Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.mft
File:                     tIZeO-nFadK5Pyw1HKsk0VBqrA0.mft (raw, json)
Hash identifier:          VBt414rbzM/S1aOMPQKVTuVnpWWLcyYgGxCTGhzhAho=
Subject key identifier:   DA:7E:0E:35:5F:02:B9:CC:8C:8E:23:55:5B:A7:8E:30:FD:16:1F:5F
Authority key identifier: B4:86:5E:3B:E9:C5:69:D2:B9:3F:2C:35:1C:AB:24:D1:50:6A:AC:0D
Certificate issuer:       /CN=A9197CBD/serialNumber=B4865E3BE9C569D2B93F2C351CAB24D1506AAC0D
Certificate serial:       CA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIZeO-nFadK5Pyw1HKsk0VBqrA0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.mft
Manifest number:          C7
Signing time:             Fri 31 Jan 2025 04:54:33 +0000
Manifest this update:     Fri 31 Jan 2025 04:54:33 +0000
Manifest next update:     Fri 07 Feb 2025 04:54:33 +0000
Files and hashes:         1: tIZeO-nFadK5Pyw1HKsk0VBqrA0.crl (hash: e8XA/j4/Vv6OHAeFGFdVcjTlx/sp6P4ph3282ZT4l38=)
                          2: 4074E5EA7B1D11EFB5696E45C4F9AE02.roa (hash: F2NpThp6u1EHvtpSfuQSKh4rQckl95uV13TeHsZUUho=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 202 (0xca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197CBD/serialNumber=B4865E3BE9C569D2B93F2C351CAB24D1506AAC0D
        Validity
            Not Before: Jan 31 04:54:33 2025 GMT
            Not After : Feb  7 04:54:33 2025 GMT
        Subject: CN=679c5789-735c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bd:b2:7f:51:18:53:75:b3:98:ae:51:dd:32:
                    67:e0:d4:39:4f:b2:53:d8:9b:d2:63:37:7d:bb:c6:
                    04:6f:06:1f:d0:b0:7b:67:d4:84:23:39:50:2a:37:
                    5d:54:3d:e3:03:72:7b:24:2d:6a:8c:d1:c0:32:0b:
                    8e:bd:b6:a8:e3:f2:5a:fb:7e:fe:52:ad:33:db:6e:
                    0e:21:2a:a3:89:1b:ac:2e:72:d7:f3:0d:d3:5a:2a:
                    95:54:1a:c1:97:a2:e0:5f:d1:de:96:03:d0:59:5f:
                    62:01:f9:82:90:cb:d9:ee:49:e9:1c:40:89:2c:c7:
                    54:9d:a1:25:38:83:40:d1:df:ea:5f:e9:4b:e5:db:
                    46:ee:da:f2:44:0f:8b:72:dc:db:71:ad:f6:ba:47:
                    4f:53:b4:66:2b:1e:fd:10:58:49:85:84:a7:b9:9e:
                    d2:24:64:d6:e7:21:12:2e:9b:96:ba:4e:6e:e2:e9:
                    4b:f4:b2:dc:ce:19:c6:ae:61:19:bf:3b:83:7d:44:
                    31:3b:67:0e:02:45:b4:ba:f3:c9:12:1a:ef:a9:3a:
                    c8:b9:f3:d9:fe:cc:9e:14:73:8c:7c:71:0f:17:1a:
                    f9:46:08:53:ef:82:4b:1c:c4:37:0b:43:eb:4d:b4:
                    dc:53:4b:00:52:f9:67:fb:37:f8:a3:54:73:c1:64:
                    f7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:7E:0E:35:5F:02:B9:CC:8C:8E:23:55:5B:A7:8E:30:FD:16:1F:5F
            X509v3 Authority Key Identifier:
                keyid:B4:86:5E:3B:E9:C5:69:D2:B9:3F:2C:35:1C:AB:24:D1:50:6A:AC:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIZeO-nFadK5Pyw1HKsk0VBqrA0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:24:3b:df:80:1b:82:d7:e4:34:2f:fb:5e:d3:7e:e8:d7:99:
         8f:dd:d1:a2:4c:ed:7c:fa:3d:49:c9:e4:2e:9c:7c:86:87:20:
         34:5b:9d:9f:94:89:9c:ea:4f:cc:e1:ed:eb:f1:ad:b9:65:9a:
         39:f1:bf:90:29:1e:f4:2d:f3:5e:d0:a9:32:c3:ac:0e:a7:0c:
         eb:73:ad:61:13:c6:9a:9c:2b:de:7c:62:23:82:9b:75:60:5f:
         a0:72:88:81:8a:18:af:3d:85:6e:08:90:34:67:05:91:34:4f:
         81:33:cf:61:ba:e7:ac:0a:cb:a2:83:59:38:28:bc:d0:d8:97:
         d0:7a:b2:fc:ae:a4:cb:ed:62:e0:4a:c2:39:84:33:31:a2:aa:
         15:65:e4:60:52:1e:a6:c0:32:ed:83:68:1e:a4:3f:04:11:cc:
         14:08:5a:b2:47:e6:a0:f6:a7:97:0c:bd:3f:7d:0c:2d:e6:ee:
         b9:af:0b:09:ba:38:c1:0e:d7:b1:0e:2a:f0:73:ce:ef:b4:d2:
         1c:b6:a0:0c:f0:16:e6:08:0b:ac:03:5c:a8:64:6e:54:77:39:
         f1:c9:84:ba:a2:fd:30:f6:e3:f5:34:2f:5e:85:06:bf:bf:3d:
         1a:f8:ac:d2:55:11:7e:79:8f:1f:c6:02:b7:99:28:aa:50:c3:
         4e:f2:4e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----