Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft
File:                     s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft (raw, json)
Hash identifier:          UG2ePHDisywQ5A/fwlJlOPHKH8De/3HyP+73UA/yzqM=
Subject key identifier:   0E:B8:41:05:DD:AE:95:68:DE:D0:75:83:BF:96:F1:35:00:41:90:ED
Authority key identifier: B3:99:2F:0D:49:BA:F6:A3:6F:DA:65:8E:5B:45:94:69:52:1E:5B:44
Certificate issuer:       /CN=A917530D/serialNumber=B3992F0D49BAF6A36FDA658E5B459469521E5B44
Certificate serial:       DB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft
Manifest number:          D1
Signing time:             Fri 31 Jan 2025 04:57:30 +0000
Manifest this update:     Fri 31 Jan 2025 04:57:29 +0000
Manifest next update:     Fri 07 Feb 2025 04:57:29 +0000
Files and hashes:         1: s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl (hash: ypVEmuKDLG7F0rQ3c4eN0yNlIxTUDYYO2NUofkC1vLw=)
                          2: 762CACD0B04311EF95390327C4F9AE02.roa (hash: O0fu0v3WPuED8cBOoy32AaYeWLhEaTHf+1HtAp2psVc=)
                          3: A97CBD42A06611EFA888B57DC4F9AE02.roa (hash: OkMxv7XekaJRzIADvdpn5P9SXPrJlEJXm6uXiRNfcN4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 219 (0xdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917530D/serialNumber=B3992F0D49BAF6A36FDA658E5B459469521E5B44
        Validity
            Not Before: Jan 31 04:57:29 2025 GMT
            Not After : Feb  7 04:57:29 2025 GMT
        Subject: CN=679c5839-ed74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1a:a5:8d:a9:b2:d5:6d:f5:5e:14:ce:73:31:
                    e1:a7:85:a7:2a:5d:96:ad:12:f0:53:8e:19:1b:e4:
                    62:65:a0:dd:0c:e3:35:52:7d:d4:f1:26:6a:cc:55:
                    40:01:1b:75:b0:fa:b2:d7:a6:a2:23:95:7a:d2:fd:
                    d1:7d:66:4f:2f:1c:f3:df:98:9d:3b:5e:84:cb:00:
                    1d:64:b2:f6:79:40:66:ba:eb:0f:be:5e:e9:f6:42:
                    43:2a:20:77:79:8f:21:ea:d6:e3:8d:1b:52:64:d9:
                    77:0e:94:e0:0c:11:00:66:c9:c6:fa:e8:df:6f:e8:
                    ee:7b:c7:dd:04:b6:cb:5a:86:fd:ad:ac:18:28:cf:
                    e0:6f:23:bc:a9:68:47:5c:56:86:35:ea:d2:eb:c7:
                    3b:f5:60:3b:8d:a3:80:18:5a:d8:10:7b:87:d7:7e:
                    9c:83:96:ba:2a:81:ec:0c:9e:e8:75:05:a7:9b:04:
                    89:98:49:6a:6c:d2:8e:31:c0:14:57:0c:55:56:3a:
                    5c:c5:c5:a7:42:24:30:ca:62:5a:97:95:fa:53:28:
                    aa:61:19:51:00:b6:04:0b:de:32:3f:c2:6e:67:33:
                    85:40:93:4a:ae:ce:4f:34:89:af:8e:90:92:ab:50:
                    e2:30:91:97:bc:ae:df:f8:57:2b:ba:60:11:43:31:
                    8a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:B8:41:05:DD:AE:95:68:DE:D0:75:83:BF:96:F1:35:00:41:90:ED
            X509v3 Authority Key Identifier:
                keyid:B3:99:2F:0D:49:BA:F6:A3:6F:DA:65:8E:5B:45:94:69:52:1E:5B:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:a7:ad:0f:14:92:31:5f:cf:7c:95:b2:b0:e0:c1:16:87:b4:
         55:f7:83:a5:db:d8:89:71:6a:f3:67:22:9e:b9:30:ec:98:10:
         57:8d:c8:3e:8f:99:25:53:20:93:66:aa:d6:05:21:1a:66:e8:
         57:8a:13:7b:ee:d8:16:03:67:e7:6c:6a:ed:8a:38:71:7d:4f:
         b9:4d:76:c4:29:5d:12:a5:6a:9c:41:0b:9f:23:78:94:66:a4:
         d5:ae:9c:97:e8:40:f5:8d:a7:00:d7:d4:ef:02:87:6e:46:69:
         97:b4:99:f3:48:08:2d:94:f1:bc:f3:1f:1f:f7:b0:2a:60:ab:
         c1:80:4d:69:c4:3e:77:7a:9d:ca:be:a5:16:44:80:9a:a2:a6:
         37:a6:72:02:72:05:a9:d0:96:0f:e6:ae:be:1e:f4:c6:b3:0c:
         53:d4:f3:05:5a:8b:0c:2f:7a:ff:c1:84:b5:f2:94:3a:c1:c3:
         f7:e5:73:07:5d:f7:c2:26:59:f9:73:48:3a:a5:5a:e2:5b:9e:
         92:9e:0e:69:22:e8:d8:74:db:6f:75:a6:83:2e:72:9e:ed:23:
         9d:de:69:e3:60:3d:4f:cd:e7:92:f0:67:04:71:55:7e:d8:2a:
         73:63:0d:23:38:c7:bb:9d:23:35:bf:b4:ec:51:b4:18:d4:73:
         f1:5c:d5:9c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICANswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzUzMEQxMTAvBgNVBAUTKEIzOTkyRjBENDlCQUY2QTM2RkRBNjU4RTVCNDU5NDY5
NTIxRTVCNDQwHhcNMjUwMTMxMDQ1NzI5WhcNMjUwMjA3MDQ1NzI5WjAYMRYwFAYD
VQQDEw02NzljNTgzOS1lZDc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxxqljamy1W31XhTOczHhp4WnKl2WrRLwU44ZG+RiZaDdDOM1Un3U8SZqzFVA
ARt1sPqy16aiI5V60v3RfWZPLxzz35idO16EywAdZLL2eUBmuusPvl7p9kJDKiB3
eY8h6tbjjRtSZNl3DpTgDBEAZsnG+ujfb+jue8fdBLbLWob9rawYKM/gbyO8qWhH
XFaGNerS68c79WA7jaOAGFrYEHuH136cg5a6KoHsDJ7odQWnmwSJmElqbNKOMcAU
VwxVVjpcxcWnQiQwymJal5X6UyiqYRlRALYEC94yP8JuZzOFQJNKrs5PNImvjpCS
q1DiMJGXvK7f+FcrumARQzGK8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA64QQXd
rpVo3tB1g7+W8TUAQZDtMB8GA1UdIwQYMBaAFLOZLw1Juvajb9pljltFlGlSHltE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTMwRC9ERDdFMDkxQ0I2
NEIxMUVFOTE0NjM3NjBDNEY5QUUwMi9zNWt2RFVtNjlxTnYybVdPVzBXVWFWSWVX
MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3M1a3ZEVW02OXFOdjJtV09XMFdVYVZJZVcwUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NTMwRC9ERDdFMDkxQ0I2NEIxMUVFOTE0NjM3NjBDNEY5QUUwMi9zNWt2RFVtNjlx
TnYybVdPVzBXVWFWSWVXMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAip60PFJIxX898lbKw4MEWh7RV94Ol29iJcWrzZyKeuTDsmBBXjcg+
j5klUyCTZqrWBSEaZuhXihN77tgWA2fnbGrtijhxfU+5TXbEKV0SpWqcQQufI3iU
ZqTVrpyX6ED1jacA19TvAoduRmmXtJnzSAgtlPG88x8f97AqYKvBgE1pxD53ep3K
vqUWRICaoqY3pnICcgWp0JYP5q6+HvTGswxT1PMFWosML3r/wYS18pQ6wcP35XMH
XffCJln5c0g6pVriW56Sng5pIujYdNtvdaaDLnKe7SOd3mnjYD1PzeeS8GcEcVV+
2CpzYw0jOMe7nSM1v7TsUbQY1HPxXNWc
-----END CERTIFICATE-----