Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft
File:                     pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft (raw, json)
Hash identifier:          fhq5Dj65hIIDBQx6rQNsQpPQggdxz163LNFYyWPmgSU=
Subject key identifier:   DC:3D:6C:5D:15:02:4F:A3:EC:5E:53:CA:67:81:C8:4A:88:D5:FD:53
Authority key identifier: A5:70:F3:70:D5:4E:D0:24:54:C5:7F:83:EE:C3:E4:F4:4A:7A:8B:76
Certificate issuer:       /CN=A9199DF5/serialNumber=A570F370D54ED02454C57F83EEC3E4F44A7A8B76
Certificate serial:       02DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft
Manifest number:          02D6
Signing time:             Fri 31 Jan 2025 01:29:22 +0000
Manifest this update:     Fri 31 Jan 2025 01:29:22 +0000
Manifest next update:     Fri 07 Feb 2025 01:29:22 +0000
Files and hashes:         1: pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.crl (hash: qtX4OygjbX18qYieE77s8+2UmOq+Uvd3J6UFQR55wYU=)
                          2: B6EB7E8ED14511EC89527642C4F9AE02.roa (hash: Dao3wjzPku/52BEDR9fs3d2J0BLa408frm3MMRpd2w4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 730 (0x2da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199DF5/serialNumber=A570F370D54ED02454C57F83EEC3E4F44A7A8B76
        Validity
            Not Before: Jan 31 01:29:22 2025 GMT
            Not After : Feb  7 01:29:22 2025 GMT
        Subject: CN=679c2772-859e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:80:91:84:af:8d:75:c7:94:84:a9:14:4f:f4:
                    fa:cc:00:bd:fe:a4:68:51:28:9c:2f:5a:f6:29:e6:
                    a7:6d:83:ef:35:f6:5c:1d:9e:7d:91:bc:d7:7e:fc:
                    0c:16:86:8a:78:f7:2a:20:ac:f0:18:c6:0a:e0:5e:
                    cf:0c:b5:b0:b2:9c:d4:de:bc:08:4b:c8:a7:5b:4e:
                    fd:7c:0c:3a:9f:10:6e:1b:90:2a:8c:2c:a2:e3:33:
                    56:c2:3f:fb:40:e4:c5:e0:bd:2a:25:0f:d0:ba:bd:
                    4f:b3:60:22:c0:be:a0:18:39:a7:7f:de:6f:6a:f3:
                    42:27:4c:39:64:e5:26:6d:75:b4:d9:4c:c9:e2:81:
                    27:2d:a9:b9:f9:3b:76:b1:26:cf:95:fb:b6:a5:85:
                    72:2a:c8:f9:0b:3d:59:9f:45:e0:75:27:b4:98:62:
                    a5:3e:ea:a3:60:45:ec:a7:5c:11:59:dd:fd:1d:8a:
                    d5:86:35:e6:7e:c0:a1:5b:a0:d7:de:78:bc:cf:ba:
                    d2:b2:f8:2a:da:10:e9:26:ec:0a:86:b2:a3:5a:a5:
                    81:69:77:6a:4c:55:d1:a0:92:21:10:90:ae:25:aa:
                    ea:a7:a5:f0:de:81:2b:ab:77:cc:ba:1c:8c:4d:79:
                    88:a1:eb:5b:4f:a8:77:d9:fe:b9:f1:c0:af:b0:1f:
                    d8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:3D:6C:5D:15:02:4F:A3:EC:5E:53:CA:67:81:C8:4A:88:D5:FD:53
            X509v3 Authority Key Identifier:
                keyid:A5:70:F3:70:D5:4E:D0:24:54:C5:7F:83:EE:C3:E4:F4:4A:7A:8B:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:0b:12:4c:e6:e6:ab:ba:33:13:a3:da:99:58:a2:23:d5:00:
         2b:4b:81:78:e5:8e:89:1d:cb:4f:9d:69:a8:b1:75:57:9c:eb:
         63:0b:89:c5:0d:27:58:fc:6a:80:52:d5:ee:e4:6d:46:1a:41:
         98:c2:c0:1e:76:0e:51:0e:cb:1b:fa:fb:ee:1f:6e:d5:bf:82:
         86:dc:86:ef:d7:72:0e:61:30:32:66:cb:a7:8c:72:bd:41:f6:
         f9:11:4e:c8:33:76:97:85:28:36:77:6a:5f:44:ca:e1:70:48:
         58:5e:26:23:1d:9f:60:f4:ba:91:36:2b:e6:d4:a6:ea:c5:ea:
         07:82:d0:54:d3:0b:4a:db:40:ca:c4:c3:b0:4c:37:ff:27:b2:
         c9:13:86:6d:b3:c1:3c:35:6b:e1:3a:57:21:bc:ac:7b:0b:be:
         40:35:23:13:c5:7c:cc:b8:b1:a5:2e:29:36:b9:d1:60:ff:36:
         a7:20:29:ca:6f:90:8a:4e:60:3c:a8:1e:7d:36:95:4a:5c:64:
         2a:d6:a7:fd:4a:d8:c2:99:a3:01:8d:d8:6d:0f:c7:e6:01:8d:
         11:68:ca:54:93:60:9f:05:70:1c:35:f0:be:89:1e:b4:07:4b:
         86:77:82:c0:9f:2f:67:80:35:8d:a4:61:f1:5b:e6:a5:65:9a:
         19:e9:14:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----