Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.mft
File:                     9lz9HPOxxajqYIcfo8NAYdtM84M.mft (raw, json)
Hash identifier:          Ptat/rMrEXyX0WTyBG/k4XyIRiWwCWojp0u9R0Ag/68=
Subject key identifier:   DD:71:2D:EC:59:EF:FD:B1:33:6B:AF:DA:6F:F4:D3:BF:44:D9:67:63
Authority key identifier: F6:5C:FD:1C:F3:B1:C5:A8:EA:60:87:1F:A3:C3:40:61:DB:4C:F3:83
Certificate issuer:       /CN=A9195BA9/serialNumber=F65CFD1CF3B1C5A8EA60871FA3C34061DB4CF383
Certificate serial:       011E
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lz9HPOxxajqYIcfo8NAYdtM84M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.mft
Manifest number:          011B
Signing time:             Thu 30 Jan 2025 20:12:32 +0000
Manifest this update:     Thu 30 Jan 2025 20:12:32 +0000
Manifest next update:     Thu 06 Feb 2025 20:12:32 +0000
Files and hashes:         1: 9lz9HPOxxajqYIcfo8NAYdtM84M.crl (hash: wiJn0ZuudwZTEWzlOZAKxibjlnKP0zPPooxP98V1D1M=)
                          2: 7A63013E3A4F11EEA10D3A7AC4F9AE02.roa (hash: iTrEAAlkJw9OclXVQcOsLhF2OGcA/o+GNahTLZ1PRQo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 286 (0x11e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9195BA9/serialNumber=F65CFD1CF3B1C5A8EA60871FA3C34061DB4CF383
        Validity
            Not Before: Jan 30 20:12:32 2025 GMT
            Not After : Feb  6 20:12:32 2025 GMT
        Subject: CN=679bdd30-5987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:53:6c:9a:f6:2e:0b:5e:32:a6:2d:f5:d3:68:
                    59:71:9e:a3:e8:89:54:c9:24:6d:5a:b3:0b:c8:df:
                    92:4b:9e:a8:87:ec:6b:b3:7a:17:77:c1:b6:26:c2:
                    7f:44:e1:e4:8b:83:8d:02:e1:ea:ee:b9:ac:93:65:
                    f6:5c:5a:39:7f:1d:27:c0:bb:03:67:07:37:0a:75:
                    91:ce:d0:78:57:d3:3c:48:90:f3:8e:09:1a:87:b3:
                    d0:0b:f8:52:16:f5:a2:8b:9e:95:db:99:aa:49:04:
                    0f:72:c5:3b:4d:67:5d:67:68:6b:89:8c:15:26:2d:
                    59:00:32:0f:b4:02:f7:b0:1a:1d:b4:9a:47:b9:72:
                    da:3d:36:a6:00:ce:ae:c0:03:c0:ba:e0:49:f9:bd:
                    87:8f:16:df:32:4a:8c:d9:9d:b8:1c:f2:c8:b9:55:
                    7f:af:7b:f7:cb:c9:fe:78:8b:72:8b:75:69:1c:9f:
                    26:71:aa:30:c4:a6:4a:2c:df:d1:f0:64:72:ac:6e:
                    57:dc:f8:4f:9f:30:f0:66:e7:9d:69:46:9c:bd:78:
                    4f:0c:80:56:70:a9:85:c6:70:3d:60:2e:6d:0f:9a:
                    f8:d2:f9:4f:52:e9:3f:7d:a8:a2:57:8c:44:d2:45:
                    b7:39:c8:12:f1:18:17:7f:7d:93:f0:57:2e:be:fb:
                    e0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:71:2D:EC:59:EF:FD:B1:33:6B:AF:DA:6F:F4:D3:BF:44:D9:67:63
            X509v3 Authority Key Identifier:
                keyid:F6:5C:FD:1C:F3:B1:C5:A8:EA:60:87:1F:A3:C3:40:61:DB:4C:F3:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lz9HPOxxajqYIcfo8NAYdtM84M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:6f:f1:31:fd:78:67:72:8f:e0:6c:09:1d:a2:ec:f6:59:f7:
         28:4e:0c:cd:a5:41:c8:07:f1:84:50:0d:24:84:12:98:68:79:
         56:e0:80:d9:c1:70:ce:60:d3:6d:ef:ce:94:02:2f:de:08:6d:
         e6:ee:fc:d5:2d:f1:2e:15:ee:2c:c4:85:a3:b7:49:1f:f7:64:
         a3:cc:c6:02:12:29:1e:f5:2a:14:39:0b:d3:27:3c:c7:ef:f7:
         d2:90:39:8e:24:6c:d2:2c:9a:09:e7:bf:be:d3:d1:40:ef:97:
         6a:71:d8:7c:56:03:01:64:76:f8:65:69:ef:47:72:ef:1d:99:
         f2:44:c2:d3:c5:63:de:2a:d9:94:ad:51:5e:c1:50:06:70:ca:
         ff:0a:74:05:76:f3:e7:a7:dc:1a:05:f5:8b:58:b3:6b:c8:d7:
         f9:2d:65:e1:69:16:0a:3b:6a:51:2d:0a:50:91:0c:f2:2c:74:
         68:7c:7f:71:aa:d6:85:62:b9:31:85:76:93:83:18:1b:31:27:
         0f:4c:68:1b:7a:db:1a:63:fb:3e:f4:33:e8:88:22:9f:52:c8:
         ba:21:81:3e:34:89:d1:21:e3:1b:63:aa:74:69:5d:6e:94:b7:
         4f:24:ff:bf:ab:a2:5a:df:fd:7a:16:a7:bf:82:f9:5d:bd:bc:
         53:73:d9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----