Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.mft
File:                     apVIHOj0DdiJXR-3rukOWVm6g8E.mft (raw, json)
Hash identifier:          7BtHYLlW+Ne4Wg/O8qgnvDPte1eoJ4j1LJp9aWgxiW8=
Subject key identifier:   D6:10:67:1D:7A:DF:F2:2E:D1:E8:D8:0E:49:92:60:D5:3D:C3:B7:54
Authority key identifier: 6A:95:48:1C:E8:F4:0D:D8:89:5D:1F:B7:AE:E9:0E:59:59:BA:83:C1
Certificate issuer:       /CN=A918DA0C/serialNumber=6A95481CE8F40DD8895D1FB7AEE90E5959BA83C1
Certificate serial:       0518
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apVIHOj0DdiJXR-3rukOWVm6g8E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.mft
Manifest number:          0511
Signing time:             Thu 30 Jan 2025 23:37:59 +0000
Manifest this update:     Thu 30 Jan 2025 23:37:59 +0000
Manifest next update:     Thu 06 Feb 2025 23:37:59 +0000
Files and hashes:         1: apVIHOj0DdiJXR-3rukOWVm6g8E.crl (hash: xGtEAUfQYsMyLGnDNyH/hN8tw0ZtBiJBL55d8qQRdaA=)
                          2: 0C3D8674345511EFA05D0C10C4F9AE02.roa (hash: ZnpRalcn1+UDz0Qh9MVT7PEHG3mXFgwSlTQlnQVlTtU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1304 (0x518)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918DA0C/serialNumber=6A95481CE8F40DD8895D1FB7AEE90E5959BA83C1
        Validity
            Not Before: Jan 30 23:37:59 2025 GMT
            Not After : Feb  6 23:37:59 2025 GMT
        Subject: CN=679c0d57-29ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3f:5e:5a:58:f1:53:7b:84:43:cc:67:f3:62:
                    e7:65:d2:02:59:ab:d2:8e:f5:c0:a2:a7:4f:0e:47:
                    b8:8f:50:e5:12:b9:92:48:e1:8a:e0:67:86:79:da:
                    6c:7d:65:07:ad:d1:a5:c2:58:df:0e:1b:10:2b:97:
                    f7:08:84:b9:fd:4d:f8:42:3c:16:2b:52:74:e1:71:
                    ae:1e:cb:4c:f5:ae:d0:df:30:17:dc:f6:a7:a3:dd:
                    f7:da:f8:04:27:18:d2:4c:38:bd:23:21:64:07:f9:
                    d3:f4:fe:c4:9e:3e:69:e4:16:02:29:96:11:97:31:
                    15:44:a7:35:b3:16:59:78:92:eb:55:0c:07:f4:82:
                    27:6d:49:99:21:1a:06:89:30:3e:38:74:69:7d:34:
                    77:8b:27:6a:6c:ac:97:68:71:12:e0:77:c8:ba:e7:
                    b1:91:a9:0b:74:31:c2:1f:a9:b8:31:c1:c3:c7:83:
                    c5:26:d2:dc:19:25:33:f4:38:6b:0d:ac:e2:3b:c2:
                    60:d1:41:e2:be:82:ae:f7:e0:82:d3:3f:4a:d9:86:
                    49:b2:c3:2b:ad:88:2f:64:44:f8:d1:75:74:ff:f7:
                    24:7d:61:7c:8b:77:67:df:5b:9a:31:d5:7c:72:9c:
                    25:bd:91:4a:a4:6e:bf:5a:94:40:07:94:9c:bb:98:
                    c3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:10:67:1D:7A:DF:F2:2E:D1:E8:D8:0E:49:92:60:D5:3D:C3:B7:54
            X509v3 Authority Key Identifier:
                keyid:6A:95:48:1C:E8:F4:0D:D8:89:5D:1F:B7:AE:E9:0E:59:59:BA:83:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apVIHOj0DdiJXR-3rukOWVm6g8E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:0f:11:47:66:78:d3:4c:b1:b1:45:e2:66:de:6d:fe:f6:70:
         ab:af:14:9a:f7:ed:39:35:49:5f:34:2e:ff:b0:95:99:32:d0:
         03:29:b2:f8:a9:ba:31:3f:ad:3a:0b:55:93:06:92:a6:d4:4c:
         fa:85:5c:e4:fe:90:12:d3:31:aa:a8:a6:26:7a:48:74:1e:07:
         7f:a9:00:f4:7a:34:49:85:2b:a8:8f:09:db:a0:d5:4a:24:d9:
         4d:e4:ac:a9:3d:4f:d8:c1:13:98:25:7b:f2:5e:c5:e9:ae:96:
         65:f3:f2:20:98:d6:30:59:2f:bd:83:0b:30:e3:d2:5f:19:00:
         63:e1:ee:de:d7:2d:f5:4d:b3:5c:fb:e4:4e:45:bb:ee:d6:9f:
         18:e9:c6:50:94:18:67:c3:77:06:c9:d8:7b:3c:0a:4e:0b:08:
         63:1a:40:74:8d:65:38:d3:45:eb:c3:48:3b:37:c3:c6:53:78:
         56:28:ef:4d:a5:08:09:b5:77:b7:d8:be:d0:31:e0:c7:63:e7:
         26:e4:bc:b5:c4:8c:8b:bc:53:b8:fa:32:0d:d3:d2:44:d9:da:
         49:30:93:93:25:71:b8:9c:f0:1a:fe:d5:ca:d7:c0:d8:48:bc:
         a3:30:53:a6:da:fa:32:4d:e9:e3:c2:67:a9:0f:a3:2b:95:70:
         73:e5:03:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----