Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft
File:                     dCWq4W3bRko-K0ecekDJkCODa6A.mft (raw, json)
Hash identifier:          6/ozrXmZIP76sTAOM+b/jh7Y08UC9B2+bjUwjFBgLos=
Subject key identifier:   15:B3:45:AA:CF:0A:4F:11:53:F8:41:F3:2A:35:3C:8A:EE:06:CD:36
Authority key identifier: 74:25:AA:E1:6D:DB:46:4A:3E:2B:47:9C:7A:40:C9:90:23:83:6B:A0
Certificate issuer:       /CN=A9163998/serialNumber=7425AAE16DDB464A3E2B479C7A40C99023836BA0
Certificate serial:       026F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft
Manifest number:          025F
Signing time:             Fri 31 Jan 2025 01:55:46 +0000
Manifest this update:     Fri 31 Jan 2025 01:55:45 +0000
Manifest next update:     Fri 07 Feb 2025 01:55:45 +0000
Files and hashes:         1: dCWq4W3bRko-K0ecekDJkCODa6A.crl (hash: 7AbL25k9rz/0pslnIO7BaLTylYRJ+ts35JSVZSUwns8=)
                          2: 9BA94A4A0D8911ED999D4F3BC4F9AE02.roa (hash: qYAeIlvj9bRkbcFce14qUvj/bMlBnb/p9HqbAUwEkeU=)
                          3: A3C1A64E020811EF900CC60CC4F9AE02.roa (hash: a5M8jT5qH+Rv8PZuWCtzl1JNud/MgUW6Ycrm/NIQszY=)
                          4: 1EA5984A0BE111ED9E3AA135C4F9AE02.roa (hash: VJmNEduqkZiEGi1xGAFyFFiL246WcTWspaksMGhusvM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 623 (0x26f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163998/serialNumber=7425AAE16DDB464A3E2B479C7A40C99023836BA0
        Validity
            Not Before: Jan 31 01:55:45 2025 GMT
            Not After : Feb  7 01:55:45 2025 GMT
        Subject: CN=679c2da2-1e0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:13:be:50:2f:06:06:a4:70:a3:ea:b9:7d:52:
                    0a:e7:6e:95:32:53:03:45:59:73:30:6b:a6:42:f6:
                    9d:d8:6b:b1:36:89:11:d5:1f:5d:a9:fa:72:19:63:
                    3d:08:72:91:fc:56:d6:0d:83:d8:cc:6f:13:de:2d:
                    75:ca:8f:61:b9:3e:1a:39:9f:88:4a:bd:70:ec:81:
                    29:01:b9:83:e1:3e:3c:58:6e:05:1b:6b:85:cb:b7:
                    11:5f:10:3c:1e:c5:d0:b7:e2:24:03:2a:07:d5:0e:
                    9e:92:a6:b7:88:58:d1:dc:7e:bf:5f:cf:eb:cb:e5:
                    eb:19:be:e5:e0:81:7c:31:f1:65:cf:c6:ed:3c:00:
                    b0:87:a4:4d:22:91:61:0e:ed:82:b6:d6:64:21:b9:
                    7c:8a:33:b3:e3:83:c2:8d:2e:f9:f7:c0:3a:67:a3:
                    5e:17:09:88:6b:cd:bb:fb:90:29:e0:d9:20:5f:e6:
                    8e:0b:e6:a1:8d:cf:03:55:30:3e:1f:72:a0:00:aa:
                    7d:f6:c5:cf:f4:bd:52:6b:4f:f2:9d:79:24:f7:01:
                    86:20:fa:87:1f:07:42:2f:a0:c5:36:c2:53:b3:74:
                    42:7e:28:26:6b:f9:34:0f:a5:14:b7:7e:78:69:2e:
                    3d:39:89:b2:d8:4e:dc:7b:2d:72:da:8b:05:32:e5:
                    82:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B3:45:AA:CF:0A:4F:11:53:F8:41:F3:2A:35:3C:8A:EE:06:CD:36
            X509v3 Authority Key Identifier:
                keyid:74:25:AA:E1:6D:DB:46:4A:3E:2B:47:9C:7A:40:C9:90:23:83:6B:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:4d:5a:e9:40:17:d5:6b:9f:9c:9c:d6:45:9c:80:14:03:46:
         31:46:ed:9b:fa:45:a2:65:9f:47:6f:9b:40:e4:21:2c:87:60:
         21:21:b0:bd:1f:ca:e8:42:6e:c9:90:6b:f1:d0:d4:c4:7c:57:
         2d:c9:5e:63:71:41:22:27:60:ae:34:bc:28:53:79:2e:02:36:
         c9:f5:51:3d:d6:7d:1c:d9:29:5d:43:5f:33:70:52:a6:bd:8e:
         cd:fe:57:1b:df:fe:b3:ec:e1:f1:a8:18:b9:36:ac:aa:b4:a1:
         60:5e:a5:e2:3f:29:32:35:eb:a5:05:c7:c9:7d:ab:cb:c0:ef:
         e2:e8:d0:5e:0f:c8:75:15:0d:05:0d:bd:70:a7:d6:fe:55:91:
         20:28:30:22:f6:89:0f:6d:b2:da:81:88:00:eb:ca:aa:03:85:
         80:b2:72:15:85:d1:1e:cb:54:ba:57:da:63:1b:08:e2:55:3c:
         8a:5f:a5:e5:29:e4:c5:96:82:93:92:49:1c:4f:68:e1:c8:a0:
         18:e2:36:d1:23:a5:58:78:7a:36:68:93:f7:1a:dc:74:93:15:
         55:e3:c0:f9:01:75:2e:3f:62:b2:1f:14:ce:cb:55:0b:39:4e:
         f0:c7:79:e0:71:83:fe:76:50:c5:16:ef:49:f8:37:c4:a6:31:
         c5:17:d0:e8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjM5OTgxMTAvBgNVBAUTKDc0MjVBQUUxNkREQjQ2NEEzRTJCNDc5QzdBNDBDOTkw
MjM4MzZCQTAwHhcNMjUwMTMxMDE1NTQ1WhcNMjUwMjA3MDE1NTQ1WjAYMRYwFAYD
VQQDEw02NzljMmRhMi0xZTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1RO+UC8GBqRwo+q5fVIK526VMlMDRVlzMGumQvad2GuxNokR1R9dqfpyGWM9
CHKR/FbWDYPYzG8T3i11yo9huT4aOZ+ISr1w7IEpAbmD4T48WG4FG2uFy7cRXxA8
HsXQt+IkAyoH1Q6ekqa3iFjR3H6/X8/ry+XrGb7l4IF8MfFlz8btPACwh6RNIpFh
Du2CttZkIbl8ijOz44PCjS7598A6Z6NeFwmIa827+5Ap4NkgX+aOC+ahjc8DVTA+
H3KgAKp99sXP9L1Sa0/ynXkk9wGGIPqHHwdCL6DFNsJTs3RCfigma/k0D6UUt354
aS49OYmy2E7cey1y2osFMuWC5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBWzRarP
Ck8RU/hB8yo1PIruBs02MB8GA1UdIwQYMBaAFHQlquFt20ZKPitHnHpAyZAjg2ug
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Mzk5OC8zMENDMDg0QTA4
REMxMUVEQkVERTYxMkJDNEY5QUUwMi9kQ1dxNFczYlJrby1LMGVjZWtESmtDT0Rh
NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2RDV3E0VzNiUmtvLUswZWNla0RKa0NPRGE2QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
Mzk5OC8zMENDMDg0QTA4REMxMUVEQkVERTYxMkJDNEY5QUUwMi9kQ1dxNFczYlJr
by1LMGVjZWtESmtDT0RhNkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAVTVrpQBfVa5+cnNZFnIAUA0YxRu2b+kWiZZ9Hb5tA5CEsh2AhIbC9
H8roQm7JkGvx0NTEfFctyV5jcUEiJ2CuNLwoU3kuAjbJ9VE91n0c2SldQ18zcFKm
vY7N/lcb3/6z7OHxqBi5NqyqtKFgXqXiPykyNeulBcfJfavLwO/i6NBeD8h1FQ0F
Db1wp9b+VZEgKDAi9okPbbLagYgA68qqA4WAsnIVhdEey1S6V9pjGwjiVTyKX6Xl
KeTFloKTkkkcT2jhyKAY4jbRI6VYeHo2aJP3Gtx0kxVV48D5AXUuP2KyHxTOy1UL
OU7wx3ngcYP+dlDFFu9J+DfEpjHFF9Do
-----END CERTIFICATE-----