Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.mft
File:                     xz6_TxX6Jikr9a24ioZXfsOnHN4.mft (raw, json)
Hash identifier:          qTEqoxlm0zBaa/EPsv6jLMwW9SZwHw7wI+ke2b2OQ8k=
Subject key identifier:   9D:AE:95:F5:70:81:55:87:58:58:79:55:E8:38:B0:31:DB:A9:9A:78
Authority key identifier: C7:3E:BF:4F:15:FA:26:29:2B:F5:AD:B8:8A:86:57:7E:C3:A7:1C:DE
Certificate issuer:       /CN=A9161EA6/serialNumber=C73EBF4F15FA26292BF5ADB88A86577EC3A71CDE
Certificate serial:       12BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xz6_TxX6Jikr9a24ioZXfsOnHN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.mft
Manifest number:          12B1
Signing time:             Fri 31 Jan 2025 17:04:34 +0000
Manifest this update:     Fri 31 Jan 2025 17:04:34 +0000
Manifest next update:     Fri 07 Feb 2025 17:04:34 +0000
Files and hashes:         1: xz6_TxX6Jikr9a24ioZXfsOnHN4.crl (hash: 0ETXrx55nZTuivuiq7leVKmyw/o+XL9Rtubq3p3NeEg=)
                          2: FF3B3F84B63311E8BAD5A95EC4F9AE02.roa (hash: uFyvztQzxevciuQ6NLXE4AsYEtpQjXVKdG3AXeRRVx8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4794 (0x12ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161EA6/serialNumber=C73EBF4F15FA26292BF5ADB88A86577EC3A71CDE
        Validity
            Not Before: Jan 31 17:04:34 2025 GMT
            Not After : Feb  7 17:04:34 2025 GMT
        Subject: CN=679d02a2-fdf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:26:aa:cf:a6:a5:d9:06:6f:a3:0b:8a:2c:13:
                    36:d7:a4:ef:6d:15:e5:fb:ab:28:11:a5:0c:25:26:
                    3c:55:93:3a:b4:05:4e:62:d6:61:31:ff:79:db:67:
                    34:c3:ba:f7:64:75:9f:0b:b4:21:0b:b2:a8:de:a9:
                    f4:16:60:f5:c0:5b:d0:08:b0:27:85:f9:60:54:ed:
                    c1:25:32:02:78:da:15:b7:09:08:10:78:dd:a5:47:
                    be:0b:d3:29:95:c9:6b:30:58:a8:30:d9:10:a9:af:
                    93:ef:44:cb:66:5c:a3:03:81:c8:0b:61:98:9a:71:
                    8b:59:68:67:4b:37:d9:22:56:b7:88:67:2f:e0:0e:
                    e9:cf:54:9e:62:85:c6:a9:19:e9:94:5d:94:1d:b7:
                    c0:d3:86:b1:2e:44:82:73:90:56:4e:7a:ff:1a:1a:
                    fc:8e:8a:06:ce:ad:cb:bf:2d:f2:b9:bf:e8:1d:6f:
                    c6:ee:67:08:31:cc:0b:9f:c5:b4:58:44:bc:ab:fb:
                    ba:ce:83:29:3f:56:ce:30:c7:2b:35:b7:be:94:1f:
                    55:cd:42:93:a0:f4:f5:c3:cb:89:13:91:22:bc:1e:
                    4b:9d:7c:b7:99:39:f4:18:3f:e7:ab:45:2c:46:ba:
                    30:6c:1e:ef:39:0c:76:ca:91:ee:73:39:1c:af:af:
                    9c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:AE:95:F5:70:81:55:87:58:58:79:55:E8:38:B0:31:DB:A9:9A:78
            X509v3 Authority Key Identifier:
                keyid:C7:3E:BF:4F:15:FA:26:29:2B:F5:AD:B8:8A:86:57:7E:C3:A7:1C:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xz6_TxX6Jikr9a24ioZXfsOnHN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:6a:ae:0e:16:ef:30:53:0d:ba:c0:79:c6:ff:ae:c5:56:46:
         ee:62:ce:d7:97:12:01:48:9b:ad:98:2d:29:c4:91:48:5f:4e:
         4b:49:56:f8:4c:01:fc:f7:69:6f:3d:a5:85:a7:ec:9b:38:91:
         6f:87:d4:45:39:88:27:4b:4e:3c:2d:b4:e0:cc:00:9c:e9:85:
         7a:87:91:f7:6c:09:59:4e:79:68:88:07:f1:f1:52:da:dc:3a:
         61:0d:5d:07:dd:b0:7b:6b:ca:18:db:8d:89:1d:6e:cb:10:2e:
         7f:84:b3:98:e0:e1:a3:f0:4e:9e:94:83:d3:93:a3:b4:fb:07:
         b3:dc:44:d2:1e:5b:e2:49:db:f8:0d:b3:37:18:4b:91:37:9e:
         c1:80:ae:d4:c4:ba:10:bd:8c:07:6c:2e:db:af:50:f2:f9:50:
         26:3a:a6:64:51:39:e7:b9:54:20:63:f7:f4:80:f4:3f:43:bb:
         fc:43:48:ec:90:4b:ae:00:d4:b6:f0:b3:de:29:57:bd:d7:84:
         23:2d:99:c0:3d:de:23:4a:54:ed:f0:03:f8:7e:91:8c:24:b3:
         12:82:4f:be:73:1f:33:51:93:ba:90:61:75:c4:95:8f:be:a6:
         b5:d6:3a:bc:f0:60:7d:47:de:f4:61:a1:c7:9a:e9:5f:42:fa:
         a3:46:e3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----