Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft
File:                     FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft (raw, json)
Hash identifier:          lWtPhd0gTK/mUgjp7jiRApHkbEjVrzAqmXI1lC7BwuY=
Subject key identifier:   8F:28:CF:42:A2:EE:A6:EF:64:8B:0A:05:39:1F:01:7A:35:03:D9:8E
Authority key identifier: 15:2A:3B:43:22:5C:FA:2C:5F:8D:E2:7A:9A:68:93:D3:B2:3F:5D:E3
Certificate issuer:       /CN=A91468A1/serialNumber=152A3B43225CFA2C5F8DE27A9A6893D3B23F5DE3
Certificate serial:       0A86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSo7QyJc-ixfjeJ6mmiT07I_XeM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft
Manifest number:          0A7F
Signing time:             Thu 30 Jan 2025 19:41:11 +0000
Manifest this update:     Thu 30 Jan 2025 19:41:10 +0000
Manifest next update:     Thu 06 Feb 2025 19:41:10 +0000
Files and hashes:         1: FSo7QyJc-ixfjeJ6mmiT07I_XeM.crl (hash: eNqcrvSwLeUgGZQoNGQLTcSQvFDwGJmuQBg2J93OS34=)
                          2: F0520A385DD611EAA4AD4767C4F9AE02.roa (hash: lmF/e5IG5EpeViX3RQEVWvmsb2v09JOH6dxA1kV5Fos=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2694 (0xa86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91468A1/serialNumber=152A3B43225CFA2C5F8DE27A9A6893D3B23F5DE3
        Validity
            Not Before: Jan 30 19:41:10 2025 GMT
            Not After : Feb  6 19:41:10 2025 GMT
        Subject: CN=679bd5d7-6b78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c2:79:ba:73:aa:fc:d6:1c:f4:1a:51:8d:c5:
                    ac:d0:5b:51:9f:0a:ba:3c:1d:5d:96:5b:f5:16:09:
                    98:0b:f9:55:dd:02:4e:17:ee:22:04:ec:1f:2a:a4:
                    eb:d9:24:97:d5:fa:3f:3b:04:3b:63:ec:66:19:25:
                    e1:ca:34:26:62:af:d4:c0:ee:0f:e4:37:a4:ff:6d:
                    d2:5a:e9:cc:cc:04:29:b7:dc:03:47:9d:58:2d:b1:
                    b4:b4:6f:6c:4e:39:ee:f1:a7:24:b8:72:a7:a5:1c:
                    7d:d5:3d:ce:e6:43:bf:72:3c:1e:97:6c:94:7f:bc:
                    56:56:73:b0:aa:5b:f8:01:5a:34:81:0f:68:7d:fd:
                    c7:98:57:81:14:ed:69:90:c5:5c:ec:c1:53:3e:9a:
                    31:3f:3e:b3:c7:38:bf:0b:87:e1:98:97:b0:b2:be:
                    99:b0:2e:5e:60:33:fa:bb:2e:4e:3f:dc:25:bb:60:
                    30:aa:bf:03:7b:d3:ef:e5:8a:f2:e9:a3:d1:1b:ef:
                    50:69:61:c8:e2:6c:26:c3:53:e3:d5:af:dd:02:4a:
                    0f:95:32:5d:05:e3:38:63:2b:2f:a2:67:0d:64:c6:
                    05:1b:d4:4d:6e:9d:2f:ae:46:12:bd:b4:d1:82:62:
                    11:7c:87:75:9f:15:70:cd:03:02:5d:c8:6f:bb:c0:
                    51:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:28:CF:42:A2:EE:A6:EF:64:8B:0A:05:39:1F:01:7A:35:03:D9:8E
            X509v3 Authority Key Identifier:
                keyid:15:2A:3B:43:22:5C:FA:2C:5F:8D:E2:7A:9A:68:93:D3:B2:3F:5D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSo7QyJc-ixfjeJ6mmiT07I_XeM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:28:ba:ab:21:75:b2:3b:63:b1:8c:c0:d8:a8:d7:0c:fa:7f:
         9d:cc:4f:43:5b:81:94:19:c2:06:07:af:00:d3:3d:bb:d5:f7:
         f7:61:2e:43:9f:0f:96:38:14:47:f0:35:8c:06:07:fd:61:68:
         bd:6f:2a:fa:17:f9:41:56:ca:40:93:d1:13:a0:a8:1a:eb:6b:
         bd:5f:fc:43:01:0b:1f:86:22:f6:c6:d4:27:13:75:66:bb:6a:
         4a:04:d6:c7:e5:87:e1:36:1b:16:09:d4:a9:10:fe:d8:4a:10:
         21:ed:4f:03:32:e3:b6:1c:28:27:be:22:48:f8:fe:9e:ae:39:
         1b:cd:33:7a:58:df:cd:e5:bf:e8:23:f8:cb:d3:36:a6:17:f8:
         5a:54:6f:d1:3a:c2:17:93:e5:70:e9:43:c4:97:2a:b9:39:48:
         11:b1:d1:8e:bc:90:9f:0b:da:94:37:99:94:56:14:39:c3:90:
         e9:b8:f8:59:82:1a:f7:53:54:26:c8:09:41:29:dc:63:e2:d6:
         11:ff:87:32:53:8e:96:cb:a4:b2:55:b7:2f:39:92:81:14:f6:
         47:73:91:18:f9:37:cb:b7:90:9e:07:d8:68:db:7f:2b:a4:e5:
         37:d7:b8:73:7e:5f:21:91:1c:b5:29:ac:5f:11:20:e1:12:8d:
         da:eb:bc:ca
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDY4QTExMTAvBgNVBAUTKDE1MkEzQjQzMjI1Q0ZBMkM1RjhERTI3QTlBNjg5M0Qz
QjIzRjVERTMwHhcNMjUwMTMwMTk0MTEwWhcNMjUwMjA2MTk0MTEwWjAYMRYwFAYD
VQQDEw02NzliZDVkNy02Yjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAysJ5unOq/NYc9BpRjcWs0FtRnwq6PB1dllv1FgmYC/lV3QJOF+4iBOwfKqTr
2SSX1fo/OwQ7Y+xmGSXhyjQmYq/UwO4P5Dek/23SWunMzAQpt9wDR51YLbG0tG9s
Tjnu8ackuHKnpRx91T3O5kO/cjwel2yUf7xWVnOwqlv4AVo0gQ9off3HmFeBFO1p
kMVc7MFTPpoxPz6zxzi/C4fhmJewsr6ZsC5eYDP6uy5OP9wlu2Awqr8De9Pv5Yry
6aPRG+9QaWHI4mwmw1Pj1a/dAkoPlTJdBeM4YysvomcNZMYFG9RNbp0vrkYSvbTR
gmIRfId1nxVwzQMCXchvu8BRFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI8oz0Ki
7qbvZIsKBTkfAXo1A9mOMB8GA1UdIwQYMBaAFBUqO0MiXPosX43ieppok9OyP13j
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjhBMS8yRTFDQzY0NDUx
MTgxMUVBOTM4N0M2NkJDNEY5QUUwMi9GU283UXlKYy1peGZqZUo2bW1pVDA3SV9Y
ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZTbzdReUpjLWl4ZmplSjZtbWlUMDdJX1hlTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NjhBMS8yRTFDQzY0NDUxMTgxMUVBOTM4N0M2NkJDNEY5QUUwMi9GU283UXlKYy1p
eGZqZUo2bW1pVDA3SV9YZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAyKLqrIXWyO2OxjMDYqNcM+n+dzE9DW4GUGcIGB68A0z271ff3YS5D
nw+WOBRH8DWMBgf9YWi9byr6F/lBVspAk9EToKga62u9X/xDAQsfhiL2xtQnE3Vm
u2pKBNbH5YfhNhsWCdSpEP7YShAh7U8DMuO2HCgnviJI+P6erjkbzTN6WN/N5b/o
I/jL0zamF/haVG/ROsIXk+Vw6UPElyq5OUgRsdGOvJCfC9qUN5mUVhQ5w5DpuPhZ
ghr3U1QmyAlBKdxj4tYR/4cyU46Wy6SyVbcvOZKBFPZHc5EY+TfLt5CeB9ho238r
pOU317hzfl8hkRy1KaxfESDhEo3a67zK
-----END CERTIFICATE-----