Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft
File:                     l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft (raw, json)
Hash identifier:          Ah8LzeVr77i8Xo6efawVkXAwv7H6vo+dRjitvBU4DsY=
Subject key identifier:   C2:F4:D7:E5:3D:9D:44:2E:50:B6:E9:52:65:5D:4B:AB:DD:C7:0F:15
Authority key identifier: 97:D1:1A:E2:12:CB:21:3D:F9:65:2F:5B:B6:24:8E:40:CE:0C:29:FA
Certificate issuer:       /CN=A9194AF5/serialNumber=97D11AE212CB213DF9652F5BB6248E40CE0C29FA
Certificate serial:       CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft
Manifest number:          CB
Signing time:             Fri 31 Jan 2025 04:51:19 +0000
Manifest this update:     Fri 31 Jan 2025 04:51:19 +0000
Manifest next update:     Fri 07 Feb 2025 04:51:18 +0000
Files and hashes:         1: l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl (hash: wZXGEU1YsT51Nh4xqF/VXB9n0Qh05z3MUjHCoCPrits=)
                          2: 6534CB6AA60711EFA9497E10C4F9AE02.roa (hash: avXsfjELw9kpDvws2JPtdoH0HM/yAF3dKj0UAvRbtj0=)
                          3: BC87CB52AB5711EEBC6EBB3FC4F9AE02.roa (hash: EikgtLBFZ+GcMX0vibVaRvnZCJfkspVWoQB1eoPQJJA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 206 (0xce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194AF5/serialNumber=97D11AE212CB213DF9652F5BB6248E40CE0C29FA
        Validity
            Not Before: Jan 31 04:51:19 2025 GMT
            Not After : Feb  7 04:51:18 2025 GMT
        Subject: CN=679c56c7-f14d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:bc:c8:2b:86:7d:0c:c6:7d:2c:ad:aa:97:a8:
                    97:0d:3a:fe:20:c3:65:da:67:fd:05:b7:59:40:5c:
                    a6:28:fd:8f:4a:16:e1:cb:e6:66:ac:fd:d6:16:5a:
                    03:d3:9e:81:23:76:16:f1:42:63:42:de:39:79:68:
                    90:e3:f3:ca:e0:ec:3f:18:45:aa:6a:d2:b8:3e:32:
                    28:7b:40:f5:ce:3d:3d:91:23:96:5c:9d:6c:1c:b5:
                    04:dc:3c:17:f5:37:d1:37:f8:0f:de:aa:2e:5f:e9:
                    7b:ca:47:a1:12:94:25:75:bc:11:4d:05:75:f2:28:
                    ce:e4:a0:ca:e4:82:d3:40:0f:33:04:94:e5:08:a3:
                    8c:b6:e6:cc:88:d0:ef:bd:bc:e1:66:45:df:a9:2f:
                    91:10:15:51:42:7c:c8:3d:48:0c:ef:02:b0:51:10:
                    10:d9:6c:0c:2f:d6:55:2d:70:7c:07:0a:66:24:4b:
                    1e:80:61:18:a1:55:00:31:74:d8:8c:f7:3a:27:1f:
                    c9:e0:71:19:df:cc:df:d2:b8:4e:41:c2:61:2f:0d:
                    d4:4e:f9:28:2e:05:97:ea:f8:e8:e9:ff:ef:dd:69:
                    6c:f0:51:0a:6a:cd:03:9a:e6:f1:b1:4a:df:f6:f4:
                    ff:9b:7a:09:18:7b:9c:dc:94:31:1a:00:99:a5:04:
                    3d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F4:D7:E5:3D:9D:44:2E:50:B6:E9:52:65:5D:4B:AB:DD:C7:0F:15
            X509v3 Authority Key Identifier:
                keyid:97:D1:1A:E2:12:CB:21:3D:F9:65:2F:5B:B6:24:8E:40:CE:0C:29:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:96:ad:77:f6:ec:00:6a:73:1e:76:f8:89:54:53:c6:96:de:
         ce:76:cd:66:5d:60:0a:ba:b2:11:7b:6a:66:f8:e0:46:67:85:
         21:51:ce:4e:71:f0:cf:e5:2c:40:73:de:8c:ca:a6:97:3d:13:
         3e:13:f7:34:f3:a0:4d:82:05:82:f3:39:aa:96:cd:bc:75:87:
         f5:f7:4d:1f:ef:b0:9d:05:75:a0:a5:9e:d0:09:92:37:e1:76:
         40:49:0b:b1:82:34:33:e1:7e:65:b8:47:40:b6:3d:b0:ae:11:
         a6:de:28:42:9c:dc:9c:a4:f5:99:84:10:e8:ac:88:49:87:58:
         b0:6c:2f:27:3d:ca:63:5c:56:d3:ef:12:b6:a1:5b:28:76:ca:
         cc:44:1a:8f:0f:47:f4:63:91:18:ba:ec:12:d7:b6:e4:8b:cd:
         5e:c8:4e:e8:1f:7a:af:0c:cc:9f:b5:ff:e9:f1:1e:97:69:13:
         9e:a1:15:63:14:60:33:33:32:d5:c5:21:89:02:3d:b6:34:93:
         85:e8:b3:c4:d4:a5:f4:88:dc:64:a0:de:eb:6f:f1:9b:30:bd:
         cf:f6:55:cb:40:72:55:64:c4:de:28:d2:1f:ab:29:cb:2e:cc:
         8c:c6:d8:a0:d2:ee:a6:85:72:0a:32:2b:41:8c:65:bf:84:26:
         d8:09:a9:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----