Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179D1F/D982CB5E95D711EC953F954DC4F9AE02/HA69woHQL52iTsEXS6nPGEWbk-A.mft
File:                     HA69woHQL52iTsEXS6nPGEWbk-A.mft (raw, json)
Hash identifier:          q+ww3+LqJ4LdqBg03jQlcrHTCx8xgFEBT9m4KalC2VA=
Subject key identifier:   A1:B6:6B:71:91:88:CB:69:8D:F6:25:19:E2:81:23:32:62:47:A7:F9
Authority key identifier: 1C:0E:BD:C2:81:D0:2F:9D:A2:4E:C1:17:4B:A9:CF:18:45:9B:93:E0
Certificate issuer:       /CN=A9179D1F/serialNumber=1C0EBDC281D02F9DA24EC1174BA9CF18459B93E0
Certificate serial:       036E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA69woHQL52iTsEXS6nPGEWbk-A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179D1F/D982CB5E95D711EC953F954DC4F9AE02/HA69woHQL52iTsEXS6nPGEWbk-A.mft
Manifest number:          036B
Signing time:             Fri 31 Jan 2025 00:58:14 +0000
Manifest this update:     Fri 31 Jan 2025 00:58:13 +0000
Manifest next update:     Fri 07 Feb 2025 00:58:13 +0000
Files and hashes:         1: HA69woHQL52iTsEXS6nPGEWbk-A.crl (hash: fkQjh7ENj/hgliS9DXzqm7YKM5eiudPM3ReqyrhIw3w=)
                          2: ED816DEC95DA11EC993BD050C4F9AE02.roa (hash: CgaWA8a/wuecTSl+u+exVi4DRvR997DWrMlH+6UD+S8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 878 (0x36e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179D1F/serialNumber=1C0EBDC281D02F9DA24EC1174BA9CF18459B93E0
        Validity
            Not Before: Jan 31 00:58:13 2025 GMT
            Not After : Feb  7 00:58:13 2025 GMT
        Subject: CN=679c2026-559c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fe:53:d6:0a:bc:24:93:d0:43:3f:07:d6:5d:
                    d6:5c:de:ee:cf:87:b8:ee:34:0e:08:30:5c:71:e4:
                    be:02:65:7b:bb:4b:62:19:52:2a:83:9b:f3:18:98:
                    bb:e7:d1:d2:9e:fa:41:1a:a8:db:de:16:22:4a:30:
                    20:b0:ef:13:af:b6:83:16:13:d2:af:cf:96:aa:f3:
                    c6:67:6c:c3:63:54:86:01:03:72:a0:87:be:c7:4f:
                    dd:f7:ab:36:a2:26:94:73:58:ac:53:69:81:d8:37:
                    fe:c8:0c:fd:0c:5d:11:8d:8c:99:8c:fa:73:1e:5a:
                    6d:76:1c:50:cc:d3:4a:86:76:52:f1:04:54:ea:2c:
                    84:56:62:32:b7:de:03:f0:22:20:bd:7a:a5:68:64:
                    e8:70:51:0e:ec:3c:48:81:e1:5c:56:d5:9e:03:97:
                    19:3e:4f:7d:09:56:0f:8c:b7:30:e9:ae:fd:b4:b3:
                    1b:8f:d4:04:d5:47:51:8c:3e:4a:69:29:59:17:83:
                    4b:2f:2a:3e:7e:63:de:b4:33:5b:8c:32:6d:10:2d:
                    1a:b0:eb:4b:61:21:f6:f1:77:8e:89:db:4d:89:29:
                    ec:5a:1c:e6:16:8e:4e:9d:e8:ec:af:d0:46:2c:21:
                    83:24:54:e3:68:cb:d8:60:16:46:3c:9e:7f:88:b0:
                    f3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B6:6B:71:91:88:CB:69:8D:F6:25:19:E2:81:23:32:62:47:A7:F9
            X509v3 Authority Key Identifier:
                keyid:1C:0E:BD:C2:81:D0:2F:9D:A2:4E:C1:17:4B:A9:CF:18:45:9B:93:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179D1F/D982CB5E95D711EC953F954DC4F9AE02/HA69woHQL52iTsEXS6nPGEWbk-A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA69woHQL52iTsEXS6nPGEWbk-A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179D1F/D982CB5E95D711EC953F954DC4F9AE02/HA69woHQL52iTsEXS6nPGEWbk-A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:0e:8c:4f:5e:16:2a:ba:d6:a7:df:f2:e2:ed:ab:dd:9a:cc:
         50:11:78:80:f7:32:e1:01:c3:e4:87:40:27:4f:a4:d9:3d:e0:
         93:eb:78:07:a6:dd:3f:e6:1d:22:1f:90:57:bc:ab:a3:98:40:
         c7:ab:31:f2:d7:9b:5d:17:12:c0:70:8b:aa:46:16:8b:80:0a:
         2a:fa:0a:77:50:f2:4f:c4:f7:85:c2:00:31:4c:5a:05:eb:2c:
         10:37:a2:93:48:c7:3a:02:8e:c7:93:7f:2d:cc:11:55:36:9e:
         31:7c:63:07:0f:25:ee:99:b6:e1:98:e4:ad:69:71:27:59:2b:
         29:81:55:c0:67:42:f6:33:e3:9c:8c:24:15:74:20:c1:32:05:
         a7:75:ea:ca:c5:7e:32:5d:f0:b2:b2:5f:9d:30:28:4c:15:fd:
         6e:6b:3b:ac:ce:0c:4a:2c:7b:19:a1:2e:e2:63:ce:ef:98:17:
         fd:14:c8:a0:5b:92:1d:08:88:99:39:d5:4b:63:68:98:74:b7:
         17:8a:ad:ac:83:83:c2:54:02:9c:30:aa:6a:36:8e:c1:27:1e:
         fb:ae:4f:bc:c5:08:b9:4c:a5:ed:b6:c6:52:f1:00:5c:1d:52:
         65:27:4f:14:9e:b2:4a:10:64:a1:0a:50:3d:03:68:ad:7f:27:
         09:7d:c5:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----