Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft
File:                     Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft (raw, json)
Hash identifier:          QlBG3EOg4QBNrttgbDUG1DSonbrLtdurAN/6qVCxa50=
Subject key identifier:   25:E9:1C:42:D0:8E:14:89:09:CD:9B:D7:DC:39:DB:D3:FB:77:63:12
Authority key identifier: 22:7A:BE:4D:F0:4F:85:F4:E0:13:35:7A:90:4E:3C:8C:3C:91:84:54
Certificate issuer:       /CN=A9171560/serialNumber=227ABE4DF04F85F4E013357A904E3C8C3C918454
Certificate serial:       0D0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Inq-TfBPhfTgEzV6kE48jDyRhFQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft
Manifest number:          0CE6
Signing time:             Fri 31 Jan 2025 18:07:06 +0000
Manifest this update:     Fri 31 Jan 2025 18:07:05 +0000
Manifest next update:     Fri 07 Feb 2025 18:07:05 +0000
Files and hashes:         1: Inq-TfBPhfTgEzV6kE48jDyRhFQ.crl (hash: w2dPK2wQUzPvQR9GfVaNYBIfG3J5Zysg9IYio+y9E0o=)
                          2: 610944B422D911EA8E735D5CC4F9AE02.roa (hash: Cr+VsfXDJWByT9UOe+f+PXNb8ByHkADYnx2wCkM5d5o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3343 (0xd0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171560/serialNumber=227ABE4DF04F85F4E013357A904E3C8C3C918454
        Validity
            Not Before: Jan 31 18:07:05 2025 GMT
            Not After : Feb  7 18:07:05 2025 GMT
        Subject: CN=679d1149-9de6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c7:b5:b0:b7:50:41:d1:b1:42:da:75:13:df:
                    5d:fa:4d:d0:c8:c0:81:03:61:de:95:65:4a:88:2d:
                    89:07:47:dc:e4:cf:36:08:a1:3e:78:82:b5:67:8a:
                    65:27:2c:bd:a4:a2:67:6a:20:18:84:50:05:c7:f7:
                    01:fe:c2:a8:2c:1c:7f:59:4f:8f:52:e5:3b:15:ce:
                    c0:99:75:60:5b:b9:f8:29:9b:ea:a0:91:5a:3d:8a:
                    a9:6e:59:37:ef:e0:12:35:0f:f4:8c:9b:98:07:64:
                    7f:47:5c:77:71:82:71:2b:ab:4d:c1:92:cf:04:58:
                    31:d8:ef:e3:8b:09:47:c6:52:a1:f5:0a:cd:37:a2:
                    9a:29:60:20:73:01:9a:c7:c7:a6:2c:e9:67:84:2d:
                    fa:10:83:9d:41:b4:65:f6:82:1f:5e:52:63:95:14:
                    35:ac:56:c8:34:5c:69:65:09:08:d6:92:aa:15:31:
                    05:6a:4f:57:4f:60:ff:51:0b:7d:99:d8:09:04:75:
                    2b:81:48:f6:ea:8c:c1:da:ba:1f:c4:3b:60:c3:a8:
                    77:e2:89:00:b3:9a:64:e9:d8:21:f5:44:fa:5c:a5:
                    f3:8a:93:dd:f5:a7:cc:60:53:d9:35:e6:64:3d:aa:
                    91:66:d7:1e:a3:0c:73:79:33:cd:db:64:08:6c:2e:
                    c1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E9:1C:42:D0:8E:14:89:09:CD:9B:D7:DC:39:DB:D3:FB:77:63:12
            X509v3 Authority Key Identifier:
                keyid:22:7A:BE:4D:F0:4F:85:F4:E0:13:35:7A:90:4E:3C:8C:3C:91:84:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Inq-TfBPhfTgEzV6kE48jDyRhFQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:10:33:12:c8:ea:b4:84:b8:68:98:5c:f6:e7:6b:bc:98:33:
         a8:10:87:b3:f8:40:d0:66:0d:b3:98:7d:55:bc:e8:7c:69:93:
         e9:e1:24:9b:20:b4:1c:67:a3:0c:ed:82:e4:2e:ca:ed:f4:1f:
         bf:f9:3d:9e:4f:5a:f0:80:7f:90:75:ac:a4:fa:ae:f8:07:2b:
         45:58:5b:c8:25:b9:fd:db:a2:85:b8:7e:02:38:35:a8:71:a8:
         ce:2b:d3:12:27:18:9f:fe:26:63:75:f9:22:59:21:8c:0c:f3:
         aa:4e:e9:c8:16:96:bd:15:9d:75:83:df:75:96:ce:11:b1:ff:
         13:6a:cd:bd:2d:47:2a:a8:bd:cf:2e:01:e0:d2:4e:05:7f:fe:
         0d:b1:62:f8:32:93:49:05:ca:87:39:77:4f:78:1f:df:a7:e0:
         e5:58:f0:6f:0e:17:e8:38:c8:b4:de:24:35:77:bb:77:12:36:
         4c:9b:6b:8c:bb:4b:47:af:65:e8:4c:63:ff:ba:36:ff:a8:b2:
         3e:c2:9f:ec:c9:5a:46:01:3f:cc:a2:10:56:3b:83:34:61:4b:
         83:04:e0:f1:67:d1:b8:06:99:30:41:fb:c2:fe:e8:b7:94:79:
         a0:47:0e:6e:d1:2c:99:5e:f4:5d:4a:35:70:b2:81:f7:a6:3a:
         88:4c:1e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----