Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166638/41EFC51E48CA11EAA214AF4CC4F9AE02/WmyobkD7bCaOj-ZR_zLs5E2FfQM.mft
File:                     WmyobkD7bCaOj-ZR_zLs5E2FfQM.mft (raw, json)
Hash identifier:          JCSXOJ9YhjQedu9qDkG8RSXNjIB0RHWOVaxhjiZxgNI=
Subject key identifier:   AA:F8:1D:97:4B:CA:04:83:86:A6:BC:1A:B3:AD:C3:96:91:5C:84:05
Authority key identifier: 5A:6C:A8:6E:40:FB:6C:26:8E:8F:E6:51:FF:32:EC:E4:4D:85:7D:03
Certificate issuer:       /CN=A9166638/serialNumber=5A6CA86E40FB6C268E8FE651FF32ECE44D857D03
Certificate serial:       0AAE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmyobkD7bCaOj-ZR_zLs5E2FfQM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166638/41EFC51E48CA11EAA214AF4CC4F9AE02/WmyobkD7bCaOj-ZR_zLs5E2FfQM.mft
Manifest number:          0AAA
Signing time:             Thu 30 Jan 2025 19:37:23 +0000
Manifest this update:     Thu 30 Jan 2025 19:37:23 +0000
Manifest next update:     Thu 06 Feb 2025 19:37:23 +0000
Files and hashes:         1: WmyobkD7bCaOj-ZR_zLs5E2FfQM.crl (hash: 9zE1JPdKPY6VkPbiqU/5PtTnCMMQcSy+sFpXgKPZ+Xg=)
                          2: 8E49B7320E8C11EDAB2A8680C4F9AE02.roa (hash: Ga7YwAWhVqDOExdvtybYiuoMlOw/9ken4EZnlj+WkpY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2734 (0xaae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166638/serialNumber=5A6CA86E40FB6C268E8FE651FF32ECE44D857D03
        Validity
            Not Before: Jan 30 19:37:23 2025 GMT
            Not After : Feb  6 19:37:23 2025 GMT
        Subject: CN=679bd4f3-9b0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:35:e9:ef:2b:9f:95:13:15:08:99:9f:43:26:
                    d8:32:d7:f7:f1:16:f6:47:e0:da:2d:e4:e9:9c:64:
                    dd:66:ed:bd:83:e4:f7:88:00:41:43:52:4b:73:2d:
                    18:e0:78:d3:5a:e3:9b:1a:ef:a8:3e:15:96:c2:62:
                    e8:20:68:e7:93:0a:e5:c9:f3:2f:5a:3d:7c:98:7f:
                    92:6d:23:b0:f2:05:5f:34:c8:52:7a:a5:46:ed:01:
                    4d:3e:59:71:39:8b:bf:14:52:04:0a:eb:b0:68:28:
                    42:b1:7b:3b:d2:06:11:a7:dc:3b:8d:61:95:85:2e:
                    59:d3:39:5c:14:2c:34:fa:e2:ef:67:36:f3:08:b7:
                    53:d5:8a:37:3e:15:e7:04:ad:25:45:e6:17:43:df:
                    61:49:5c:6b:ff:14:aa:4d:3f:7b:5f:d2:57:64:64:
                    3b:88:d5:d3:c3:b4:39:8d:3a:35:4b:27:29:23:49:
                    59:42:ea:8b:c1:c4:27:fc:6c:cb:ca:e3:05:98:89:
                    42:48:7c:09:a2:73:79:41:e5:37:ce:35:c9:70:06:
                    af:6b:82:42:22:98:fd:5f:77:fc:3e:3f:e2:dc:46:
                    f7:a5:b7:b8:f8:7d:97:bb:0f:d4:d7:34:68:46:2e:
                    92:cb:96:79:c1:84:59:6e:e6:5b:2d:fd:22:d9:75:
                    6b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:F8:1D:97:4B:CA:04:83:86:A6:BC:1A:B3:AD:C3:96:91:5C:84:05
            X509v3 Authority Key Identifier:
                keyid:5A:6C:A8:6E:40:FB:6C:26:8E:8F:E6:51:FF:32:EC:E4:4D:85:7D:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166638/41EFC51E48CA11EAA214AF4CC4F9AE02/WmyobkD7bCaOj-ZR_zLs5E2FfQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmyobkD7bCaOj-ZR_zLs5E2FfQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166638/41EFC51E48CA11EAA214AF4CC4F9AE02/WmyobkD7bCaOj-ZR_zLs5E2FfQM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:15:90:ee:4c:86:c6:89:ae:e6:98:fa:f4:7f:a6:cc:dd:77:
         1d:0a:c1:c8:46:70:ee:1a:d8:ba:f2:08:44:42:51:59:54:30:
         81:d8:ac:8d:76:42:f3:fc:e0:9c:b2:ff:b6:a5:73:76:18:e5:
         33:97:1f:23:8f:08:4f:66:5a:f4:9a:a0:f5:36:12:09:0e:4a:
         45:0d:c9:14:92:a3:b9:12:3e:d6:2e:7c:2e:5c:d8:a9:86:47:
         3d:ec:40:b1:e4:6f:df:1f:19:1f:d6:0a:f6:66:06:a9:e0:89:
         85:a1:ef:d8:87:97:26:0a:ea:82:fe:77:b7:1a:ca:c5:31:17:
         49:5e:d6:cf:66:dc:b2:1d:de:64:08:9e:3f:2a:cb:c2:79:72:
         c5:ec:c7:d7:e0:0a:ff:82:e4:bf:a5:d6:ef:35:af:7f:7b:e9:
         db:02:60:1c:9b:91:bb:c9:2c:8e:5f:88:e4:fb:c6:de:d9:e2:
         7c:b6:0c:f3:62:35:46:77:8c:b2:7e:92:c1:8a:25:67:c8:1a:
         35:14:1c:a8:8b:81:70:30:d5:b6:6d:91:27:27:e5:57:2d:21:
         96:c2:ac:06:a0:a0:ed:9e:7f:58:e0:b8:93:c5:a9:cd:ae:e6:
         7a:db:8f:98:4b:94:93:86:fc:af:d5:e8:7b:93:0c:2e:3b:29:
         07:81:f6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----