Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.mft
File:                     ej19N0jHiYbCxeULUBO-tgq0etw.mft (raw, json)
Hash identifier:          7Larrkhd2y/ud8/KG7cVRaSWoUNdY7vC5cwPS1dXRyY=
Subject key identifier:   C1:FE:DA:65:71:FC:3F:0C:D5:BB:FF:1D:2A:7A:C0:DE:FB:23:D1:24
Authority key identifier: 7A:3D:7D:37:48:C7:89:86:C2:C5:E5:0B:50:13:BE:B6:0A:B4:7A:DC
Certificate issuer:       /CN=A9185D79/serialNumber=7A3D7D3748C78986C2C5E50B5013BEB60AB47ADC
Certificate serial:       020A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej19N0jHiYbCxeULUBO-tgq0etw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.mft
Manifest number:          01FF
Signing time:             Fri 31 Jan 2025 02:13:07 +0000
Manifest this update:     Fri 31 Jan 2025 02:13:07 +0000
Manifest next update:     Fri 07 Feb 2025 02:13:07 +0000
Files and hashes:         1: ej19N0jHiYbCxeULUBO-tgq0etw.crl (hash: 1piYHtXePXjkPbfKlSuhsXSzgy7B+Qc+FMyO+A2AvCA=)
                          2: 3303481C820B11EFA5FD6818C4F9AE02.roa (hash: qSn7HxYC79SRKokwqOPpvLlZ94GTIrZHr+Y0TqagvLo=)
                          3: E0B81ED0D56111EE9E1D7E5BC4F9AE02.roa (hash: EmbjI84JzquBQTIr84bkMPcgLgOL5ED40jMLVI24vcA=)
                          4: 2A1AAEF2CA7711EF9ED1D782C4F9AE02.roa (hash: U22myChDK0J4NLA39gSglrY/Ph9QMALivvjc+F5pl5Y=)
                          5: 28144924820B11EF8B053D18C4F9AE02.roa (hash: mm04mj/mfrr+HTospMIe7o235EYlDUVjsUVc02GtxUw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 522 (0x20a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185D79/serialNumber=7A3D7D3748C78986C2C5E50B5013BEB60AB47ADC
        Validity
            Not Before: Jan 31 02:13:07 2025 GMT
            Not After : Feb  7 02:13:07 2025 GMT
        Subject: CN=679c31b3-67e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:89:99:48:fc:38:ec:e5:19:7b:83:14:3e:db:
                    c2:72:e2:16:fb:1d:6a:40:c9:ab:cd:84:e2:78:c7:
                    cf:9d:6d:66:00:6b:24:89:38:80:59:2b:30:d0:ea:
                    27:64:d6:c4:92:dc:38:8e:10:f9:ac:dd:46:5c:29:
                    97:68:ea:85:25:4d:ef:10:f6:e5:a7:2d:8c:5a:b7:
                    d3:a2:28:0d:c5:a7:fd:b0:91:39:b8:85:19:51:48:
                    51:01:14:b2:3a:36:06:57:dd:ff:52:a2:e6:c0:f2:
                    de:55:ea:9b:d3:7b:1a:89:1f:a7:35:a0:6b:51:2b:
                    8e:22:6b:42:de:af:4c:41:70:86:7b:5a:c1:02:5b:
                    60:1a:f9:ae:f9:72:ab:45:79:e5:1c:71:b6:d0:dc:
                    e6:ce:a6:0f:25:74:1b:ae:3a:c7:61:12:ca:8d:28:
                    e4:3e:40:da:82:f3:1f:54:29:4d:33:0c:cb:32:25:
                    95:68:d6:79:87:3c:bf:ad:50:fa:99:aa:19:2d:3b:
                    df:77:54:d7:5b:98:4f:6f:fc:c6:57:08:d2:77:44:
                    25:50:35:70:22:63:ae:27:66:b0:78:8e:94:50:a0:
                    f6:f5:50:c7:a5:0e:67:5a:ea:3d:d8:8b:8f:5a:3a:
                    fe:22:fa:08:18:83:24:e6:20:89:cf:21:8e:9f:3d:
                    fe:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:FE:DA:65:71:FC:3F:0C:D5:BB:FF:1D:2A:7A:C0:DE:FB:23:D1:24
            X509v3 Authority Key Identifier:
                keyid:7A:3D:7D:37:48:C7:89:86:C2:C5:E5:0B:50:13:BE:B6:0A:B4:7A:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej19N0jHiYbCxeULUBO-tgq0etw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:17:87:05:e0:ce:13:62:6d:8c:ae:15:d9:ca:ca:ff:38:ed:
         37:96:87:ae:5b:cc:da:b7:30:de:c8:25:9f:e9:70:03:17:8d:
         1e:7b:68:57:9d:e9:fb:31:d8:a7:4d:2c:57:ba:3b:9b:19:7f:
         d5:2c:09:a8:68:ae:f5:c0:1a:c1:08:19:0d:1c:bd:0f:c8:4b:
         a9:50:94:58:38:4e:15:3c:80:a1:6a:20:fd:67:93:e0:3c:3d:
         1e:cd:bd:42:8a:24:e3:a8:89:cd:b9:c9:56:28:00:e1:d0:14:
         24:b3:d4:8a:97:a1:5a:56:cb:57:9e:35:89:b3:ea:b2:b5:85:
         15:65:56:da:ec:f0:bb:23:94:d1:24:d3:19:e2:eb:5b:67:16:
         a1:c0:98:71:be:7f:56:fb:01:8c:0e:1c:03:80:09:2f:a8:60:
         27:2f:2b:32:9a:1e:54:13:14:d2:9e:49:2c:44:a7:84:77:58:
         d2:82:6a:d9:1b:3f:27:50:51:83:09:3e:df:9f:b7:f6:d1:10:
         20:28:de:9f:e5:32:3e:7c:17:7a:cf:ea:e8:cf:c1:cb:c4:f0:
         18:06:7c:5d:0a:fe:15:8d:55:46:e0:19:00:42:8b:27:4f:91:
         97:b8:84:95:ab:5c:97:ca:c7:b8:2f:69:7e:65:e1:54:c2:d7:
         26:ce:f9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----