Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft
File:                     yY7yKt__YT9WmDU_yFsMkG30fpE.mft (raw, json)
Hash identifier:          7gVaCInSEuTXgiKUJHN3LCbNdqmcJCWb1Yq5q/+HpcY=
Subject key identifier:   A5:7B:AD:1D:82:70:D9:C9:4A:28:2A:F5:48:E1:58:E4:BB:94:4D:BE
Authority key identifier: C9:8E:F2:2A:DF:FF:61:3F:56:98:35:3F:C8:5B:0C:90:6D:F4:7E:91
Certificate issuer:       /CN=A9162969/serialNumber=C98EF22ADFFF613F5698353FC85B0C906DF47E91
Certificate serial:       012A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft
Manifest number:          0125
Signing time:             Fri 31 Jan 2025 03:50:48 +0000
Manifest this update:     Fri 31 Jan 2025 03:50:48 +0000
Manifest next update:     Fri 07 Feb 2025 03:50:48 +0000
Files and hashes:         1: yY7yKt__YT9WmDU_yFsMkG30fpE.crl (hash: W91gsJyJKONLhvginEIZofKDjXZO+7cKiyIldryrefs=)
                          2: A7B015CEF1DC11EEA578C27DC4F9AE02.roa (hash: nmT4orl0cbcTc9NjDNiHdTsciwQkVU+9vdaYW2GwsKo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 298 (0x12a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162969/serialNumber=C98EF22ADFFF613F5698353FC85B0C906DF47E91
        Validity
            Not Before: Jan 31 03:50:48 2025 GMT
            Not After : Feb  7 03:50:48 2025 GMT
        Subject: CN=679c4898-9765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:78:38:cf:94:96:34:58:54:17:69:96:c4:0e:
                    0d:38:66:80:e0:a2:ce:39:e4:5c:5d:c6:59:5f:41:
                    d3:79:7a:c1:b4:51:3a:a9:3a:0f:23:92:0b:21:b4:
                    a2:ba:66:03:96:55:25:e2:8f:67:1d:ae:78:bb:de:
                    13:3d:27:51:0e:56:49:95:40:88:3b:d9:1c:f1:5d:
                    1f:3c:8d:4d:b4:64:50:f8:ab:38:f0:8b:69:b0:cd:
                    ec:1e:f6:35:6d:63:72:24:f4:d2:da:e6:a1:03:99:
                    2d:9a:47:34:2a:ac:f0:49:17:35:03:29:b5:86:66:
                    9e:6a:5a:d8:7f:7f:71:41:ee:aa:ad:65:ab:11:7a:
                    2b:53:65:01:93:51:19:f5:4e:65:3b:95:77:ac:96:
                    b0:1b:6a:3d:bb:fc:1d:56:2d:fa:29:24:d5:e0:15:
                    7c:1c:d1:27:52:9a:a0:f1:38:95:c1:65:65:ad:64:
                    73:f5:6e:40:63:05:fa:e5:2c:fc:eb:0c:e5:e4:01:
                    80:cf:a0:b2:0c:e9:68:17:65:52:f9:47:14:4b:a8:
                    5d:ec:da:bc:93:de:bd:df:fc:b5:f7:fe:69:3f:8c:
                    3b:97:ea:68:e6:24:bc:02:63:f0:bf:2e:84:83:2f:
                    55:23:0b:be:a9:56:48:17:cc:3b:df:a0:ba:33:a5:
                    14:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:7B:AD:1D:82:70:D9:C9:4A:28:2A:F5:48:E1:58:E4:BB:94:4D:BE
            X509v3 Authority Key Identifier:
                keyid:C9:8E:F2:2A:DF:FF:61:3F:56:98:35:3F:C8:5B:0C:90:6D:F4:7E:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:8f:bc:58:1f:f6:e0:58:a2:8d:bf:63:2d:74:21:20:f1:69:
         5c:4e:b3:eb:05:66:24:33:83:2c:5f:e2:c3:a0:71:d1:54:8c:
         a0:a2:6b:8c:4b:c3:dd:7d:a1:2d:9b:71:54:d3:20:c8:7c:ed:
         a8:f7:71:a5:23:5f:4c:5b:23:e0:87:cd:e1:b5:1d:e9:9c:0d:
         61:dd:00:00:71:08:30:3b:e4:7e:65:00:55:1b:3c:0e:89:60:
         1d:c6:43:4b:a7:f6:7d:9b:91:66:0d:fd:9c:23:2e:dc:a2:a3:
         9a:d4:c8:87:2b:81:4b:e9:0d:34:77:ce:46:b1:07:25:8f:89:
         9b:fa:99:d4:c9:c3:93:2b:d0:94:21:e5:a1:a7:41:9a:5b:bf:
         c9:45:bb:3d:38:6d:ce:f0:6f:84:3a:13:f7:9a:4d:17:e4:d9:
         10:92:e2:4e:c9:8d:9c:a1:7b:2e:49:50:69:ad:1c:7a:ea:61:
         0b:2a:17:bc:67:37:34:51:bf:f8:ee:a3:d4:87:3f:88:1f:98:
         1e:d6:42:ba:a3:ac:ec:39:87:c6:dc:11:d8:10:58:5d:43:9b:
         02:8e:6e:95:05:c1:1c:40:32:7e:f8:8d:e1:c2:4a:00:6b:8f:
         d3:14:18:43:06:09:6a:82:9a:15:f1:97:e4:49:97:35:c3:f6:
         1e:ee:18:da
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjI5NjkxMTAvBgNVBAUTKEM5OEVGMjJBREZGRjYxM0Y1Njk4MzUzRkM4NUIwQzkw
NkRGNDdFOTEwHhcNMjUwMTMxMDM1MDQ4WhcNMjUwMjA3MDM1MDQ4WjAYMRYwFAYD
VQQDEw02NzljNDg5OC05NzY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1ng4z5SWNFhUF2mWxA4NOGaA4KLOOeRcXcZZX0HTeXrBtFE6qToPI5ILIbSi
umYDllUl4o9nHa54u94TPSdRDlZJlUCIO9kc8V0fPI1NtGRQ+Ks48ItpsM3sHvY1
bWNyJPTS2uahA5ktmkc0KqzwSRc1Aym1hmaealrYf39xQe6qrWWrEXorU2UBk1EZ
9U5lO5V3rJawG2o9u/wdVi36KSTV4BV8HNEnUpqg8TiVwWVlrWRz9W5AYwX65Sz8
6wzl5AGAz6CyDOloF2VS+UcUS6hd7Nq8k9693/y19/5pP4w7l+po5iS8AmPwvy6E
gy9VIwu+qVZIF8w736C6M6UU9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKV7rR2C
cNnJSigq9UjhWOS7lE2+MB8GA1UdIwQYMBaAFMmO8irf/2E/Vpg1P8hbDJBt9H6R
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Mjk2OS8wREIzNDQzMjI2
MjExMUVFQTRERUU1NEZDNEY5QUUwMi95WTd5S3RfX1lUOVdtRFVfeUZzTWtHMzBm
cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lZN3lLdF9fWVQ5V21EVV95RnNNa0czMGZwRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
Mjk2OS8wREIzNDQzMjI2MjExMUVFQTRERUU1NEZDNEY5QUUwMi95WTd5S3RfX1lU
OVdtRFVfeUZzTWtHMzBmcEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDBj7xYH/bgWKKNv2MtdCEg8WlcTrPrBWYkM4MsX+LDoHHRVIygomuM
S8PdfaEtm3FU0yDIfO2o93GlI19MWyPgh83htR3pnA1h3QAAcQgwO+R+ZQBVGzwO
iWAdxkNLp/Z9m5FmDf2cIy7coqOa1MiHK4FL6Q00d85GsQclj4mb+pnUycOTK9CU
IeWhp0GaW7/JRbs9OG3O8G+EOhP3mk0X5NkQkuJOyY2coXsuSVBprRx66mELKhe8
Zzc0Ub/47qPUhz+IH5ge1kK6o6zsOYfG3BHYEFhdQ5sCjm6VBcEcQDJ++I3hwkoA
a4/TFBhDBglqgpoV8ZfkSZc1w/Ye7hja
-----END CERTIFICATE-----