Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168939/E666E08E852611EB9D198F1DC4F9AE02/fuTdyziTyc2__3a-xeAwLlIZJQE.mft
File:                     fuTdyziTyc2__3a-xeAwLlIZJQE.mft (raw, json)
Hash identifier:          Dp+OPbnMYUU6v9AkM0EL8+J7UsZTZkkEuhXBKK+tng0=
Subject key identifier:   6C:E5:39:FF:06:A4:28:54:FA:79:FE:4E:64:4B:8E:8A:25:ED:6C:48
Authority key identifier: 7E:E4:DD:CB:38:93:C9:CD:BF:FF:76:BE:C5:E0:30:2E:52:19:25:01
Certificate issuer:       /CN=A9168939/serialNumber=7EE4DDCB3893C9CDBFFF76BEC5E0302E52192501
Certificate serial:       0622
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuTdyziTyc2__3a-xeAwLlIZJQE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168939/E666E08E852611EB9D198F1DC4F9AE02/fuTdyziTyc2__3a-xeAwLlIZJQE.mft
Manifest number:          061C
Signing time:             Thu 30 Jan 2025 22:41:34 +0000
Manifest this update:     Thu 30 Jan 2025 22:41:34 +0000
Manifest next update:     Thu 06 Feb 2025 22:41:34 +0000
Files and hashes:         1: fuTdyziTyc2__3a-xeAwLlIZJQE.crl (hash: IMUG+gmwY4lYldlwMSTHvQFyl5q0CaSbjB80URSjyo8=)
                          2: 50548100855311EBBAE75616C4F9AE02.roa (hash: w/7ENYdgbn1DPIWA+1uJ1uDQPmPo/GktJbkQc+oFSHY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1570 (0x622)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168939/serialNumber=7EE4DDCB3893C9CDBFFF76BEC5E0302E52192501
        Validity
            Not Before: Jan 30 22:41:34 2025 GMT
            Not After : Feb  6 22:41:34 2025 GMT
        Subject: CN=679c001e-8b4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ff:59:8b:21:88:e0:79:aa:1e:37:1f:4a:13:
                    71:35:1c:fd:ee:e6:d7:b8:26:ca:4f:52:63:0d:d9:
                    8e:84:cb:6b:ee:38:dc:e9:a2:a4:24:79:3b:24:9b:
                    03:e7:bb:d8:72:78:a1:7c:79:d1:fd:4e:01:31:3a:
                    aa:8b:cc:b3:5c:55:9d:f8:a9:e1:96:e8:63:4e:59:
                    c7:50:12:c9:16:59:85:7a:8c:64:01:4a:c7:54:bd:
                    6a:31:74:ce:4f:f9:4f:01:82:66:58:05:50:92:aa:
                    45:4e:65:a3:d8:89:27:be:92:e7:21:c4:d5:f6:47:
                    de:70:41:1d:fa:83:56:b2:4e:d1:ea:7a:fb:ae:b1:
                    6b:c8:fc:20:39:1c:bd:00:14:f9:71:0d:55:2e:12:
                    17:d3:5a:91:84:67:57:1b:4b:bf:71:21:4d:e9:59:
                    fb:33:f7:b5:c4:18:68:84:43:cc:38:6d:b5:69:df:
                    39:51:22:ef:6b:5c:4b:d0:d9:73:7e:cd:27:b4:65:
                    3b:72:38:3b:47:69:ce:8a:73:c9:5c:45:1b:32:19:
                    1a:07:d7:c6:f7:f0:a4:77:83:37:00:1e:e1:38:1d:
                    1f:76:30:96:3b:fb:2f:34:3e:a6:80:dd:0c:a8:cb:
                    9d:de:15:0a:70:36:6b:36:94:3a:55:ca:2c:b7:e0:
                    53:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E5:39:FF:06:A4:28:54:FA:79:FE:4E:64:4B:8E:8A:25:ED:6C:48
            X509v3 Authority Key Identifier:
                keyid:7E:E4:DD:CB:38:93:C9:CD:BF:FF:76:BE:C5:E0:30:2E:52:19:25:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168939/E666E08E852611EB9D198F1DC4F9AE02/fuTdyziTyc2__3a-xeAwLlIZJQE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuTdyziTyc2__3a-xeAwLlIZJQE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168939/E666E08E852611EB9D198F1DC4F9AE02/fuTdyziTyc2__3a-xeAwLlIZJQE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:24:81:b3:e2:5b:bd:40:83:29:53:80:60:f3:c5:56:b2:36:
         cc:57:b8:80:5d:c7:49:bb:11:a2:74:6c:60:6b:bf:b2:60:f3:
         06:31:42:fc:ef:fc:06:ad:35:af:14:6c:a6:14:ce:89:39:78:
         0a:65:16:50:0d:2a:b4:ea:86:f0:2b:fd:6d:74:07:9b:5d:f6:
         17:6a:3c:1d:44:28:a6:3d:6b:ba:ed:ea:7e:da:3f:62:f8:0a:
         7e:81:d2:f6:10:e2:c2:c7:35:cc:c6:a3:6a:af:31:d6:cb:31:
         18:4c:5f:78:2a:21:c8:84:a7:ee:23:3b:9e:7a:34:aa:75:c2:
         2f:11:04:c0:4a:56:f1:4f:e5:e5:af:ae:48:1c:9d:e3:e8:94:
         ec:5a:72:7f:f6:39:ff:8c:ce:01:44:ac:0a:f5:44:e0:6a:05:
         81:58:ec:a4:d7:a7:ec:25:83:43:8b:dd:95:e5:73:bf:45:97:
         f4:3f:96:d3:b5:50:90:86:7a:75:df:f0:bf:1b:6a:9c:e6:5a:
         7c:a0:dd:c7:68:02:f7:cd:19:ad:ac:c0:31:7c:36:63:12:8d:
         3d:d8:98:0a:02:14:b0:f3:08:9c:43:c3:7c:b1:8f:e6:51:a3:
         d9:2d:12:2e:37:60:ce:b5:50:b5:e8:be:4a:6b:0d:bb:e6:97:
         02:8b:2a:18
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njg5MzkxMTAvBgNVBAUTKDdFRTRERENCMzg5M0M5Q0RCRkZGNzZCRUM1RTAzMDJF
NTIxOTI1MDEwHhcNMjUwMTMwMjI0MTM0WhcNMjUwMjA2MjI0MTM0WjAYMRYwFAYD
VQQDEw02NzljMDAxZS04YjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0f9ZiyGI4HmqHjcfShNxNRz97ubXuCbKT1JjDdmOhMtr7jjc6aKkJHk7JJsD
57vYcnihfHnR/U4BMTqqi8yzXFWd+KnhluhjTlnHUBLJFlmFeoxkAUrHVL1qMXTO
T/lPAYJmWAVQkqpFTmWj2IknvpLnIcTV9kfecEEd+oNWsk7R6nr7rrFryPwgORy9
ABT5cQ1VLhIX01qRhGdXG0u/cSFN6Vn7M/e1xBhohEPMOG21ad85USLva1xL0Nlz
fs0ntGU7cjg7R2nOinPJXEUbMhkaB9fG9/Ckd4M3AB7hOB0fdjCWO/svND6mgN0M
qMud3hUKcDZrNpQ6Vcost+BTgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGzlOf8G
pChU+nn+TmRLjool7WxIMB8GA1UdIwQYMBaAFH7k3cs4k8nNv/92vsXgMC5SGSUB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODkzOS9FNjY2RTA4RTg1
MjYxMUVCOUQxOThGMURDNEY5QUUwMi9mdVRkeXppVHljMl9fM2EteGVBd0xsSVpK
UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Z1VGR5emlUeWMyX18zYS14ZUF3TGxJWkpRRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
ODkzOS9FNjY2RTA4RTg1MjYxMUVCOUQxOThGMURDNEY5QUUwMi9mdVRkeXppVHlj
Ml9fM2EteGVBd0xsSVpKUUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB8JIGz4lu9QIMpU4Bg88VWsjbMV7iAXcdJuxGidGxga7+yYPMGMUL8
7/wGrTWvFGymFM6JOXgKZRZQDSq06obwK/1tdAebXfYXajwdRCimPWu67ep+2j9i
+Ap+gdL2EOLCxzXMxqNqrzHWyzEYTF94KiHIhKfuIzueejSqdcIvEQTASlbxT+Xl
r65IHJ3j6JTsWnJ/9jn/jM4BRKwK9UTgagWBWOyk16fsJYNDi92V5XO/RZf0P5bT
tVCQhnp13/C/G2qc5lp8oN3HaAL3zRmtrMAxfDZjEo092JgKAhSw8wicQ8N8sY/m
UaPZLRIuN2DOtVC16L5Kaw275pcCiyoY
-----END CERTIFICATE-----