Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft
File:                     OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft (raw, json)
Hash identifier:          k4aivJem48kjQn0i/jooJe5rjl9v8hiwmDtclO0DJZ4=
Subject key identifier:   69:6C:83:BA:C6:C5:59:AB:F2:3A:59:7E:FD:DF:A0:5F:E6:87:61:84
Authority key identifier: 39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD
Certificate issuer:       /CN=A9157D67/serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD
Certificate serial:       0AC4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft
Manifest number:          0928
Signing time:             Thu 30 Jan 2025 22:04:35 +0000
Manifest this update:     Thu 30 Jan 2025 22:04:34 +0000
Manifest next update:     Thu 06 Feb 2025 22:04:34 +0000
Files and hashes:         1: OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl (hash: V7hbwxqPn9T75QrIrE/tgIBaFZhRErVxPzBd1R1Yn/A=)
                          2: EDE34AF4C97511EF94DD4366C4F9AE02.roa (hash: vM7ZfocFgWeh1tDWg7PDf274OmTSR/DdeyciUlvuHSY=)
                          3: 93EE047E4BB511EE9309AA4EC4F9AE02.roa (hash: cKLqzBD3UNEjua94H34t+S8hZV/aOFg8bXhQVhmFTLs=)
                          4: 72C9BE36950211EFAC892C5EC4F9AE02.roa (hash: Bpq9dhCpjI1cT2kel0jPo45D0NBWXD/qIfwghmBzSyI=)
                          5: 263DB02C4BB611EE9B959267C4F9AE02.roa (hash: Sc37SATsVjDUvoeuant9XpguxSfk6BLAFRWRVkPZh+Q=)
                          6: B803EDC45E9711EF8BA65030C4F9AE02.roa (hash: u6M4KdbwNmsFC5v3h5AVL6+1owkS01tx+CKD5jlB+7E=)
                          7: AB96EF3852CD11ECAB209C5FC4F9AE02.roa (hash: PTN3D9DukvxulJCnZfplXeEJi7h63+XDY8ZJvEz9E/c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2756 (0xac4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157D67/serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD
        Validity
            Not Before: Jan 30 22:04:34 2025 GMT
            Not After : Feb  6 22:04:34 2025 GMT
        Subject: CN=679bf773-12fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cc:9e:a6:ff:1c:aa:55:cf:d0:35:d5:de:8f:
                    df:f9:5c:2a:e3:ba:9f:61:e1:d4:c9:e5:a7:a0:0b:
                    1a:73:d4:b8:04:9b:57:01:54:80:a0:38:c3:1f:f2:
                    e7:1b:04:7e:a3:f9:42:a2:35:5f:34:a1:bb:cb:45:
                    f9:06:e4:10:9c:57:dd:1b:43:33:f2:47:7b:9c:5a:
                    b5:40:5f:f5:08:9e:25:a3:9b:fd:5e:c7:f2:20:87:
                    c0:ca:1f:f7:02:e1:6d:81:1e:c9:75:cc:3a:28:07:
                    34:96:c6:35:e8:0a:5f:50:28:ec:be:55:f6:c7:59:
                    a4:a5:84:35:5e:63:aa:ad:f7:05:8c:dc:8a:06:cc:
                    22:9c:81:b9:d1:4f:5f:c8:ba:e8:20:52:64:be:02:
                    a9:60:14:9d:36:78:53:e1:5e:0a:d8:d5:db:40:b6:
                    a6:d0:97:49:e4:18:ba:f7:f5:9e:d7:92:33:a3:63:
                    24:17:d3:11:91:e3:40:40:cf:2a:31:5f:12:38:f3:
                    f2:ad:b5:35:d3:82:12:fa:c8:a4:97:d5:c6:9d:9a:
                    48:59:c9:7b:ca:cc:fb:b8:77:67:16:97:5c:ca:7a:
                    0d:e3:4d:fd:0a:0c:09:ee:9b:81:70:be:4d:f3:65:
                    16:34:f8:cf:f8:66:3f:53:7f:d4:57:9f:eb:2c:c6:
                    92:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:6C:83:BA:C6:C5:59:AB:F2:3A:59:7E:FD:DF:A0:5F:E6:87:61:84
            X509v3 Authority Key Identifier:
                keyid:39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:ba:f6:a3:2a:62:db:b0:5d:d1:00:bc:69:6c:65:17:f0:3d:
         33:dc:19:cb:54:11:37:b0:25:cb:6f:41:f8:6b:57:da:f4:65:
         f4:95:81:76:85:8a:4c:6d:94:10:7d:0a:f3:25:31:48:3d:98:
         03:fd:03:07:9b:9c:58:a3:bc:64:91:74:7a:6b:3c:a3:f5:95:
         5c:cf:8e:f2:98:d9:43:9b:49:af:d7:36:a4:cd:4c:14:63:48:
         b4:78:74:eb:61:b2:b6:07:11:6b:1c:15:98:e1:ca:f2:9c:d4:
         58:d0:2d:4a:bc:55:63:5e:57:49:17:2b:fb:65:49:c4:da:d2:
         a0:d5:5e:ea:ba:33:b3:e2:7b:d5:5d:51:96:6b:13:8e:d5:32:
         77:2f:86:60:c9:18:11:58:38:dd:be:1f:bf:63:66:22:d5:71:
         8f:17:a7:ab:d7:2a:0e:ba:5f:41:48:ee:42:e8:10:52:98:cd:
         b8:2c:e9:f0:ec:07:4b:3e:d9:a7:d3:57:4b:cf:15:b3:84:bd:
         72:80:63:74:51:40:f5:95:00:5c:b8:5e:d9:f7:b0:23:c4:0f:
         ab:28:ec:06:a1:31:9d:8c:aa:ae:8e:ce:12:f1:f3:0b:50:30:
         ff:14:3b:83:cf:24:3c:5c:54:a2:9e:86:54:c3:31:2b:f9:c9:
         93:27:25:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----