Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft
File:                     967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft (raw, json)
Hash identifier:          Euu99UBUL7Y7q8pJOHOvuIKht8+1ULHzH+c9IFlu2IE=
Subject key identifier:   84:6C:25:B5:BC:5E:78:A7:70:03:E2:3F:49:EC:C4:F5:48:3A:C6:E2
Authority key identifier: F7:AE:D5:87:51:12:CC:FB:20:8E:71:82:47:B1:E4:9B:AA:FF:B8:65
Certificate issuer:       /CN=A915D0AC/serialNumber=F7AED5875112CCFB208E718247B1E49BAAFFB865
Certificate serial:       0138
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/967Vh1ESzPsgjnGCR7Hkm6r_uGU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft
Manifest number:          0131
Signing time:             Fri 31 Jan 2025 03:44:17 +0000
Manifest this update:     Fri 31 Jan 2025 03:44:16 +0000
Manifest next update:     Fri 07 Feb 2025 03:44:16 +0000
Files and hashes:         1: 967Vh1ESzPsgjnGCR7Hkm6r_uGU.crl (hash: Uk6nnS5ZdVd0/2EuqFadqsjcq4FEJ970LV+Mp5qZ9Cc=)
                          2: 5F52F24EBD2811EE9459FF47C4F9AE02.roa (hash: NdGIPH8f8wkgYW6zcP9LxqBI8GpzouxLlN3sIemW9iA=)
                          3: DD2A5994182F11EE82A0FC48C4F9AE02.roa (hash: cy1abmbl+JqrinSrVyT95t2qjBKaNUF64uwPHXi8Mu8=)
                          4: B9CCF2D4BD2711EE9958E946C4F9AE02.roa (hash: J7JqSqFB0utzju3agkbPPIteMCf05VWU5tDxkvd5OXY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 312 (0x138)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D0AC/serialNumber=F7AED5875112CCFB208E718247B1E49BAAFFB865
        Validity
            Not Before: Jan 31 03:44:16 2025 GMT
            Not After : Feb  7 03:44:16 2025 GMT
        Subject: CN=679c4711-c8b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3d:93:d6:d4:ad:a9:92:f2:7a:50:a6:ce:9a:
                    05:89:5a:8a:70:69:30:e5:ce:7c:31:91:d9:d4:9d:
                    de:c6:47:75:27:8e:d0:10:08:dd:12:a8:e4:e2:a7:
                    e9:41:4c:16:95:71:cd:5b:da:30:96:ed:73:7c:95:
                    64:a9:46:df:9c:98:d1:ff:3e:60:e2:ba:06:d2:ea:
                    bf:7d:27:d7:43:91:3a:00:03:82:f6:eb:02:d3:f0:
                    de:f1:d5:84:7c:ab:ef:38:70:34:86:31:5e:f9:89:
                    1b:a4:31:ed:ec:59:ae:5b:7c:e1:26:a8:0f:66:67:
                    0a:85:6f:ec:03:9b:c8:cd:3a:f8:99:9a:6e:77:09:
                    fb:ce:ec:37:a9:6c:0b:31:44:0b:15:8d:a0:e2:5a:
                    da:a2:b1:da:f3:18:e1:ee:81:ed:6a:35:2c:94:47:
                    18:a8:1c:7f:5b:5b:89:03:3c:28:cc:6d:bd:32:20:
                    f9:96:22:82:80:29:77:3a:eb:92:1c:7a:00:c2:53:
                    5c:e1:60:a0:e1:e5:d4:75:c5:c5:44:f7:34:aa:e8:
                    d9:98:dd:97:b6:d0:5c:b2:a7:9d:e3:07:2f:ff:67:
                    81:27:e2:10:47:d6:e7:0e:c9:0e:a6:c7:20:4c:85:
                    72:fb:c0:26:31:18:fc:dc:06:a3:ba:a0:25:33:dd:
                    56:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:6C:25:B5:BC:5E:78:A7:70:03:E2:3F:49:EC:C4:F5:48:3A:C6:E2
            X509v3 Authority Key Identifier:
                keyid:F7:AE:D5:87:51:12:CC:FB:20:8E:71:82:47:B1:E4:9B:AA:FF:B8:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/967Vh1ESzPsgjnGCR7Hkm6r_uGU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:1e:f0:8a:3b:85:e6:ce:df:50:44:98:5e:a6:07:ac:45:69:
         87:e8:4a:9a:08:b3:33:5f:a3:bd:2f:c6:03:c5:33:4c:ba:30:
         58:8f:d8:b2:80:0f:8a:35:1c:50:11:bc:22:70:1d:b5:5d:05:
         33:d8:2b:4b:41:7a:af:9e:03:25:c6:02:3c:75:26:60:09:67:
         1c:01:17:68:fb:82:0b:97:2d:6b:49:86:4c:b0:6d:79:42:fc:
         23:1e:0d:ac:7a:e8:6e:5f:05:ac:40:14:6d:1a:2a:7b:c6:05:
         78:8f:bb:06:9b:76:07:7a:6a:51:8c:c3:1a:ac:df:e2:2f:dd:
         51:1f:f5:a3:ac:b6:79:9c:06:c2:4a:9b:61:44:8e:ed:44:0c:
         67:77:fa:15:51:94:e4:cf:3e:fb:d7:e8:11:da:92:98:da:54:
         3d:1d:1b:d5:2f:fd:25:2b:93:b2:1b:85:a0:e4:6d:7b:b7:f5:
         0d:7a:c8:82:e0:c3:8c:64:66:56:4e:a3:fa:c9:1b:cb:eb:ec:
         2b:3d:bc:b9:28:66:47:c2:7f:f7:0e:99:08:8f:52:ff:39:c1:
         53:75:88:32:f1:b0:b5:77:60:97:03:64:74:1c:cd:09:c5:03:
         41:d2:85:97:47:d3:04:ba:dc:76:a7:6d:6f:80:57:e3:4a:9c:
         2a:b8:a4:be
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUQwQUMxMTAvBgNVBAUTKEY3QUVENTg3NTExMkNDRkIyMDhFNzE4MjQ3QjFFNDlC
QUFGRkI4NjUwHhcNMjUwMTMxMDM0NDE2WhcNMjUwMjA3MDM0NDE2WjAYMRYwFAYD
VQQDEw02NzljNDcxMS1jOGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuT2T1tStqZLyelCmzpoFiVqKcGkw5c58MZHZ1J3exkd1J47QEAjdEqjk4qfp
QUwWlXHNW9owlu1zfJVkqUbfnJjR/z5g4roG0uq/fSfXQ5E6AAOC9usC0/De8dWE
fKvvOHA0hjFe+YkbpDHt7FmuW3zhJqgPZmcKhW/sA5vIzTr4mZpudwn7zuw3qWwL
MUQLFY2g4lraorHa8xjh7oHtajUslEcYqBx/W1uJAzwozG29MiD5liKCgCl3OuuS
HHoAwlNc4WCg4eXUdcXFRPc0qujZmN2XttBcsqed4wcv/2eBJ+IQR9bnDskOpscg
TIVy+8AmMRj83AajuqAlM91W3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIRsJbW8
XnincAPiP0nsxPVIOsbiMB8GA1UdIwQYMBaAFPeu1YdREsz7II5xgkex5Juq/7hl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDBBQy9BMjlBQTJEODE1
MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi85NjdWaDFFU3pQc2dqbkdDUjdIa202cl91
R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzk2N1ZoMUVTelBzZ2puR0NSN0hrbTZyX3VHVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RDBBQy9BMjlBQTJEODE1MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi85NjdWaDFFU3pQ
c2dqbkdDUjdIa202cl91R1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAPHvCKO4Xmzt9QRJhepgesRWmH6EqaCLMzX6O9L8YDxTNMujBYj9iy
gA+KNRxQEbwicB21XQUz2CtLQXqvngMlxgI8dSZgCWccARdo+4ILly1rSYZMsG15
QvwjHg2seuhuXwWsQBRtGip7xgV4j7sGm3YHempRjMMarN/iL91RH/WjrLZ5nAbC
SpthRI7tRAxnd/oVUZTkzz771+gR2pKY2lQ9HRvVL/0lK5OyG4Wg5G17t/UNesiC
4MOMZGZWTqP6yRvL6+wrPby5KGZHwn/3DpkIj1L/OcFTdYgy8bC1d2CXA2R0HM0J
xQNB0oWXR9MEutx2p21vgFfjSpwquKS+
-----END CERTIFICATE-----