Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.mft
File:                     xH0VZB2jsUx05cspvMBIgSMK0U4.mft (raw, json)
Hash identifier:          haVNN4pjHbK0wCLWhTY09W0gjE9/YarDUUkyOMsNchU=
Subject key identifier:   36:39:B8:E9:6A:C1:3B:1C:C2:74:7A:4D:CC:1D:CD:14:6B:F9:4B:DE
Authority key identifier: C4:7D:15:64:1D:A3:B1:4C:74:E5:CB:29:BC:C0:48:81:23:0A:D1:4E
Certificate issuer:       /CN=A9187364/serialNumber=C47D15641DA3B14C74E5CB29BCC04881230AD14E
Certificate serial:       023E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xH0VZB2jsUx05cspvMBIgSMK0U4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.mft
Manifest number:          0238
Signing time:             Fri 31 Jan 2025 02:00:50 +0000
Manifest this update:     Fri 31 Jan 2025 02:00:50 +0000
Manifest next update:     Fri 07 Feb 2025 02:00:50 +0000
Files and hashes:         1: xH0VZB2jsUx05cspvMBIgSMK0U4.crl (hash: tqWPdbS1HY4ZpzsEpOi7FvjINSe5icyZfxgYLctr0hw=)
                          2: 62B575B8104C11ED8CE56267C4F9AE02.roa (hash: LJhv9R+LostgKj3I2cWW/yrIOe+4xlAQa1Sq/wPUOsQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 574 (0x23e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187364/serialNumber=C47D15641DA3B14C74E5CB29BCC04881230AD14E
        Validity
            Not Before: Jan 31 02:00:50 2025 GMT
            Not After : Feb  7 02:00:50 2025 GMT
        Subject: CN=679c2ed2-b336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:43:21:eb:df:8d:e2:29:aa:52:ce:17:3e:bf:
                    1f:27:c2:ae:5f:08:0d:f0:30:49:ee:e5:bb:e9:28:
                    a9:5f:81:7a:d7:25:71:f1:18:8b:4e:40:53:77:ef:
                    57:d2:52:52:a3:1e:61:4b:65:41:86:a5:5b:e3:33:
                    e4:cd:38:54:fa:0b:06:a6:88:6d:8d:a1:8b:12:74:
                    d7:0e:e9:66:c7:48:13:8a:a7:16:7f:3e:64:ed:ef:
                    f6:6a:de:bc:c1:6c:26:25:a6:e2:9e:70:d8:a8:31:
                    0f:9d:56:bf:fd:19:2f:2d:5e:a7:dc:97:92:d2:79:
                    3b:80:52:ac:5b:3e:86:0a:c0:59:f3:d6:2e:7d:bd:
                    62:9f:45:2e:51:94:a2:8f:a8:dc:a1:29:69:0e:49:
                    89:3f:d2:cd:9a:61:6b:99:51:c4:40:1c:e3:bd:88:
                    e5:15:22:34:5c:c5:66:f6:56:ea:92:ad:f6:5e:c0:
                    28:43:53:02:c3:be:1b:7d:80:57:a8:fc:6c:1f:34:
                    f5:a1:78:45:8b:24:ea:4c:7e:7a:fb:31:dc:b0:97:
                    da:3e:66:99:cb:6e:f2:d3:d7:8d:59:cf:a2:a7:18:
                    44:1d:d0:81:b2:9a:e7:1a:d0:5a:30:67:e8:ea:08:
                    ae:db:95:d5:1e:39:c6:ce:cd:a1:1b:7f:83:5d:59:
                    53:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:39:B8:E9:6A:C1:3B:1C:C2:74:7A:4D:CC:1D:CD:14:6B:F9:4B:DE
            X509v3 Authority Key Identifier:
                keyid:C4:7D:15:64:1D:A3:B1:4C:74:E5:CB:29:BC:C0:48:81:23:0A:D1:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xH0VZB2jsUx05cspvMBIgSMK0U4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:27:32:07:d4:b0:f7:4a:73:c6:ac:9a:e6:00:dc:03:17:6d:
         dc:44:7f:b2:69:12:e2:c9:77:f4:23:c8:0a:a7:b1:92:85:89:
         1c:97:6d:9c:8d:ce:fa:e8:d7:ce:33:f2:eb:d7:5c:8a:4a:0e:
         5b:b8:8b:69:1a:cb:46:ec:a0:76:00:a0:c8:3c:eb:ba:ee:f5:
         84:32:32:05:21:7c:8f:9f:fc:75:b8:dc:af:1a:77:e7:57:39:
         eb:19:f1:03:69:64:7c:b7:54:fa:66:ba:e9:4a:aa:0d:a2:ad:
         09:07:22:7c:25:08:a9:b4:0e:a8:13:a9:3f:3c:dc:f7:be:c1:
         74:94:e2:b9:23:29:28:ea:de:19:7c:41:be:4d:97:d1:17:68:
         f5:6c:f6:9a:de:0b:a4:d5:63:df:a3:2f:e8:3f:cc:03:b4:81:
         46:1d:fe:6b:0e:8f:fb:35:0b:49:43:ea:32:b3:5b:ab:d2:cb:
         29:66:5c:bf:bd:bd:ab:ed:26:cc:66:1d:0d:44:c7:0e:ad:aa:
         97:23:09:0b:0f:14:2c:7c:3e:c2:27:b5:89:ff:71:76:32:21:
         ae:c6:7e:20:7b:55:20:67:ce:6f:09:7a:f5:4c:63:04:1d:04:
         e1:5d:7c:c2:39:10:fb:e8:50:25:c0:0f:29:65:87:7a:d0:0d:
         d9:04:b6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----