Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft
File:                     ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft (raw, json)
Hash identifier:          iRVWZu1zDfrk0n88NZVd/7onxi4hwfI/8fyJZ5oC87Y=
Subject key identifier:   86:37:08:CB:E5:1F:52:3F:43:B6:9D:6C:A8:EC:23:83:31:8D:04:3C
Authority key identifier: 64:A0:6E:DA:F3:97:57:E4:28:D4:1E:71:20:69:74:FD:9F:FA:73:BD
Certificate issuer:       /CN=A9145C9B/serialNumber=64A06EDAF39757E428D41E71206974FD9FFA73BD
Certificate serial:       082D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft
Manifest number:          0828
Signing time:             Thu 30 Jan 2025 20:50:56 +0000
Manifest this update:     Thu 30 Jan 2025 20:50:56 +0000
Manifest next update:     Thu 06 Feb 2025 20:50:56 +0000
Files and hashes:         1: ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl (hash: HaNfwbXdrT6U1x/Fydm5xR9wR+TbDvam4EnMQ8XhsUs=)
                          2: CA44DDA6C5A111EAA8D93F54C4F9AE02.roa (hash: /ftC2uTOBPGHfei3sjcF0l8WczvnxJUD11gXFuZBxZo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2093 (0x82d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145C9B/serialNumber=64A06EDAF39757E428D41E71206974FD9FFA73BD
        Validity
            Not Before: Jan 30 20:50:56 2025 GMT
            Not After : Feb  6 20:50:56 2025 GMT
        Subject: CN=679be630-b80b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:92:8d:b7:55:6b:0e:d4:d2:3d:bd:be:a7:a8:
                    8a:1c:bb:0f:f2:cc:78:ce:b4:bd:99:8f:42:fc:92:
                    62:d9:5b:66:b8:0c:d1:ba:cc:0d:00:ce:42:ee:3c:
                    6a:cb:69:13:16:ec:1a:03:0c:19:ec:8d:b7:04:cc:
                    80:68:a7:11:60:b6:38:52:fa:d4:1c:9f:f3:47:14:
                    0c:d5:4e:52:21:0b:9e:6e:81:0e:53:ad:44:1b:6d:
                    7c:37:84:c0:ed:bf:16:6d:3e:ea:5f:58:8b:d8:07:
                    b5:64:5e:35:24:29:3b:9e:57:87:6a:e4:5d:7f:ad:
                    58:68:3b:69:fd:20:02:40:9e:96:25:99:3a:82:2b:
                    6e:d2:72:f9:3c:84:08:4d:2b:d5:72:a1:f8:4b:1a:
                    f7:de:e9:34:39:5b:bc:4d:f4:dd:24:fc:11:47:d3:
                    3b:d5:b1:53:c9:05:06:18:63:07:a4:30:93:b4:8c:
                    e6:97:fe:2b:c5:b9:be:61:92:30:aa:c6:9e:99:ac:
                    09:cc:43:1b:76:97:0f:29:60:44:57:be:d2:9b:8f:
                    78:ff:dc:28:4a:84:a6:0f:7b:ab:9d:58:41:4d:ef:
                    29:46:25:06:b9:0d:a2:9a:3f:d8:48:48:8c:35:10:
                    53:52:e6:20:e9:a8:a2:02:0d:eb:ab:80:63:af:12:
                    38:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:37:08:CB:E5:1F:52:3F:43:B6:9D:6C:A8:EC:23:83:31:8D:04:3C
            X509v3 Authority Key Identifier:
                keyid:64:A0:6E:DA:F3:97:57:E4:28:D4:1E:71:20:69:74:FD:9F:FA:73:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:03:5b:2d:dc:49:68:c5:ee:6a:56:1d:81:35:f8:31:e2:17:
         cb:34:7d:25:c8:6b:00:79:03:69:d0:dc:99:a0:46:b9:c0:4a:
         db:0d:13:a2:6d:16:ec:a8:17:83:2a:e9:85:13:dd:25:5f:1f:
         fe:99:8d:3e:cd:eb:64:05:b0:2c:7e:bc:55:6b:6b:b4:30:71:
         c8:c6:3a:a6:02:d7:b8:bb:85:18:f6:dd:20:fb:97:1b:38:7b:
         47:6e:c3:d7:64:f0:2a:b8:b4:a9:2e:d1:d9:e1:be:ff:64:28:
         b7:3c:c9:34:a7:1f:56:f4:67:50:7f:43:33:6e:a4:ac:7c:a9:
         a2:96:dd:95:d8:2f:22:8d:4f:34:b6:c7:60:94:fc:dc:f6:47:
         f3:84:22:df:cb:ee:02:eb:8c:c8:fd:78:c6:73:af:9e:e6:a6:
         ce:e2:9f:ad:8a:72:79:d2:e2:15:89:2a:84:c5:13:e2:e4:e5:
         8f:52:02:19:a1:68:d3:db:42:93:c8:c5:38:c9:dd:29:05:7d:
         21:af:a9:b6:20:bf:bf:d6:47:76:e3:06:64:5f:82:53:89:88:
         16:b2:e8:1f:f5:4e:de:6a:40:53:56:7e:ef:a6:3c:bb:0e:52:
         a9:8c:30:4d:3d:bd:2e:44:f9:fa:c3:87:34:b2:c6:38:b5:eb:
         5c:99:74:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----