Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139790/BF2CE3F0C0AA11EBBEAFCA2AC4F9AE02/q6y5DDE0hQG0sdXlosfP8f2HtVs.mft
File:                     q6y5DDE0hQG0sdXlosfP8f2HtVs.mft (raw, json)
Hash identifier:          nmBKlFYWloODMFYfAIqlJ92I3ROB+g6g2RP+Aw75Mt0=
Subject key identifier:   4B:D5:C3:37:7F:5E:93:F3:47:2A:0B:40:52:46:72:CF:3B:98:99:CB
Authority key identifier: AB:AC:B9:0C:31:34:85:01:B4:B1:D5:E5:A2:C7:CF:F1:FD:87:B5:5B
Certificate issuer:       /CN=A9139790/serialNumber=ABACB90C31348501B4B1D5E5A2C7CFF1FD87B55B
Certificate serial:       058D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6y5DDE0hQG0sdXlosfP8f2HtVs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139790/BF2CE3F0C0AA11EBBEAFCA2AC4F9AE02/q6y5DDE0hQG0sdXlosfP8f2HtVs.mft
Manifest number:          0588
Signing time:             Thu 30 Jan 2025 23:16:37 +0000
Manifest this update:     Thu 30 Jan 2025 23:16:37 +0000
Manifest next update:     Thu 06 Feb 2025 23:16:37 +0000
Files and hashes:         1: q6y5DDE0hQG0sdXlosfP8f2HtVs.crl (hash: pphXr4wDrft2Mw0mRTORuutHF8+MsE6ckN/ZLxNYdzA=)
                          2: DC3716ACC0AD11EBA91C5655C4F9AE02.roa (hash: zjF6hV/xCm0hZGzWLZIyEd9PhQ3Ngnb2LQfu5dnHHQI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1421 (0x58d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139790/serialNumber=ABACB90C31348501B4B1D5E5A2C7CFF1FD87B55B
        Validity
            Not Before: Jan 30 23:16:37 2025 GMT
            Not After : Feb  6 23:16:37 2025 GMT
        Subject: CN=679c0855-af8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:8e:b0:3b:99:25:0a:fe:80:e7:47:bb:ea:ad:
                    09:b3:63:fc:8e:49:ea:9a:b9:7f:3a:2a:70:ef:6a:
                    3b:3d:45:d3:70:62:f7:42:2b:80:74:6b:92:e4:ed:
                    15:04:bf:ae:d4:5b:72:33:74:bb:69:b4:2d:d3:ef:
                    db:22:6d:b3:66:1d:ea:99:d6:17:38:76:08:bc:61:
                    00:8f:7c:3b:d2:0c:b6:ae:3e:22:88:b1:3c:53:b2:
                    c6:38:2a:ca:34:8b:38:15:9d:91:40:ae:00:9f:dc:
                    17:d6:a5:2d:46:82:a8:56:6d:70:c8:49:94:7e:c1:
                    13:3b:0b:f8:f3:4d:aa:83:29:7b:4a:1e:de:8f:6a:
                    0e:0d:6f:b6:bf:c1:9f:1c:5b:88:56:19:79:fe:8e:
                    9e:99:ce:83:44:c8:b0:53:7e:51:cd:0b:c1:b0:5b:
                    11:ba:94:c6:fb:28:4d:b4:2c:fc:cd:7d:01:90:4a:
                    fd:a4:fa:95:00:93:f7:f7:a5:97:0d:6f:4a:82:24:
                    df:eb:80:44:8a:2d:41:ae:74:64:de:0f:22:64:55:
                    d9:61:1b:d0:6d:c6:7b:34:aa:84:28:33:3d:b2:fe:
                    fa:75:57:b3:c8:44:36:26:88:d2:ed:1e:05:9c:ee:
                    4e:0c:a7:f8:e6:e9:8d:87:7b:f3:7b:a6:d0:d0:b5:
                    4e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:D5:C3:37:7F:5E:93:F3:47:2A:0B:40:52:46:72:CF:3B:98:99:CB
            X509v3 Authority Key Identifier:
                keyid:AB:AC:B9:0C:31:34:85:01:B4:B1:D5:E5:A2:C7:CF:F1:FD:87:B5:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139790/BF2CE3F0C0AA11EBBEAFCA2AC4F9AE02/q6y5DDE0hQG0sdXlosfP8f2HtVs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6y5DDE0hQG0sdXlosfP8f2HtVs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139790/BF2CE3F0C0AA11EBBEAFCA2AC4F9AE02/q6y5DDE0hQG0sdXlosfP8f2HtVs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:a9:7f:53:a7:f9:18:66:97:58:63:2e:c9:9a:32:85:a1:80:
         d4:70:6b:ef:f9:d4:8c:4e:ca:ba:f3:1b:ba:0a:3a:f9:d2:df:
         25:54:35:c0:67:cf:67:b2:a8:e5:77:50:8a:54:ff:c9:7e:1d:
         08:a9:bd:f2:70:82:4a:bb:6e:00:bf:eb:2b:c7:38:48:dd:8f:
         38:18:02:44:9b:55:9a:59:54:f8:ea:e8:a0:e0:e9:75:39:f8:
         68:d7:0e:78:a9:ad:f2:49:cc:22:df:6d:30:e2:85:97:bd:c0:
         25:4a:c0:ec:1d:68:c9:7b:31:4d:54:71:43:64:b5:e1:34:4a:
         5b:08:5f:15:04:fc:25:9f:75:58:ec:a4:69:19:08:63:c9:e2:
         ab:0f:a6:04:a4:df:19:40:80:a0:4c:90:86:82:26:9f:c2:e6:
         76:42:0e:ba:32:4b:2e:e1:34:14:63:95:f0:3b:64:5c:0e:1e:
         79:7e:d8:19:46:d9:45:02:2f:41:f9:65:d3:5a:e6:66:41:10:
         21:c7:a6:54:eb:d9:dc:b4:86:6f:57:69:d5:9a:46:66:66:e8:
         80:67:20:fb:20:71:28:bb:3f:66:0e:50:56:43:25:13:cb:45:
         72:88:52:fb:36:eb:2c:6e:de:e7:23:9d:29:c1:27:d6:a3:23:
         57:e7:2c:54
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mzk3OTAxMTAvBgNVBAUTKEFCQUNCOTBDMzEzNDg1MDFCNEIxRDVFNUEyQzdDRkYx
RkQ4N0I1NUIwHhcNMjUwMTMwMjMxNjM3WhcNMjUwMjA2MjMxNjM3WjAYMRYwFAYD
VQQDEw02NzljMDg1NS1hZjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7Y6wO5klCv6A50e76q0Js2P8jknqmrl/Oipw72o7PUXTcGL3QiuAdGuS5O0V
BL+u1FtyM3S7abQt0+/bIm2zZh3qmdYXOHYIvGEAj3w70gy2rj4iiLE8U7LGOCrK
NIs4FZ2RQK4An9wX1qUtRoKoVm1wyEmUfsETOwv4802qgyl7Sh7ej2oODW+2v8Gf
HFuIVhl5/o6emc6DRMiwU35RzQvBsFsRupTG+yhNtCz8zX0BkEr9pPqVAJP396WX
DW9KgiTf64BEii1BrnRk3g8iZFXZYRvQbcZ7NKqEKDM9sv76dVezyEQ2JojS7R4F
nO5ODKf45umNh3vze6bQ0LVOPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEvVwzd/
XpPzRyoLQFJGcs87mJnLMB8GA1UdIwQYMBaAFKusuQwxNIUBtLHV5aLHz/H9h7Vb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTc5MC9CRjJDRTNGMEMw
QUExMUVCQkVBRkNBMkFDNEY5QUUwMi9xNnk1RERFMGhRRzBzZFhsb3NmUDhmMkh0
VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3E2eTVEREUwaFFHMHNkWGxvc2ZQOGYySHRWcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
OTc5MC9CRjJDRTNGMEMwQUExMUVCQkVBRkNBMkFDNEY5QUUwMi9xNnk1RERFMGhR
RzBzZFhsb3NmUDhmMkh0VnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCgqX9Tp/kYZpdYYy7JmjKFoYDUcGvv+dSMTsq68xu6Cjr50t8lVDXA
Z89nsqjld1CKVP/Jfh0Iqb3ycIJKu24Av+srxzhI3Y84GAJEm1WaWVT46uig4Ol1
Ofho1w54qa3yScwi320w4oWXvcAlSsDsHWjJezFNVHFDZLXhNEpbCF8VBPwln3VY
7KRpGQhjyeKrD6YEpN8ZQICgTJCGgiafwuZ2Qg66Mksu4TQUY5XwO2RcDh55ftgZ
RtlFAi9B+WXTWuZmQRAhx6ZU69nctIZvV2nVmkZmZuiAZyD7IHEouz9mDlBWQyUT
y0VyiFL7Nussbt7nI50pwSfWoyNX5yxU
-----END CERTIFICATE-----