Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft
File:                     -HfnZ8AkHlKW_jMylZne-j0toUE.mft (raw, json)
Hash identifier:          JUHZNRhyKrtH36Udk2KN8+Y8ozTXSN/GlK3Rrdc79d4=
Subject key identifier:   25:88:23:FB:3F:A8:95:DD:2A:02:C7:15:85:7B:1B:A4:AD:F3:2B:EC
Authority key identifier: F8:77:E7:67:C0:24:1E:52:96:FE:33:32:95:99:DE:FA:3D:2D:A1:41
Certificate issuer:       /CN=A9145515/serialNumber=F877E767C0241E5296FE33329599DEFA3D2DA141
Certificate serial:       0B4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HfnZ8AkHlKW_jMylZne-j0toUE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft
Manifest number:          0B45
Signing time:             Thu 30 Jan 2025 19:12:05 +0000
Manifest this update:     Thu 30 Jan 2025 19:12:04 +0000
Manifest next update:     Thu 06 Feb 2025 19:12:04 +0000
Files and hashes:         1: -HfnZ8AkHlKW_jMylZne-j0toUE.crl (hash: ihyGdJBmHWCQKOJ5zPXwhKHSlgc3NEFW6YqLSsIzu/I=)
                          2: 60875A5C2A3711EABEA9BF73C4F9AE02.roa (hash: FdLJ06PTZOyh+KSk/zuzof+cUbbR4MXj/mg8yL1Rn9k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2891 (0xb4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145515/serialNumber=F877E767C0241E5296FE33329599DEFA3D2DA141
        Validity
            Not Before: Jan 30 19:12:04 2025 GMT
            Not After : Feb  6 19:12:04 2025 GMT
        Subject: CN=679bcf05-e9a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:79:b6:2a:1b:86:9b:35:cd:15:59:28:8e:56:
                    57:dd:74:b1:3b:b0:22:d4:51:6c:49:0c:88:7a:a9:
                    83:40:52:b5:36:ae:0e:ed:63:30:b8:05:f5:f6:fd:
                    c5:fd:52:69:34:f7:10:02:98:9a:7f:f0:a4:47:ff:
                    d1:cb:82:75:b5:aa:51:f5:2a:1e:3e:6b:ad:aa:8a:
                    58:87:33:c6:b6:b5:ce:b4:82:76:2f:9b:d5:5f:a6:
                    fc:9c:c5:e8:cf:2f:40:77:e7:cf:fb:46:0c:e8:48:
                    66:0f:92:78:76:90:03:c6:43:a6:92:ec:b7:ed:e3:
                    e1:51:bc:39:f1:88:04:55:44:a6:24:f3:ee:3a:dc:
                    ac:d1:88:cb:14:d4:5a:de:cf:ed:4c:db:5a:9d:bd:
                    81:db:96:ce:d6:39:f8:7d:4c:f8:70:eb:84:df:57:
                    cf:94:9e:c3:b2:1d:ef:01:0b:50:50:66:c5:0b:2a:
                    43:88:5e:39:2f:75:b9:fb:6e:18:6d:ee:82:3d:66:
                    4e:3a:34:6e:e7:65:4b:74:ce:3a:cf:d2:a6:7b:02:
                    40:a5:f4:60:d0:d2:ce:ec:73:df:71:34:df:f2:3f:
                    45:d0:7c:8a:9d:5f:30:9e:1d:ca:0d:bf:f2:cb:74:
                    10:12:1c:10:ad:13:53:f4:96:ec:d0:e1:01:82:5d:
                    1e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:88:23:FB:3F:A8:95:DD:2A:02:C7:15:85:7B:1B:A4:AD:F3:2B:EC
            X509v3 Authority Key Identifier:
                keyid:F8:77:E7:67:C0:24:1E:52:96:FE:33:32:95:99:DE:FA:3D:2D:A1:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HfnZ8AkHlKW_jMylZne-j0toUE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:39:03:60:83:b0:b8:ac:bf:a3:4c:64:50:3e:b3:15:b7:56:
         3c:2a:db:f7:bc:cb:6a:4c:6c:63:f7:3f:97:09:d4:cf:42:19:
         ca:0c:06:71:46:b1:40:75:b1:ef:f7:0c:2c:b6:df:fd:21:31:
         96:8f:b7:fe:87:f8:fd:2d:c3:ac:e2:4a:0f:d7:aa:9b:19:1c:
         94:40:60:f1:14:4d:f2:b2:59:91:71:71:69:62:06:12:d3:88:
         2d:a5:9b:66:1c:99:0a:e7:56:f8:55:82:10:18:ce:fc:27:5d:
         05:fc:eb:44:6e:a4:4a:6a:03:9a:40:97:5d:1d:29:91:13:7f:
         47:a4:0a:94:e0:24:82:b2:3f:e3:95:78:60:d7:16:96:57:e6:
         e3:71:9b:c1:72:d7:ab:cc:b1:72:4b:0e:c6:8e:60:94:04:29:
         ce:cc:e8:86:08:7f:36:a9:41:08:c0:19:07:a3:1a:98:d5:b4:
         73:45:aa:3a:51:ce:62:71:e9:0a:09:22:07:2e:26:68:a5:a0:
         a2:af:c1:8d:57:1b:71:79:bd:cf:02:36:0e:15:21:c0:69:a2:
         a9:d3:85:95:18:91:30:46:88:1f:f2:04:d1:44:5e:c1:c8:45:
         f9:88:a5:8b:eb:84:ae:02:a9:cf:15:22:b1:6d:2f:97:8f:f6:
         cd:56:0c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----