Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9195D93/5C10A810DC5D11E5B325452EC4F9AE02/mTXGObPDUdvtWyk5lPcvgUzPm6k.mft
File:                     mTXGObPDUdvtWyk5lPcvgUzPm6k.mft (raw, json)
Hash identifier:          t26vCxzWL6WWpJs1bTmv0icvG3p+ayOpAPq0ihjXzxg=
Subject key identifier:   A1:5B:65:DA:4E:02:F6:75:E6:F4:8D:36:87:CF:14:FF:5B:D7:E2:D9
Authority key identifier: 99:35:C6:39:B3:C3:51:DB:ED:5B:29:39:94:F7:2F:81:4C:CF:9B:A9
Certificate issuer:       /CN=A9195D93/serialNumber=9935C639B3C351DBED5B293994F72F814CCF9BA9
Certificate serial:       2162
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTXGObPDUdvtWyk5lPcvgUzPm6k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9195D93/5C10A810DC5D11E5B325452EC4F9AE02/mTXGObPDUdvtWyk5lPcvgUzPm6k.mft
Manifest number:          214A
Signing time:             Fri 31 Jan 2025 15:55:41 +0000
Manifest this update:     Fri 31 Jan 2025 15:55:41 +0000
Manifest next update:     Fri 07 Feb 2025 15:55:41 +0000
Files and hashes:         1: mTXGObPDUdvtWyk5lPcvgUzPm6k.crl (hash: J/lAxS8RQyEUeEyo6vVXs28LQAoOU8un+b3y4uda88o=)
                          2: 5D2D29A2966D11EA96C50E81C4F9AE02.roa (hash: O+MHFL5HucSSSkSZxHxmzfF8b/+aFHUTT5vt1LsMrv8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8546 (0x2162)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9195D93/serialNumber=9935C639B3C351DBED5B293994F72F814CCF9BA9
        Validity
            Not Before: Jan 31 15:55:41 2025 GMT
            Not After : Feb  7 15:55:41 2025 GMT
        Subject: CN=679cf27d-22c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7f:20:03:5c:11:95:4e:b4:c1:a6:65:d6:8e:
                    87:a0:83:ab:4c:37:84:a2:e8:70:70:4a:c3:2c:a6:
                    01:b4:34:66:a5:f3:fc:1f:c4:fe:2b:e7:e1:99:09:
                    36:9e:68:61:2b:d6:1f:9f:c4:92:f6:37:28:84:90:
                    f9:6f:f2:2b:5e:53:b5:15:88:7a:2a:cb:0a:dd:97:
                    7a:8c:ba:77:71:4e:9f:6d:be:29:c1:60:01:24:45:
                    fb:9b:82:b8:af:a3:40:32:11:d8:05:a5:e5:d5:1c:
                    c2:f6:f0:41:c9:9f:20:d3:3e:3a:16:49:b5:fe:55:
                    ed:0a:fe:82:1f:af:b6:2c:60:96:4d:8c:8d:3e:bf:
                    89:8f:eb:c9:c9:0e:4f:14:94:d6:91:53:b9:12:6d:
                    3d:33:8f:e3:86:86:d3:58:2b:f5:73:7e:49:b5:b3:
                    6f:a5:7b:e1:9d:45:45:f8:ab:3d:67:b8:ee:21:40:
                    df:de:7f:37:16:da:c6:9d:92:57:7d:f5:09:92:76:
                    3f:51:20:12:3f:95:a6:1a:56:d0:fd:03:2d:e1:a5:
                    33:21:9d:0f:c4:79:e8:cc:71:ed:54:25:39:7a:a5:
                    fc:9e:38:7e:1e:ba:a3:7a:95:e3:88:4c:f1:70:0f:
                    ad:5c:fa:ca:b3:fc:21:cf:a1:37:05:d5:99:ea:79:
                    f7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:5B:65:DA:4E:02:F6:75:E6:F4:8D:36:87:CF:14:FF:5B:D7:E2:D9
            X509v3 Authority Key Identifier:
                keyid:99:35:C6:39:B3:C3:51:DB:ED:5B:29:39:94:F7:2F:81:4C:CF:9B:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9195D93/5C10A810DC5D11E5B325452EC4F9AE02/mTXGObPDUdvtWyk5lPcvgUzPm6k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTXGObPDUdvtWyk5lPcvgUzPm6k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195D93/5C10A810DC5D11E5B325452EC4F9AE02/mTXGObPDUdvtWyk5lPcvgUzPm6k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:9c:cf:38:9c:9c:ad:7a:e6:ce:d8:b5:17:de:95:14:ef:c7:
         45:29:50:3e:04:ce:25:be:56:34:0d:fa:d5:ce:d4:36:4e:c9:
         d3:e4:51:6e:18:93:2e:ed:09:d1:bc:a5:6c:45:db:e3:a0:d0:
         70:05:18:85:7c:8f:46:b6:1a:09:f3:59:1b:0f:90:b6:e0:5f:
         cd:63:72:4d:36:57:8d:3e:78:bd:21:0f:e3:59:bb:64:55:e5:
         7b:ed:cf:d1:b0:5f:d5:ae:e2:28:c0:69:53:bc:7a:d4:7b:b8:
         ee:00:5e:32:b9:f2:ec:3e:77:d2:3e:bb:dd:37:64:1c:c8:00:
         41:9c:8e:ac:84:40:8e:9d:ed:d3:4e:99:31:0c:de:83:22:75:
         dc:d1:d0:a1:4a:13:76:4c:02:a9:da:7e:55:ba:b0:61:5e:02:
         ab:be:cf:1e:4e:c8:d8:3c:59:48:9f:4b:12:ce:f7:df:74:dc:
         99:b3:f6:6e:52:d5:f0:7d:ac:8c:4b:e8:09:d3:91:3a:bf:5b:
         16:3c:24:8e:44:85:a4:da:b6:8c:cf:e4:6b:bc:7c:ae:94:35:
         4b:0e:75:cf:60:cd:2b:8b:f7:c9:ab:79:3c:92:61:5a:c5:98:
         9e:09:3e:31:8b:fb:7a:b2:a0:20:c9:de:f0:5c:7c:7f:2d:ae:
         44:4c:fe:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----