Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft
File:                     qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft (raw, json)
Hash identifier:          syQEXfy4aiOu4JiY2HujKNFU1URIDxtNh9iDyXAyUf4=
Subject key identifier:   CA:0E:86:38:21:E1:FF:5C:21:4D:1A:58:E5:86:12:E8:57:B5:39:9A
Authority key identifier: AA:DC:DB:89:E5:4B:67:7C:41:04:63:79:9F:95:86:81:5C:40:FA:4B
Certificate issuer:       /CN=A913C04E/serialNumber=AADCDB89E54B677C410463799F9586815C40FA4B
Certificate serial:       010B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtzbieVLZ3xBBGN5n5WGgVxA-ks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft
Manifest number:          0108
Signing time:             Fri 31 Jan 2025 04:08:34 +0000
Manifest this update:     Fri 31 Jan 2025 04:08:34 +0000
Manifest next update:     Fri 07 Feb 2025 04:08:34 +0000
Files and hashes:         1: qtzbieVLZ3xBBGN5n5WGgVxA-ks.crl (hash: Pc6taeIbMpsI2CKLLTkT34zVoYDvwaxA9zvKn7po71Q=)
                          2: 7236C4D8513211EEA8D81765C4F9AE02.roa (hash: ZZYkG0rN+pICOhz09TrHJ/M/KfssTlJ7hgwatztFUEg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 267 (0x10b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C04E/serialNumber=AADCDB89E54B677C410463799F9586815C40FA4B
        Validity
            Not Before: Jan 31 04:08:34 2025 GMT
            Not After : Feb  7 04:08:34 2025 GMT
        Subject: CN=679c4cc2-f3d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:50:bf:63:30:4b:3a:74:7c:0c:65:c1:b6:32:
                    0c:58:b3:57:e4:51:b6:d6:8d:95:78:7d:a2:ec:1e:
                    b7:33:b0:66:6b:71:b3:cd:a8:cd:a8:03:73:5f:d7:
                    9f:57:12:b7:44:8f:0e:69:6f:c3:8e:f1:2a:9c:01:
                    9a:50:21:5f:95:99:68:e5:d9:9e:9b:71:76:9f:da:
                    36:7f:dd:9f:e5:c4:a4:c7:c1:4c:7d:3c:7b:59:9e:
                    d8:b1:a8:37:86:70:f8:64:44:5f:e3:1c:2b:7d:45:
                    9d:9f:ec:b8:bd:73:30:77:d5:97:10:b0:58:8f:3a:
                    36:23:bc:cf:f6:9d:0b:c9:df:9d:88:6b:da:df:2b:
                    7d:8c:fb:e2:ca:c7:18:9f:5e:d3:d7:a5:01:81:89:
                    b6:4b:d0:fe:94:1b:f3:52:e7:37:11:69:19:73:8e:
                    f1:b5:c2:83:1a:03:8e:4b:75:b5:a9:7d:c8:9c:55:
                    6d:24:01:eb:2d:1e:db:7c:6c:90:e6:9d:64:6b:41:
                    e8:8b:f1:f1:50:8a:5e:9e:a6:09:2d:8b:ac:d9:8f:
                    a0:5d:a6:31:9e:cb:29:b8:28:43:4b:d1:4e:f7:51:
                    a5:cc:37:68:7c:02:8d:c0:56:f7:a5:5e:26:7b:7c:
                    26:4c:a9:16:d1:55:67:d6:3d:b4:83:16:bc:2f:c1:
                    ce:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:0E:86:38:21:E1:FF:5C:21:4D:1A:58:E5:86:12:E8:57:B5:39:9A
            X509v3 Authority Key Identifier:
                keyid:AA:DC:DB:89:E5:4B:67:7C:41:04:63:79:9F:95:86:81:5C:40:FA:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtzbieVLZ3xBBGN5n5WGgVxA-ks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:d8:11:12:34:ce:7b:d6:ab:c0:56:48:f1:a2:90:3b:bf:f7:
         8c:1f:7f:7f:86:b0:78:f3:6b:b7:ae:70:d2:fb:93:84:25:5b:
         ff:71:e1:40:ec:de:87:aa:4a:28:b3:e7:f5:2c:3b:06:66:b1:
         14:00:4b:42:d8:20:ce:67:f3:14:fc:a2:04:0b:a4:49:df:2f:
         ca:21:b3:27:06:b1:29:61:db:a2:92:52:de:88:51:63:22:81:
         fa:95:88:a8:9c:7f:92:39:4b:61:d5:36:27:4a:81:ec:a1:39:
         c9:fd:66:7e:17:b3:6f:e1:30:7d:ea:3a:9f:40:ed:9b:a5:d7:
         fe:ea:69:36:8b:b5:6c:6e:ae:0a:cc:d8:d5:4a:68:e1:16:9f:
         10:46:59:bd:11:9b:f2:e5:0f:80:8e:18:19:da:a6:67:2d:7a:
         8b:6e:84:18:92:25:8d:91:83:e3:43:f6:fe:19:c2:06:42:39:
         3a:22:39:d0:8d:b1:a0:2a:5c:5e:d2:21:67:d7:aa:d0:14:4f:
         ef:85:e4:1a:ef:5f:35:1c:e0:b1:a5:31:45:47:8a:f3:d9:42:
         91:f8:f8:69:77:36:1d:4f:0a:76:35:c6:6f:6f:3d:2f:e0:2e:
         b9:5e:d4:59:54:53:3c:35:18:12:00:3f:2f:d8:0a:c4:17:e3:
         f3:62:01:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----