Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.mft
File:                     9fHi3rMlVisihf-LXeJd8srfdwc.mft (raw, json)
Hash identifier:          nHXstD/9QsyIxW6BLas5Dx+H58OCoToMzWfXefPGRg4=
Subject key identifier:   6C:91:86:0A:81:5D:D6:18:15:94:AD:2E:2F:26:97:ED:93:E7:DE:F9
Authority key identifier: F5:F1:E2:DE:B3:25:56:2B:22:85:FF:8B:5D:E2:5D:F2:CA:DF:77:07
Certificate issuer:       /CN=A915B4B5/serialNumber=F5F1E2DEB325562B2285FF8B5DE25DF2CADF7707
Certificate serial:       9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fHi3rMlVisihf-LXeJd8srfdwc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.mft
Manifest number:          99
Signing time:             Fri 31 Jan 2025 05:25:20 +0000
Manifest this update:     Fri 31 Jan 2025 05:25:20 +0000
Manifest next update:     Fri 07 Feb 2025 05:25:20 +0000
Files and hashes:         1: 9fHi3rMlVisihf-LXeJd8srfdwc.crl (hash: eLUS5lZZZN53kOk6OQwDDwkNCS7Qrqou3FIZ8rhy770=)
                          2: E0207030F13611EE869F9E34C4F9AE02.roa (hash: OsYm03YOb1sFS9q082zuXs6miPfh1tqBo5SwMn83UWQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154 (0x9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B4B5/serialNumber=F5F1E2DEB325562B2285FF8B5DE25DF2CADF7707
        Validity
            Not Before: Jan 31 05:25:20 2025 GMT
            Not After : Feb  7 05:25:20 2025 GMT
        Subject: CN=679c5ec0-84bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:de:29:b6:f9:ce:bd:4f:6d:70:4f:23:a7:ad:
                    2f:93:8c:50:48:22:5b:ab:8a:4b:f2:d1:03:b2:ab:
                    bc:c9:e4:43:e0:69:83:2f:88:59:05:45:14:07:62:
                    6e:79:21:20:4e:c5:a4:00:9e:22:3d:5e:e0:68:5d:
                    30:8b:e4:a9:6d:a3:78:7c:d7:b7:d3:09:7a:44:a8:
                    52:b3:07:87:cc:0c:85:19:f0:34:b2:5e:af:c5:db:
                    ab:49:2f:ac:4d:1c:f6:4c:81:0f:c1:94:76:0f:f1:
                    7f:de:96:08:31:b9:88:eb:b3:cd:af:ff:7d:5e:6c:
                    49:42:b5:a3:b5:de:71:74:93:26:44:e9:87:01:ce:
                    e3:7a:95:21:94:26:2c:cc:0a:0c:2b:30:95:25:d1:
                    aa:4c:2d:6f:d3:e5:7b:6d:a1:62:8f:db:f9:09:0e:
                    0c:68:74:e5:a4:f4:d6:fd:a0:da:07:bb:71:16:43:
                    45:e2:14:72:56:7e:c4:64:c4:7e:b3:8d:01:c1:0f:
                    12:c1:98:77:66:ae:d1:f8:a4:5d:60:49:1b:7f:bf:
                    be:36:73:70:ef:96:42:e0:c5:bb:e7:64:86:07:a7:
                    86:40:04:90:08:b5:03:81:9c:65:0d:e7:0f:cd:23:
                    45:88:c3:ef:45:07:9e:f1:cd:69:56:ca:8b:a4:09:
                    aa:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:91:86:0A:81:5D:D6:18:15:94:AD:2E:2F:26:97:ED:93:E7:DE:F9
            X509v3 Authority Key Identifier:
                keyid:F5:F1:E2:DE:B3:25:56:2B:22:85:FF:8B:5D:E2:5D:F2:CA:DF:77:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fHi3rMlVisihf-LXeJd8srfdwc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:d9:58:04:ff:7e:6e:6b:e2:6d:f3:9d:95:51:5e:c1:92:17:
         2e:42:bd:99:0a:84:0d:be:72:f5:3c:9f:b2:34:da:cc:9e:7b:
         2a:1a:c9:1c:73:55:e3:85:48:2d:e5:ac:ca:10:2e:8c:d4:4a:
         0d:61:7e:a1:58:5c:1e:9d:59:14:7f:47:78:16:94:4d:02:3c:
         15:c6:fb:97:c4:94:32:ea:2a:90:ab:5a:fd:59:e9:b9:84:dd:
         99:1b:26:e8:06:8b:30:0f:11:87:f4:f6:ad:45:50:bd:78:be:
         f7:51:e0:cd:36:09:73:a6:24:21:c6:af:e4:26:af:b2:f5:8d:
         26:23:88:ef:0b:12:cf:31:06:ff:d5:92:53:07:9c:b1:44:b1:
         f5:4b:dd:27:ef:50:eb:11:be:ab:d0:ee:0a:67:eb:7b:f5:0a:
         ce:ec:bf:1a:22:dc:81:68:6f:ca:c6:2a:67:e6:11:22:e1:76:
         0d:15:1d:01:9f:68:8a:d8:48:70:7e:be:2e:f3:0f:d6:aa:24:
         1c:fc:54:b8:13:05:7d:96:5e:55:3a:72:3a:cf:22:00:4c:f9:
         05:64:ba:ba:dc:1d:bc:19:cb:47:da:ca:20:5b:cd:30:7e:ad:
         b5:47:6e:6e:81:ee:9b:53:fd:0e:35:52:ed:1b:e4:b9:02:2d:
         73:1f:46:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----