Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.mft
File:                     5EL5lVmsG6h-4TSLL8evCiL_smE.mft (raw, json)
Hash identifier:          0rpGmV5cgCLjTC6gSNQ6KW1j0So66HzJ6LRBepQAjjg=
Subject key identifier:   8A:7C:2B:EF:CD:E0:33:C5:4D:57:E9:44:C0:39:84:4A:42:A5:C2:36
Authority key identifier: E4:42:F9:95:59:AC:1B:A8:7E:E1:34:8B:2F:C7:AF:0A:22:FF:B2:61
Certificate issuer:       /CN=A9143336/serialNumber=E442F99559AC1BA87EE1348B2FC7AF0A22FFB261
Certificate serial:       2AB3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EL5lVmsG6h-4TSLL8evCiL_smE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.mft
Manifest number:          2AA4
Signing time:             Fri 31 Jan 2025 15:35:30 +0000
Manifest this update:     Fri 31 Jan 2025 15:35:30 +0000
Manifest next update:     Fri 07 Feb 2025 15:35:30 +0000
Files and hashes:         1: 5EL5lVmsG6h-4TSLL8evCiL_smE.crl (hash: 2oTekqwYGIMza6arT4PKT3cBeKj4DDNuBT8s42Wwz/0=)
                          2: 5452AC309B4911EB9952394CC4F9AE02.roa (hash: l8JeN+xjbySFaTx51RAHTtCLIp0nPYZYJcYkSVQtE9k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10931 (0x2ab3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143336/serialNumber=E442F99559AC1BA87EE1348B2FC7AF0A22FFB261
        Validity
            Not Before: Jan 31 15:35:30 2025 GMT
            Not After : Feb  7 15:35:30 2025 GMT
        Subject: CN=679cedc2-bc2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9f:17:58:82:16:d9:7f:b0:ca:0d:f2:7b:da:
                    a5:7c:03:14:14:9c:da:a6:f1:6b:99:60:25:1b:1c:
                    59:e2:dd:ac:1d:7d:70:e5:3b:34:fe:21:da:0a:4c:
                    46:07:95:33:3f:3b:6d:2a:56:a2:4c:37:c2:bc:85:
                    91:b7:7a:bb:97:c0:79:8a:e7:09:4d:fd:7a:bd:c3:
                    f4:4a:5f:2d:13:4c:0f:72:a3:2b:54:2d:1e:0b:14:
                    58:fe:b5:64:9c:52:f6:ac:07:ee:85:fa:c0:1c:e5:
                    18:61:c8:c6:f4:a9:e9:28:38:c9:0f:8f:f2:a2:fc:
                    b3:b2:33:ea:c3:99:4b:ca:c4:01:13:d0:3f:d7:f1:
                    a0:10:6e:f7:f6:6f:82:69:b4:c5:72:ba:3f:fb:fb:
                    7e:77:84:d9:f5:6f:3a:2f:0d:c9:7e:e7:70:df:cc:
                    b9:43:6c:f8:49:83:f2:21:2c:17:12:ae:87:9e:a8:
                    36:0f:f2:a4:ef:94:24:85:7b:d9:a6:fc:84:6a:21:
                    5b:a5:9e:62:ea:fd:4e:f4:7e:19:44:46:b7:a6:62:
                    b0:dd:81:44:61:d2:2d:31:75:7e:88:03:5f:d1:a9:
                    d5:fc:eb:df:b3:39:75:87:5f:68:eb:22:7f:4e:91:
                    a6:14:38:59:d9:9f:2f:ab:91:72:ba:65:0a:32:bf:
                    8c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:7C:2B:EF:CD:E0:33:C5:4D:57:E9:44:C0:39:84:4A:42:A5:C2:36
            X509v3 Authority Key Identifier:
                keyid:E4:42:F9:95:59:AC:1B:A8:7E:E1:34:8B:2F:C7:AF:0A:22:FF:B2:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EL5lVmsG6h-4TSLL8evCiL_smE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:3a:a8:1e:3c:58:62:4a:78:81:ce:a9:01:07:63:5a:c9:ff:
         87:ec:9c:ce:88:dc:01:86:f3:7a:6c:8e:55:3f:30:be:5f:57:
         4f:cc:f8:cf:5a:43:33:67:ba:73:12:dd:e1:e5:57:00:2f:5f:
         81:63:77:4f:0f:59:54:69:11:4e:1d:96:af:18:7a:21:5b:fa:
         35:2e:73:a4:46:92:0d:95:4d:b4:12:a5:60:f3:b3:6a:0d:31:
         f8:74:18:2d:65:23:31:3f:90:62:90:50:ea:7e:eb:5c:ac:d6:
         fc:14:27:94:8c:f7:bc:e7:9f:ab:b9:39:21:14:de:5f:5a:4a:
         fa:be:52:57:02:4d:41:1b:63:c0:65:a8:80:5f:b7:c3:ee:b4:
         fa:53:c8:be:4b:20:9f:6d:e5:5c:b5:2e:90:18:a2:87:49:53:
         99:fb:4e:d7:2e:d2:3f:87:d0:1a:fe:a3:9d:44:9f:d1:84:ff:
         87:62:31:e7:10:4f:c2:9e:d7:0c:0a:35:91:54:de:15:12:5f:
         50:1c:7a:fa:68:7b:b3:00:a9:d8:fc:47:25:3e:73:2e:a3:85:
         6c:ae:0d:12:ef:20:ec:77:fa:f1:10:f6:e9:2c:b1:bd:b6:ec:
         79:f1:26:fe:06:e9:a9:4a:c1:4a:eb:48:9a:b4:74:de:86:48:
         2f:45:3e:f7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICKrMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDMzMzYxMTAvBgNVBAUTKEU0NDJGOTk1NTlBQzFCQTg3RUUxMzQ4QjJGQzdBRjBB
MjJGRkIyNjEwHhcNMjUwMTMxMTUzNTMwWhcNMjUwMjA3MTUzNTMwWjAYMRYwFAYD
VQQDEw02NzljZWRjMi1iYzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxJ8XWIIW2X+wyg3ye9qlfAMUFJzapvFrmWAlGxxZ4t2sHX1w5Ts0/iHaCkxG
B5UzPzttKlaiTDfCvIWRt3q7l8B5iucJTf16vcP0Sl8tE0wPcqMrVC0eCxRY/rVk
nFL2rAfuhfrAHOUYYcjG9KnpKDjJD4/yovyzsjPqw5lLysQBE9A/1/GgEG739m+C
abTFcro/+/t+d4TZ9W86Lw3Jfudw38y5Q2z4SYPyISwXEq6Hnqg2D/Kk75QkhXvZ
pvyEaiFbpZ5i6v1O9H4ZREa3pmKw3YFEYdItMXV+iANf0anV/Ovfszl1h19o6yJ/
TpGmFDhZ2Z8vq5FyumUKMr+MbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIp8K+/N
4DPFTVfpRMA5hEpCpcI2MB8GA1UdIwQYMBaAFORC+ZVZrBuofuE0iy/Hrwoi/7Jh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzMzNi84RUU3RkMxRTA4
NTMxMUU0QjAyMzlFNjFDNEY5QUUwMi81RUw1bFZtc0c2aC00VFNMTDhldkNpTF9z
bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVFTDVsVm1zRzZoLTRUU0xMOGV2Q2lMX3NtRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MzMzNi84RUU3RkMxRTA4NTMxMUU0QjAyMzlFNjFDNEY5QUUwMi81RUw1bFZtc0c2
aC00VFNMTDhldkNpTF9zbUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAoOqgePFhiSniBzqkBB2Nayf+H7JzOiNwBhvN6bI5VPzC+X1dPzPjP
WkMzZ7pzEt3h5VcAL1+BY3dPD1lUaRFOHZavGHohW/o1LnOkRpINlU20EqVg87Nq
DTH4dBgtZSMxP5BikFDqfutcrNb8FCeUjPe855+ruTkhFN5fWkr6vlJXAk1BG2PA
ZaiAX7fD7rT6U8i+SyCfbeVctS6QGKKHSVOZ+07XLtI/h9Aa/qOdRJ/RhP+HYjHn
EE/CntcMCjWRVN4VEl9QHHr6aHuzAKnY/EclPnMuo4Vsrg0S7yDsd/rxEPbpLLG9
tux58Sb+BumpSsFK60iatHTehkgvRT73
-----END CERTIFICATE-----