Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170533/22ED2C9A9F8211ECBFC3CF1CC4F9AE02/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.mft
File:                     5Y-Y48YUIUZUU6xCVfCvsK2V0kY.mft (raw, json)
Hash identifier:          mewmFaT9SZPgoAsXgosPuoWczW2+Nq1mVvykeddtRrw=
Subject key identifier:   F7:EC:52:3F:99:75:7C:7A:98:F8:A5:4C:7C:58:7E:10:57:27:AF:77
Authority key identifier: E5:8F:98:E3:C6:14:21:46:54:53:AC:42:55:F0:AF:B0:AD:95:D2:46
Certificate issuer:       /CN=A9170533/serialNumber=E58F98E3C61421465453AC4255F0AFB0AD95D246
Certificate serial:       0357
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170533/22ED2C9A9F8211ECBFC3CF1CC4F9AE02/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.mft
Manifest number:          0353
Signing time:             Fri 31 Jan 2025 01:04:24 +0000
Manifest this update:     Fri 31 Jan 2025 01:04:23 +0000
Manifest next update:     Fri 07 Feb 2025 01:04:23 +0000
Files and hashes:         1: 5Y-Y48YUIUZUU6xCVfCvsK2V0kY.crl (hash: KUvXmhSWhj8/rfqPi49vZxcRk7WEzTFhrbRQgqsyyUM=)
                          2: 6664BEB29F8611ECBE806D30C4F9AE02.roa (hash: 3Zz0SoScV6fPNZfJ9ERkFkDBxGo2mzRnK0TlcOdgOTI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 855 (0x357)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170533/serialNumber=E58F98E3C61421465453AC4255F0AFB0AD95D246
        Validity
            Not Before: Jan 31 01:04:23 2025 GMT
            Not After : Feb  7 01:04:23 2025 GMT
        Subject: CN=679c2198-10f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:06:26:ed:0f:12:0f:91:30:8b:0a:23:a1:86:
                    4f:f1:94:9f:b1:ad:b6:6c:7d:4e:48:2c:48:d2:75:
                    41:ad:96:60:c7:dd:21:ae:78:e0:34:bf:b6:a8:ff:
                    c7:3e:f9:3f:14:3b:c1:44:3a:ee:ab:6e:d5:f2:29:
                    64:8e:f6:0d:0d:ab:bf:12:92:c5:12:e5:b9:54:1b:
                    fd:f6:6f:2d:e1:4c:b9:92:e7:b7:4b:2d:07:e6:10:
                    e6:db:79:b0:fb:01:69:ea:52:37:5b:ca:3a:f7:13:
                    83:d8:a5:32:32:89:4f:70:ce:4a:7b:2b:a3:8e:90:
                    f9:08:e3:e1:70:ba:87:e3:59:9e:15:bd:29:8c:9a:
                    39:1a:3e:b2:cb:2b:b5:0e:3d:94:75:b3:d9:43:31:
                    cc:29:60:08:3b:74:f1:74:a0:92:b7:b6:54:53:ea:
                    d9:85:39:ff:a4:78:da:28:7d:25:d3:ee:07:b4:7d:
                    1d:02:f1:3f:9e:f3:33:e5:0b:03:d7:8a:14:04:73:
                    97:af:ff:1e:0e:e9:67:20:4c:9e:d1:cf:16:03:42:
                    39:ca:f1:40:c0:dd:e9:65:29:12:07:1d:06:4e:56:
                    ff:79:53:c1:a1:23:91:8d:31:f9:c8:68:fe:80:8e:
                    ed:00:84:71:3b:6c:83:a0:0f:65:b1:ae:ce:bd:43:
                    24:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:EC:52:3F:99:75:7C:7A:98:F8:A5:4C:7C:58:7E:10:57:27:AF:77
            X509v3 Authority Key Identifier:
                keyid:E5:8F:98:E3:C6:14:21:46:54:53:AC:42:55:F0:AF:B0:AD:95:D2:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170533/22ED2C9A9F8211ECBFC3CF1CC4F9AE02/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170533/22ED2C9A9F8211ECBFC3CF1CC4F9AE02/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:f4:a0:68:c1:03:5c:20:b6:46:f7:fb:fa:f6:12:ec:9b:48:
         7c:74:62:d4:b0:7d:69:71:ca:70:6f:33:54:1a:e2:98:a3:95:
         5a:18:8c:53:c9:03:b2:cf:67:f7:74:94:b4:f8:f5:d0:44:0f:
         b8:71:d2:86:2a:56:df:29:7c:a5:f3:a2:a9:7c:22:c2:27:fe:
         0d:02:7f:fb:8e:50:9e:55:5d:eb:b3:ab:95:d3:93:c9:ba:79:
         00:3c:57:4b:b5:84:26:69:3a:65:72:22:42:9f:42:e7:d3:3b:
         41:70:20:0e:0e:89:4f:10:87:5b:ab:fb:67:6f:ea:6b:73:6e:
         c8:94:80:7f:10:74:a6:f0:69:34:1d:66:61:0b:b6:c0:b9:83:
         72:31:c7:65:58:59:b8:5c:df:18:c2:1d:b5:c9:d8:9b:09:77:
         4c:b4:9a:df:b8:97:68:a1:5d:2b:2f:8f:f3:94:53:d4:a9:1a:
         af:1e:8a:19:c5:c1:e8:fc:83:2f:7c:eb:bf:03:2d:da:c5:3c:
         4f:2a:63:24:85:02:7b:f4:a2:fc:79:c8:94:a6:30:a4:57:1a:
         08:78:43:a1:23:fd:17:0a:fb:4e:12:be:e2:0b:e6:e8:b9:d6:
         fb:db:cd:81:eb:3f:71:38:6b:6d:ab:18:d9:97:84:db:11:0a:
         f1:d8:8f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----