Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft
File:                     xUMJ3BErZYYnvTagMHLnXQYDZNM.mft (raw, json)
Hash identifier:          GAx4h76mWsoLGoRRi+adaHFGbW2OJBBV+I1Vpie5nq0=
Subject key identifier:   FF:1F:AC:31:F7:BC:08:2B:A8:C6:DC:C2:45:7E:FC:06:2B:84:B5:39
Authority key identifier: C5:43:09:DC:11:2B:65:86:27:BD:36:A0:30:72:E7:5D:06:03:64:D3
Certificate issuer:       /CN=A9199836/serialNumber=C54309DC112B658627BD36A03072E75D060364D3
Certificate serial:       0464
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUMJ3BErZYYnvTagMHLnXQYDZNM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft
Manifest number:          0460
Signing time:             Fri 31 Jan 2025 00:12:08 +0000
Manifest this update:     Fri 31 Jan 2025 00:12:07 +0000
Manifest next update:     Fri 07 Feb 2025 00:12:07 +0000
Files and hashes:         1: xUMJ3BErZYYnvTagMHLnXQYDZNM.crl (hash: 5iX7LOXYnkvz1P5HoFirxMXZhelUvRR5X8fPguWpcg8=)
                          2: 029F318A366F11ECA773E263C4F9AE02.roa (hash: oSdvyorGuPv/5QDTLowUDTHEVLVsXYxy04DwT+pQi58=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1124 (0x464)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199836/serialNumber=C54309DC112B658627BD36A03072E75D060364D3
        Validity
            Not Before: Jan 31 00:12:07 2025 GMT
            Not After : Feb  7 00:12:07 2025 GMT
        Subject: CN=679c1558-d060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8e:e3:6c:e3:03:76:e2:fc:8a:6e:21:52:34:
                    0d:b8:fc:df:f3:d0:e6:ca:2f:27:7a:57:d3:73:dd:
                    8c:8c:99:b8:59:79:a9:91:40:91:9d:1f:a5:6e:b9:
                    3f:c9:5b:f3:9c:8c:26:2e:04:0e:56:3f:1e:31:2e:
                    dd:1b:fc:af:a7:be:40:5a:f5:52:db:dc:e7:1c:1c:
                    36:a2:d7:3c:f7:71:a9:32:0c:d4:d7:95:30:84:f3:
                    70:03:de:9b:48:27:ba:e0:e7:7a:99:0d:6b:cb:1e:
                    8c:8f:f8:70:52:2b:37:fc:88:fd:ab:72:71:3b:9c:
                    c9:0d:01:1f:bd:e5:9f:4c:a4:56:af:c6:2c:6b:69:
                    74:ac:45:67:ab:c1:e4:06:e4:ae:91:49:2d:32:c7:
                    6c:c2:78:a7:be:ea:88:af:96:15:a0:e2:f1:34:1e:
                    ea:1b:86:be:ba:84:af:fc:27:23:c5:bc:72:63:90:
                    94:94:7c:5d:ad:7a:68:d9:65:13:e8:25:28:4f:56:
                    45:e9:6d:92:19:84:1e:33:a1:bd:48:7a:aa:59:81:
                    d4:65:99:0f:ab:de:75:73:d0:48:ba:b5:1d:81:b0:
                    54:e0:e9:67:6c:b8:14:fa:07:1b:dc:3c:be:23:86:
                    d4:02:bb:22:dd:1a:ce:d7:96:88:06:20:e8:f2:10:
                    2c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:1F:AC:31:F7:BC:08:2B:A8:C6:DC:C2:45:7E:FC:06:2B:84:B5:39
            X509v3 Authority Key Identifier:
                keyid:C5:43:09:DC:11:2B:65:86:27:BD:36:A0:30:72:E7:5D:06:03:64:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUMJ3BErZYYnvTagMHLnXQYDZNM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:30:f5:c7:b2:65:d0:c2:b2:c5:a5:be:07:de:a6:da:8f:91:
         70:2a:eb:4c:aa:9e:02:ee:8c:98:79:ee:da:0b:5e:8c:1f:33:
         00:25:a4:a1:7f:08:54:06:2c:2f:20:69:fe:c1:e9:72:14:ff:
         24:d2:59:f9:5d:b0:75:09:21:71:d7:1e:91:1a:5b:ca:c9:76:
         3b:be:cb:05:ef:5b:74:56:59:45:26:61:25:62:3b:ba:76:c9:
         e4:ad:3b:ee:74:6c:d7:6b:68:e3:54:be:e5:1e:5a:df:67:e0:
         d3:49:97:b7:8d:5e:b8:76:c8:a5:c9:8d:36:31:0e:d7:43:8e:
         1c:4d:e8:04:71:8e:76:df:f9:fd:31:bd:77:58:81:b5:dd:61:
         e6:ec:28:b1:7b:06:77:4f:3a:73:c5:6a:2e:57:6b:37:d1:f1:
         91:42:bb:18:86:6f:d5:36:25:ae:8b:a8:da:58:86:3e:1d:8a:
         ee:91:c0:ac:04:ce:9d:a3:3d:88:2a:69:26:ff:d0:c4:9b:92:
         36:b3:28:4f:2f:d2:d2:fa:04:05:83:1a:3a:6f:68:e6:f2:5e:
         62:11:55:34:e1:1e:ca:69:99:ac:43:d1:c8:b1:3c:c6:11:5f:
         a1:3f:71:25:26:35:f4:ce:94:74:4e:fb:c9:89:20:9d:e1:b8:
         4b:69:76:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----