Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.mft
File:                     m0YBtrC3j7j-njkzSoG1pd1ZVik.mft (raw, json)
Hash identifier:          libLnQFmcmQsKkaOXh/rAMsruD+ZDdVEWVAF5OwPVuI=
Subject key identifier:   B1:9C:D0:13:39:7C:EC:68:13:0B:7C:9C:F3:BE:87:BC:3E:9E:06:30
Authority key identifier: 9B:46:01:B6:B0:B7:8F:B8:FE:9E:39:33:4A:81:B5:A5:DD:59:56:29
Certificate issuer:       /CN=A9157BF7/serialNumber=9B4601B6B0B78FB8FE9E39334A81B5A5DD595629
Certificate serial:       07A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0YBtrC3j7j-njkzSoG1pd1ZVik.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.mft
Manifest number:          077C
Signing time:             Thu 30 Jan 2025 21:18:47 +0000
Manifest this update:     Thu 30 Jan 2025 21:18:46 +0000
Manifest next update:     Thu 06 Feb 2025 21:18:46 +0000
Files and hashes:         1: m0YBtrC3j7j-njkzSoG1pd1ZVik.crl (hash: Yy7F+WNRsBsd3Lh7FR8Yq812kTULBuzOmGEqdwJIcIE=)
                          2: 1F88812AAD5311EBA93CEB69C4F9AE02.roa (hash: JxqBCjBT9K2ryaUj1ZqNSpK/pt6W0FIjzbMts6xP/O4=)
                          3: 1F046D5EAD5311EBA93CEB69C4F9AE02.roa (hash: QsOZtg7wgKPEMzZpQNjN0cwc1dkJJaHe5vPoUHzDi2E=)
                          4: 2B67707C449911EC873EEE33C4F9AE02.roa (hash: dfHP081F3AjgTxtk/Kol9IWl1ohuGadWFkcTnhyHleE=)
                          5: 1E69B82CAD5311EBA93CEB69C4F9AE02.roa (hash: BiwvJd+dCFyWKlGsVpLMc1ZbpjUFsliw37pP+lj/D+c=)
                          6: 202D8382AD5311EBA93CEB69C4F9AE02.roa (hash: 9CVFCRxGd96rDHgxt1WsX71RS0A2IwtDONeOpXumo3o=)
                          7: F4DFF910CB0311EC817AED0BC4F9AE02.roa (hash: 3EaaIhegA520f9Jq9jn6VCkgAQsJfc5446BLnaSLsuo=)
                          8: 1DC10D94AD5311EBA93CEB69C4F9AE02.roa (hash: lLU3brsFcJmxfza+HPsqiH2/FCfohQp/aB2RU3YA2bQ=)
                          9: 20BC506CAD5311EBA93CEB69C4F9AE02.roa (hash: FAebLgMlFuIn+Jv3/Kno5dJ1sOWIko5p1IcZ8bmbDwE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1954 (0x7a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157BF7/serialNumber=9B4601B6B0B78FB8FE9E39334A81B5A5DD595629
        Validity
            Not Before: Jan 30 21:18:46 2025 GMT
            Not After : Feb  6 21:18:46 2025 GMT
        Subject: CN=679becb6-18d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:37:94:6b:9e:84:ea:31:1e:38:4d:bc:1b:43:
                    a9:19:6f:c1:cc:ce:95:fc:51:d0:00:92:1b:67:8c:
                    cc:15:5e:d1:ee:fd:ed:1f:75:f4:16:0b:a3:df:18:
                    e7:7a:6d:6c:0a:05:6b:e1:d0:02:13:18:96:95:c5:
                    15:0f:f1:7a:46:38:04:cb:83:b3:9e:0b:61:ac:90:
                    ef:0a:60:3a:17:bf:a3:e9:83:45:d5:46:3d:50:da:
                    a7:b8:46:5f:3f:f2:fa:da:4e:83:9c:ef:cf:25:fe:
                    83:d6:9a:6d:35:25:f8:1f:2c:ae:62:c5:75:83:c6:
                    eb:ec:ba:03:08:8a:a3:e9:b9:4a:0f:fa:e3:80:91:
                    3d:42:0a:a4:3d:5d:d6:e5:20:50:8d:bb:5d:60:10:
                    1f:78:e0:b4:67:ad:97:1a:35:d3:9d:da:84:78:94:
                    41:d4:4d:fe:e0:9f:20:e8:be:cf:86:9b:37:aa:51:
                    74:df:f4:78:98:22:b8:65:9b:f0:c3:11:a8:46:eb:
                    d5:1b:79:35:41:c3:7f:97:b9:e9:86:c8:11:22:99:
                    6c:4a:c0:f7:12:dc:3f:38:07:cf:1f:a5:d8:c3:7a:
                    a3:53:69:ea:ef:7a:8f:9c:17:26:df:45:17:47:56:
                    b9:8e:37:52:83:31:77:fd:88:40:00:19:61:91:2f:
                    55:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:9C:D0:13:39:7C:EC:68:13:0B:7C:9C:F3:BE:87:BC:3E:9E:06:30
            X509v3 Authority Key Identifier:
                keyid:9B:46:01:B6:B0:B7:8F:B8:FE:9E:39:33:4A:81:B5:A5:DD:59:56:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0YBtrC3j7j-njkzSoG1pd1ZVik.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:38:bf:b9:d3:fe:ea:e2:fb:bb:3c:76:5e:c1:35:13:a1:51:
         b8:05:17:8b:2d:0a:8e:94:66:98:88:65:89:6c:00:09:4a:0f:
         15:50:70:8c:b4:f7:92:2c:c9:6a:b2:0b:60:4d:25:4c:c5:e5:
         cb:b2:6e:c6:c7:92:fd:79:06:80:42:6b:e0:20:03:5e:20:9b:
         3a:2d:b5:4e:9f:a9:e9:12:a0:a5:3e:61:56:0f:02:b5:bf:1b:
         2d:fa:71:db:a9:cf:e1:99:df:b1:98:29:a7:4f:d5:f9:9d:5c:
         f8:06:3c:42:6b:4e:6a:a9:27:84:6d:c6:13:30:7c:51:d9:ce:
         a6:b4:17:23:4e:3a:75:23:86:0d:3e:04:7f:16:d2:06:3b:52:
         67:42:a5:db:b7:8b:60:ff:97:d4:85:d7:4c:b3:f2:42:f2:25:
         29:9b:70:88:ba:f2:3f:ba:8a:4e:b3:36:8f:0c:43:12:ff:d1:
         f6:cf:1b:b8:af:36:90:bd:10:78:27:95:3e:44:65:75:17:be:
         45:d8:e4:05:10:78:a1:04:76:ac:2d:cc:20:ca:e3:be:46:50:
         bf:1c:bf:28:7b:aa:d2:b9:57:7d:59:26:69:81:79:47:95:9c:
         cf:3f:71:4c:b4:01:e3:36:6b:aa:10:0e:68:1b:a6:6c:cd:8e:
         f2:e0:8a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----