Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F0F7/CB78B7C87F1A11EB92FE980DC4F9AE02/UNWU1Rjx1sCstQCbVwd49vEG1d4.mft
File:                     UNWU1Rjx1sCstQCbVwd49vEG1d4.mft (raw, json)
Hash identifier:          tDtdWD7a0iliMs5r6p+Rw16d368FvqOBI4JWrhPHU10=
Subject key identifier:   DF:12:0D:A3:45:1C:47:17:20:22:1F:12:32:00:13:C3:EC:D7:ED:6B
Authority key identifier: 50:D5:94:D5:18:F1:D6:C0:AC:B5:00:9B:57:07:78:F6:F1:06:D5:DE
Certificate issuer:       /CN=A918F0F7/serialNumber=50D594D518F1D6C0ACB5009B570778F6F106D5DE
Certificate serial:       063D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UNWU1Rjx1sCstQCbVwd49vEG1d4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F0F7/CB78B7C87F1A11EB92FE980DC4F9AE02/UNWU1Rjx1sCstQCbVwd49vEG1d4.mft
Manifest number:          0634
Signing time:             Thu 30 Jan 2025 22:35:59 +0000
Manifest this update:     Thu 30 Jan 2025 22:35:58 +0000
Manifest next update:     Thu 06 Feb 2025 22:35:58 +0000
Files and hashes:         1: UNWU1Rjx1sCstQCbVwd49vEG1d4.crl (hash: d1wgj1WVRvlrO7B2+ugvrXYhjLRshSfILYxZ+jQtuyM=)
                          2: 365255DA7F1C11EB9D057A0EC4F9AE02.roa (hash: MXijTQWHDrYzBdPCM/Z7x+devsNZ2syPknC61NPh7rk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1597 (0x63d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F0F7/serialNumber=50D594D518F1D6C0ACB5009B570778F6F106D5DE
        Validity
            Not Before: Jan 30 22:35:58 2025 GMT
            Not After : Feb  6 22:35:58 2025 GMT
        Subject: CN=679bfecf-477c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2e:67:ac:0c:e5:e5:97:bd:90:92:d0:36:31:
                    1b:05:e8:7e:e8:dd:3d:0a:4b:91:61:23:35:a4:7b:
                    9f:7d:96:b8:27:11:a2:a8:9f:d8:ac:7e:47:e4:cc:
                    92:ac:c6:de:fe:02:1b:7d:52:af:b4:ef:3a:db:b3:
                    b9:93:37:b1:66:99:85:4d:22:c7:7a:3a:09:27:26:
                    a8:30:69:6f:ff:cf:4e:00:76:65:fc:74:d0:34:e0:
                    34:bf:6e:22:0c:d8:46:29:7f:26:e1:5a:2e:17:2e:
                    22:1a:26:5a:f1:e1:a7:21:b8:0d:a0:bb:4c:45:ed:
                    e8:f3:85:17:c8:93:53:62:42:13:c5:f6:7b:29:28:
                    a4:f6:14:df:be:2c:1b:0a:1c:13:30:21:13:99:d0:
                    09:f3:10:97:b8:74:5e:3b:10:89:8e:73:f8:c1:5e:
                    c6:25:b2:83:52:71:7f:ee:23:75:87:31:a7:ab:8e:
                    84:56:66:3c:7a:46:fa:7f:26:91:4d:95:f6:7f:cc:
                    ed:2d:1c:3f:e4:48:b2:7e:fc:c7:e8:fe:45:1d:68:
                    3b:e6:eb:7d:11:d3:cb:ae:39:d9:af:3c:97:3b:ff:
                    b6:c2:82:48:9f:ff:2a:60:c3:ab:74:6a:cb:6b:8c:
                    52:11:93:0f:d3:e2:b9:92:c3:b6:0d:d0:0e:48:c7:
                    c5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:12:0D:A3:45:1C:47:17:20:22:1F:12:32:00:13:C3:EC:D7:ED:6B
            X509v3 Authority Key Identifier:
                keyid:50:D5:94:D5:18:F1:D6:C0:AC:B5:00:9B:57:07:78:F6:F1:06:D5:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F0F7/CB78B7C87F1A11EB92FE980DC4F9AE02/UNWU1Rjx1sCstQCbVwd49vEG1d4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UNWU1Rjx1sCstQCbVwd49vEG1d4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F0F7/CB78B7C87F1A11EB92FE980DC4F9AE02/UNWU1Rjx1sCstQCbVwd49vEG1d4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:34:8d:25:ee:9a:f0:72:aa:9d:da:6a:a9:f8:21:ee:b7:08:
         a5:d3:62:2d:7a:bf:a6:3b:92:e2:d3:5c:62:5e:de:2e:e3:54:
         fe:71:45:55:bc:b2:51:22:be:93:70:ba:f9:0a:01:97:2f:72:
         b3:16:1a:59:11:8c:c7:70:1b:ee:62:d9:94:6c:44:2e:49:f1:
         01:01:f2:33:d6:8d:08:8c:84:96:69:b6:a9:f0:7a:d1:48:67:
         5e:85:14:89:94:00:47:cd:7e:3f:1b:ed:af:ff:4c:7a:8f:11:
         59:7c:92:b7:68:96:e2:14:fc:7f:90:53:4b:a1:af:da:8b:ee:
         7e:58:b0:05:4e:57:ba:35:61:f6:70:88:31:d8:f3:26:34:99:
         33:b6:12:25:03:f1:8c:82:ba:4f:48:3d:ff:98:45:2a:b4:25:
         88:58:05:1a:19:52:2d:77:d8:85:5f:03:1d:86:3c:34:6b:e4:
         6f:ea:b3:4b:86:9b:70:9d:6a:d4:42:9d:31:28:cb:49:57:a4:
         72:f4:76:a6:6c:e2:a5:e2:f0:0c:1f:f0:64:5d:a8:06:dc:72:
         67:b4:1f:bb:d2:66:e6:b4:d9:03:84:98:f9:f0:57:0d:48:82:
         1d:18:03:9c:30:ec:60:2a:d1:84:31:d3:79:58:e5:8f:9c:6d:
         b1:05:b0:78
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEYwRjcxMTAvBgNVBAUTKDUwRDU5NEQ1MThGMUQ2QzBBQ0I1MDA5QjU3MDc3OEY2
RjEwNkQ1REUwHhcNMjUwMTMwMjIzNTU4WhcNMjUwMjA2MjIzNTU4WjAYMRYwFAYD
VQQDEw02NzliZmVjZi00NzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyy5nrAzl5Ze9kJLQNjEbBeh+6N09CkuRYSM1pHuffZa4JxGiqJ/YrH5H5MyS
rMbe/gIbfVKvtO8627O5kzexZpmFTSLHejoJJyaoMGlv/89OAHZl/HTQNOA0v24i
DNhGKX8m4VouFy4iGiZa8eGnIbgNoLtMRe3o84UXyJNTYkITxfZ7KSik9hTfviwb
ChwTMCETmdAJ8xCXuHReOxCJjnP4wV7GJbKDUnF/7iN1hzGnq46EVmY8ekb6fyaR
TZX2f8ztLRw/5EiyfvzH6P5FHWg75ut9EdPLrjnZrzyXO/+2woJIn/8qYMOrdGrL
a4xSEZMP0+K5ksO2DdAOSMfFGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN8SDaNF
HEcXICIfEjIAE8Ps1+1rMB8GA1UdIwQYMBaAFFDVlNUY8dbArLUAm1cHePbxBtXe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjBGNy9DQjc4QjdDODdG
MUExMUVCOTJGRTk4MERDNEY5QUUwMi9VTldVMVJqeDFzQ3N0UUNiVndkNDl2RUcx
ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VOV1UxUmp4MXNDc3RRQ2JWd2Q0OXZFRzFkNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RjBGNy9DQjc4QjdDODdGMUExMUVCOTJGRTk4MERDNEY5QUUwMi9VTldVMVJqeDFz
Q3N0UUNiVndkNDl2RUcxZDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAlNI0l7prwcqqd2mqp+CHutwil02Iter+mO5Li01xiXt4u41T+cUVV
vLJRIr6TcLr5CgGXL3KzFhpZEYzHcBvuYtmUbEQuSfEBAfIz1o0IjISWabap8HrR
SGdehRSJlABHzX4/G+2v/0x6jxFZfJK3aJbiFPx/kFNLoa/ai+5+WLAFTle6NWH2
cIgx2PMmNJkzthIlA/GMgrpPSD3/mEUqtCWIWAUaGVItd9iFXwMdhjw0a+Rv6rNL
hptwnWrUQp0xKMtJV6Ry9HambOKl4vAMH/BkXagG3HJntB+70mbmtNkDhJj58FcN
SIIdGAOcMOxgKtGEMdN5WOWPnG2xBbB4
-----END CERTIFICATE-----