Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft
File:                     D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft (raw, json)
Hash identifier:          jeNfnFvtJV3L8y2H7rJfdDQpCg4uZmXOSN+fXVm2dU4=
Subject key identifier:   B8:2D:F7:6C:C4:C7:DE:4B:C6:D2:01:8B:79:02:71:2F:FF:5C:D2:B3
Authority key identifier: 0F:99:B1:FE:CF:A5:70:04:F6:43:D8:2B:F5:11:CD:D4:74:78:6D:A0
Certificate issuer:       /CN=A9185413/serialNumber=0F99B1FECFA57004F643D82BF511CDD474786DA0
Certificate serial:       CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5mx_s-lcAT2Q9gr9RHN1HR4baA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft
Manifest number:          CB
Signing time:             Fri 31 Jan 2025 04:51:26 +0000
Manifest this update:     Fri 31 Jan 2025 04:51:26 +0000
Manifest next update:     Fri 07 Feb 2025 04:51:26 +0000
Files and hashes:         1: D5mx_s-lcAT2Q9gr9RHN1HR4baA.crl (hash: yJOZOYi/SWsQcL6P9V4mmVWt0OHAhfN6E+i2wf2ZzBo=)
                          2: C1D49C12AEDF11EE96155C68C4F9AE02.roa (hash: dzuBA92ULhmJzmxGgdHpyawAKCUbaQ8RTfKuM5up9R0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 205 (0xcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185413/serialNumber=0F99B1FECFA57004F643D82BF511CDD474786DA0
        Validity
            Not Before: Jan 31 04:51:26 2025 GMT
            Not After : Feb  7 04:51:26 2025 GMT
        Subject: CN=679c56ce-c7a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f6:fd:57:b0:21:ee:c6:dc:ea:3e:5c:b9:4b:
                    41:de:b0:ae:15:32:d9:39:83:3d:3f:15:88:f7:53:
                    3e:9b:0c:a0:ca:27:7c:5c:73:01:ef:35:92:a7:e5:
                    23:a0:64:cc:3d:be:33:84:c1:8f:ff:26:62:09:7b:
                    a0:08:4f:c4:df:35:89:78:0f:a6:8e:5f:74:a5:7b:
                    f6:94:84:16:96:7a:61:19:c8:59:42:8b:4a:eb:41:
                    58:b6:09:dc:37:35:f3:21:aa:4d:1d:05:9c:8a:e8:
                    79:29:10:8f:91:79:6b:6d:6a:c4:30:cf:75:9a:43:
                    26:c2:ba:ab:30:b0:df:c3:2d:b8:8b:34:66:75:f8:
                    35:ef:72:28:54:55:4e:bd:71:28:39:90:09:15:56:
                    a7:29:e6:e3:0e:2f:7d:ae:1a:05:6d:40:3e:57:12:
                    d3:18:b1:2c:a5:dc:4a:1d:1e:af:45:13:d7:21:6e:
                    78:35:c3:2c:35:67:d4:64:91:9a:60:5c:b6:6d:c2:
                    83:19:1f:05:1b:db:6e:ac:a2:8b:fa:eb:76:ca:75:
                    5f:0b:55:da:67:97:4e:01:79:ed:4f:2e:98:14:96:
                    59:a3:1a:5a:31:75:d5:0e:72:fb:21:99:b3:36:f6:
                    38:5e:b1:d9:23:29:b9:cd:b8:03:71:fa:f3:2c:8e:
                    ce:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:2D:F7:6C:C4:C7:DE:4B:C6:D2:01:8B:79:02:71:2F:FF:5C:D2:B3
            X509v3 Authority Key Identifier:
                keyid:0F:99:B1:FE:CF:A5:70:04:F6:43:D8:2B:F5:11:CD:D4:74:78:6D:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5mx_s-lcAT2Q9gr9RHN1HR4baA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:62:89:18:3f:b7:bc:76:9f:10:9e:8b:62:f1:9d:84:28:6b:
         70:63:a3:43:69:5e:1d:08:cc:61:26:70:6c:f2:b4:7d:7d:da:
         dc:fb:bc:d6:e9:71:8a:a3:cb:97:e3:b0:c7:09:b3:33:8c:c6:
         b3:57:93:a3:8a:2a:9e:a2:74:82:84:73:2f:ed:ef:9f:0c:a4:
         76:1b:07:11:04:99:0d:0a:ec:49:c3:64:9e:f1:5a:22:77:fe:
         47:bf:3e:d1:9a:7a:67:79:1a:79:0e:56:19:8a:dd:22:a4:9d:
         82:72:78:52:61:09:b3:a4:12:38:6a:bd:b7:1c:53:3a:ab:5c:
         c5:f9:38:13:6f:0b:18:59:be:3c:92:86:1b:3d:8f:8e:33:99:
         9a:f5:2c:c6:08:97:d6:40:6c:84:ff:dc:71:61:c0:10:0f:3f:
         9e:bd:f2:4a:59:9e:9b:44:68:e4:79:62:e6:40:63:97:b7:38:
         27:51:53:5c:49:83:ee:ae:65:83:b1:f1:8a:89:07:2c:db:8c:
         f8:85:89:f9:bd:7d:8a:e9:b4:24:5e:a7:db:d2:d0:ae:37:6c:
         fb:74:0f:09:07:82:0d:f5:19:3e:51:34:d0:28:8c:4e:4b:9d:
         12:a8:8a:d3:59:4d:1a:f0:80:9a:1b:e8:8b:23:f0:d3:7a:cc:
         18:8a:e3:e1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODU0MTMxMTAvBgNVBAUTKDBGOTlCMUZFQ0ZBNTcwMDRGNjQzRDgyQkY1MTFDREQ0
NzQ3ODZEQTAwHhcNMjUwMTMxMDQ1MTI2WhcNMjUwMjA3MDQ1MTI2WjAYMRYwFAYD
VQQDEw02NzljNTZjZS1jN2ExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArfb9V7Ah7sbc6j5cuUtB3rCuFTLZOYM9PxWI91M+mwygyid8XHMB7zWSp+Uj
oGTMPb4zhMGP/yZiCXugCE/E3zWJeA+mjl90pXv2lIQWlnphGchZQotK60FYtgnc
NzXzIapNHQWciuh5KRCPkXlrbWrEMM91mkMmwrqrMLDfwy24izRmdfg173IoVFVO
vXEoOZAJFVanKebjDi99rhoFbUA+VxLTGLEspdxKHR6vRRPXIW54NcMsNWfUZJGa
YFy2bcKDGR8FG9turKKL+ut2ynVfC1XaZ5dOAXntTy6YFJZZoxpaMXXVDnL7IZmz
NvY4XrHZIym5zbgDcfrzLI7OYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLgt92zE
x95LxtIBi3kCcS//XNKzMB8GA1UdIwQYMBaAFA+Zsf7PpXAE9kPYK/URzdR0eG2g
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTQxMy83NTlBRDI0Q0FC
OUUxMUVFOTYzRDMxN0RDNEY5QUUwMi9ENW14X3MtbGNBVDJROWdyOVJITjFIUjRi
YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0Q1bXhfcy1sY0FUMlE5Z3I5UkhOMUhSNGJhQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NTQxMy83NTlBRDI0Q0FCOUUxMUVFOTYzRDMxN0RDNEY5QUUwMi9ENW14X3MtbGNB
VDJROWdyOVJITjFIUjRiYUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBkYokYP7e8dp8Qnoti8Z2EKGtwY6NDaV4dCMxhJnBs8rR9fdrc+7zW
6XGKo8uX47DHCbMzjMazV5OjiiqeonSChHMv7e+fDKR2GwcRBJkNCuxJw2Se8Voi
d/5Hvz7RmnpneRp5DlYZit0ipJ2CcnhSYQmzpBI4ar23HFM6q1zF+TgTbwsYWb48
koYbPY+OM5ma9SzGCJfWQGyE/9xxYcAQDz+evfJKWZ6bRGjkeWLmQGOXtzgnUVNc
SYPurmWDsfGKiQcs24z4hYn5vX2K6bQkXqfb0tCuN2z7dA8JB4IN9Rk+UTTQKIxO
S50SqIrTWU0a8ICaG+iLI/DTeswYiuPh
-----END CERTIFICATE-----