Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft
File:                     dK-15U8HPzwgdjJdKsf3AA4uaoY.mft (raw, json)
Hash identifier:          tSJacWktNO6q1h5j27989wJqgzaqDBl+Sj6GZ/BNl/M=
Subject key identifier:   7D:DD:E3:FB:D5:A5:98:94:40:66:8D:C9:EF:43:79:D6:26:1F:61:24
Authority key identifier: 74:AF:B5:E5:4F:07:3F:3C:20:76:32:5D:2A:C7:F7:00:0E:2E:6A:86
Certificate issuer:       /CN=A916EDC2/serialNumber=74AFB5E54F073F3C2076325D2AC7F7000E2E6A86
Certificate serial:       02FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft
Manifest number:          02FA
Signing time:             Fri 31 Jan 2025 01:20:59 +0000
Manifest this update:     Fri 31 Jan 2025 01:20:58 +0000
Manifest next update:     Fri 07 Feb 2025 01:20:58 +0000
Files and hashes:         1: dK-15U8HPzwgdjJdKsf3AA4uaoY.crl (hash: 0NZssNqJFcR4jqPcmxEraftShN5mrwCA9IevmFfO6V4=)
                          2: 5E8E08E8C26211ECBFC22B20C4F9AE02.roa (hash: w37S3Bt2sSTPCiMAqtrHuEG6jTfY7XCc/TsnG1ZQfsg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 766 (0x2fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916EDC2/serialNumber=74AFB5E54F073F3C2076325D2AC7F7000E2E6A86
        Validity
            Not Before: Jan 31 01:20:58 2025 GMT
            Not After : Feb  7 01:20:58 2025 GMT
        Subject: CN=679c257b-a9b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8b:d0:42:2a:d1:91:d6:1b:f9:18:4d:ea:e9:
                    6f:e5:1e:a1:ae:32:c1:b7:c0:51:ee:10:b4:3c:56:
                    42:39:03:61:f9:84:a7:69:bc:17:46:0c:0f:9c:c3:
                    e4:8c:00:d3:08:54:d0:e3:de:e4:58:32:32:29:01:
                    6b:f0:7a:ca:50:21:3b:b9:21:93:d7:fd:39:0f:f8:
                    bd:43:98:5b:23:94:6b:e2:cb:aa:92:74:ee:ed:76:
                    0f:57:e5:86:62:40:5b:3a:fb:cb:50:60:9f:77:4b:
                    3c:21:91:3e:f8:e7:07:0c:a8:40:db:b2:12:9d:cb:
                    8e:98:64:6c:5c:70:d9:f8:68:87:71:fb:d8:9f:b1:
                    ca:75:40:75:4a:c3:a6:e6:dd:8b:dd:4d:8f:68:b0:
                    81:69:03:73:a6:ef:0b:6b:25:f3:ce:71:09:b9:b1:
                    70:12:ef:aa:e9:42:93:90:d9:42:16:78:b8:6e:7f:
                    9c:5f:34:db:f3:d6:31:c4:d0:81:07:f2:b9:0f:2a:
                    f5:bf:d1:74:6f:49:50:f8:a1:01:e3:11:d1:24:c2:
                    2f:11:94:b1:5b:9d:8a:8d:f3:7a:a0:dd:76:62:81:
                    92:7d:8f:63:fd:5c:24:da:90:72:59:3a:b2:14:5f:
                    94:aa:26:45:1e:0e:09:5b:3f:dd:09:90:0c:fe:04:
                    50:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:DD:E3:FB:D5:A5:98:94:40:66:8D:C9:EF:43:79:D6:26:1F:61:24
            X509v3 Authority Key Identifier:
                keyid:74:AF:B5:E5:4F:07:3F:3C:20:76:32:5D:2A:C7:F7:00:0E:2E:6A:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:5b:22:37:58:e4:31:8e:e0:61:88:45:cb:72:fd:d4:68:ae:
         98:3f:f9:b9:7b:3c:dd:ba:e6:06:b5:81:20:36:d8:a9:e6:a9:
         d7:9f:81:59:33:01:69:b1:d1:49:6c:a3:d2:66:5f:4a:62:c2:
         49:3b:60:fa:72:86:cc:6c:38:98:11:ab:bf:41:48:d4:79:99:
         5d:43:32:13:f6:e3:99:c5:04:68:fc:f3:77:7c:b9:38:a4:4e:
         df:21:d8:d3:fc:d9:7f:90:38:82:50:57:28:b9:eb:fc:96:e9:
         17:80:ad:35:1d:84:a8:d2:7b:5b:7c:b0:b4:a0:0b:d7:71:81:
         f3:aa:87:e7:b4:83:08:f4:f9:90:8b:c8:84:30:68:21:4d:af:
         5e:6a:52:a3:1f:66:b0:26:27:9d:32:b1:01:3c:92:ab:32:48:
         e2:81:c6:90:48:3c:08:7b:4d:de:85:45:fa:02:f7:25:4b:c6:
         bd:4a:bf:70:0a:7c:c6:91:56:e7:79:94:4b:3e:01:f1:ad:f7:
         17:d3:cf:49:68:fd:50:e8:f8:51:c5:2d:0b:73:31:2b:35:5d:
         a3:11:70:8f:47:3a:67:65:d3:d9:7e:fe:77:5c:85:78:79:36:
         33:c5:01:e9:a3:1e:90:f2:dc:71:d2:17:ef:76:22:4e:74:ab:
         99:53:5b:d5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAv4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkVEQzIxMTAvBgNVBAUTKDc0QUZCNUU1NEYwNzNGM0MyMDc2MzI1RDJBQzdGNzAw
MEUyRTZBODYwHhcNMjUwMTMxMDEyMDU4WhcNMjUwMjA3MDEyMDU4WjAYMRYwFAYD
VQQDEw02NzljMjU3Yi1hOWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv4vQQirRkdYb+RhN6ulv5R6hrjLBt8BR7hC0PFZCOQNh+YSnabwXRgwPnMPk
jADTCFTQ497kWDIyKQFr8HrKUCE7uSGT1/05D/i9Q5hbI5Rr4suqknTu7XYPV+WG
YkBbOvvLUGCfd0s8IZE++OcHDKhA27ISncuOmGRsXHDZ+GiHcfvYn7HKdUB1SsOm
5t2L3U2PaLCBaQNzpu8LayXzznEJubFwEu+q6UKTkNlCFni4bn+cXzTb89YxxNCB
B/K5Dyr1v9F0b0lQ+KEB4xHRJMIvEZSxW52KjfN6oN12YoGSfY9j/Vwk2pByWTqy
FF+UqiZFHg4JWz/dCZAM/gRQowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH3d4/vV
pZiUQGaNye9DedYmH2EkMB8GA1UdIwQYMBaAFHSvteVPBz88IHYyXSrH9wAOLmqG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RURDMi8zNkVCMjMyOEMy
NUYxMUVDOEMzQjAwMURDNEY5QUUwMi9kSy0xNVU4SFB6d2dkakpkS3NmM0FBNHVh
b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RLLTE1VThIUHp3Z2RqSmRLc2YzQUE0dWFvWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RURDMi8zNkVCMjMyOEMyNUYxMUVDOEMzQjAwMURDNEY5QUUwMi9kSy0xNVU4SFB6
d2dkakpkS3NmM0FBNHVhb1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB2WyI3WOQxjuBhiEXLcv3UaK6YP/m5ezzduuYGtYEgNtip5qnXn4FZ
MwFpsdFJbKPSZl9KYsJJO2D6cobMbDiYEau/QUjUeZldQzIT9uOZxQRo/PN3fLk4
pE7fIdjT/Nl/kDiCUFcouev8lukXgK01HYSo0ntbfLC0oAvXcYHzqofntIMI9PmQ
i8iEMGghTa9ealKjH2awJiedMrEBPJKrMkjigcaQSDwIe03ehUX6AvclS8a9Sr9w
CnzGkVbneZRLPgHxrfcX089JaP1Q6PhRxS0LczErNV2jEXCPRzpnZdPZfv53XIV4
eTYzxQHpox6Q8txx0hfvdiJOdKuZU1vV
-----END CERTIFICATE-----