Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180913/183C0CA830E711EC92451159C4F9AE02/FSLnXozBo4h_XUiEw2VwnFc0FZU.mft
File:                     FSLnXozBo4h_XUiEw2VwnFc0FZU.mft (raw, json)
Hash identifier:          h2v37FTEMsJHl6v9ohymHpYm3o8+U3zBMOnvifCV08w=
Subject key identifier:   2E:5F:66:3A:A6:2E:35:1B:DE:AB:71:91:9F:F2:DD:4B:43:2D:1E:AB
Authority key identifier: 15:22:E7:5E:8C:C1:A3:88:7F:5D:48:84:C3:65:70:9C:57:34:15:95
Certificate issuer:       /CN=A9180913/serialNumber=1522E75E8CC1A3887F5D4884C365709C57341595
Certificate serial:       0489
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSLnXozBo4h_XUiEw2VwnFc0FZU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180913/183C0CA830E711EC92451159C4F9AE02/FSLnXozBo4h_XUiEw2VwnFc0FZU.mft
Manifest number:          047D
Signing time:             Fri 31 Jan 2025 00:10:26 +0000
Manifest this update:     Fri 31 Jan 2025 00:10:26 +0000
Manifest next update:     Fri 07 Feb 2025 00:10:26 +0000
Files and hashes:         1: FSLnXozBo4h_XUiEw2VwnFc0FZU.crl (hash: d88n1/dyBX1bUNj87cQbWe8PxwWYD+BOTcTXnc/6ulY=)
                          2: BBE12BE88ACD11EF997F2066C4F9AE02.roa (hash: 68zEBxGXfrQ8sdNOFVU2ZHoivHL+1LfOSFnEvIXLiQY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1161 (0x489)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180913/serialNumber=1522E75E8CC1A3887F5D4884C365709C57341595
        Validity
            Not Before: Jan 31 00:10:26 2025 GMT
            Not After : Feb  7 00:10:26 2025 GMT
        Subject: CN=679c14f2-bd38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:27:de:17:cd:6b:52:6e:e7:b8:37:03:ad:a5:
                    e0:59:33:e7:be:16:e7:bf:7b:80:06:46:e2:81:bf:
                    94:54:8f:ef:6e:db:db:3f:37:d2:c3:cc:f8:d6:0f:
                    42:1c:da:f2:0e:30:b5:8c:66:0e:4e:ea:51:50:9b:
                    24:fe:bb:39:92:f2:f9:22:47:f6:67:64:d3:29:4e:
                    ae:06:1c:13:b9:22:0c:de:9b:c0:7b:b7:a6:a8:04:
                    90:d3:39:d3:5d:af:25:14:53:52:16:93:3e:6e:3d:
                    42:16:6c:d2:41:b6:7d:2f:35:da:43:67:26:7f:d8:
                    d0:14:09:89:b5:69:72:13:7e:92:5f:3d:5c:eb:a3:
                    de:79:65:cc:be:69:8f:3d:a8:90:f9:2e:86:61:17:
                    3a:07:4e:be:e5:bb:df:89:4c:e4:67:46:0b:dd:ab:
                    3a:ef:d2:8e:39:bb:94:65:09:8f:5d:00:28:d9:eb:
                    17:56:ed:13:bd:12:13:9c:c4:a5:2a:ac:eb:fc:90:
                    bf:1a:5b:05:57:2c:5e:45:b6:41:05:cf:4f:36:e4:
                    a4:59:a3:e2:55:64:14:ce:02:02:59:8d:47:b1:32:
                    9c:c2:57:03:ed:a7:d2:74:a7:8f:e1:a8:70:e8:11:
                    a2:39:f5:ab:a1:d2:29:82:0b:c1:0b:e7:25:48:d8:
                    a8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:5F:66:3A:A6:2E:35:1B:DE:AB:71:91:9F:F2:DD:4B:43:2D:1E:AB
            X509v3 Authority Key Identifier:
                keyid:15:22:E7:5E:8C:C1:A3:88:7F:5D:48:84:C3:65:70:9C:57:34:15:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180913/183C0CA830E711EC92451159C4F9AE02/FSLnXozBo4h_XUiEw2VwnFc0FZU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSLnXozBo4h_XUiEw2VwnFc0FZU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180913/183C0CA830E711EC92451159C4F9AE02/FSLnXozBo4h_XUiEw2VwnFc0FZU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:22:98:e4:5b:9e:ce:ea:ef:6a:20:c9:cd:db:db:6d:a0:e6:
         08:3c:6b:1c:7d:84:7d:a0:92:67:7b:d9:5f:8b:b0:c8:3f:10:
         da:10:74:c4:fa:55:68:e0:d9:28:3c:4e:2f:0c:a3:7e:e5:8b:
         46:1a:4d:4e:8b:13:ed:7e:2a:72:1d:cc:e0:b1:9c:79:a7:c7:
         91:76:f2:70:76:14:50:07:cb:8d:28:7c:1b:64:57:c9:3f:9b:
         17:7f:6d:ea:45:62:21:b8:ae:3b:80:8b:d1:4b:50:e1:70:33:
         0f:41:5f:bf:68:2f:ef:f5:92:4e:8e:5e:84:73:52:f2:4a:83:
         c0:bb:17:f3:d1:fb:b7:58:f5:ef:42:9d:46:ca:03:e7:d5:77:
         51:af:b8:15:8d:a0:06:03:d3:c3:1a:ad:17:4f:62:27:90:d4:
         06:56:12:05:7a:fa:25:82:e9:e2:cc:07:c6:60:54:6f:eb:3a:
         28:8c:e8:99:08:a4:87:69:27:1f:0d:81:e4:f6:85:17:3e:a4:
         ce:8a:1c:67:97:aa:ba:16:a6:70:ef:5f:b8:1b:91:02:c1:35:
         fd:fc:05:a7:ef:15:6b:91:75:f1:61:64:b7:8a:a5:1f:11:5b:
         5e:5d:06:77:73:ff:23:83:f9:86:87:38:a1:5b:a4:75:94:76:
         19:db:0f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----