Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft
File:                     Qb--vmNSH7BO2BI8aOXAza9dBc0.mft (raw, json)
Hash identifier:          zz7Br82XzHzZ7cIGyVBVhEsmPeEVXUSysr9GTWLDvRE=
Subject key identifier:   13:95:F0:77:E4:60:AE:6C:D2:4D:88:D3:62:C4:7A:26:89:5E:9D:14
Authority key identifier: 41:BF:BE:BE:63:52:1F:B0:4E:D8:12:3C:68:E5:C0:CD:AF:5D:05:CD
Certificate issuer:       /CN=A9170982/serialNumber=41BFBEBE63521FB04ED8123C68E5C0CDAF5D05CD
Certificate serial:       034A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft
Manifest number:          033E
Signing time:             Fri 31 Jan 2025 01:09:22 +0000
Manifest this update:     Fri 31 Jan 2025 01:09:21 +0000
Manifest next update:     Fri 07 Feb 2025 01:09:21 +0000
Files and hashes:         1: Qb--vmNSH7BO2BI8aOXAza9dBc0.crl (hash: x5rfN1682J3NAlFykUfZP29MfndFajf54E7MIOIrUb4=)
                          2: EE8EAEDC377F11EE92674430C4F9AE02.roa (hash: XUINDcHIDNHHzShIR5UbuMY4rtr/62wcaswBNnwgnig=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 842 (0x34a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170982/serialNumber=41BFBEBE63521FB04ED8123C68E5C0CDAF5D05CD
        Validity
            Not Before: Jan 31 01:09:21 2025 GMT
            Not After : Feb  7 01:09:21 2025 GMT
        Subject: CN=679c22c1-83bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:de:e2:45:1a:97:87:30:5f:f7:96:ca:84:1d:
                    2f:6a:a3:a5:82:01:00:9c:e4:52:ce:7d:36:5f:d5:
                    4e:db:96:7a:32:a5:f2:b2:43:cc:98:a9:b3:86:c9:
                    67:d5:0b:28:2e:f5:54:83:0a:ef:3e:b9:49:6e:cb:
                    dc:04:2a:ef:51:fb:e1:ea:a8:e0:d0:77:a7:e5:7c:
                    19:ff:78:cd:82:01:85:87:07:be:4e:bd:e9:72:fb:
                    91:4e:ba:8a:3a:89:cb:03:c2:16:ff:29:7a:86:40:
                    3c:b6:ac:09:f8:b7:b3:f2:00:79:13:40:c0:96:ae:
                    8b:5c:85:34:73:6c:84:a5:38:c8:17:4a:7f:cc:95:
                    f5:0b:69:3f:9e:f5:37:87:03:f3:a4:e6:ca:7f:df:
                    37:5c:4d:75:78:8d:52:14:16:35:08:f4:e9:63:dc:
                    10:f9:02:0d:25:0d:38:3e:af:92:e1:19:8f:4e:a1:
                    6d:97:a8:4d:76:05:d7:51:c3:66:23:93:05:d4:6e:
                    0d:57:a7:20:ee:1d:ad:5b:5c:e9:77:c5:a2:63:9a:
                    42:88:d9:31:e6:8c:06:60:47:ac:23:80:52:04:5c:
                    c5:5d:65:bf:c3:2a:8b:ef:bc:22:c6:1c:6c:4e:49:
                    b6:1b:2d:04:a9:50:86:86:92:2f:fc:78:13:7d:6f:
                    5f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:95:F0:77:E4:60:AE:6C:D2:4D:88:D3:62:C4:7A:26:89:5E:9D:14
            X509v3 Authority Key Identifier:
                keyid:41:BF:BE:BE:63:52:1F:B0:4E:D8:12:3C:68:E5:C0:CD:AF:5D:05:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:13:da:ec:8e:38:41:b7:c9:99:8b:65:79:c3:aa:76:70:18:
         77:e0:ed:cd:74:10:36:93:25:a5:90:06:f1:e8:45:5b:60:17:
         94:81:53:c1:79:59:72:63:7d:47:d9:74:79:6d:1b:bf:aa:5d:
         c2:84:a5:02:52:9f:18:3f:c1:e1:f1:94:c4:3f:47:10:1b:04:
         46:a6:f2:36:db:34:bd:aa:8e:48:3e:1c:d3:48:d5:17:10:4a:
         7d:eb:de:11:41:3b:1d:5b:2e:b3:86:b3:eb:9d:41:3a:e5:f0:
         1d:b9:26:ad:75:50:43:ca:dd:03:84:a5:d4:bd:f6:88:f8:e5:
         2d:cf:9c:41:5f:58:95:9c:03:8e:d6:42:7b:aa:43:6c:85:e6:
         c4:20:13:5a:e4:1b:2e:93:0e:04:d8:fb:2b:1d:f5:66:51:e0:
         c1:31:b7:d0:4d:a1:48:44:fc:d1:7d:c3:f4:18:c2:b3:a4:cb:
         2f:7d:c9:b7:37:e4:36:40:54:d3:e5:1e:bb:34:39:f9:43:d0:
         d1:0d:56:6f:ec:55:02:47:20:2e:11:6c:7e:20:33:d0:e3:23:
         5a:9c:2e:2f:d0:6d:e8:b4:ad:2a:4a:ea:8c:04:b9:41:bb:8b:
         23:96:4f:ad:a3:98:4e:f9:77:f0:5d:7f:1c:6a:b2:5e:b4:0a:
         ce:21:66:b9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA0owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzA5ODIxMTAvBgNVBAUTKDQxQkZCRUJFNjM1MjFGQjA0RUQ4MTIzQzY4RTVDMENE
QUY1RDA1Q0QwHhcNMjUwMTMxMDEwOTIxWhcNMjUwMjA3MDEwOTIxWjAYMRYwFAYD
VQQDEw02NzljMjJjMS04M2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwd7iRRqXhzBf95bKhB0vaqOlggEAnORSzn02X9VO25Z6MqXyskPMmKmzhsln
1QsoLvVUgwrvPrlJbsvcBCrvUfvh6qjg0Hen5XwZ/3jNggGFhwe+Tr3pcvuRTrqK
OonLA8IW/yl6hkA8tqwJ+Lez8gB5E0DAlq6LXIU0c2yEpTjIF0p/zJX1C2k/nvU3
hwPzpObKf983XE11eI1SFBY1CPTpY9wQ+QINJQ04Pq+S4RmPTqFtl6hNdgXXUcNm
I5MF1G4NV6cg7h2tW1zpd8WiY5pCiNkx5owGYEesI4BSBFzFXWW/wyqL77wixhxs
Tkm2Gy0EqVCGhpIv/HgTfW9fKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBOV8Hfk
YK5s0k2I02LEeiaJXp0UMB8GA1UdIwQYMBaAFEG/vr5jUh+wTtgSPGjlwM2vXQXN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDk4Mi9DRjIwNUM2MEFD
MTMxMUVDQjc3NkIyMDlDNEY5QUUwMi9RYi0tdm1OU0g3Qk8yQkk4YU9YQXphOWRC
YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1FiLS12bU5TSDdCTzJCSThhT1hBemE5ZEJjMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MDk4Mi9DRjIwNUM2MEFDMTMxMUVDQjc3NkIyMDlDNEY5QUUwMi9RYi0tdm1OU0g3
Qk8yQkk4YU9YQXphOWRCYzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA4E9rsjjhBt8mZi2V5w6p2cBh34O3NdBA2kyWlkAbx6EVbYBeUgVPB
eVlyY31H2XR5bRu/ql3ChKUCUp8YP8Hh8ZTEP0cQGwRGpvI22zS9qo5IPhzTSNUX
EEp9694RQTsdWy6zhrPrnUE65fAduSatdVBDyt0DhKXUvfaI+OUtz5xBX1iVnAOO
1kJ7qkNshebEIBNa5Bsukw4E2PsrHfVmUeDBMbfQTaFIRPzRfcP0GMKzpMsvfcm3
N+Q2QFTT5R67NDn5Q9DRDVZv7FUCRyAuEWx+IDPQ4yNanC4v0G3otK0qSuqMBLlB
u4sjlk+to5hO+XfwXX8carJetArOIWa5
-----END CERTIFICATE-----