Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.mft
File:                     -XeXeNpwxYpaeWRd0olhEbpv68w.mft (raw, json)
Hash identifier:          eqQmb11QLD+up203nZG/eKkeXb32T5N6ToPC7by9lfs=
Subject key identifier:   E8:A9:33:36:49:EA:5D:8F:B9:E9:D8:33:F3:43:D5:5D:05:72:40:4A
Authority key identifier: F9:77:97:78:DA:70:C5:8A:5A:79:64:5D:D2:89:61:11:BA:6F:EB:CC
Certificate issuer:       /CN=A9196629/serialNumber=F9779778DA70C58A5A79645DD2896111BA6FEBCC
Certificate serial:       019C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XeXeNpwxYpaeWRd0olhEbpv68w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.mft
Manifest number:          0197
Signing time:             Fri 31 Jan 2025 02:46:14 +0000
Manifest this update:     Fri 31 Jan 2025 02:46:13 +0000
Manifest next update:     Fri 07 Feb 2025 02:46:13 +0000
Files and hashes:         1: -XeXeNpwxYpaeWRd0olhEbpv68w.crl (hash: Y/LPfolXSVa79qqw4GtblliFqqk4Ccv5Wx9DdI/VI9M=)
                          2: BC5434647ABF11EDA9C3947EC4F9AE02.roa (hash: P1cDwO0JwMVyMvSRcaDGiISLVg7IuTCLj2a8HaJzNI4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 412 (0x19c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196629/serialNumber=F9779778DA70C58A5A79645DD2896111BA6FEBCC
        Validity
            Not Before: Jan 31 02:46:13 2025 GMT
            Not After : Feb  7 02:46:13 2025 GMT
        Subject: CN=679c3976-2d9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:07:58:05:45:19:f6:1b:c2:ba:d1:b1:4d:1b:
                    94:eb:d8:df:cd:c1:46:ff:7f:92:16:d6:98:9e:5d:
                    64:ac:7c:83:44:16:bf:d8:ba:6c:0d:64:3a:b1:99:
                    76:6d:0f:11:d9:0e:be:2d:34:6c:3f:85:be:bb:90:
                    5c:44:a7:8b:9a:44:94:9c:66:20:76:c2:4c:b4:84:
                    25:20:1e:fd:37:8c:90:1d:74:7c:86:10:3e:68:68:
                    7e:a6:3f:b2:e1:ea:14:0a:12:81:a6:7a:f9:20:6c:
                    4d:0b:e8:fc:a0:d1:1e:eb:ba:6a:02:1d:24:06:2a:
                    db:c5:10:b2:3b:42:57:31:57:27:13:97:9a:32:13:
                    84:76:69:38:2a:bb:9e:67:f8:27:ec:0c:4c:6c:db:
                    31:0a:10:85:05:5d:d4:d5:d1:f2:ea:cf:dc:ef:84:
                    9c:c0:1a:95:bf:b4:fa:5d:1d:7e:53:4a:a8:f2:b9:
                    0f:c8:61:79:1d:73:f3:0b:a8:97:db:1b:50:01:2e:
                    aa:9f:51:a1:47:66:e9:b2:04:05:3d:ba:41:8d:ae:
                    aa:1f:71:80:6e:75:90:61:5c:a7:fc:f7:c4:25:47:
                    88:32:2c:08:fb:a9:dc:a2:3e:f2:90:6e:96:ba:20:
                    bb:7e:5d:aa:e7:e3:bc:80:59:f8:0f:e3:bd:13:0c:
                    a7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A9:33:36:49:EA:5D:8F:B9:E9:D8:33:F3:43:D5:5D:05:72:40:4A
            X509v3 Authority Key Identifier:
                keyid:F9:77:97:78:DA:70:C5:8A:5A:79:64:5D:D2:89:61:11:BA:6F:EB:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XeXeNpwxYpaeWRd0olhEbpv68w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:c9:9c:dc:83:e8:a8:29:1d:64:21:51:99:48:36:da:e9:9c:
         86:9c:5e:4b:6e:bb:15:59:be:87:bc:f2:fe:51:a3:bd:48:04:
         64:6b:c5:af:8e:b6:ad:56:01:c2:f8:42:20:b0:8f:a8:6c:b2:
         46:3a:39:01:52:d4:d5:09:27:99:e5:24:c3:59:a7:29:65:44:
         1e:c0:05:5c:07:c7:6c:e1:e3:3b:fc:99:45:ab:89:16:b8:ac:
         87:71:56:cc:9c:81:ee:c6:7d:8e:28:7a:77:73:5f:00:72:2f:
         aa:89:6c:7e:b2:fb:51:16:a6:eb:98:68:f9:e5:07:8b:24:93:
         89:19:53:a0:29:21:0a:0a:32:84:d7:b8:de:47:f0:ee:5c:9e:
         3c:ce:d1:b9:53:ae:59:3c:33:0a:55:06:ed:29:d1:f6:06:8c:
         45:f5:1d:18:eb:4e:bc:be:25:e7:b2:97:55:b1:9c:3f:32:54:
         5f:21:13:b4:11:89:49:85:8a:af:e3:96:f7:49:b2:7f:d3:11:
         be:24:06:3f:57:9b:25:6e:6e:10:08:1c:75:d1:d5:52:e0:3e:
         a6:2e:88:7f:18:95:40:f5:fb:18:73:34:4c:0a:7a:01:d7:a1:
         b4:f9:ae:80:fa:f2:c8:fa:c1:e4:ea:05:b2:91:9f:8e:df:4b:
         c3:92:a5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----