Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft
File:                     OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft (raw, json)
Hash identifier:          94JFbTzAJ9HxVhUQdpKdGX544cCeMkdDqLi+k1nkqeM=
Subject key identifier:   AD:96:73:AE:55:49:17:55:CD:E1:65:B1:0D:F9:EA:7E:10:67:56:46
Authority key identifier: 3B:0B:C5:56:50:AA:46:B1:78:B3:E1:74:23:00:0B:D9:81:CA:67:36
Certificate issuer:       /CN=A9186C66/serialNumber=3B0BC55650AA46B178B3E17423000BD981CA6736
Certificate serial:       25E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OwvFVlCqRrF4s-F0IwAL2YHKZzY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft
Manifest number:          25D1
Signing time:             Fri 31 Jan 2025 15:43:16 +0000
Manifest this update:     Fri 31 Jan 2025 15:43:16 +0000
Manifest next update:     Fri 07 Feb 2025 15:43:16 +0000
Files and hashes:         1: OwvFVlCqRrF4s-F0IwAL2YHKZzY.crl (hash: 7Fj6uMeW2G/0FrzqNeTJ6DGaWrS+JMVDeX2zHn6Aatw=)
                          2: 02DB5704B0F211E58974874FC4F9AE02.roa (hash: 80axerWiZ6cd/ywlGklwH07eZfaJzXVmfhf4nrdmoFQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9698 (0x25e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186C66/serialNumber=3B0BC55650AA46B178B3E17423000BD981CA6736
        Validity
            Not Before: Jan 31 15:43:16 2025 GMT
            Not After : Feb  7 15:43:16 2025 GMT
        Subject: CN=679cef94-860f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:69:11:a2:4e:4b:08:eb:ef:d8:22:45:e5:70:
                    fe:74:dc:94:2c:53:77:60:2f:2c:67:b3:f7:11:7c:
                    84:e9:c6:c0:a8:4c:2e:d5:97:62:1a:0c:cb:1b:09:
                    6d:bc:a4:85:7f:06:8a:d6:24:01:7b:0f:be:5e:e9:
                    1d:bb:bb:ef:30:51:18:01:3e:f3:f7:61:47:f9:97:
                    fd:28:76:0f:b9:75:0d:e0:72:4d:f1:6d:09:41:a0:
                    55:4a:21:06:ed:a3:b1:aa:23:4c:3e:49:cb:ae:39:
                    48:e1:b1:38:92:d6:ed:0c:35:6e:ee:cc:ab:f0:6c:
                    d3:07:f5:9f:f4:53:e0:1f:74:08:87:7d:b8:48:e6:
                    c3:3f:9a:90:a1:4d:55:cc:10:dc:93:03:d9:27:2e:
                    1d:81:0c:1a:2b:97:02:69:a2:7f:53:81:69:00:6e:
                    06:c4:91:2f:59:25:43:26:96:d2:fb:50:25:d9:3b:
                    07:f7:5c:2e:b7:28:0d:7e:13:11:03:43:5d:f3:d4:
                    ac:67:6b:9f:50:b8:f1:2b:57:b4:29:63:6f:2c:ad:
                    ed:b2:b8:e1:fa:2c:6f:ed:ae:f7:74:34:6e:fe:80:
                    fa:65:15:db:31:85:2c:df:0a:5d:4f:ff:83:ca:dd:
                    da:cf:ea:19:48:13:11:f2:85:1b:8d:d7:26:4c:07:
                    15:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:96:73:AE:55:49:17:55:CD:E1:65:B1:0D:F9:EA:7E:10:67:56:46
            X509v3 Authority Key Identifier:
                keyid:3B:0B:C5:56:50:AA:46:B1:78:B3:E1:74:23:00:0B:D9:81:CA:67:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OwvFVlCqRrF4s-F0IwAL2YHKZzY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:e4:cb:59:7e:cb:94:0c:5d:80:fd:3b:5c:5a:b7:43:aa:53:
         66:dd:bc:68:cb:6b:23:c5:f1:33:69:81:f4:da:c9:97:34:59:
         62:db:9c:f7:94:16:3b:28:d4:9e:7f:da:17:49:f5:b9:55:5c:
         b2:10:c3:f1:f8:82:39:39:19:17:8b:96:37:91:bb:4e:d9:1e:
         4b:a6:5e:fc:7a:60:7e:ff:a7:44:86:69:bf:86:d1:3f:87:ef:
         56:67:31:0b:e8:f5:69:b6:f2:1e:f7:bc:61:c2:f4:73:a7:3a:
         0f:27:3e:9b:d5:c2:15:2f:ed:b6:57:a7:57:71:e9:63:5f:fa:
         37:6a:8a:fc:4a:de:42:97:ec:41:79:48:59:2c:ca:fc:0d:91:
         83:2f:42:a2:4a:c2:08:44:a3:52:0c:dd:af:f4:40:27:4c:95:
         98:b3:b0:7e:bc:1e:54:30:cf:74:eb:f9:0f:9a:67:22:cd:9e:
         88:7e:cd:86:0c:62:18:49:e5:75:b7:c3:80:a3:13:d6:82:35:
         93:26:37:76:ff:3c:18:a4:5c:c7:72:96:67:da:28:76:ab:be:
         b1:72:d5:04:df:6d:ec:34:79:f4:8b:9f:7b:75:f3:85:34:76:
         34:c9:2c:d1:43:24:92:34:30:8d:e1:cc:69:ca:38:f8:b6:0f:
         75:ff:a9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----