Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft
File:                     9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft (raw, json)
Hash identifier:          yhcKiGKkrY3D4uU+5T3w19d4zDnjxuzyEXrvz5rvliQ=
Subject key identifier:   7A:A4:46:70:1C:BF:C5:F7:9D:CD:42:2F:20:3C:8F:E4:0E:BD:61:F6
Authority key identifier: F5:39:83:B7:AB:83:86:C6:99:58:78:4F:FA:F0:E6:97:26:24:57:A7
Certificate issuer:       /CN=A919EAAD/serialNumber=F53983B7AB8386C69958784FFAF0E697262457A7
Certificate serial:       0C03
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9TmDt6uDhsaZWHhP-vDmlyYkV6c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft
Manifest number:          0BF7
Signing time:             Fri 31 Jan 2025 18:34:19 +0000
Manifest this update:     Fri 31 Jan 2025 18:34:19 +0000
Manifest next update:     Fri 07 Feb 2025 18:34:19 +0000
Files and hashes:         1: 9TmDt6uDhsaZWHhP-vDmlyYkV6c.crl (hash: U02kXm06Sb3dyIyQf2st5tbzG1tF3W1J47GrtyDh5SA=)
                          2: 97DC58040B5B11EAB69DC64FC4F9AE02.roa (hash: Va4decWdeWxreZuiKTEPDvc8po9KZonZg6UYKOuHMpE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3075 (0xc03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EAAD/serialNumber=F53983B7AB8386C69958784FFAF0E697262457A7
        Validity
            Not Before: Jan 31 18:34:19 2025 GMT
            Not After : Feb  7 18:34:19 2025 GMT
        Subject: CN=679d17ab-eb7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:21:7a:ff:41:97:e0:29:33:45:d5:d9:04:72:
                    dd:00:bd:40:3c:dd:15:68:2f:73:cf:50:a4:06:db:
                    f0:1c:4c:12:64:f1:d5:d3:54:07:f0:7c:71:5b:ca:
                    41:bb:03:b1:92:a2:d3:80:af:41:0b:a9:02:0a:bb:
                    47:f9:f6:27:ff:0b:c0:8f:e6:aa:57:85:d8:1b:3f:
                    10:9d:63:c3:07:54:6f:2e:ed:93:e6:6f:7c:ed:2c:
                    e1:11:f8:89:ac:63:d0:73:cd:b5:83:71:5d:0a:d7:
                    94:e2:ce:fe:95:aa:36:61:10:4c:7b:b0:e3:82:16:
                    d6:9e:62:77:15:6f:18:b2:75:d7:96:26:20:dd:1d:
                    7d:56:46:a0:22:ae:f2:2d:3f:64:dc:81:ab:4f:c7:
                    9c:4e:db:72:a6:45:3b:72:b7:65:a2:53:41:80:cb:
                    31:a5:bd:fa:74:b5:ec:4b:4a:96:97:94:6f:60:7a:
                    e5:51:df:6a:b5:d8:1d:a8:b9:01:19:73:c0:ff:f0:
                    ff:4d:f9:16:42:c1:0b:35:c2:5d:4a:d4:62:44:e7:
                    b9:1e:5e:be:bb:03:bf:04:e5:89:c4:58:a4:75:68:
                    c1:2b:50:52:49:5c:a8:1f:ef:9e:6d:9e:7e:15:7e:
                    83:db:ea:c4:5c:d7:0e:fc:01:c2:85:f1:a4:54:c3:
                    ba:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:A4:46:70:1C:BF:C5:F7:9D:CD:42:2F:20:3C:8F:E4:0E:BD:61:F6
            X509v3 Authority Key Identifier:
                keyid:F5:39:83:B7:AB:83:86:C6:99:58:78:4F:FA:F0:E6:97:26:24:57:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9TmDt6uDhsaZWHhP-vDmlyYkV6c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:8b:05:7e:a0:8b:09:88:0c:fc:18:2d:55:b1:3a:f6:67:f5:
         be:7f:77:09:bb:7f:df:7c:e2:e6:a2:38:ac:05:e5:b8:f6:df:
         af:3e:67:31:5e:68:9c:11:40:2d:0b:0b:07:33:c5:45:cf:2e:
         79:fe:aa:2b:1a:74:4d:49:bc:75:cf:56:1d:1f:55:e7:f1:be:
         f8:ee:3b:53:05:54:37:16:21:bc:15:f9:2d:36:08:69:c9:84:
         92:68:96:5d:f1:14:d9:1a:ae:3e:fa:68:e7:6a:ce:71:f8:ea:
         2c:78:a1:d0:a6:7a:f2:07:29:ec:04:d8:4c:0c:51:3d:71:e1:
         06:ff:0c:37:ff:03:44:a9:e8:31:89:a7:f8:ad:60:e8:57:71:
         94:6c:69:e1:12:d0:19:ef:cf:d4:f5:33:ae:a8:14:77:74:17:
         8c:3e:61:bd:bc:7e:7c:76:6a:f7:26:f3:ed:06:7b:a1:6e:95:
         c1:8f:4d:d8:04:bf:09:b7:3e:ca:25:8b:0c:c8:b7:aa:3a:3e:
         e0:76:29:b7:e6:b0:60:15:b5:67:bf:71:00:d0:2c:ac:2b:f8:
         30:13:89:19:4d:c1:16:77:d1:98:12:f1:eb:da:04:44:76:73:
         1b:92:3c:4f:d9:15:b0:f8:08:05:0f:2f:9d:c5:3a:bf:12:50:
         20:7a:4d:a0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDAMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUVBQUQxMTAvBgNVBAUTKEY1Mzk4M0I3QUI4Mzg2QzY5OTU4Nzg0RkZBRjBFNjk3
MjYyNDU3QTcwHhcNMjUwMTMxMTgzNDE5WhcNMjUwMjA3MTgzNDE5WjAYMRYwFAYD
VQQDEw02NzlkMTdhYi1lYjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzSF6/0GX4CkzRdXZBHLdAL1APN0VaC9zz1CkBtvwHEwSZPHV01QH8HxxW8pB
uwOxkqLTgK9BC6kCCrtH+fYn/wvAj+aqV4XYGz8QnWPDB1RvLu2T5m987SzhEfiJ
rGPQc821g3FdCteU4s7+lao2YRBMe7DjghbWnmJ3FW8YsnXXliYg3R19VkagIq7y
LT9k3IGrT8ecTttypkU7crdlolNBgMsxpb36dLXsS0qWl5RvYHrlUd9qtdgdqLkB
GXPA//D/TfkWQsELNcJdStRiROe5Hl6+uwO/BOWJxFikdWjBK1BSSVyoH++ebZ5+
FX6D2+rEXNcO/AHChfGkVMO6/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHqkRnAc
v8X3nc1CLyA8j+QOvWH2MB8GA1UdIwQYMBaAFPU5g7erg4bGmVh4T/rw5pcmJFen
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUFBRC84N0MzMTY4ODA5
RDUxMUVBQjc2QzczMTdDNEY5QUUwMi85VG1EdDZ1RGhzYVpXSGhQLXZEbWx5WWtW
NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyLzlUbUR0NnVEaHNhWldIaFAtdkRtbHlZa1Y2Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RUFBRC84N0MzMTY4ODA5RDUxMUVBQjc2QzczMTdDNEY5QUUwMi85VG1EdDZ1RGhz
YVpXSGhQLXZEbWx5WWtWNmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCPiwV+oIsJiAz8GC1VsTr2Z/W+f3cJu3/ffOLmojisBeW49t+vPmcx
XmicEUAtCwsHM8VFzy55/qorGnRNSbx1z1YdH1Xn8b747jtTBVQ3FiG8FfktNghp
yYSSaJZd8RTZGq4++mjnas5x+OoseKHQpnryBynsBNhMDFE9ceEG/ww3/wNEqegx
iaf4rWDoV3GUbGnhEtAZ78/U9TOuqBR3dBeMPmG9vH58dmr3JvPtBnuhbpXBj03Y
BL8Jtz7KJYsMyLeqOj7gdim35rBgFbVnv3EA0CysK/gwE4kZTcEWd9GYEvHr2gRE
dnMbkjxP2RWw+AgFDy+dxTq/ElAgek2g
-----END CERTIFICATE-----