Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.mft
File:                     IqYsFNK9MuPlltij5iu8MnRGj5k.mft (raw, json)
Hash identifier:          Bs8WRKBubr76TiBil/yv9sgUzb6sKua/iDt9IxsykY8=
Subject key identifier:   92:05:E3:BD:F5:78:F0:03:98:7F:DF:36:DA:C7:A9:C6:15:34:FF:A1
Authority key identifier: 22:A6:2C:14:D2:BD:32:E3:E5:96:D8:A3:E6:2B:BC:32:74:46:8F:99
Certificate issuer:       /CN=A9178EA7/serialNumber=22A62C14D2BD32E3E596D8A3E62BBC3274468F99
Certificate serial:       72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqYsFNK9MuPlltij5iu8MnRGj5k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.mft
Manifest number:          70
Signing time:             Fri 31 Jan 2025 05:54:27 +0000
Manifest this update:     Fri 31 Jan 2025 05:54:27 +0000
Manifest next update:     Fri 07 Feb 2025 05:54:27 +0000
Files and hashes:         1: IqYsFNK9MuPlltij5iu8MnRGj5k.crl (hash: hAKh17kP0lDqHmZwPCwyXg3ZQODZSew79rlWiAFloUQ=)
                          2: 1DD85DA2386311EFB10A6A1CC4F9AE02.roa (hash: R6PLCFd9UCoKqguuPPvWY1WhcuCHxy9fnxF0ShFGfBc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114 (0x72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178EA7/serialNumber=22A62C14D2BD32E3E596D8A3E62BBC3274468F99
        Validity
            Not Before: Jan 31 05:54:27 2025 GMT
            Not After : Feb  7 05:54:27 2025 GMT
        Subject: CN=679c6593-7f1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d2:a9:8b:ed:90:f5:78:a2:1d:e7:ed:60:8c:
                    a2:96:9d:3d:d9:e0:f0:30:0f:ca:68:a1:ef:d3:c9:
                    1f:22:23:d4:ab:a7:15:0b:15:1a:2d:f6:fd:e2:8f:
                    ce:52:b2:26:c0:de:65:df:d2:4e:7f:8b:4d:e7:6b:
                    bd:79:2e:e0:70:ad:ac:af:8a:76:c4:eb:f8:9b:f1:
                    69:37:38:78:a2:1f:e1:98:79:b9:38:d6:68:46:b1:
                    7d:78:78:d7:ec:4a:b3:5b:a5:17:19:15:76:a2:48:
                    5e:ac:fa:7e:0f:f6:91:8f:33:52:01:a5:31:e7:c7:
                    72:6a:18:4c:45:77:b3:60:f2:77:b9:22:bd:31:a3:
                    08:12:4b:eb:dc:5e:d9:34:e9:3a:dd:5d:9d:11:08:
                    6d:19:13:48:fa:bc:23:20:db:67:29:40:99:14:0b:
                    13:b0:fc:3d:73:41:3c:fc:4e:ee:3e:75:0d:ce:90:
                    b6:c5:20:4e:0a:ee:21:15:d3:9b:69:7f:2e:05:9a:
                    7d:fc:51:00:c4:ee:82:71:94:0f:bb:0f:3c:5a:ef:
                    d9:5e:ab:0c:c3:c0:b4:8f:17:f3:24:ca:b9:73:d2:
                    99:e5:92:2b:a4:04:2d:21:d3:37:a7:48:64:45:a0:
                    08:eb:18:0b:89:bc:03:47:a6:2c:03:e5:af:78:a1:
                    73:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:05:E3:BD:F5:78:F0:03:98:7F:DF:36:DA:C7:A9:C6:15:34:FF:A1
            X509v3 Authority Key Identifier:
                keyid:22:A6:2C:14:D2:BD:32:E3:E5:96:D8:A3:E6:2B:BC:32:74:46:8F:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqYsFNK9MuPlltij5iu8MnRGj5k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:ec:86:64:25:fe:de:e8:e6:73:57:d8:ab:75:23:dc:8a:62:
         53:cf:dc:45:db:c9:70:0b:10:31:c3:97:5b:b7:e7:97:93:ad:
         5e:0f:1b:38:c7:2d:15:99:10:c0:83:3e:76:98:5f:d7:9b:94:
         64:11:f1:e1:57:e8:09:c3:a3:1e:91:83:a3:38:b2:78:5d:17:
         0d:15:81:f1:d7:f8:89:0f:a6:44:b3:eb:7a:97:a1:a9:48:13:
         35:00:12:98:ee:c3:28:d8:33:29:c4:58:a2:02:85:e0:ec:35:
         a4:82:ed:5c:5d:d3:e7:f1:68:c3:69:e6:54:77:45:b7:ad:da:
         2e:36:94:22:d6:53:da:2e:bd:b6:39:5d:5a:79:99:e5:43:dd:
         c1:e1:d7:e9:ac:2b:ce:af:ae:7d:bf:75:2a:89:71:1a:4c:d7:
         99:3e:ac:df:ed:d8:90:d0:c6:0a:ec:85:db:f4:ab:74:f5:76:
         a0:66:38:10:2a:46:dc:8e:f8:2a:78:be:72:52:45:b4:6d:85:
         d7:a8:d0:53:4a:86:84:3a:be:5c:34:a1:7c:d4:04:11:1e:be:
         7a:31:85:36:0d:27:4e:39:b2:2d:e9:66:3e:4f:b5:e3:ff:e1:
         b4:0f:4a:0b:ad:2c:70:49:30:e3:79:ba:5b:74:2b:b4:c8:35:
         b0:cd:5d:3e
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBcjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
OEVBNzExMC8GA1UEBRMoMjJBNjJDMTREMkJEMzJFM0U1OTZEOEEzRTYyQkJDMzI3
NDQ2OEY5OTAeFw0yNTAxMzEwNTU0MjdaFw0yNTAyMDcwNTU0MjdaMBgxFjAUBgNV
BAMTDTY3OWM2NTkzLTdmMWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDD0qmL7ZD1eKId5+1gjKKWnT3Z4PAwD8pooe/TyR8iI9SrpxULFRot9v3ij85S
sibA3mXf0k5/i03na715LuBwrayvinbE6/ib8Wk3OHiiH+GYebk41mhGsX14eNfs
SrNbpRcZFXaiSF6s+n4P9pGPM1IBpTHnx3JqGExFd7Ng8ne5Ir0xowgSS+vcXtk0
6TrdXZ0RCG0ZE0j6vCMg22cpQJkUCxOw/D1zQTz8Tu4+dQ3OkLbFIE4K7iEV05tp
fy4Fmn38UQDE7oJxlA+7Dzxa79leqwzDwLSPF/Mkyrlz0pnlkiukBC0h0zenSGRF
oAjrGAuJvANHpiwD5a94oXONAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkgXjvfV4
8AOYf9822sepxhU0/6EwHwYDVR0jBBgwFoAUIqYsFNK9MuPlltij5iu8MnRGj5kw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4RUE3L0IxQjNFMkQ2Mzg2
MjExRUY5RTE3RTg2RkM0RjlBRTAyL0lxWXNGTks5TXVQbGx0aWo1aXU4TW5SR2o1
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvSXFZc0ZOSzlNdVBsbHRpajVpdThNblJHajVrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4
RUE3L0IxQjNFMkQ2Mzg2MjExRUY5RTE3RTg2RkM0RjlBRTAyL0lxWXNGTks5TXVQ
bGx0aWo1aXU4TW5SR2o1ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBADrshmQl/t7o5nNX2Kt1I9yKYlPP3EXbyXALEDHDl1u355eTrV4PGzjH
LRWZEMCDPnaYX9eblGQR8eFX6AnDox6Rg6M4snhdFw0VgfHX+IkPpkSz63qXoalI
EzUAEpjuwyjYMynEWKICheDsNaSC7Vxd0+fxaMNp5lR3Rbet2i42lCLWU9ouvbY5
XVp5meVD3cHh1+msK86vrn2/dSqJcRpM15k+rN/t2JDQxgrshdv0q3T1dqBmOBAq
RtyO+Cp4vnJSRbRthdeo0FNKhoQ6vlw0oXzUBBEevnoxhTYNJ045si3pZj5PteP/
4bQPSgutLHBJMON5ult0K7TINbDNXT4=
-----END CERTIFICATE-----