Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft
File:                     LTKZEtaZA7hQCX-MbthXHaxxBa0.mft (raw, json)
Hash identifier:          +as/95E7Eu4bL4Es1RDwEzVcAY2XHaCf0wNX3jaUDYA=
Subject key identifier:   AD:87:26:12:B7:39:F7:95:7F:DC:4E:88:DA:4B:E6:02:BF:D7:2F:4E
Authority key identifier: 2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD
Certificate issuer:       /CN=A916708F/serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD
Certificate serial:       0C74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft
Manifest number:          0C6C
Signing time:             Fri 31 Jan 2025 18:09:32 +0000
Manifest this update:     Fri 31 Jan 2025 18:09:32 +0000
Manifest next update:     Fri 07 Feb 2025 18:09:32 +0000
Files and hashes:         1: LTKZEtaZA7hQCX-MbthXHaxxBa0.crl (hash: OUsGVOpsyPaY9FTHnCUzDEHhYLbEsvhFyr7Mn0AqsCg=)
                          2: 8174C3BEF16411E980D2F667C4F9AE02.roa (hash: VEw9MLhojPtBj7/yVbdylAjgIZeL4XHegjDH9vdhq/Y=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3188 (0xc74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916708F/serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD
        Validity
            Not Before: Jan 31 18:09:32 2025 GMT
            Not After : Feb  7 18:09:32 2025 GMT
        Subject: CN=679d11dc-985e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c5:8f:53:a0:ae:01:c3:fa:7e:c0:3f:2f:e9:
                    b8:75:ae:fe:e7:0f:71:24:87:38:b7:c3:3c:fc:15:
                    84:47:75:1c:d5:c7:62:55:ff:81:06:d0:70:41:b8:
                    ae:2b:45:0d:db:8a:2d:be:b6:a4:bd:bf:ec:89:77:
                    c0:f8:ba:94:f5:e2:33:d8:0d:d5:55:7f:de:87:24:
                    72:7a:e8:a2:3a:7c:f9:c9:90:80:b0:60:91:05:2b:
                    8c:75:9c:31:12:e9:6b:6e:a8:62:08:1e:99:41:ac:
                    42:7d:66:b9:ba:b1:83:75:5c:69:76:0f:62:f2:6d:
                    8f:61:52:f4:e5:c0:88:3b:5f:9a:74:f0:79:c7:6e:
                    9f:8f:0b:f4:c4:0a:af:2a:1f:c7:c8:56:ab:61:c6:
                    a8:af:08:51:5e:18:d6:96:ce:1f:8d:ee:cc:11:ed:
                    67:80:b0:33:2a:13:30:df:1c:e9:4e:a5:9b:45:1a:
                    da:62:8b:1e:9d:b4:a7:0e:de:76:ee:f4:e8:b8:27:
                    05:15:76:bf:f0:eb:e1:d9:69:29:66:8d:98:89:e6:
                    29:2f:57:3f:ca:ba:cf:11:29:d0:88:2e:90:a3:da:
                    14:c6:75:c0:37:b8:28:34:91:b6:d2:05:28:39:db:
                    d2:67:da:b7:ad:0f:52:8f:aa:f1:9b:d2:48:dc:63:
                    6c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:87:26:12:B7:39:F7:95:7F:DC:4E:88:DA:4B:E6:02:BF:D7:2F:4E
            X509v3 Authority Key Identifier:
                keyid:2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:3c:c1:f7:74:be:da:9a:1f:b3:10:55:e0:99:a3:11:84:9b:
         d2:56:1e:7a:21:6f:ed:70:7e:6f:9b:71:5e:1f:6c:c7:4e:ce:
         5c:3f:fc:ea:5c:14:e9:c3:28:cd:e0:15:99:03:fa:86:44:82:
         47:d1:91:18:19:12:a1:d6:a3:15:b3:f6:6b:ea:f7:20:5f:d2:
         76:e8:a4:38:aa:67:65:03:7f:06:1e:0f:89:ff:57:31:62:19:
         45:b6:6f:87:f4:17:cc:63:bc:4f:fb:4d:1c:73:b5:84:d4:81:
         73:f2:d2:13:2a:ad:43:63:cb:63:a5:2f:41:c7:b2:3c:33:b8:
         31:6e:a0:79:df:d4:62:75:96:f7:7e:d3:3f:46:dc:f8:be:ee:
         0b:8e:cb:65:15:c8:5b:ca:13:34:7a:09:de:d0:56:5c:0b:fb:
         d4:b9:2a:05:54:dc:2c:22:77:02:0a:18:e5:b1:db:28:ac:ee:
         ee:f8:7b:b3:f5:7b:71:cd:b8:ba:3c:6f:92:41:7c:58:9b:46:
         ab:24:d5:ed:cb:1c:7c:f9:4f:b6:f1:03:52:07:0a:c7:24:fd:
         1a:be:ae:5a:95:4f:5b:d5:9c:95:d6:3a:0f:84:4d:d9:26:34:
         d1:a2:fe:a2:5c:e9:bd:38:44:5f:a4:cd:1a:ba:ba:0e:7c:29:
         61:09:7a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----