Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/LOCE4B2sa01jSTjXbOraWWNVvVM.mft
File:                     LOCE4B2sa01jSTjXbOraWWNVvVM.mft (raw, json)
Hash identifier:          +re3Y+FhDTYPfdES9QNIB+f+EcVlXZFylLpN8r8IQWs=
Subject key identifier:   3E:F5:32:73:1B:2F:C8:BD:5D:46:A0:26:67:45:83:09:C7:84:1F:70
Authority key identifier: 2C:E0:84:E0:1D:AC:6B:4D:63:49:38:D7:6C:EA:DA:59:63:55:BD:53
Certificate issuer:       /CN=A915EA8F/serialNumber=2CE084E01DAC6B4D634938D76CEADA596355BD53
Certificate serial:       0203
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOCE4B2sa01jSTjXbOraWWNVvVM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/LOCE4B2sa01jSTjXbOraWWNVvVM.mft
Manifest number:          0200
Signing time:             Fri 31 Jan 2025 02:11:08 +0000
Manifest this update:     Fri 31 Jan 2025 02:11:08 +0000
Manifest next update:     Fri 07 Feb 2025 02:11:08 +0000
Files and hashes:         1: LOCE4B2sa01jSTjXbOraWWNVvVM.crl (hash: nDBOP6gQD3qcmf2V3A577/sxerHMYrffYIgPq/oJsAM=)
                          2: 028640A8242B11ED9547B486C4F9AE02.roa (hash: DITeel3omkt/jAmQ2Y46ZSrzxcvWz4LWzu2U9pUQbEA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 515 (0x203)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EA8F/serialNumber=2CE084E01DAC6B4D634938D76CEADA596355BD53
        Validity
            Not Before: Jan 31 02:11:08 2025 GMT
            Not After : Feb  7 02:11:08 2025 GMT
        Subject: CN=679c313c-ea50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e7:c7:e6:58:a9:f2:08:cd:84:85:0c:a2:c1:
                    6a:f1:77:c7:86:b0:ed:62:55:fe:7e:b6:cf:06:30:
                    9c:33:47:33:99:df:0a:03:08:55:bb:2c:3c:c1:fa:
                    8e:9c:2c:83:8c:5a:17:25:63:bc:d0:12:2d:91:e9:
                    66:db:9e:52:df:7f:97:12:e3:df:b7:ae:83:7f:cf:
                    76:3f:a0:37:18:83:35:c8:fa:50:75:a6:05:57:32:
                    56:ef:58:47:a9:34:23:f7:d0:ec:3e:80:a1:34:c3:
                    36:7c:cf:c8:5d:b7:10:34:55:c1:a9:b8:42:a3:4b:
                    27:31:b4:c5:98:20:ce:2c:ca:2b:55:73:24:6b:0c:
                    d0:2d:71:82:e0:13:04:c4:60:dc:b7:22:d7:ba:3a:
                    a4:bc:f3:20:69:62:a0:4a:15:ac:e8:70:f7:2f:78:
                    dd:53:42:b5:14:98:46:3d:0a:31:69:7c:51:d8:57:
                    c6:4f:0d:88:6f:f5:9a:bf:02:52:7c:01:40:6c:00:
                    7f:0f:28:85:59:f0:d5:a6:31:49:9b:53:53:34:05:
                    0d:7a:ec:ca:08:49:44:d7:5a:6c:a0:13:c4:c9:6b:
                    25:96:30:da:8d:37:74:45:88:79:d1:31:fa:cd:3f:
                    ce:f8:11:c4:10:71:1b:06:75:6b:c9:0b:9e:96:46:
                    9d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F5:32:73:1B:2F:C8:BD:5D:46:A0:26:67:45:83:09:C7:84:1F:70
            X509v3 Authority Key Identifier:
                keyid:2C:E0:84:E0:1D:AC:6B:4D:63:49:38:D7:6C:EA:DA:59:63:55:BD:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/LOCE4B2sa01jSTjXbOraWWNVvVM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOCE4B2sa01jSTjXbOraWWNVvVM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/LOCE4B2sa01jSTjXbOraWWNVvVM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:10:8c:19:40:c2:99:f4:2a:2e:25:90:86:2a:15:4c:2d:d4:
         6a:6b:53:c8:0e:03:bd:9d:a8:11:b3:48:df:de:25:0c:8d:a5:
         e0:3a:65:57:9b:5b:7a:ff:84:43:4e:31:b7:5b:3d:17:78:e3:
         2d:2b:f4:32:4f:90:aa:62:86:2b:0e:84:62:d4:52:9a:26:91:
         cb:f1:81:46:72:92:dd:49:b4:15:b9:d7:53:72:e9:00:91:2d:
         19:99:b0:3b:e4:eb:a1:3b:d1:3c:a1:65:54:7d:3f:e2:3a:83:
         d4:c0:c7:1d:3c:45:dc:26:d1:94:f3:55:59:14:1d:72:a0:02:
         f1:3f:75:1d:e1:16:77:56:8b:15:81:c4:ce:d0:f4:49:47:68:
         5a:9b:07:f6:65:a1:f1:93:f8:00:03:e2:a2:20:55:1c:a7:5e:
         e3:65:04:5a:6f:d0:d9:1c:b4:12:a5:f5:ae:e5:bb:4d:37:25:
         df:1a:83:78:e3:7b:0c:ac:1a:3d:c3:10:78:ae:72:d6:c1:75:
         4f:ae:15:6c:8d:75:1c:90:d4:e1:50:5f:a3:95:1b:89:b2:87:
         ba:b0:fe:fc:fa:69:6b:3b:62:c7:23:ca:ca:0c:70:af:fe:c6:
         8c:e9:cf:57:1f:d8:2e:9b:7e:b6:56:82:b9:a3:88:bf:63:38:
         f7:a2:26:30
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUVBOEYxMTAvBgNVBAUTKDJDRTA4NEUwMURBQzZCNEQ2MzQ5MzhENzZDRUFEQTU5
NjM1NUJENTMwHhcNMjUwMTMxMDIxMTA4WhcNMjUwMjA3MDIxMTA4WjAYMRYwFAYD
VQQDEw02NzljMzEzYy1lYTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1ufH5lip8gjNhIUMosFq8XfHhrDtYlX+frbPBjCcM0czmd8KAwhVuyw8wfqO
nCyDjFoXJWO80BItkelm255S33+XEuPft66Df892P6A3GIM1yPpQdaYFVzJW71hH
qTQj99DsPoChNMM2fM/IXbcQNFXBqbhCo0snMbTFmCDOLMorVXMkawzQLXGC4BME
xGDctyLXujqkvPMgaWKgShWs6HD3L3jdU0K1FJhGPQoxaXxR2FfGTw2Ib/WavwJS
fAFAbAB/DyiFWfDVpjFJm1NTNAUNeuzKCElE11psoBPEyWslljDajTd0RYh50TH6
zT/O+BHEEHEbBnVryQuelkadywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD71MnMb
L8i9XUagJmdFgwnHhB9wMB8GA1UdIwQYMBaAFCzghOAdrGtNY0k412zq2lljVb1T
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUE4Ri9FM0EzNUJCNDI0
MjgxMUVEOEZEMjRDODZDNEY5QUUwMi9MT0NFNEIyc2EwMWpTVGpYYk9yYVdXTlZ2
Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xPQ0U0QjJzYTAxalNUalhiT3JhV1dOVnZWTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RUE4Ri9FM0EzNUJCNDI0MjgxMUVEOEZEMjRDODZDNEY5QUUwMi9MT0NFNEIyc2Ew
MWpTVGpYYk9yYVdXTlZ2Vk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBIEIwZQMKZ9CouJZCGKhVMLdRqa1PIDgO9nagRs0jf3iUMjaXgOmVX
m1t6/4RDTjG3Wz0XeOMtK/QyT5CqYoYrDoRi1FKaJpHL8YFGcpLdSbQVuddTcukA
kS0ZmbA75OuhO9E8oWVUfT/iOoPUwMcdPEXcJtGU81VZFB1yoALxP3Ud4RZ3VosV
gcTO0PRJR2hamwf2ZaHxk/gAA+KiIFUcp17jZQRab9DZHLQSpfWu5btNNyXfGoN4
43sMrBo9wxB4rnLWwXVPrhVsjXUckNThUF+jlRuJsoe6sP78+mlrO2LHI8rKDHCv
/saM6c9XH9gum362VoK5o4i/Yzj3oiYw
-----END CERTIFICATE-----