Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/se6IcQY6AQgzW9-qPjoT-cnHkN4.mft
File:                     se6IcQY6AQgzW9-qPjoT-cnHkN4.mft (raw, json)
Hash identifier:          xZF91/0dqMJ5CJJ3idG/5xk+XlMxcbRRcVqy6RivYOw=
Subject key identifier:   B6:47:99:AC:E1:F2:F8:D9:89:56:48:5D:D9:69:4F:81:62:4B:7C:A6
Authority key identifier: B1:EE:88:71:06:3A:01:08:33:5B:DF:AA:3E:3A:13:F9:C9:C7:90:DE
Certificate issuer:       /CN=A919EC2D/serialNumber=B1EE8871063A0108335BDFAA3E3A13F9C9C790DE
Certificate serial:       016E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se6IcQY6AQgzW9-qPjoT-cnHkN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/se6IcQY6AQgzW9-qPjoT-cnHkN4.mft
Manifest number:          0286
Signing time:             Fri 31 Jan 2025 03:11:10 +0000
Manifest this update:     Fri 31 Jan 2025 03:11:10 +0000
Manifest next update:     Fri 07 Feb 2025 03:11:10 +0000
Files and hashes:         1: se6IcQY6AQgzW9-qPjoT-cnHkN4.crl (hash: 7nxCYZgSjwnZcEumBUxXSvlfrvcb3y0toIDDn5nvRGk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 366 (0x16e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EC2D/serialNumber=B1EE8871063A0108335BDFAA3E3A13F9C9C790DE
        Validity
            Not Before: Jan 31 03:11:10 2025 GMT
            Not After : Feb  7 03:11:10 2025 GMT
        Subject: CN=679c3f4e-9c16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:99:61:dd:73:6b:d1:49:b5:80:46:e8:ef:5c:
                    95:df:43:79:d5:88:f1:70:28:d5:de:57:dd:1c:f6:
                    91:6b:ff:24:1b:58:b1:d9:eb:da:e0:f7:82:9f:d8:
                    ae:64:93:00:ad:89:b0:76:37:48:23:30:a4:a2:e5:
                    f4:37:c8:99:e5:4c:f2:39:0f:b2:cb:40:11:94:dc:
                    3f:f4:a1:25:dc:0e:f6:8e:99:08:bc:3d:b1:fc:b7:
                    74:6f:6d:cf:66:8e:6d:fe:b9:81:ef:ee:75:8c:2f:
                    33:a2:3c:49:e7:24:dd:08:44:7e:9a:e7:29:f5:c6:
                    67:3f:3f:0b:6b:4d:85:36:f0:fd:fa:42:c4:b6:10:
                    99:f8:e8:1d:ee:fe:3c:d8:c5:89:32:e7:90:ae:63:
                    9b:c2:2d:8a:2d:9d:61:a3:84:8d:fe:49:e7:ca:28:
                    ff:5b:0c:0c:ec:c3:8b:ba:33:b0:3c:5a:d7:f2:35:
                    e3:87:f7:e0:57:1d:04:50:90:45:e8:6f:ce:1a:52:
                    7f:e9:d7:d7:b7:56:c5:71:cc:30:01:1e:4a:39:8a:
                    82:41:03:d0:89:5d:6f:dc:dd:fa:1c:92:d0:11:e7:
                    ac:64:1c:28:28:8a:89:be:03:e4:3c:cf:e8:a5:1a:
                    52:03:bd:5a:e2:fc:76:6d:5b:63:7e:7b:76:05:42:
                    f2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:47:99:AC:E1:F2:F8:D9:89:56:48:5D:D9:69:4F:81:62:4B:7C:A6
            X509v3 Authority Key Identifier:
                keyid:B1:EE:88:71:06:3A:01:08:33:5B:DF:AA:3E:3A:13:F9:C9:C7:90:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/se6IcQY6AQgzW9-qPjoT-cnHkN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se6IcQY6AQgzW9-qPjoT-cnHkN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/se6IcQY6AQgzW9-qPjoT-cnHkN4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:b3:ca:b0:79:ec:7e:d7:47:c9:7c:50:85:fc:43:56:46:3b:
         7e:e4:4d:6b:82:19:9c:3a:00:63:e0:78:7c:ad:5b:65:ba:1a:
         1b:c6:16:32:5a:30:46:d7:68:0e:a7:5d:e6:f8:62:54:67:8b:
         bf:70:c1:c3:42:96:01:71:81:5f:4f:35:a5:43:dd:a7:34:5a:
         9d:1d:55:ae:84:fb:fe:99:b0:0b:0a:bd:b9:2b:f1:eb:67:8f:
         db:4d:53:51:31:fe:cd:ba:8d:01:76:50:42:58:72:2d:14:e3:
         df:0d:af:8d:33:5f:82:ed:39:a2:bb:12:5f:d7:ad:dd:3c:f6:
         4b:99:b6:b3:87:75:88:4a:e9:99:98:31:33:50:3c:48:37:f5:
         2f:d6:6b:dc:2b:af:40:d6:ca:28:c8:34:b7:64:3e:be:fe:cf:
         56:0b:21:da:2c:0b:23:7d:8a:da:c8:e9:de:99:16:0a:5c:10:
         a9:ca:44:12:03:eb:51:ac:78:3c:88:92:e1:9e:a5:20:05:8f:
         8c:d5:fd:1e:10:78:07:ac:9e:4b:70:c6:d5:8b:5b:ef:59:84:
         f8:3f:4d:78:11:51:bb:a3:c2:05:79:b7:6d:b9:2a:cc:03:09:
         9a:e3:28:54:5d:1a:fd:87:79:ea:cd:d2:08:41:da:55:85:12:
         ee:d1:63:63
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUVDMkQxMTAvBgNVBAUTKEIxRUU4ODcxMDYzQTAxMDgzMzVCREZBQTNFM0ExM0Y5
QzlDNzkwREUwHhcNMjUwMTMxMDMxMTEwWhcNMjUwMjA3MDMxMTEwWjAYMRYwFAYD
VQQDEw02NzljM2Y0ZS05YzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu5lh3XNr0Um1gEbo71yV30N51YjxcCjV3lfdHPaRa/8kG1ix2eva4PeCn9iu
ZJMArYmwdjdIIzCkouX0N8iZ5UzyOQ+yy0ARlNw/9KEl3A72jpkIvD2x/Ld0b23P
Zo5t/rmB7+51jC8zojxJ5yTdCER+mucp9cZnPz8La02FNvD9+kLEthCZ+Ogd7v48
2MWJMueQrmObwi2KLZ1ho4SN/knnyij/WwwM7MOLujOwPFrX8jXjh/fgVx0EUJBF
6G/OGlJ/6dfXt1bFccwwAR5KOYqCQQPQiV1v3N36HJLQEeesZBwoKIqJvgPkPM/o
pRpSA71a4vx2bVtjfnt2BULyzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLZHmazh
8vjZiVZIXdlpT4FiS3ymMB8GA1UdIwQYMBaAFLHuiHEGOgEIM1vfqj46E/nJx5De
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUMyRC84MkI3MjVFOEJD
RTMxMUVEODQ5RjkzMzFDNEY5QUUwMi9zZTZJY1FZNkFRZ3pXOS1xUGpvVC1jbkhr
TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NlNkljUVk2QVFnelc5LXFQam9ULWNuSGtONC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RUMyRC84MkI3MjVFOEJDRTMxMUVEODQ5RjkzMzFDNEY5QUUwMi9zZTZJY1FZNkFR
Z3pXOS1xUGpvVC1jbkhrTjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBxs8qweex+10fJfFCF/ENWRjt+5E1rghmcOgBj4Hh8rVtluhobxhYy
WjBG12gOp13m+GJUZ4u/cMHDQpYBcYFfTzWlQ92nNFqdHVWuhPv+mbALCr25K/Hr
Z4/bTVNRMf7Nuo0BdlBCWHItFOPfDa+NM1+C7TmiuxJf163dPPZLmbazh3WISumZ
mDEzUDxIN/Uv1mvcK69A1sooyDS3ZD6+/s9WCyHaLAsjfYrayOnemRYKXBCpykQS
A+tRrHg8iJLhnqUgBY+M1f0eEHgHrJ5LcMbVi1vvWYT4P014EVG7o8IFebdtuSrM
Awma4yhUXRr9h3nqzdIIQdpVhRLu0WNj
-----END CERTIFICATE-----