Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft
File:                     XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft (raw, json)
Hash identifier:          rdCfpyvg7p777whjRn2W2jo7AW1lVKSM69I+pPDcooE=
Subject key identifier:   CE:B5:C4:56:A0:B9:79:BA:55:2E:C7:1D:71:BF:2F:34:C4:83:F9:27
Authority key identifier: 5D:B5:7E:D3:86:03:9E:A6:64:D1:EF:F7:57:07:36:D6:F9:F0:4C:44
Certificate issuer:       /CN=A9175F54/serialNumber=5DB57ED386039EA664D1EFF7570736D6F9F04C44
Certificate serial:       D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XbV-04YDnqZk0e_3Vwc21vnwTEQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft
Manifest number:          D4
Signing time:             Fri 31 Jan 2025 04:48:09 +0000
Manifest this update:     Fri 31 Jan 2025 04:48:09 +0000
Manifest next update:     Fri 07 Feb 2025 04:48:09 +0000
Files and hashes:         1: XbV-04YDnqZk0e_3Vwc21vnwTEQ.crl (hash: hIKrq5k45SPXmv0WNiyGgkNaE4MSfWhUmAh/ISiGXS8=)
                          2: F6EB41429F2811EE91032D2AC4F9AE02.roa (hash: d49MtU0S9f+TUTMSwTs+38XP2OZF6kxjsb+UUnfBjhQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 215 (0xd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175F54/serialNumber=5DB57ED386039EA664D1EFF7570736D6F9F04C44
        Validity
            Not Before: Jan 31 04:48:09 2025 GMT
            Not After : Feb  7 04:48:09 2025 GMT
        Subject: CN=679c5609-9e7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:74:f1:bc:bc:f3:0e:af:54:28:46:12:da:1e:
                    02:42:10:c3:04:27:10:83:ee:65:da:66:88:7e:37:
                    3e:93:01:cd:f1:ad:85:81:b0:88:45:f0:4a:16:fb:
                    12:71:da:51:3f:96:ef:59:9b:c6:0c:67:db:51:33:
                    c6:01:83:a0:8f:42:a9:4c:32:10:05:8b:6f:74:a0:
                    00:2c:ba:28:5d:b9:5b:ba:d1:77:f5:a9:8d:16:70:
                    d3:fd:f1:5c:92:27:cb:21:c0:17:58:e4:8c:5a:7f:
                    2e:53:36:66:17:72:f3:25:b5:27:38:6b:6c:67:1a:
                    67:98:aa:b8:ef:fe:27:57:dd:17:0d:64:3f:38:15:
                    ec:62:bc:2a:6b:24:aa:68:e7:25:f5:94:6c:ca:fe:
                    e7:0d:65:ff:a5:f7:99:09:e9:e1:bc:9e:68:14:45:
                    05:f9:1e:6a:24:7d:df:d4:42:b4:2a:cb:4d:33:cd:
                    d3:eb:e5:f0:a6:d1:0a:31:cd:29:05:6a:3c:14:22:
                    94:1e:5a:c2:a3:4f:4a:96:48:a0:60:ef:65:54:b6:
                    03:bd:7a:d5:a8:f7:77:bc:f9:6d:46:6e:10:d5:e0:
                    83:ff:d4:1a:23:41:ed:4c:45:b7:1f:25:cb:c7:35:
                    23:2b:23:3e:ab:9c:a8:07:d5:89:0a:52:2d:af:ee:
                    76:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B5:C4:56:A0:B9:79:BA:55:2E:C7:1D:71:BF:2F:34:C4:83:F9:27
            X509v3 Authority Key Identifier:
                keyid:5D:B5:7E:D3:86:03:9E:A6:64:D1:EF:F7:57:07:36:D6:F9:F0:4C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XbV-04YDnqZk0e_3Vwc21vnwTEQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:b2:5c:48:0a:82:a8:e9:78:fe:7d:97:64:1b:a8:53:dd:2c:
         36:ee:66:0b:c6:95:fa:46:98:0b:80:8d:63:30:2c:e3:96:1d:
         96:5b:87:58:66:6b:2a:65:fd:eb:f5:ef:39:3d:81:9f:04:47:
         4f:7a:a6:21:b5:79:44:0c:4f:af:cd:13:6b:68:8d:9c:23:d0:
         ca:0c:0c:2a:18:a9:eb:b9:c7:81:0d:40:cf:93:f5:46:1b:c1:
         a5:be:4c:82:0a:ee:83:58:1a:97:54:3d:0e:61:14:15:30:9c:
         1c:aa:db:e9:f5:92:42:d8:40:2f:15:36:29:82:69:95:43:75:
         c8:68:3a:f0:01:d4:36:52:83:d0:78:20:db:14:f7:64:3a:df:
         64:f1:00:09:1f:c2:b5:98:bf:2c:ea:25:c6:39:a1:fe:dd:33:
         b7:ba:44:19:63:d2:56:23:63:2b:74:56:e0:79:4c:86:d6:44:
         37:96:fb:8f:67:37:c0:5f:43:d1:0a:a6:88:30:f7:0d:43:dc:
         79:4a:27:a1:af:11:35:fc:b2:c1:81:c4:48:d9:27:4d:b9:27:
         7f:14:82:6b:4e:15:d7:67:ee:d3:29:f8:07:1d:0a:97:1a:9b:
         52:11:2e:f9:02:90:86:34:d7:37:c4:fd:18:87:db:a9:30:90:
         a0:36:df:cc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzVGNTQxMTAvBgNVBAUTKDVEQjU3RUQzODYwMzlFQTY2NEQxRUZGNzU3MDczNkQ2
RjlGMDRDNDQwHhcNMjUwMTMxMDQ0ODA5WhcNMjUwMjA3MDQ0ODA5WjAYMRYwFAYD
VQQDEw02NzljNTYwOS05ZTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA03TxvLzzDq9UKEYS2h4CQhDDBCcQg+5l2maIfjc+kwHN8a2FgbCIRfBKFvsS
cdpRP5bvWZvGDGfbUTPGAYOgj0KpTDIQBYtvdKAALLooXblbutF39amNFnDT/fFc
kifLIcAXWOSMWn8uUzZmF3LzJbUnOGtsZxpnmKq47/4nV90XDWQ/OBXsYrwqaySq
aOcl9ZRsyv7nDWX/pfeZCenhvJ5oFEUF+R5qJH3f1EK0KstNM83T6+XwptEKMc0p
BWo8FCKUHlrCo09KlkigYO9lVLYDvXrVqPd3vPltRm4Q1eCD/9QaI0HtTEW3HyXL
xzUjKyM+q5yoB9WJClItr+52aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM61xFag
uXm6VS7HHXG/LzTEg/knMB8GA1UdIwQYMBaAFF21ftOGA56mZNHv91cHNtb58ExE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUY1NC81MUI2RUNFNDlG
MjgxMUVFQTk5NUQzMjhDNEY5QUUwMi9YYlYtMDRZRG5xWmswZV8zVndjMjF2bndU
RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hiVi0wNFlEbnFaazBlXzNWd2MyMXZud1RFUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NUY1NC81MUI2RUNFNDlGMjgxMUVFQTk5NUQzMjhDNEY5QUUwMi9YYlYtMDRZRG5x
WmswZV8zVndjMjF2bndURVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBrslxICoKo6Xj+fZdkG6hT3Sw27mYLxpX6RpgLgI1jMCzjlh2WW4dY
ZmsqZf3r9e85PYGfBEdPeqYhtXlEDE+vzRNraI2cI9DKDAwqGKnruceBDUDPk/VG
G8GlvkyCCu6DWBqXVD0OYRQVMJwcqtvp9ZJC2EAvFTYpgmmVQ3XIaDrwAdQ2UoPQ
eCDbFPdkOt9k8QAJH8K1mL8s6iXGOaH+3TO3ukQZY9JWI2MrdFbgeUyG1kQ3lvuP
ZzfAX0PRCqaIMPcNQ9x5SiehrxE1/LLBgcRI2SdNuSd/FIJrThXXZ+7TKfgHHQqX
GptSES75ApCGNNc3xP0Yh9upMJCgNt/M
-----END CERTIFICATE-----