Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft
File:                     sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft (raw, json)
Hash identifier:          8zpcDPYLolCUInkowNNtI2C1D9EQY2m6S5HfGTS388s=
Subject key identifier:   47:F8:CD:D2:EC:3B:E8:6A:C1:A3:49:61:35:A3:1C:CE:07:A0:98:60
Authority key identifier: B1:40:52:9C:69:B2:59:0F:F7:69:D6:AA:EE:F9:9F:26:61:04:CD:50
Certificate issuer:       /CN=A9142209/serialNumber=B140529C69B2590FF769D6AAEEF99F266104CD50
Certificate serial:       1ED7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft
Manifest number:          1EC7
Signing time:             Fri 31 Jan 2025 16:02:53 +0000
Manifest this update:     Fri 31 Jan 2025 16:02:53 +0000
Manifest next update:     Fri 07 Feb 2025 16:02:53 +0000
Files and hashes:         1: sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl (hash: z0IMTmfcOXHEIOwxI5ozv2PwFlcv3Aa/OKwqK/IaP7o=)
                          2: 74F3F11098BB11EA9B1BD75CC4F9AE02.roa (hash: BczHzIbLkzNL4updWdbsFHqnEhXAUmCVG50paNnAJDQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7895 (0x1ed7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142209/serialNumber=B140529C69B2590FF769D6AAEEF99F266104CD50
        Validity
            Not Before: Jan 31 16:02:53 2025 GMT
            Not After : Feb  7 16:02:53 2025 GMT
        Subject: CN=679cf42d-6c92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:48:f4:06:35:95:a9:8c:c2:fb:06:fa:84:56:
                    1d:9a:d9:2e:65:1f:59:79:eb:33:33:8c:8b:f6:e4:
                    11:02:5e:72:8a:6c:e9:59:93:d6:ac:3c:89:92:df:
                    00:c8:0c:ac:37:81:12:c6:ab:a3:2e:d5:1c:eb:0e:
                    cb:e3:9d:2a:e9:a8:98:fd:92:ab:7b:5f:ac:f2:d7:
                    eb:e5:b1:db:7f:d7:cf:f3:ae:bd:b7:69:6a:48:02:
                    7b:39:82:4a:3d:78:28:d6:68:31:ef:14:de:31:05:
                    d7:3e:72:68:f6:11:b5:8f:d9:6e:c5:a2:9e:0a:18:
                    67:9b:54:e6:33:9f:8b:14:f1:69:2c:8c:50:a5:65:
                    0a:3e:d2:e7:bb:58:15:6f:52:82:f6:74:fc:1c:56:
                    c4:27:01:37:30:bf:27:b3:2a:f9:95:a8:7c:50:7d:
                    06:59:01:8c:92:38:d0:7a:fc:3f:8e:e6:26:0b:52:
                    9c:45:28:45:98:cd:49:80:43:09:fb:cc:8d:86:33:
                    ba:03:fa:af:02:27:e8:b1:3b:f3:72:32:2c:ae:35:
                    57:ce:32:19:f0:1a:3e:84:20:e0:42:5c:25:cc:a2:
                    6a:21:f8:57:97:a4:a3:20:17:28:45:09:3a:12:b2:
                    5d:12:b3:ee:e0:0c:83:63:93:e3:5b:cd:3f:81:57:
                    9e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:F8:CD:D2:EC:3B:E8:6A:C1:A3:49:61:35:A3:1C:CE:07:A0:98:60
            X509v3 Authority Key Identifier:
                keyid:B1:40:52:9C:69:B2:59:0F:F7:69:D6:AA:EE:F9:9F:26:61:04:CD:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:19:f1:20:ae:23:dc:56:79:b9:57:36:9a:04:0d:3c:27:b1:
         be:43:7b:a4:4b:90:1d:d2:67:26:ba:93:97:e2:4a:ae:91:12:
         00:e3:51:11:7a:42:32:75:96:51:09:ec:b6:3c:ab:95:d8:af:
         54:8d:4a:e3:4e:55:b0:7e:a9:8b:04:ed:96:57:0d:c1:e4:73:
         5f:cd:74:ab:bc:e2:8b:c1:71:7d:18:11:4c:99:a9:82:00:cd:
         c8:6f:35:f1:18:35:2a:5d:fc:27:05:a2:a3:96:71:ad:b2:d6:
         55:ed:fa:3b:a3:38:aa:72:13:ef:21:03:1e:62:8b:d8:57:9d:
         81:6a:c8:5e:b5:98:2c:a3:d1:48:3f:94:b8:e5:2c:56:a5:c8:
         b9:94:0c:fb:9f:c7:1b:32:7a:65:d2:98:c5:cc:d6:5d:cd:77:
         7f:fe:29:c4:d3:60:b3:7c:5f:6c:a2:e6:dc:87:bd:33:0e:35:
         06:90:2d:55:f1:49:da:4b:9f:1c:de:f5:a5:36:3f:b4:f9:c2:
         22:48:4a:f4:45:48:18:f1:04:01:3b:50:7a:c1:e1:e3:ae:4d:
         95:0e:6d:05:c9:f7:99:79:a6:a6:69:ec:1f:43:c6:bf:fc:e2:
         e9:b6:cb:ca:55:9c:fc:f8:de:bd:eb:e0:cb:2d:a4:20:52:e7:
         09:97:23:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----