Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.mft
File:                     SOkLc7Sfo6317JGlzNI9rTXTxI4.mft (raw, json)
Hash identifier:          YwdBUXHQQRgAONy2dUmumMYuiq+dnBaarznYfy1IcNw=
Subject key identifier:   6D:B3:AF:F5:34:CA:A8:26:32:84:94:1A:CB:E2:50:45:17:60:7E:EE
Authority key identifier: 48:E9:0B:73:B4:9F:A3:AD:F5:EC:91:A5:CC:D2:3D:AD:35:D3:C4:8E
Certificate issuer:       /CN=A917D228/serialNumber=48E90B73B49FA3ADF5EC91A5CCD23DAD35D3C48E
Certificate serial:       06A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOkLc7Sfo6317JGlzNI9rTXTxI4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.mft
Manifest number:          06A1
Signing time:             Thu 30 Jan 2025 22:10:28 +0000
Manifest this update:     Thu 30 Jan 2025 22:10:28 +0000
Manifest next update:     Thu 06 Feb 2025 22:10:28 +0000
Files and hashes:         1: SOkLc7Sfo6317JGlzNI9rTXTxI4.crl (hash: nL16Xu+roftS+JlKqokRJ4HAauzOX54yQeTRqsiYcQM=)
                          2: 8CFEF8EE50AE11EBB71FB743C4F9AE02.roa (hash: xRXc4Qynp20VBH0uvYkKK7b4+52BnXGj7roDL8ZzWEU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1702 (0x6a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D228/serialNumber=48E90B73B49FA3ADF5EC91A5CCD23DAD35D3C48E
        Validity
            Not Before: Jan 30 22:10:28 2025 GMT
            Not After : Feb  6 22:10:28 2025 GMT
        Subject: CN=679bf8d4-6eba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:36:19:38:86:78:1e:06:46:09:51:41:81:e1:
                    1c:2f:de:c9:ab:4c:f2:7a:aa:e7:8e:21:e5:8e:03:
                    e3:d0:1c:a1:3b:62:c6:eb:76:b5:a5:d9:3c:64:e6:
                    3e:ad:8d:78:db:9e:ed:80:42:f4:6c:81:54:b7:b5:
                    ed:c8:9b:85:07:9d:09:2b:40:c2:23:08:ff:2e:d6:
                    a0:f7:34:31:96:9e:75:90:78:d3:6d:09:c9:a7:99:
                    de:bc:eb:2d:bd:39:ca:52:fb:5b:3f:8d:ce:d9:7a:
                    a5:3e:82:7f:6b:c7:a8:53:14:c4:08:39:71:ee:81:
                    59:31:28:f9:73:9c:19:94:28:2f:b3:6a:e1:1b:57:
                    0c:c5:9e:39:eb:c0:32:be:86:f0:75:05:96:bf:13:
                    d6:ae:09:82:74:08:73:ac:00:d3:48:92:31:66:e4:
                    f7:ea:28:7d:33:0c:33:e9:45:78:b8:0f:45:03:09:
                    fb:db:52:eb:28:cd:02:29:7c:7d:dc:b8:68:06:6f:
                    ab:2f:6c:42:b8:bf:fa:06:91:72:a9:a9:cf:fb:b6:
                    49:58:59:fd:7e:f5:78:77:c8:22:0b:6f:86:d3:3f:
                    ba:a4:42:b5:ea:31:4d:88:2e:7e:26:4b:63:fa:0c:
                    c3:13:ed:ec:6c:8b:4b:76:98:24:7d:81:f1:17:55:
                    87:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:B3:AF:F5:34:CA:A8:26:32:84:94:1A:CB:E2:50:45:17:60:7E:EE
            X509v3 Authority Key Identifier:
                keyid:48:E9:0B:73:B4:9F:A3:AD:F5:EC:91:A5:CC:D2:3D:AD:35:D3:C4:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOkLc7Sfo6317JGlzNI9rTXTxI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:f0:b9:4d:3e:5f:ad:e5:d3:2e:91:be:1a:c3:54:8f:e6:a9:
         2e:bb:2d:6d:3d:c2:c8:8c:df:51:95:31:2c:35:db:75:b8:08:
         91:a8:f3:8f:6e:bd:7d:da:ae:b7:63:0d:0d:3d:8a:1d:e1:63:
         3c:ad:78:29:96:0f:b4:dc:e1:d3:fc:74:ee:0f:cc:76:18:87:
         92:c1:6e:cb:0c:e7:64:64:38:84:ad:6b:f9:e2:c6:54:d9:cf:
         41:00:64:a3:76:71:ec:d5:0f:ef:2b:75:d9:23:01:d5:75:d6:
         da:ab:99:39:5b:0f:01:d4:51:2f:bc:35:71:24:a5:ed:42:c3:
         2d:be:25:5b:e3:5d:56:d7:0c:b7:9a:22:9f:77:9e:13:88:92:
         8d:ec:23:9d:3e:f7:59:5a:32:be:d4:08:51:73:7b:c0:a8:b1:
         80:62:de:4e:e0:ab:5f:d8:6d:ea:88:bd:9f:7e:11:22:ba:db:
         63:a7:27:3a:d7:0f:f5:d9:6e:32:ae:79:02:8a:3d:86:13:4c:
         20:55:c6:f2:21:4f:a4:93:d1:80:1e:81:67:cd:21:91:2a:43:
         fd:8a:de:d3:da:ba:f8:e8:ea:a9:ad:03:bd:ea:07:0d:de:ba:
         50:80:17:1f:17:08:a5:28:35:2a:55:73:d3:15:a5:33:8a:1b:
         f7:a4:a3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----