Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917CC94/66DEBE6447F011EA83E3E71BC4F9AE02/i9g61zjcTFeYTcLssh1ekBm7yMo.mft
File:                     i9g61zjcTFeYTcLssh1ekBm7yMo.mft (raw, json)
Hash identifier:          +upbjUT0JojtyZ5pY2RK69ti0s7z4khjiRFuDI6i0bs=
Subject key identifier:   62:00:A4:73:CC:B3:5B:B5:99:7E:F1:16:2B:07:1C:63:F3:FC:96:3C
Authority key identifier: 8B:D8:3A:D7:38:DC:4C:57:98:4D:C2:EC:B2:1D:5E:90:19:BB:C8:CA
Certificate issuer:       /CN=A917CC94/serialNumber=8BD83AD738DC4C57984DC2ECB21D5E9019BBC8CA
Certificate serial:       0ABC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9g61zjcTFeYTcLssh1ekBm7yMo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917CC94/66DEBE6447F011EA83E3E71BC4F9AE02/i9g61zjcTFeYTcLssh1ekBm7yMo.mft
Manifest number:          0AB2
Signing time:             Thu 30 Jan 2025 19:38:55 +0000
Manifest this update:     Thu 30 Jan 2025 19:38:55 +0000
Manifest next update:     Thu 06 Feb 2025 19:38:55 +0000
Files and hashes:         1: i9g61zjcTFeYTcLssh1ekBm7yMo.crl (hash: 6YvAp7DoC9BMdhKO+eoCSwD6J4SiO4pU3d/Rv/T//mc=)
                          2: E1CA8E9C1E5F11EFA3C7AD2CC4F9AE02.roa (hash: ZHIbElia/eiGVKMDjGo/fSI2gIAIDU9H3ROFaeaevQg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2748 (0xabc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917CC94/serialNumber=8BD83AD738DC4C57984DC2ECB21D5E9019BBC8CA
        Validity
            Not Before: Jan 30 19:38:55 2025 GMT
            Not After : Feb  6 19:38:55 2025 GMT
        Subject: CN=679bd54f-8362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:78:7c:9b:6c:36:02:23:52:3c:e6:1a:f8:78:
                    ae:5f:af:5b:97:bd:80:f6:d9:fb:ba:8d:f4:64:01:
                    0a:07:f9:3e:b9:11:06:88:22:b7:8f:e4:30:46:e8:
                    b7:f8:79:81:7a:a0:e6:93:5b:fe:40:4d:6d:10:3c:
                    5a:e2:d0:7a:bf:8f:96:ea:d1:35:42:cf:70:9f:74:
                    62:ed:be:f6:99:bc:94:28:dc:ec:a7:44:75:b7:23:
                    e5:90:68:12:c9:7a:83:50:1b:af:09:7e:c1:a0:08:
                    c5:79:2a:72:8e:d0:29:13:e2:3c:9e:2c:03:67:f8:
                    07:e0:91:64:9b:5e:15:17:6e:8a:b1:db:34:94:e5:
                    08:c8:ef:d7:17:06:a2:05:1f:12:c7:d3:5d:25:74:
                    90:da:58:64:80:83:2d:0c:81:10:f9:e7:52:fc:43:
                    f8:3a:bb:ee:54:bd:98:e5:ea:f7:f5:16:21:d9:af:
                    33:37:29:d4:5b:5d:df:93:62:06:fb:d6:99:4d:39:
                    83:72:a0:a0:cd:01:af:90:97:57:8a:fa:b6:d6:ff:
                    d9:dd:81:46:d6:16:95:e8:8c:52:30:3a:9e:20:94:
                    35:04:c3:2e:0b:b7:6a:ae:d0:75:d5:f7:77:38:17:
                    11:e6:89:d5:86:bb:6b:2c:a4:86:05:51:0b:fe:c0:
                    92:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:00:A4:73:CC:B3:5B:B5:99:7E:F1:16:2B:07:1C:63:F3:FC:96:3C
            X509v3 Authority Key Identifier:
                keyid:8B:D8:3A:D7:38:DC:4C:57:98:4D:C2:EC:B2:1D:5E:90:19:BB:C8:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917CC94/66DEBE6447F011EA83E3E71BC4F9AE02/i9g61zjcTFeYTcLssh1ekBm7yMo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9g61zjcTFeYTcLssh1ekBm7yMo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CC94/66DEBE6447F011EA83E3E71BC4F9AE02/i9g61zjcTFeYTcLssh1ekBm7yMo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:6f:69:b7:fd:d7:62:02:b9:56:10:f2:e5:7b:b5:c2:ec:af:
         3a:6b:ef:41:1a:f8:e9:34:82:a7:e5:bc:21:81:ba:0a:ae:2c:
         22:6d:27:bb:26:05:38:7d:65:67:2b:dd:6b:9e:08:e1:f7:a4:
         b8:0e:18:6a:c2:e8:33:86:bf:2a:2a:3c:d1:ed:e3:c0:e0:cb:
         0c:38:36:41:b0:f8:e1:ae:e4:1c:25:19:81:28:78:5c:4f:32:
         d9:4f:b1:c1:72:e6:7b:c3:7b:4d:9d:5d:98:8e:e1:b8:f6:37:
         0e:8e:80:f4:6e:8c:da:cd:7e:38:3d:7f:e5:cb:fe:5a:6b:81:
         20:e1:60:48:19:0b:b2:18:69:ab:2c:22:f2:1f:98:ae:63:03:
         ce:3e:35:8a:da:6d:a5:af:30:fa:5c:99:a8:05:0a:f1:a2:2c:
         aa:12:05:1d:49:f1:d0:25:11:6b:0c:99:8f:fc:8f:64:4c:96:
         1c:5b:0f:c3:27:45:ff:5b:00:68:3b:13:37:c8:59:34:4e:37:
         b8:7f:b9:78:99:55:a6:e0:9a:1b:2d:c7:06:b7:f1:19:3f:1e:
         96:b8:3d:26:a8:04:6c:8c:fd:85:82:40:a4:3b:43:ad:50:b2:
         cb:26:ca:34:af:38:1e:9b:b5:55:1a:9d:93:7b:a0:d9:f5:2e:
         a6:69:04:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----