Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/rUR6Z_B-gc0JwyLs0QrZQWvESys.mft
File:                     rUR6Z_B-gc0JwyLs0QrZQWvESys.mft (raw, json)
Hash identifier:          ZJ0aNz6of25JsX8937/7+KJtKG4BqY+mAe/gAv3Sp+Y=
Subject key identifier:   2C:46:23:CA:9B:14:F8:3F:82:3F:4D:EA:11:A8:00:F8:25:B0:7A:12
Authority key identifier: AD:44:7A:67:F0:7E:81:CD:09:C3:22:EC:D1:0A:D9:41:6B:C4:4B:2B
Certificate issuer:       /CN=A9188EB6/serialNumber=AD447A67F07E81CD09C322ECD10AD9416BC44B2B
Certificate serial:       03C3
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rUR6Z_B-gc0JwyLs0QrZQWvESys.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/rUR6Z_B-gc0JwyLs0QrZQWvESys.mft
Manifest number:          03C0
Signing time:             Fri 31 Jan 2025 00:18:09 +0000
Manifest this update:     Fri 31 Jan 2025 00:18:09 +0000
Manifest next update:     Fri 07 Feb 2025 00:18:09 +0000
Files and hashes:         1: rUR6Z_B-gc0JwyLs0QrZQWvESys.crl (hash: SycPtv89TXNeqJueAZ1kfOVZXDvc+pjd9CM307redsk=)
                          2: 09B2D8EC704C11ED97935E7DC4F9AE02.roa (hash: 20RJb8XxEbpVV3YaUsYGPL/u9/U+YzjgEdTcF40ivzI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 963 (0x3c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188EB6/serialNumber=AD447A67F07E81CD09C322ECD10AD9416BC44B2B
        Validity
            Not Before: Jan 31 00:18:09 2025 GMT
            Not After : Feb  7 00:18:09 2025 GMT
        Subject: CN=679c16c1-2386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:86:94:8b:0d:d3:56:2d:bb:65:06:6f:bf:87:
                    6e:16:e2:f4:1b:6e:08:25:fb:40:11:60:bd:64:42:
                    5d:bc:cf:95:39:ba:d4:75:35:8a:f6:9a:f7:ed:70:
                    e0:6a:35:0e:f9:5d:79:c8:a8:2b:ee:44:ed:b5:a0:
                    1f:1f:64:17:9e:13:7f:00:80:49:0c:51:45:06:69:
                    a7:58:c7:ff:86:4c:c6:8f:34:db:92:a9:ae:8b:fb:
                    4f:f7:cc:55:12:a5:8c:75:b4:dc:8c:2e:ca:69:6c:
                    dd:34:d4:71:1b:24:ca:99:2d:ea:86:c9:14:23:34:
                    26:55:9a:a6:bc:c4:d1:5c:0a:82:47:88:e4:55:e3:
                    8b:83:f4:06:53:55:dc:71:1b:4e:4f:a3:31:7e:b6:
                    71:a6:ce:8b:a6:b5:18:b4:4d:f2:43:48:02:6e:3f:
                    66:12:8b:f7:01:f8:dd:20:9d:ec:a8:ca:70:84:a8:
                    b2:16:f0:a0:9d:12:ca:71:14:8d:15:46:0e:e9:eb:
                    99:d9:ed:31:4a:11:d5:02:5d:e2:6c:93:ce:c1:1f:
                    3c:9c:d8:99:3f:62:36:34:9e:f1:55:9a:6b:75:aa:
                    6d:fb:c7:33:63:c0:da:1d:74:29:d0:2f:f4:1e:5c:
                    84:ca:2c:65:a3:58:3b:56:1d:0e:cf:be:52:6e:6c:
                    8a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:46:23:CA:9B:14:F8:3F:82:3F:4D:EA:11:A8:00:F8:25:B0:7A:12
            X509v3 Authority Key Identifier:
                keyid:AD:44:7A:67:F0:7E:81:CD:09:C3:22:EC:D1:0A:D9:41:6B:C4:4B:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/rUR6Z_B-gc0JwyLs0QrZQWvESys.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rUR6Z_B-gc0JwyLs0QrZQWvESys.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/rUR6Z_B-gc0JwyLs0QrZQWvESys.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:b1:1f:1f:14:6b:94:57:a5:9b:d1:ec:13:a0:0d:a5:5e:1b:
         70:09:b6:23:46:cb:8e:9d:da:a4:44:a5:8b:a6:6f:36:e8:bd:
         33:7d:ff:e0:99:ff:fb:5f:5d:45:92:53:6f:21:f9:78:0b:b3:
         34:cb:d2:df:8f:97:e7:fa:2a:a1:9c:72:ce:eb:64:0a:75:ed:
         d8:16:87:87:61:b8:16:11:46:5e:32:e3:67:94:c1:bb:f3:1d:
         c2:bd:ad:62:38:8b:da:9d:a6:ab:88:8f:72:d4:04:0e:c4:f2:
         64:fc:5f:54:10:fb:e9:03:97:99:15:df:7d:13:b4:c5:4c:2e:
         13:6a:14:69:6e:95:bf:9b:1a:f6:dd:da:91:16:5c:2b:c3:9f:
         f7:a0:42:fc:b7:53:4f:94:be:5a:b3:5f:48:b9:45:86:54:f6:
         c3:d2:79:16:5a:b5:91:bb:ae:2f:a5:cc:11:55:88:fb:66:cd:
         28:41:22:65:57:1e:5c:14:ad:c8:5f:8a:fb:0c:f1:5a:73:4f:
         2d:19:0d:d9:0c:a0:1f:8c:07:04:9e:4b:e0:3f:48:b2:aa:51:
         e4:50:b9:88:ea:22:91:4c:cd:f5:31:67:63:d0:2d:ed:d3:38:
         6a:91:4d:d0:b2:29:6c:b3:a5:81:19:6a:9f:16:62:e0:76:22:
         7f:ed:8f:0c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA8MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODhFQjYxMTAvBgNVBAUTKEFENDQ3QTY3RjA3RTgxQ0QwOUMzMjJFQ0QxMEFEOTQx
NkJDNDRCMkIwHhcNMjUwMTMxMDAxODA5WhcNMjUwMjA3MDAxODA5WjAYMRYwFAYD
VQQDEw02NzljMTZjMS0yMzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxYaUiw3TVi27ZQZvv4duFuL0G24IJftAEWC9ZEJdvM+VObrUdTWK9pr37XDg
ajUO+V15yKgr7kTttaAfH2QXnhN/AIBJDFFFBmmnWMf/hkzGjzTbkqmui/tP98xV
EqWMdbTcjC7KaWzdNNRxGyTKmS3qhskUIzQmVZqmvMTRXAqCR4jkVeOLg/QGU1Xc
cRtOT6MxfrZxps6LprUYtE3yQ0gCbj9mEov3AfjdIJ3sqMpwhKiyFvCgnRLKcRSN
FUYO6euZ2e0xShHVAl3ibJPOwR88nNiZP2I2NJ7xVZprdapt+8czY8DaHXQp0C/0
HlyEyixlo1g7Vh0Oz75SbmyKswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCxGI8qb
FPg/gj9N6hGoAPglsHoSMB8GA1UdIwQYMBaAFK1EemfwfoHNCcMi7NEK2UFrxEsr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEVCNi85QzBFRjgzQTc0
RUMxMUVDOTNGODFBMzNDNEY5QUUwMi9yVVI2Wl9CLWdjMEp3eUxzMFFyWlFXdkVT
eXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL3JVUjZaX0ItZ2MwSnd5THMwUXJaUVd2RVN5cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OEVCNi85QzBFRjgzQTc0RUMxMUVDOTNGODFBMzNDNEY5QUUwMi9yVVI2Wl9CLWdj
MEp3eUxzMFFyWlFXdkVTeXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCRsR8fFGuUV6Wb0ewToA2lXhtwCbYjRsuOndqkRKWLpm826L0zff/g
mf/7X11FklNvIfl4C7M0y9Lfj5fn+iqhnHLO62QKde3YFoeHYbgWEUZeMuNnlMG7
8x3Cva1iOIvanaariI9y1AQOxPJk/F9UEPvpA5eZFd99E7TFTC4TahRpbpW/mxr2
3dqRFlwrw5/3oEL8t1NPlL5as19IuUWGVPbD0nkWWrWRu64vpcwRVYj7Zs0oQSJl
Vx5cFK3IX4r7DPFac08tGQ3ZDKAfjAcEnkvgP0iyqlHkULmI6iKRTM31MWdj0C3t
0zhqkU3Qsilss6WBGWqfFmLgdiJ/7Y8M
-----END CERTIFICATE-----