Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft
File:                     9y59Xhu0VCq3_3dzZYg8FgEDTek.mft (raw, json)
Hash identifier:          PEBe6pbSNA/dLyYA6bSN5Q+RpAezvwZ0+hKeGEhe0kc=
Subject key identifier:   F3:35:39:EE:97:59:E1:46:5C:C3:E0:E6:72:1C:55:04:DB:BD:A2:8D
Authority key identifier: F7:2E:7D:5E:1B:B4:54:2A:B7:FF:77:73:65:88:3C:16:01:03:4D:E9
Certificate issuer:       /CN=A919631C/serialNumber=F72E7D5E1BB4542AB7FF777365883C1601034DE9
Certificate serial:       0E7D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y59Xhu0VCq3_3dzZYg8FgEDTek.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft
Manifest number:          0E70
Signing time:             Fri 31 Jan 2025 17:40:50 +0000
Manifest this update:     Fri 31 Jan 2025 17:40:50 +0000
Manifest next update:     Fri 07 Feb 2025 17:40:49 +0000
Files and hashes:         1: 9y59Xhu0VCq3_3dzZYg8FgEDTek.crl (hash: WlGR++30S3Qqt38B0uG34d5DvDLWp8wY6Hp2MRbP3b8=)
                          2: DCB2531AC75911EF979D593BC4F9AE02.roa (hash: az5u8maauMT/Sx2+Phgo1Z/ovh8gwvsYIRukSLKNLEQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3709 (0xe7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919631C/serialNumber=F72E7D5E1BB4542AB7FF777365883C1601034DE9
        Validity
            Not Before: Jan 31 17:40:50 2025 GMT
            Not After : Feb  7 17:40:49 2025 GMT
        Subject: CN=679d0b22-7498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:04:27:62:d0:19:d6:ed:38:37:44:c8:30:52:
                    4b:08:00:32:1a:25:ad:08:a9:ec:f1:83:f4:18:0b:
                    e2:34:ac:34:59:9b:d3:81:ce:8d:ea:0a:49:94:af:
                    44:c8:24:8c:11:40:80:41:1c:89:2f:19:77:00:09:
                    43:37:b1:ba:fb:3d:e6:ef:45:e1:7f:26:bb:ad:1a:
                    aa:12:03:c9:0c:b3:1c:4a:49:ee:af:69:03:d9:f1:
                    d8:e4:ab:f1:4b:dd:f2:40:7e:6b:33:2d:e5:8b:d2:
                    b7:ed:86:1e:8f:cf:52:e1:35:9d:d7:74:10:eb:30:
                    68:cd:ce:ae:69:e9:36:e6:54:c4:bd:0e:b4:44:bc:
                    71:54:0c:eb:97:04:2a:26:60:dc:2f:9a:64:7a:69:
                    c1:fa:af:ef:65:97:87:1c:29:88:6a:24:e7:bc:d9:
                    09:4b:e9:b3:0f:ef:cf:71:6c:ee:61:b9:35:da:ca:
                    e7:00:6e:5f:20:09:65:8e:1e:3d:69:1b:a8:d1:64:
                    d3:ec:dc:1f:25:c0:57:3e:a6:b6:e2:29:4e:9d:c5:
                    2d:05:30:5e:ed:c1:39:2b:c6:e0:1d:ec:98:56:7a:
                    90:74:59:b8:a9:97:de:d3:50:c2:25:eb:ce:9f:f0:
                    39:91:9d:fc:91:a5:51:61:45:91:8c:8f:f1:5c:9e:
                    d4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:35:39:EE:97:59:E1:46:5C:C3:E0:E6:72:1C:55:04:DB:BD:A2:8D
            X509v3 Authority Key Identifier:
                keyid:F7:2E:7D:5E:1B:B4:54:2A:B7:FF:77:73:65:88:3C:16:01:03:4D:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y59Xhu0VCq3_3dzZYg8FgEDTek.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:fa:9a:11:04:6b:7b:27:53:1d:db:2d:ff:d5:e7:36:25:b7:
         ec:70:39:dc:cd:8e:26:16:a2:f5:ef:85:5a:49:62:a7:66:93:
         47:c0:1a:c5:53:60:c9:0b:e1:f6:37:c5:20:aa:fc:ca:b8:c1:
         7a:7e:c9:5e:13:36:9c:ec:a0:82:c9:93:f3:58:36:ad:c5:a0:
         13:75:dc:59:1f:45:ca:9a:2e:d5:27:d8:ab:0c:33:44:18:40:
         32:cf:2d:c6:55:6c:be:6c:9f:a5:77:a8:c4:b7:ba:76:c3:7f:
         02:d8:ff:16:31:34:79:3d:90:c3:c8:2d:de:19:cd:2a:20:27:
         f7:f1:73:d5:d4:8e:39:98:63:de:18:69:bc:52:c5:a9:7c:da:
         c9:a9:a5:ae:3e:b0:75:de:dc:33:72:e8:46:da:7d:a2:96:75:
         19:d7:25:52:b3:7c:4a:03:eb:71:1f:27:7f:53:da:18:45:1f:
         8e:41:92:2f:b6:2e:22:56:59:f2:80:07:ec:00:d6:76:db:1f:
         1e:30:4b:7b:24:bb:42:82:27:4c:36:f7:d5:2a:63:3b:f3:cb:
         3b:45:d3:c6:5f:1c:a6:6d:6d:88:ce:03:ab:83:d6:bc:85:be:
         fd:f6:c7:10:77:f4:2b:51:c3:d3:45:40:9b:5b:b9:ed:4b:fe:
         48:ce:87:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----