Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.mft
File:                     J5KVmyX7-evckzm6nH01VXJpaas.mft (raw, json)
Hash identifier:          vOxXaW+OysujOjQW6PpWJ8zMizZXGaXgD78SQM5RzZ8=
Subject key identifier:   B3:29:6A:32:A5:14:F8:B6:CB:9D:70:26:38:8D:39:AB:7A:47:36:A8
Authority key identifier: 27:92:95:9B:25:FB:F9:EB:DC:93:39:BA:9C:7D:35:55:72:69:69:AB
Certificate issuer:       /CN=A9189261/serialNumber=2792959B25FBF9EBDC9339BA9C7D3555726969AB
Certificate serial:       061B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5KVmyX7-evckzm6nH01VXJpaas.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.mft
Manifest number:          0617
Signing time:             Thu 30 Jan 2025 22:43:22 +0000
Manifest this update:     Thu 30 Jan 2025 22:43:22 +0000
Manifest next update:     Thu 06 Feb 2025 22:43:22 +0000
Files and hashes:         1: J5KVmyX7-evckzm6nH01VXJpaas.crl (hash: yffjebrBpUL52PsWIQil5zic6W4UUnLfmwDmlHBaPew=)
                          2: CDACEC3686AD11EBBDFD106EC4F9AE02.roa (hash: +b74aWHLRD3nVFpEi7MMX8aEV8GBCMCU5F6fmVweFlQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1563 (0x61b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189261/serialNumber=2792959B25FBF9EBDC9339BA9C7D3555726969AB
        Validity
            Not Before: Jan 30 22:43:22 2025 GMT
            Not After : Feb  6 22:43:22 2025 GMT
        Subject: CN=679c008a-e839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:dc:6d:eb:9f:b9:db:c9:c8:40:cf:4f:6e:29:
                    b8:db:49:36:e0:8b:0d:fc:df:42:76:d9:d3:83:b7:
                    90:2c:64:08:77:75:e4:98:f7:fc:bd:b7:19:6e:44:
                    db:35:56:f7:7c:61:c7:85:f6:e0:00:21:e7:59:bc:
                    32:29:f2:3f:c5:7a:8e:bb:32:fe:ad:75:eb:56:7d:
                    ed:92:9e:76:94:b9:b4:67:2d:2b:e8:78:e0:f8:11:
                    8a:2c:08:95:4f:f5:62:56:b9:8b:7e:18:b8:27:1d:
                    b0:d8:6a:81:18:13:94:2f:62:d9:fd:24:dd:37:0d:
                    3a:d8:9e:2c:6a:78:82:2f:35:55:18:0d:56:38:e2:
                    72:16:93:24:b4:cc:15:e4:61:95:32:cb:30:d2:f2:
                    44:cb:e8:92:3e:a9:12:e4:38:c9:19:b0:e8:d5:1e:
                    70:85:f5:5d:e1:f3:2a:a0:2d:0e:f4:df:50:fc:f2:
                    d9:cb:ff:45:48:aa:1a:18:9a:ce:1f:bf:a0:54:fd:
                    38:d6:15:e6:12:ad:55:d5:11:42:50:a9:47:14:59:
                    57:e6:97:52:0f:53:65:67:52:b7:3a:d9:d9:c1:4a:
                    25:17:c2:03:12:d8:ac:54:34:78:17:56:c0:6a:80:
                    6b:77:d3:83:73:a9:7d:8a:01:92:00:26:ea:3d:96:
                    eb:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:29:6A:32:A5:14:F8:B6:CB:9D:70:26:38:8D:39:AB:7A:47:36:A8
            X509v3 Authority Key Identifier:
                keyid:27:92:95:9B:25:FB:F9:EB:DC:93:39:BA:9C:7D:35:55:72:69:69:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5KVmyX7-evckzm6nH01VXJpaas.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:49:1c:b6:53:47:2a:ea:95:1e:bf:08:17:a5:86:9d:46:a7:
         4b:aa:3f:a5:63:1c:e9:20:1a:d1:77:1e:68:ec:fb:c9:41:ae:
         b9:11:f4:ca:35:e8:aa:c3:c9:af:63:de:c3:66:18:05:29:f8:
         ce:04:d7:d2:60:07:0c:a6:e1:69:7a:b7:19:68:5e:22:ce:9f:
         c4:90:90:27:10:55:29:d4:04:b9:1d:b9:08:9a:d4:34:ae:f1:
         7e:c8:2f:16:6b:fe:f2:96:27:15:11:53:2e:86:11:3c:9a:96:
         46:99:35:f4:86:b5:14:2d:a7:b7:8a:b9:69:31:c3:cb:02:81:
         dc:78:02:e2:dc:92:b6:ef:30:53:30:c0:b8:61:f9:6a:7c:0e:
         ca:92:3f:f5:6c:b8:94:78:74:12:c3:1d:7b:87:bc:47:13:99:
         90:5f:ee:a6:cd:77:60:ef:e5:d2:ed:12:78:1c:a5:69:c3:9b:
         88:4a:ac:78:a6:56:37:eb:81:76:1b:a8:9a:e6:22:e8:fb:14:
         9a:7d:4a:97:27:7a:8c:f0:16:a2:75:87:fb:d5:e4:06:09:f8:
         69:b9:01:99:b0:58:74:ad:18:bc:15:75:f3:73:25:bb:39:8a:
         52:87:a9:62:a3:5d:0c:75:3c:2e:61:8d:44:dc:91:75:65:a1:
         98:80:c0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----