Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919879C/E1D20292073411EDB04D372DC4F9AE02/kyv2OTHDR-dryQidQb4k9jcPJYI.mft
File:                     kyv2OTHDR-dryQidQb4k9jcPJYI.mft (raw, json)
Hash identifier:          2wG+nLxNI7E7Wa6AzZAw1/TpQ8k8XXD1kTCzvATeuFY=
Subject key identifier:   CB:6D:AC:71:0A:25:7A:8A:14:EB:4C:13:A2:E2:A0:7A:69:AB:FD:CC
Authority key identifier: 93:2B:F6:39:31:C3:47:E7:6B:C9:08:9D:41:BE:24:F6:37:0F:25:82
Certificate issuer:       /CN=A919879C/serialNumber=932BF63931C347E76BC9089D41BE24F6370F2582
Certificate serial:       0250
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyv2OTHDR-dryQidQb4k9jcPJYI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919879C/E1D20292073411EDB04D372DC4F9AE02/kyv2OTHDR-dryQidQb4k9jcPJYI.mft
Manifest number:          024C
Signing time:             Fri 31 Jan 2025 01:54:31 +0000
Manifest this update:     Fri 31 Jan 2025 01:54:30 +0000
Manifest next update:     Fri 07 Feb 2025 01:54:30 +0000
Files and hashes:         1: kyv2OTHDR-dryQidQb4k9jcPJYI.crl (hash: bn7/JJUVlDcbpKIlWz22vYxbPsVMNlYNQgMO57ft+2Q=)
                          2: E7C34456073711ED8BA93630C4F9AE02.roa (hash: kldDMFdCdKUVHMXGUfTfraYPzp89poxoo5pvwA3fx9Y=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 592 (0x250)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919879C/serialNumber=932BF63931C347E76BC9089D41BE24F6370F2582
        Validity
            Not Before: Jan 31 01:54:30 2025 GMT
            Not After : Feb  7 01:54:30 2025 GMT
        Subject: CN=679c2d56-8e79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:14:87:a2:49:23:65:27:29:44:8e:c3:17:2b:
                    73:0d:4b:a9:64:f4:23:cc:54:79:5b:52:25:f4:91:
                    df:43:77:09:89:6f:01:e6:99:a7:2d:29:82:8d:7f:
                    3b:2e:c3:ab:80:6e:03:68:39:bf:cc:48:1b:92:6e:
                    b5:be:f1:de:d5:81:11:b4:7f:c0:47:7d:52:26:e7:
                    98:58:90:96:0b:ee:af:67:35:40:86:8b:e1:0c:1c:
                    9a:51:67:08:aa:ee:a2:39:b9:3b:f7:81:33:c8:a6:
                    01:91:66:55:67:a8:8d:83:41:7c:d0:bf:ea:71:35:
                    a6:7d:c0:f1:cd:99:a6:6f:59:f3:a0:01:96:95:eb:
                    f5:32:82:ce:80:52:d8:5a:63:bc:e3:43:26:d5:8d:
                    d3:29:20:bd:4b:c0:01:33:57:0c:6b:29:b5:b8:64:
                    50:d3:90:ef:9e:96:15:6c:0c:20:9c:e4:d2:2d:62:
                    4f:f9:ef:ab:2d:62:f4:d3:8f:eb:47:87:c6:f3:6d:
                    6d:e6:da:f5:3e:d3:a5:d7:b9:24:be:bd:0d:01:ba:
                    60:f0:c9:c7:94:d9:22:bc:68:04:da:58:53:cb:18:
                    f0:44:35:0a:44:e3:7d:63:3a:89:d5:b5:09:85:c1:
                    27:25:fd:37:ac:6f:90:e6:c5:10:31:3b:33:3c:63:
                    a1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:6D:AC:71:0A:25:7A:8A:14:EB:4C:13:A2:E2:A0:7A:69:AB:FD:CC
            X509v3 Authority Key Identifier:
                keyid:93:2B:F6:39:31:C3:47:E7:6B:C9:08:9D:41:BE:24:F6:37:0F:25:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919879C/E1D20292073411EDB04D372DC4F9AE02/kyv2OTHDR-dryQidQb4k9jcPJYI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyv2OTHDR-dryQidQb4k9jcPJYI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919879C/E1D20292073411EDB04D372DC4F9AE02/kyv2OTHDR-dryQidQb4k9jcPJYI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:53:78:05:53:dc:20:08:18:9c:6d:23:b3:6d:dc:72:96:e5:
         9f:29:e9:de:9c:43:5f:46:49:b4:0a:3b:5e:9d:11:ef:8c:23:
         1c:46:ae:fe:04:c6:d6:d2:5d:92:73:bf:7b:4d:eb:6a:73:84:
         68:04:ff:90:f7:c9:06:b5:c0:71:39:5e:26:99:8d:72:da:e8:
         5e:95:57:3f:34:38:f7:c1:23:6e:20:66:b9:66:56:d9:ff:c1:
         02:34:0c:10:5f:69:f3:08:1b:35:3f:87:45:f5:0d:3d:6d:bd:
         66:55:bf:50:d0:fa:9b:bb:ed:56:29:f8:ee:fd:43:f8:02:64:
         48:6f:90:8a:01:fd:cb:8e:71:f4:d5:fb:c4:85:af:5c:d8:a3:
         f1:cf:10:d2:a9:a1:c5:8a:7a:5a:b0:47:56:4d:95:15:bc:96:
         d5:13:74:fc:a5:60:30:a6:d8:56:1c:03:4b:3b:c2:9f:fc:12:
         91:c6:36:ba:89:bd:6c:e4:01:4d:ca:ba:25:7c:de:88:53:89:
         ec:b9:8d:a7:76:b1:14:6b:0a:21:b4:d6:a1:a7:79:0f:bb:03:
         19:db:bc:d7:4f:cd:83:86:6c:d6:08:3c:db:e1:a7:11:46:cd:
         54:4d:69:ab:7a:b1:2e:a7:f8:26:a9:ef:23:3f:0e:98:93:c0:
         b7:a3:9d:d0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAlAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTg3OUMxMTAvBgNVBAUTKDkzMkJGNjM5MzFDMzQ3RTc2QkM5MDg5RDQxQkUyNEY2
MzcwRjI1ODIwHhcNMjUwMTMxMDE1NDMwWhcNMjUwMjA3MDE1NDMwWjAYMRYwFAYD
VQQDEw02NzljMmQ1Ni04ZTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArBSHokkjZScpRI7DFytzDUupZPQjzFR5W1Il9JHfQ3cJiW8B5pmnLSmCjX87
LsOrgG4DaDm/zEgbkm61vvHe1YERtH/AR31SJueYWJCWC+6vZzVAhovhDByaUWcI
qu6iObk794EzyKYBkWZVZ6iNg0F80L/qcTWmfcDxzZmmb1nzoAGWlev1MoLOgFLY
WmO840Mm1Y3TKSC9S8ABM1cMaym1uGRQ05DvnpYVbAwgnOTSLWJP+e+rLWL004/r
R4fG821t5tr1PtOl17kkvr0NAbpg8MnHlNkivGgE2lhTyxjwRDUKRON9YzqJ1bUJ
hcEnJf03rG+Q5sUQMTszPGOhcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMttrHEK
JXqKFOtME6LioHppq/3MMB8GA1UdIwQYMBaAFJMr9jkxw0fna8kInUG+JPY3DyWC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODc5Qy9FMUQyMDI5MjA3
MzQxMUVEQjA0RDM3MkRDNEY5QUUwMi9reXYyT1RIRFItZHJ5UWlkUWI0azlqY1BK
WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2t5djJPVEhEUi1kcnlRaWRRYjRrOWpjUEpZSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
ODc5Qy9FMUQyMDI5MjA3MzQxMUVEQjA0RDM3MkRDNEY5QUUwMi9reXYyT1RIRFIt
ZHJ5UWlkUWI0azlqY1BKWUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBlU3gFU9wgCBicbSOzbdxyluWfKenenENfRkm0CjtenRHvjCMcRq7+
BMbW0l2Sc797Tetqc4RoBP+Q98kGtcBxOV4mmY1y2uhelVc/NDj3wSNuIGa5ZlbZ
/8ECNAwQX2nzCBs1P4dF9Q09bb1mVb9Q0Pqbu+1WKfju/UP4AmRIb5CKAf3LjnH0
1fvEha9c2KPxzxDSqaHFinpasEdWTZUVvJbVE3T8pWAwpthWHANLO8Kf/BKRxja6
ib1s5AFNyrolfN6IU4nsuY2ndrEUawohtNahp3kPuwMZ27zXT82DhmzWCDzb4acR
Rs1UTWmrerEup/gmqe8jPw6Yk8C3o53Q
-----END CERTIFICATE-----