Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.mft
File:                     OYN8tL7K9qYmyRaulgJBtgnmsgo.mft (raw, json)
Hash identifier:          FR9FJLHkEqNugon6BvE2UzqOqdML4jf1RFjtWXcwxFo=
Subject key identifier:   D3:E1:8D:11:A1:7A:7F:17:44:4C:50:F8:3B:3B:60:DC:58:B4:1D:22
Authority key identifier: 39:83:7C:B4:BE:CA:F6:A6:26:C9:16:AE:96:02:41:B6:09:E6:B2:0A
Certificate issuer:       /CN=A918C3B7/serialNumber=39837CB4BECAF6A626C916AE960241B609E6B20A
Certificate serial:       DA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OYN8tL7K9qYmyRaulgJBtgnmsgo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.mft
Manifest number:          D9
Signing time:             Fri 31 Jan 2025 04:42:47 +0000
Manifest this update:     Fri 31 Jan 2025 04:42:46 +0000
Manifest next update:     Fri 07 Feb 2025 04:42:46 +0000
Files and hashes:         1: OYN8tL7K9qYmyRaulgJBtgnmsgo.crl (hash: Ko6yeKyZdVUAaopYtsVVm33/CuPK6wfu0ICJy8sVRxU=)
                          2: C635D41E611411EF9B00D029C4F9AE02.roa (hash: OB7rtGPc0fkmD0lX/j5TtVMfzbTV8gxLM92j8j+P3vY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 218 (0xda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C3B7/serialNumber=39837CB4BECAF6A626C916AE960241B609E6B20A
        Validity
            Not Before: Jan 31 04:42:46 2025 GMT
            Not After : Feb  7 04:42:46 2025 GMT
        Subject: CN=679c54c6-6f79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cc:a8:8a:27:1c:6f:b7:3e:33:b6:bf:cc:2b:
                    fb:01:38:83:15:b5:9a:53:96:29:0b:67:20:0d:bf:
                    fe:1a:d9:f9:1e:50:bc:be:e9:cf:b7:a6:47:4e:ef:
                    32:cd:47:0d:ca:30:ca:05:c3:2b:00:2e:17:75:25:
                    67:17:55:f5:00:b4:a8:93:3d:f8:07:5d:73:84:21:
                    8e:db:59:8b:56:b1:00:c5:ac:fd:d2:23:94:b6:5d:
                    ef:df:12:69:e6:5a:ca:08:74:26:6e:e0:ef:16:89:
                    b4:2c:83:6d:5f:33:77:a6:a0:a8:47:aa:03:fd:1c:
                    a5:26:c9:0b:30:7b:66:89:a2:f6:7a:13:26:73:a1:
                    0c:65:9a:eb:29:4b:62:86:39:72:3c:32:f0:60:0d:
                    9f:da:25:1d:4d:6e:32:29:27:06:e8:60:ee:fa:a3:
                    df:18:78:3c:f4:0a:b2:88:5c:36:b7:06:8c:76:42:
                    0e:04:32:c2:e9:86:71:e5:72:2b:4f:8e:44:e9:93:
                    34:16:1e:17:54:86:cd:a5:f2:33:cb:b0:a6:0b:70:
                    c7:4c:26:02:41:54:46:d1:c7:65:77:97:31:65:93:
                    ec:dc:51:f9:2f:26:75:9a:60:0e:7e:f1:40:f0:88:
                    1b:75:a6:22:4a:59:5c:43:f0:6e:ce:a4:fa:09:88:
                    d8:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:E1:8D:11:A1:7A:7F:17:44:4C:50:F8:3B:3B:60:DC:58:B4:1D:22
            X509v3 Authority Key Identifier:
                keyid:39:83:7C:B4:BE:CA:F6:A6:26:C9:16:AE:96:02:41:B6:09:E6:B2:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OYN8tL7K9qYmyRaulgJBtgnmsgo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:a7:58:42:4d:ed:53:a6:39:e7:19:56:ce:cc:3a:9e:01:98:
         23:34:74:1e:34:f0:91:ca:d3:b6:e6:cd:00:61:95:a2:ad:f7:
         ab:1c:8d:e2:0f:39:c1:a9:67:63:10:57:12:1d:34:16:8b:41:
         fe:1b:f4:21:0d:62:f1:72:42:d8:08:2f:39:fe:20:f7:02:41:
         45:c1:e6:eb:d4:da:3b:12:79:8e:b8:c3:fd:fe:30:d9:97:05:
         95:ea:b7:0a:37:11:c6:a2:d1:42:35:14:30:3f:a7:6c:82:37:
         c5:e9:9a:a7:4e:04:e2:41:f6:b1:3e:56:85:28:f8:cc:71:6b:
         ab:43:98:50:88:74:e3:5b:d0:de:6c:f6:9a:39:b1:69:0b:10:
         01:4e:94:80:b2:91:ea:15:47:c9:34:f4:85:00:da:a8:78:ac:
         5f:9a:85:12:c4:73:b6:33:a0:ba:17:95:2a:23:68:34:f2:06:
         18:12:93:8c:2d:6f:9a:97:03:77:cf:72:1c:62:f3:c5:e2:88:
         17:dc:3c:49:40:08:70:8c:6e:1c:9a:24:17:fb:25:ba:04:87:
         a3:88:58:53:66:de:56:62:d0:b9:d8:eb:26:d6:d1:28:30:83:
         04:f7:62:3e:7a:05:cd:a1:cf:6a:8c:f7:c3:19:a3:eb:14:21:
         b4:3c:41:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----