Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft
File:                     qPwGNuaBhkdVSHlN36RpC__UzLY.mft (raw, json)
Hash identifier:          280ZxNWWs4f55McsO2W98E5Uq1WVMkHvh1Pt8qDO0JI=
Subject key identifier:   4F:F2:29:57:97:ED:09:4B:3E:2C:F6:8C:F1:4D:FA:4A:43:4C:55:CA
Authority key identifier: A8:FC:06:36:E6:81:86:47:55:48:79:4D:DF:A4:69:0B:FF:D4:CC:B6
Certificate issuer:       /CN=A9167003/serialNumber=A8FC0636E68186475548794DDFA4690BFFD4CCB6
Certificate serial:       76
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qPwGNuaBhkdVSHlN36RpC__UzLY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft
Manifest number:          74
Signing time:             Fri 31 Jan 2025 05:52:00 +0000
Manifest this update:     Fri 31 Jan 2025 05:52:00 +0000
Manifest next update:     Fri 07 Feb 2025 05:52:00 +0000
Files and hashes:         1: qPwGNuaBhkdVSHlN36RpC__UzLY.crl (hash: Chf5vHXsF3ltq2CZ7HzTzuHlf7bR8kMslEoo3k2OrZU=)
                          2: 85C3AC9A39E511EF99FD7A11C4F9AE02.roa (hash: B8Xb2sYgtypSv3e1Q/ixe1JBQsd2MMr7LDz0OuJS7tw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167003/serialNumber=A8FC0636E68186475548794DDFA4690BFFD4CCB6
        Validity
            Not Before: Jan 31 05:52:00 2025 GMT
            Not After : Feb  7 05:52:00 2025 GMT
        Subject: CN=679c6500-1512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9f:f8:47:38:51:1b:13:79:4e:f5:db:ab:ba:
                    f9:fd:70:cd:dc:8a:74:dd:83:40:db:90:ff:cb:65:
                    a6:41:cc:5f:4a:7b:97:98:82:25:1b:0c:47:d9:99:
                    69:3a:84:ef:ad:e7:2a:ca:33:24:ab:3d:9e:e6:e5:
                    fe:76:fe:08:3f:f4:6c:bf:59:5e:ce:e1:f3:df:95:
                    ea:0a:7f:38:51:e8:d4:58:f4:f8:e4:13:f1:34:04:
                    79:46:e2:b1:f9:25:d8:1a:ad:b9:23:a8:84:4d:0e:
                    b1:06:ce:1b:ae:c8:63:38:3e:70:0c:4b:05:73:2c:
                    96:20:bf:eb:ff:6c:d3:c0:08:a8:9e:94:5d:d4:2c:
                    5c:57:89:55:1c:1d:8e:4b:fa:88:ce:38:e5:10:5c:
                    3f:18:70:79:68:04:52:a6:77:66:89:36:9c:37:34:
                    6b:5c:85:ab:5d:f1:75:60:9c:d8:3b:40:95:57:11:
                    24:ee:62:fc:b0:0e:24:19:08:ad:8a:36:e1:2b:4c:
                    36:d6:08:87:24:e0:65:0b:7c:5d:9b:96:1f:f8:b8:
                    eb:80:07:cd:e8:54:f1:74:00:0c:7d:97:7b:2d:24:
                    b2:6d:7c:99:a4:88:28:01:b9:d9:ed:70:cc:5b:c5:
                    fb:8f:25:c9:48:e9:5b:af:a7:53:4e:b4:ee:47:77:
                    e9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:F2:29:57:97:ED:09:4B:3E:2C:F6:8C:F1:4D:FA:4A:43:4C:55:CA
            X509v3 Authority Key Identifier:
                keyid:A8:FC:06:36:E6:81:86:47:55:48:79:4D:DF:A4:69:0B:FF:D4:CC:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qPwGNuaBhkdVSHlN36RpC__UzLY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:b9:be:17:a4:57:25:68:1e:13:82:ea:45:70:2e:a3:b9:3c:
         a0:ff:f5:33:3b:60:eb:3b:8b:63:97:0f:73:6e:b3:f1:72:02:
         0a:e4:19:0b:93:72:e2:85:c4:87:b0:f6:53:97:76:74:bd:3c:
         ca:e9:a3:42:3a:87:50:3b:11:37:fe:28:22:53:a4:16:bd:43:
         ec:1e:be:53:92:db:2d:ab:91:4a:12:69:5f:6d:db:05:92:3b:
         9d:62:f6:e4:ca:f0:85:86:d2:27:ca:53:41:1f:93:94:20:97:
         28:37:4b:e3:11:75:25:61:56:24:38:73:b7:f2:d0:0c:9b:40:
         cf:6b:e2:68:06:c2:2d:57:77:de:bb:1c:fa:db:5e:fd:0a:bd:
         61:99:c9:fb:47:9e:53:f4:03:85:15:5d:28:9e:15:c9:3f:ea:
         23:85:5e:fd:c1:5f:d5:86:8a:5a:63:9b:c9:c7:c0:53:f9:ff:
         e4:fd:78:8f:04:ed:42:e1:7d:21:89:77:b0:b8:66:f1:b6:b9:
         0d:07:ae:34:f6:1d:6c:19:6c:94:ca:b0:71:5d:a7:5c:8d:38:
         0f:da:e1:33:4a:6f:86:cc:a0:94:80:00:4d:5d:4f:29:f7:0c:
         c4:d3:26:68:46:20:0b:0a:ee:86:a5:79:9a:c0:92:6b:56:40:
         42:d8:f8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----