Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft
File:                     _Z1_Zg86Ewyki-u6ZuFivTA0440.mft (raw, json)
Hash identifier:          fJy78s3eta2VJw3POf/Q4SIV2SgZPE0nSwU7uiLUPnY=
Subject key identifier:   42:9B:BA:1D:6C:83:53:70:E5:02:B3:18:F0:49:D6:1D:A3:E5:95:80
Authority key identifier: FD:9D:7F:66:0F:3A:13:0C:A4:8B:EB:BA:66:E1:62:BD:30:34:E3:8D
Certificate issuer:       /CN=A9160C9E/serialNumber=FD9D7F660F3A130CA48BEBBA66E162BD3034E38D
Certificate serial:       3C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft
Manifest number:          3B
Signing time:             Fri 31 Jan 2025 06:36:20 +0000
Manifest this update:     Fri 31 Jan 2025 06:36:19 +0000
Manifest next update:     Fri 07 Feb 2025 06:36:19 +0000
Files and hashes:         1: _Z1_Zg86Ewyki-u6ZuFivTA0440.crl (hash: LnkO0ijW3/zrxqglLrwQ4bW4d2I25ZcB5zn8sZumoew=)
                          2: BD5940CE8BCB11EFAE8ADA5BC4F9AE02.roa (hash: 7M7tnskcAr6syWX8xx3lbIELsXSwEQW4ePT2HDbCQH0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160C9E/serialNumber=FD9D7F660F3A130CA48BEBBA66E162BD3034E38D
        Validity
            Not Before: Jan 31 06:36:19 2025 GMT
            Not After : Feb  7 06:36:19 2025 GMT
        Subject: CN=679c6f63-0973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c9:60:89:47:ba:29:a4:85:1a:05:26:fd:1f:
                    40:a5:9c:14:db:36:8f:29:be:57:9b:b0:8a:92:32:
                    8b:6e:7c:f4:5b:98:89:f5:1f:72:82:23:e7:3f:96:
                    ea:1c:40:e1:2a:1e:42:f6:ad:ee:4a:6b:61:34:22:
                    a3:38:34:43:21:b2:59:e7:05:67:ca:c9:3d:21:83:
                    71:8a:11:9e:7f:24:9e:b2:bb:e8:2f:3f:dd:e2:4f:
                    c4:2e:ad:f0:42:c6:53:a1:f4:cd:07:d3:45:a9:e8:
                    ed:22:ca:1d:17:ed:a1:37:08:68:25:45:52:b5:bc:
                    69:d4:ff:96:b7:be:d8:ec:28:b4:e4:2b:0c:53:c0:
                    f0:47:1f:a2:d1:af:d7:9c:2f:fe:69:60:00:58:95:
                    9e:b6:e1:94:89:3a:4c:61:3f:8b:78:ed:d7:f7:5a:
                    36:48:5a:c3:81:ec:d4:60:62:b3:48:3e:d2:9f:ad:
                    ce:63:74:08:a5:2b:96:e6:44:9e:76:63:8c:01:42:
                    ad:06:98:df:bd:77:1b:f1:2b:44:5c:2f:c7:a0:05:
                    28:57:a2:c1:d8:7e:6f:93:b7:3e:fb:4a:6a:10:8b:
                    f4:4d:10:75:07:d4:8b:6c:01:8e:17:1f:4d:f0:4d:
                    9c:ce:7f:5f:6b:ff:f8:ca:17:43:72:9e:24:67:54:
                    da:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:9B:BA:1D:6C:83:53:70:E5:02:B3:18:F0:49:D6:1D:A3:E5:95:80
            X509v3 Authority Key Identifier:
                keyid:FD:9D:7F:66:0F:3A:13:0C:A4:8B:EB:BA:66:E1:62:BD:30:34:E3:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:88:d1:91:c8:5b:c3:3e:41:b8:88:7c:d7:2a:34:7a:3d:42:
         ae:65:45:02:9d:c8:8f:ac:f9:f8:91:cc:e7:61:d6:af:da:e4:
         cb:99:00:44:ed:57:1c:af:ce:eb:f8:09:08:41:89:dc:b3:35:
         8d:6f:de:09:36:cd:ac:0f:1f:7a:a5:d6:6c:cc:9b:80:69:fe:
         0c:cf:b1:2f:bc:eb:d5:4a:16:f7:71:5b:b3:e3:20:fe:59:47:
         14:e0:45:bb:16:38:86:07:09:58:0a:86:91:1d:ca:df:75:8b:
         20:64:fc:b2:f4:69:5a:00:96:1b:7e:c1:e2:7f:fe:95:0e:6f:
         1a:6d:ee:df:46:78:b7:cc:38:7c:ff:3e:67:a9:3c:de:51:13:
         d4:fd:af:dd:2a:8f:d1:c7:7b:5a:4d:4a:32:12:e8:2d:8b:b1:
         30:c8:89:58:80:d0:f3:8d:44:9c:f8:39:54:e8:cc:b5:76:6f:
         7d:e5:c6:e0:8b:99:75:e9:57:6c:4c:54:f4:98:8a:ba:b3:da:
         a8:95:79:5e:6b:f3:e5:da:8a:55:02:01:9a:19:13:53:69:96:
         94:18:6d:cc:4f:2e:ea:07:11:ef:61:88:18:d3:58:3f:b3:73:
         5a:a6:2e:85:2a:7c:db:3a:ec:bd:1a:97:c4:fa:8e:b6:38:c4:
         6a:27:d7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----