Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft
File:                     TiH1qoySjAtnV8A-VbClkjxOSKs.mft (raw, json)
Hash identifier:          21nLwRWjR/pQZuryqEmuA0sw3Zfdtg+DR8OxIukkAhQ=
Subject key identifier:   B9:DB:E1:34:F5:9C:05:D8:AD:C6:F7:6A:62:79:F4:3E:82:D3:43:F5
Authority key identifier: 4E:21:F5:AA:8C:92:8C:0B:67:57:C0:3E:55:B0:A5:92:3C:4E:48:AB
Certificate issuer:       /CN=A9180D79/serialNumber=4E21F5AA8C928C0B6757C03E55B0A5923C4E48AB
Certificate serial:       F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TiH1qoySjAtnV8A-VbClkjxOSKs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft
Manifest number:          F2
Signing time:             Fri 31 Jan 2025 04:23:29 +0000
Manifest this update:     Fri 31 Jan 2025 04:23:28 +0000
Manifest next update:     Fri 07 Feb 2025 04:23:28 +0000
Files and hashes:         1: TiH1qoySjAtnV8A-VbClkjxOSKs.crl (hash: CqowJXBSWl2fWtk5jNmkWchPRSpVpLPY4IP06W6Aph0=)
                          2: 25FE32B86D9D11EEB269D31CC4F9AE02.roa (hash: 7pdkVLQd2iDi4TqY7pImfsIqvgfxviEdh0IKPlLfG18=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 244 (0xf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180D79/serialNumber=4E21F5AA8C928C0B6757C03E55B0A5923C4E48AB
        Validity
            Not Before: Jan 31 04:23:28 2025 GMT
            Not After : Feb  7 04:23:28 2025 GMT
        Subject: CN=679c5041-8f93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:53:e1:21:2c:5b:d7:59:33:1c:27:f9:b2:75:
                    15:f6:10:1e:1d:28:37:8f:57:74:8b:f3:a4:87:9f:
                    52:31:56:6e:a8:a2:20:4d:41:f1:96:6a:f4:54:75:
                    be:c4:c4:f2:3a:bd:dd:22:21:c5:70:6c:96:b4:4a:
                    76:cb:e8:54:79:c0:35:7e:1a:37:ab:7e:10:cc:61:
                    fd:4e:01:56:70:11:cc:f7:fe:dc:89:9e:b2:10:0c:
                    d8:f8:32:a6:1c:ce:18:e4:c2:64:da:d0:5c:14:a1:
                    80:3b:6c:27:91:ec:83:6f:9d:69:2b:4d:6f:f7:83:
                    80:43:ff:d9:2e:3b:ed:e6:48:6b:21:a4:54:a8:47:
                    9f:85:85:c9:cf:dd:96:4f:f1:b3:97:ff:3e:d5:76:
                    60:ce:3c:1d:66:ca:f0:4c:6b:db:98:0f:dc:29:3d:
                    9d:75:ff:25:a1:5a:02:47:90:5c:c7:39:2f:0d:ce:
                    60:02:0b:e4:38:e3:23:74:78:08:a2:d8:26:3f:b3:
                    b8:c9:c7:ef:46:fb:5b:80:8d:ec:14:b3:3e:cd:52:
                    66:eb:3c:1b:99:52:2e:14:d6:08:96:60:6a:28:e4:
                    63:17:4e:c6:4b:09:d3:20:04:79:4f:60:a2:29:2b:
                    18:ef:b9:69:a0:83:5b:9f:76:f4:38:6c:c4:c8:db:
                    1a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:DB:E1:34:F5:9C:05:D8:AD:C6:F7:6A:62:79:F4:3E:82:D3:43:F5
            X509v3 Authority Key Identifier:
                keyid:4E:21:F5:AA:8C:92:8C:0B:67:57:C0:3E:55:B0:A5:92:3C:4E:48:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TiH1qoySjAtnV8A-VbClkjxOSKs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:d4:ae:82:53:46:43:69:1b:16:17:4c:ef:7c:27:2e:9c:ab:
         c0:02:d6:11:6f:81:80:0e:d1:cd:8a:36:9f:e9:2a:ce:65:e0:
         81:05:0d:21:d9:28:8b:86:30:1f:87:46:25:34:3b:6b:24:3c:
         45:1e:a8:11:7b:e6:13:d3:ab:f1:34:41:88:9f:2a:5d:d5:18:
         3b:17:b8:3e:c6:f7:93:12:44:8e:65:2c:f8:3f:f3:b3:b3:e9:
         2c:37:22:27:cd:24:94:b0:2c:95:a8:ee:d7:8e:a9:6a:52:56:
         93:98:87:83:42:b1:5e:5b:87:8b:4a:8f:b4:ba:de:00:30:8c:
         f4:12:c9:69:a8:9c:60:cf:43:ee:f1:3a:c4:6e:17:6e:d0:59:
         5a:e6:a8:97:e1:67:a0:f9:c9:16:c3:8c:20:ce:0a:ed:10:7c:
         0a:24:be:70:e4:37:ca:15:3b:f0:a9:48:ce:7a:3c:06:3a:f2:
         b1:2a:7a:84:06:de:e8:b8:05:21:61:a5:ce:49:b9:d4:c1:c1:
         4a:28:07:38:aa:93:73:f0:22:fa:da:3b:da:7b:73:3b:de:19:
         76:83:9e:1a:28:ae:09:e4:e6:01:c8:d1:8a:08:54:a2:2a:af:
         89:c3:b5:87:70:56:dc:f9:4c:03:aa:13:c6:1d:a7:cf:4d:f8:
         45:f2:24:bb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODBENzkxMTAvBgNVBAUTKDRFMjFGNUFBOEM5MjhDMEI2NzU3QzAzRTU1QjBBNTky
M0M0RTQ4QUIwHhcNMjUwMTMxMDQyMzI4WhcNMjUwMjA3MDQyMzI4WjAYMRYwFAYD
VQQDEw02NzljNTA0MS04ZjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAk1PhISxb11kzHCf5snUV9hAeHSg3j1d0i/Okh59SMVZuqKIgTUHxlmr0VHW+
xMTyOr3dIiHFcGyWtEp2y+hUecA1fho3q34QzGH9TgFWcBHM9/7ciZ6yEAzY+DKm
HM4Y5MJk2tBcFKGAO2wnkeyDb51pK01v94OAQ//ZLjvt5khrIaRUqEefhYXJz92W
T/Gzl/8+1XZgzjwdZsrwTGvbmA/cKT2ddf8loVoCR5BcxzkvDc5gAgvkOOMjdHgI
otgmP7O4ycfvRvtbgI3sFLM+zVJm6zwbmVIuFNYIlmBqKORjF07GSwnTIAR5T2Ci
KSsY77lpoINbn3b0OGzEyNsa2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLnb4TT1
nAXYrcb3amJ59D6C00P1MB8GA1UdIwQYMBaAFE4h9aqMkowLZ1fAPlWwpZI8Tkir
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MEQ3OS9FMTgyMDhCQzZE
OUMxMUVFQTAyQkJCMEVDNEY5QUUwMi9UaUgxcW95U2pBdG5WOEEtVmJDbGtqeE9T
S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RpSDFxb3lTakF0blY4QS1WYkNsa2p4T1NLcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MEQ3OS9FMTgyMDhCQzZEOUMxMUVFQTAyQkJCMEVDNEY5QUUwMi9UaUgxcW95U2pB
dG5WOEEtVmJDbGtqeE9TS3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAk1K6CU0ZDaRsWF0zvfCcunKvAAtYRb4GADtHNijaf6SrOZeCBBQ0h
2SiLhjAfh0YlNDtrJDxFHqgRe+YT06vxNEGInypd1Rg7F7g+xveTEkSOZSz4P/Oz
s+ksNyInzSSUsCyVqO7XjqlqUlaTmIeDQrFeW4eLSo+0ut4AMIz0EslpqJxgz0Pu
8TrEbhdu0Fla5qiX4Weg+ckWw4wgzgrtEHwKJL5w5DfKFTvwqUjOejwGOvKxKnqE
Bt7ouAUhYaXOSbnUwcFKKAc4qpNz8CL62jvae3M73hl2g54aKK4J5OYByNGKCFSi
Kq+Jw7WHcFbc+UwDqhPGHafPTfhF8iS7
-----END CERTIFICATE-----