwMi83U1B3Zi1BeVZF
YmREVm9ad2FGLVBJaGg3NWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBs9dvIAJiJXMGpwvUS/BSD78K1oxEdw0cmy/dx66YWkovLfsCCkGyE
w2ylwiTH+ApK83UqFgI5iA8zJQws+wYLgT268J0+nkhKfP8uJRPdqNRbBHZONhjR
SKcswwpb5Ny86oIOPMkgY32SUUkLpew4A96s6/eFa+s/+foK1Q67keC2xAb61nl6
uZuq2ehXW+NipQtSf6uOXG9HdLU+693iOenV8aGJ0NJiaB1/CAtaVVyJw36jJ1Uh
bLTBQ/8TjKf7sahVYVEZo24O878DqZe9XcdwsRkPyQJ6FrmzxgtzuAxrFGLLcKi7
aj1o7Eg/c2LSrr7cHmCtp8IVCsu334TE
-----END CERTIFICATE-----