Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.mft
File:                     luWqcIJLjRPdz-YfzJogytZeYME.mft (raw, json)
Hash identifier:          h+eTlww7sXSEjqS3miceqXwikExwOTDnZx0lFs9zm1I=
Subject key identifier:   52:7A:91:B0:A7:20:EC:46:39:BF:7B:E0:66:2D:AE:4A:ED:EC:68:BA
Authority key identifier: 96:E5:AA:70:82:4B:8D:13:DD:CF:E6:1F:CC:9A:20:CA:D6:5E:60:C1
Certificate issuer:       /CN=A9155688/serialNumber=96E5AA70824B8D13DDCFE61FCC9A20CAD65E60C1
Certificate serial:       062F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/luWqcIJLjRPdz-YfzJogytZeYME.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.mft
Manifest number:          0628
Signing time:             Thu 30 Jan 2025 22:39:17 +0000
Manifest this update:     Thu 30 Jan 2025 22:39:17 +0000
Manifest next update:     Thu 06 Feb 2025 22:39:17 +0000
Files and hashes:         1: luWqcIJLjRPdz-YfzJogytZeYME.crl (hash: eeM7UuFoh+zTg3QjEV+KVGxCHFkeNii8clEclS6EzAA=)
                          2: 6656B366814C11EB913AEC78C4F9AE02.roa (hash: 1SLFE0qnXhzMWp508BSvW25KNRqWfMvK7tRODXuYoxY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1583 (0x62f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155688/serialNumber=96E5AA70824B8D13DDCFE61FCC9A20CAD65E60C1
        Validity
            Not Before: Jan 30 22:39:17 2025 GMT
            Not After : Feb  6 22:39:17 2025 GMT
        Subject: CN=679bff95-bdda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:07:9a:55:33:12:2f:12:f2:59:1d:86:cb:85:
                    cd:33:ac:d1:18:ff:df:16:62:9b:8c:8e:ee:0f:c5:
                    d8:5f:8e:a5:d5:d5:69:27:69:cd:b4:99:0e:ee:d4:
                    de:f7:99:ab:1d:a6:95:c7:60:59:62:18:75:57:2e:
                    83:ae:44:bd:fb:82:e1:8e:ef:26:2d:3d:6f:6f:ec:
                    a1:1a:07:cc:94:51:7f:50:37:aa:78:4b:4b:39:e3:
                    58:8e:78:a4:23:20:67:28:49:8f:3f:84:a0:bd:02:
                    94:82:02:d2:df:c4:46:19:54:9e:cb:8a:10:78:89:
                    7a:23:cf:23:d6:09:7c:37:d7:f2:de:4c:95:4d:30:
                    c7:72:ca:84:6f:ad:89:1b:7f:6b:d1:e7:be:97:5a:
                    10:f6:c7:a0:d9:ef:e3:0d:4f:55:f8:91:7e:19:aa:
                    89:bf:96:da:50:53:74:74:2f:60:cb:66:d3:d6:53:
                    b0:10:22:fc:0e:3c:23:08:18:3d:f5:50:1c:5c:c5:
                    19:d0:a0:1b:03:fc:31:23:33:21:d8:ac:52:b2:38:
                    87:50:6d:7d:ee:ec:ba:03:77:4d:c0:ce:0d:c6:1b:
                    61:04:49:f3:50:db:1d:ea:8d:b5:23:f0:25:99:b2:
                    c4:8f:e4:b0:a5:a8:48:88:bf:dc:62:65:9d:4e:04:
                    9e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:7A:91:B0:A7:20:EC:46:39:BF:7B:E0:66:2D:AE:4A:ED:EC:68:BA
            X509v3 Authority Key Identifier:
                keyid:96:E5:AA:70:82:4B:8D:13:DD:CF:E6:1F:CC:9A:20:CA:D6:5E:60:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/luWqcIJLjRPdz-YfzJogytZeYME.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:e4:d0:23:7f:89:ff:70:ad:b0:73:88:30:79:48:c7:ea:96:
         af:17:36:c3:9a:c6:3c:cf:37:81:3d:f6:d0:1d:00:fe:9b:fe:
         f5:ef:58:3c:cc:d7:82:7c:a5:60:0c:5d:f4:3b:ff:54:91:5c:
         4b:1b:a7:14:61:8d:07:75:34:54:70:93:63:08:d4:6d:44:0f:
         68:32:2a:c4:f4:fa:a8:2a:f4:cf:5a:d2:7b:3f:5e:50:66:47:
         ba:5e:6e:ca:cc:6a:a2:0e:7d:c4:4e:04:68:a4:33:ad:da:24:
         ad:2b:97:ef:bf:8b:ae:f4:03:0f:65:af:7d:ea:fb:7d:b1:c2:
         e1:a7:31:43:2d:85:37:f3:3a:3c:2f:b2:3a:39:62:7f:d4:e0:
         ae:ff:87:86:fa:00:be:e2:71:86:e2:3b:3d:2c:c9:ca:cb:77:
         68:23:78:ec:d9:93:aa:5f:59:21:af:0e:d1:6a:7a:ff:09:14:
         cc:eb:3e:a8:c0:ec:70:0d:60:45:43:60:53:00:91:d1:1b:28:
         f4:e0:a2:e6:79:e1:cd:a3:5d:6c:c6:43:9b:17:82:58:30:dd:
         4a:b7:6f:f6:fc:65:d6:f9:2e:e8:f3:09:7c:f8:3b:de:4e:c3:
         6d:fd:bb:cd:1c:5c:7e:92:bf:89:6d:b0:4f:2e:2a:bf:31:e2:
         c2:1f:92:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----