Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft
File:                     7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft (raw, json)
Hash identifier:          Vwz2AJ/O6YybiVfTgEO6PBA5AaRz616WS+frcJI7Cdw=
Subject key identifier:   F0:EF:77:51:42:73:AE:A2:58:7A:F1:79:97:3D:A8:EA:F4:08:7A:E0
Authority key identifier: EC:70:5B:2A:D6:FB:13:FD:6F:C4:21:4B:97:72:70:41:13:E6:68:D7
Certificate issuer:       /CN=A915D64F/serialNumber=EC705B2AD6FB13FD6FC4214B9772704113E668D7
Certificate serial:       09A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HBbKtb7E_1vxCFLl3JwQRPmaNc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft
Manifest number:          099A
Signing time:             Thu 30 Jan 2025 20:08:29 +0000
Manifest this update:     Thu 30 Jan 2025 20:08:29 +0000
Manifest next update:     Thu 06 Feb 2025 20:08:29 +0000
Files and hashes:         1: 7HBbKtb7E_1vxCFLl3JwQRPmaNc.crl (hash: BgOuJc7ZdiDTeJsQmTIzCLPPhkeYXZVnAyBhu0nIb5k=)
                          2: 2F7EAF12932411EB97630343C4F9AE02.roa (hash: taEGqA6seasVUG8wh6upIg7VNN7tLKDnm912bRHf+NY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2464 (0x9a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D64F/serialNumber=EC705B2AD6FB13FD6FC4214B9772704113E668D7
        Validity
            Not Before: Jan 30 20:08:29 2025 GMT
            Not After : Feb  6 20:08:29 2025 GMT
        Subject: CN=679bdc3d-af77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:77:50:53:db:06:d4:b6:d8:d8:f6:d5:8b:20:
                    31:d7:5f:be:c4:22:8c:d9:c4:41:db:43:54:cb:e2:
                    c1:9d:c7:df:f7:c3:73:5f:11:a6:8b:25:25:b5:7a:
                    ff:d7:6b:48:f6:d3:e6:8b:e7:36:ad:be:cc:ed:41:
                    15:a0:1a:d2:42:98:ed:2e:3b:96:90:19:55:d0:86:
                    6d:35:56:e1:07:72:bc:a7:46:a7:e0:67:94:9a:dd:
                    01:61:9c:69:90:5e:2a:2c:a8:7b:ed:ce:e8:a3:94:
                    86:70:86:7c:b6:5d:40:7a:de:a8:91:44:b4:f4:b7:
                    39:6e:a2:da:d7:9f:f1:f6:2c:c2:d0:dc:12:6e:34:
                    4c:d0:37:01:a8:ae:8d:ef:2b:97:f9:ee:81:cd:dc:
                    ed:0c:45:8b:51:a5:0c:33:85:f0:9a:7d:85:d2:bf:
                    26:80:4e:ff:67:a9:26:d7:f8:be:6a:c7:7f:c4:b6:
                    d4:c1:a0:50:3a:ae:51:6d:17:89:ba:8b:10:d5:6a:
                    d8:3f:4b:a5:bd:16:77:84:59:1f:a1:aa:8f:19:ac:
                    25:db:51:96:09:3d:d0:95:2b:bc:34:77:3a:01:0b:
                    d0:5d:80:63:38:4c:07:28:e8:34:cb:53:16:37:bc:
                    63:c4:43:68:09:e6:c2:3f:bb:ad:56:32:86:b8:e0:
                    c7:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:EF:77:51:42:73:AE:A2:58:7A:F1:79:97:3D:A8:EA:F4:08:7A:E0
            X509v3 Authority Key Identifier:
                keyid:EC:70:5B:2A:D6:FB:13:FD:6F:C4:21:4B:97:72:70:41:13:E6:68:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HBbKtb7E_1vxCFLl3JwQRPmaNc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:2c:f6:16:51:58:a5:97:4b:dd:87:a9:1a:fe:74:66:ba:30:
         7b:80:63:45:09:4c:ac:8c:14:ac:21:67:7f:96:b7:62:73:50:
         88:3d:dc:91:65:a5:98:9d:52:89:f6:f5:03:02:1f:f7:87:67:
         90:3e:ba:97:7e:0e:27:01:78:a6:56:03:92:09:c8:ff:c1:30:
         22:cb:bd:af:c1:47:bc:5f:91:af:6d:cf:60:31:d0:88:3b:49:
         cb:fb:0f:70:d7:8c:cb:67:ad:49:b5:f7:a9:68:71:31:b3:7c:
         58:ae:b2:71:1b:9c:6f:15:42:74:39:a6:9e:79:34:95:66:53:
         e6:58:62:ed:e1:d6:bf:33:ff:f6:5a:a7:3a:9a:0d:b6:1d:b3:
         7e:42:0a:32:49:8b:f1:2b:fe:12:b1:9e:20:e3:dd:5f:35:ce:
         a2:c5:70:13:9d:31:72:bd:ae:02:b7:b5:51:77:c9:1d:b5:52:
         24:d9:b9:d9:4b:8d:af:d3:28:f3:25:a7:8b:3c:be:2e:82:6b:
         c1:01:5a:45:d5:ee:cf:74:16:48:54:8d:a0:ac:5d:ee:54:61:
         9c:43:48:67:15:ae:ee:cf:3a:c8:8e:02:23:83:d5:47:63:fe:
         73:c0:04:73:8c:17:a1:61:51:a7:f6:02:fe:1e:3c:74:01:87:
         75:1c:a3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----