Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.mft
File:                     BzgX21Kc2-s_-TiuXuCEiOF-TpA.mft (raw, json)
Hash identifier:          vLO04l4VbRzeFiJiSoOwqiCZLpVjSsok2GUvVQ5odhs=
Subject key identifier:   74:8A:8C:48:25:9D:10:BD:B9:15:F9:0D:35:C9:48:EE:4D:71:63:81
Authority key identifier: 07:38:17:DB:52:9C:DB:EB:3F:F9:38:AE:5E:E0:84:88:E1:7E:4E:90
Certificate issuer:       /CN=A915B0C9/serialNumber=073817DB529CDBEB3FF938AE5EE08488E17E4E90
Certificate serial:       0196
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzgX21Kc2-s_-TiuXuCEiOF-TpA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.mft
Manifest number:          0193
Signing time:             Fri 31 Jan 2025 02:47:37 +0000
Manifest this update:     Fri 31 Jan 2025 02:47:36 +0000
Manifest next update:     Fri 07 Feb 2025 02:47:36 +0000
Files and hashes:         1: BzgX21Kc2-s_-TiuXuCEiOF-TpA.crl (hash: X0Ve3pnFj0z2X0dXaFNtoRs/HlMgc0SYEwfD3WIhl70=)
                          2: F0F09EAA7D1D11EDAE0CF917C4F9AE02.roa (hash: /AIOMPF379cdDnZ0oCHY5QGxjdpZh2kab3GCf0LfQ6w=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 406 (0x196)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B0C9/serialNumber=073817DB529CDBEB3FF938AE5EE08488E17E4E90
        Validity
            Not Before: Jan 31 02:47:36 2025 GMT
            Not After : Feb  7 02:47:36 2025 GMT
        Subject: CN=679c39c8-aee5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6a:d3:d2:f9:95:ed:23:e6:04:ab:16:56:ec:
                    2c:3b:fd:6e:7a:8d:4d:b0:1d:1e:a6:86:64:3f:48:
                    96:dc:5c:81:31:c9:7a:2b:87:e6:d0:60:8e:bb:a2:
                    c2:df:ae:13:59:f8:69:9e:cd:7f:ef:fa:2d:72:c4:
                    b8:1b:18:92:6f:64:2a:dc:40:7a:fa:8f:e9:fe:b1:
                    6f:2b:53:14:56:ee:63:18:1c:56:46:a6:87:b5:13:
                    54:4f:f6:83:fb:a7:dc:25:e6:6b:b4:1f:f3:63:be:
                    9d:04:bd:e1:0d:0f:5c:2f:57:5e:d1:2e:0c:a7:bb:
                    df:31:00:95:5b:99:a7:51:e8:7e:0b:c8:59:b5:e4:
                    20:f4:a1:58:20:5f:98:80:4c:7c:a6:b1:66:e9:b9:
                    97:db:43:c8:b9:6c:0a:57:3b:0f:98:7c:9c:8c:6a:
                    ef:05:6f:2f:6d:e4:19:a2:00:a0:03:f1:c5:89:3a:
                    8d:1f:52:f6:b3:83:cd:b6:09:14:c5:87:f4:1a:90:
                    09:7c:87:45:ac:33:c0:98:6d:4e:41:74:03:e3:45:
                    10:8d:4c:71:6d:fa:6a:bd:6f:f6:09:d0:1b:4d:4d:
                    09:7f:26:1a:fc:ac:2d:b5:ba:31:e6:ca:d5:62:b3:
                    d2:ed:3a:fe:23:74:a1:de:b8:1c:f4:53:ee:64:2c:
                    4c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:8A:8C:48:25:9D:10:BD:B9:15:F9:0D:35:C9:48:EE:4D:71:63:81
            X509v3 Authority Key Identifier:
                keyid:07:38:17:DB:52:9C:DB:EB:3F:F9:38:AE:5E:E0:84:88:E1:7E:4E:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzgX21Kc2-s_-TiuXuCEiOF-TpA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:ed:23:e3:39:5f:0c:d8:1e:7a:16:86:2f:ca:08:76:c4:e0:
         a6:a1:13:2c:be:b8:73:ac:1e:5f:8a:c0:12:4c:4c:ea:5e:99:
         b2:d1:4e:a4:bc:3b:69:f0:9f:d1:84:7f:fa:9e:0b:cd:ab:df:
         91:94:f9:2a:55:27:ed:94:f3:5f:60:d6:b1:0c:e3:85:ce:1a:
         c1:7c:7f:39:f9:3b:c2:c7:44:32:2b:37:87:b4:1c:bd:34:de:
         47:4b:be:10:81:ce:e7:47:46:28:49:6d:e0:7b:a3:6b:74:8b:
         72:b8:bd:ee:83:ac:9e:4d:13:26:cd:06:95:13:10:6f:67:cb:
         dc:e4:e5:97:fc:69:5e:16:d7:43:36:05:f7:43:fe:73:1c:c8:
         e6:e7:f8:a2:db:d1:00:da:f0:c2:33:e5:a2:6f:11:37:50:f1:
         13:28:9e:93:19:dd:d4:3e:c3:32:97:24:ff:d5:c7:05:5f:53:
         fc:2d:dd:c9:f8:4a:05:15:3b:8f:91:02:5f:38:e1:b7:75:32:
         3b:cc:8c:f0:0c:c2:06:2e:34:94:63:ec:26:a1:c3:eb:e7:43:
         86:44:38:70:21:ea:72:8a:f4:ee:a8:3b:76:83:aa:69:80:ab:
         13:d6:05:c5:4d:66:be:f8:00:15:0e:9d:bb:6f:53:36:1e:ed:
         df:23:f9:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----