Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft
File:                     CkIqY5fY62yzV3UpfOtVpeGP4eI.mft (raw, json)
Hash identifier:          8HYRRRhQ75a6OoEmfQxPYxmhu0bBHaJ0wx/adRkkdAk=
Subject key identifier:   E0:F7:F7:41:B3:8B:8D:8F:69:8E:24:32:54:9B:6A:1E:54:FE:AA:EF
Authority key identifier: 0A:42:2A:63:97:D8:EB:6C:B3:57:75:29:7C:EB:55:A5:E1:8F:E1:E2
Certificate issuer:       /CN=A9176AFD/serialNumber=0A422A6397D8EB6CB35775297CEB55A5E18FE1E2
Certificate serial:       1895
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkIqY5fY62yzV3UpfOtVpeGP4eI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft
Manifest number:          1884
Signing time:             Fri 31 Jan 2025 16:30:00 +0000
Manifest this update:     Fri 31 Jan 2025 16:29:59 +0000
Manifest next update:     Fri 07 Feb 2025 16:29:59 +0000
Files and hashes:         1: CkIqY5fY62yzV3UpfOtVpeGP4eI.crl (hash: mBe2YP/ZlrHlI6RYa5mgJH3RKrJVnKH5xdcH2Uhcrss=)
                          2: D6D99A3EBE3711EDA6617C5DC4F9AE02.roa (hash: i+oJi6jpDEgYGCAfWO68s9CmpJ8yXleP5d3NPE288zQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6293 (0x1895)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176AFD/serialNumber=0A422A6397D8EB6CB35775297CEB55A5E18FE1E2
        Validity
            Not Before: Jan 31 16:29:59 2025 GMT
            Not After : Feb  7 16:29:59 2025 GMT
        Subject: CN=679cfa87-a443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d3:e1:72:e2:7c:22:b1:76:d4:17:96:4e:4b:
                    f6:6e:85:5c:6d:4c:c8:84:52:14:c1:00:8c:64:2b:
                    d6:4b:f3:bf:ec:21:07:f0:4e:d3:15:8f:47:97:8e:
                    2a:6e:28:d8:76:7d:79:a7:2c:4f:b9:fc:5c:1d:ff:
                    92:fc:52:ee:2e:e5:63:26:42:9d:42:0d:a7:00:a5:
                    f6:78:04:3e:db:e6:ef:f0:7a:3d:83:1d:68:2a:81:
                    60:b6:63:04:4a:81:6b:2d:1c:a9:25:60:ab:b5:66:
                    80:4a:b0:3e:00:8d:91:f2:7b:51:00:2c:90:9c:bd:
                    7f:f4:bb:cb:4d:8a:80:24:26:e1:fb:77:da:e5:bf:
                    6d:16:aa:5f:06:7d:30:15:f1:78:7e:f0:12:25:dd:
                    01:fa:9e:54:cd:f6:0e:c4:9d:c2:7f:1a:84:bf:fe:
                    11:d9:e2:44:16:3c:f7:9c:fa:21:77:bc:9f:dc:88:
                    95:ba:e8:2d:52:0d:3e:00:2f:90:77:90:b9:92:f7:
                    d8:f6:88:c4:b1:06:b6:1a:ee:fb:ec:31:b7:d1:76:
                    36:23:f8:6b:11:32:40:2e:34:cc:c9:d8:c2:2a:37:
                    40:ae:43:54:8b:a6:5c:aa:32:e1:db:fc:85:4f:0d:
                    bc:f5:cc:99:03:44:44:49:bc:77:05:ed:b7:5e:0b:
                    11:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:F7:F7:41:B3:8B:8D:8F:69:8E:24:32:54:9B:6A:1E:54:FE:AA:EF
            X509v3 Authority Key Identifier:
                keyid:0A:42:2A:63:97:D8:EB:6C:B3:57:75:29:7C:EB:55:A5:E1:8F:E1:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkIqY5fY62yzV3UpfOtVpeGP4eI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:9f:b8:2a:24:e1:5e:77:c7:f5:08:93:1c:8b:d6:eb:6f:b6:
         74:b1:3e:a2:9e:c1:ef:61:b8:bb:de:f0:58:07:e9:b0:e9:0f:
         b7:2a:d4:55:7a:df:c8:f2:7e:93:ac:23:3e:7a:a6:1d:5f:1b:
         6a:57:f7:bc:c8:35:46:f5:4e:62:2e:65:7a:22:7b:12:4d:25:
         53:1e:82:67:0d:a5:1e:3a:94:13:da:81:d9:5a:40:a8:ee:c1:
         d4:63:f9:c8:88:7f:df:60:b4:c5:c1:33:3a:29:a8:28:48:fd:
         5f:5a:e9:66:10:a4:fd:48:ba:dc:4b:41:dd:87:fc:17:48:9a:
         79:5b:d0:34:a9:89:8d:4c:a9:07:ad:39:8e:d7:34:d1:31:fc:
         7e:c1:69:7d:5f:65:70:11:c5:63:c4:4f:48:2f:36:b0:a9:43:
         5e:d4:8d:c5:c5:c3:72:4b:7a:02:b9:6b:45:36:4e:26:dd:e4:
         26:92:0c:59:40:c4:91:c3:c5:a9:74:ba:9e:0d:ae:b2:d5:3d:
         c5:b4:b2:a2:24:ea:b2:2c:41:1a:4f:10:cc:8e:fa:64:e8:12:
         f1:19:49:56:70:30:b5:f8:a4:ca:8d:20:3c:84:79:dd:0f:b9:
         8a:62:43:c3:11:f1:c5:08:ee:f8:da:ef:42:fa:4a:f1:2f:dd:
         06:2b:59:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----