Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.mft
File:                     J39oYmhAcrYqFW3fdd13JcOPUdA.mft (raw, json)
Hash identifier:          3Rhux628P5wT8sEyIhakUOh8zvrkWtwlUdir8etnt7c=
Subject key identifier:   7F:12:9D:C3:6F:1D:EB:3F:F8:2B:0D:00:48:A8:4C:60:FB:61:9C:48
Authority key identifier: 27:7F:68:62:68:40:72:B6:2A:15:6D:DF:75:DD:77:25:C3:8F:51:D0
Certificate issuer:       /CN=A91A0BEC/serialNumber=277F6862684072B62A156DDF75DD7725C38F51D0
Certificate serial:       0A11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J39oYmhAcrYqFW3fdd13JcOPUdA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.mft
Manifest number:          0A0C
Signing time:             Thu 30 Jan 2025 19:55:53 +0000
Manifest this update:     Thu 30 Jan 2025 19:55:52 +0000
Manifest next update:     Thu 06 Feb 2025 19:55:52 +0000
Files and hashes:         1: J39oYmhAcrYqFW3fdd13JcOPUdA.crl (hash: KiEgQFMlA1neS5EBQsOAJJgXTAfEdq1yYGSs6p30Q20=)
                          2: 98438B98677F11EA972EEA2EC4F9AE02.roa (hash: vgXVDEq6fY1aAocc5HR3NJ+0QWxdFIUgmDfdg3s0DS4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2577 (0xa11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0BEC/serialNumber=277F6862684072B62A156DDF75DD7725C38F51D0
        Validity
            Not Before: Jan 30 19:55:52 2025 GMT
            Not After : Feb  6 19:55:52 2025 GMT
        Subject: CN=679bd949-c82c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8e:4a:e3:75:74:c8:80:d5:51:8e:57:8b:45:
                    d9:fa:e3:9d:82:f6:1d:45:e3:27:5c:5e:cb:db:cd:
                    1c:b5:ad:dc:9e:c8:a5:00:d5:7b:07:0a:a5:f1:6a:
                    6c:ac:d9:83:b6:f9:5c:24:55:27:27:69:d6:ad:d5:
                    fc:7a:1c:50:0b:67:e6:74:55:4a:fb:21:6f:0a:ba:
                    cf:f6:70:b0:f6:6d:94:09:b3:58:e9:e6:88:20:f1:
                    ea:bb:b7:61:2b:eb:18:da:de:69:ce:85:58:b6:78:
                    00:97:d5:d2:5f:62:be:46:ed:18:4c:70:37:e6:fa:
                    13:ae:21:76:00:1e:b4:0f:e4:37:99:81:9a:09:aa:
                    06:60:4b:fe:2d:f6:55:34:e6:a1:a8:17:87:63:d9:
                    0b:f7:03:63:54:55:a6:66:99:0b:a6:0f:66:94:b6:
                    7e:16:66:9b:27:37:30:53:ea:53:0c:7d:39:d6:26:
                    a7:25:1b:4f:db:4c:dd:43:7d:fb:84:45:b2:16:58:
                    d1:0f:fc:e8:a3:78:0d:53:b8:ee:23:61:5e:e1:f5:
                    fa:0c:ab:c3:86:30:b5:ff:3b:cd:9a:38:45:1d:1a:
                    9e:ee:96:9d:da:0d:e0:28:f6:c4:f2:36:19:3e:9a:
                    47:a1:a7:59:07:4e:f8:a0:4f:9d:ce:5f:d6:15:d4:
                    05:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:12:9D:C3:6F:1D:EB:3F:F8:2B:0D:00:48:A8:4C:60:FB:61:9C:48
            X509v3 Authority Key Identifier:
                keyid:27:7F:68:62:68:40:72:B6:2A:15:6D:DF:75:DD:77:25:C3:8F:51:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J39oYmhAcrYqFW3fdd13JcOPUdA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:e0:94:b2:e0:93:6e:4a:12:d5:83:1f:2a:3c:40:06:a7:7a:
         6c:86:6f:9d:fb:28:1f:8b:59:09:8c:49:08:f7:8d:af:ba:55:
         15:ab:e0:bf:26:e9:10:ba:37:b2:9d:d2:a7:5f:b2:86:31:be:
         b1:c6:6d:26:5a:85:75:c0:e1:8b:4c:0b:7c:2c:55:b2:a3:8d:
         15:cf:9b:f3:42:92:1f:c4:41:2d:6f:a4:f0:71:e6:e0:5e:27:
         fe:7d:db:e4:f4:7d:87:47:b9:60:50:01:58:4b:a7:1e:06:df:
         25:e7:57:8e:ed:5c:2c:fb:fc:3a:f6:52:0c:3c:51:59:48:d7:
         49:f2:27:ca:97:b7:28:dc:04:b7:c0:8a:11:52:13:29:26:45:
         0d:a2:64:ec:11:9f:50:e0:d1:5e:0d:3e:2e:a3:fe:d6:5e:69:
         e2:5e:d0:d6:b5:e7:04:cc:29:d9:92:f2:e4:ae:d0:12:58:4c:
         60:e5:e6:f8:e2:02:d3:f1:b3:a1:fb:c6:a0:32:f7:fd:e6:c8:
         c6:4e:df:d0:b4:5d:53:a0:86:5f:da:a6:a4:ec:c0:af:f5:56:
         bb:f2:fb:53:5a:55:7d:26:31:04:1e:f4:d4:14:04:9f:cd:7c:
         dd:de:55:ae:91:0f:b3:02:ec:fe:2a:2c:c8:29:75:b0:8f:70:
         ef:40:94:a0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICChEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTBCRUMxMTAvBgNVBAUTKDI3N0Y2ODYyNjg0MDcyQjYyQTE1NkRERjc1REQ3NzI1
QzM4RjUxRDAwHhcNMjUwMTMwMTk1NTUyWhcNMjUwMjA2MTk1NTUyWjAYMRYwFAYD
VQQDEw02NzliZDk0OS1jODJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzY5K43V0yIDVUY5Xi0XZ+uOdgvYdReMnXF7L280cta3cnsilANV7Bwql8Wps
rNmDtvlcJFUnJ2nWrdX8ehxQC2fmdFVK+yFvCrrP9nCw9m2UCbNY6eaIIPHqu7dh
K+sY2t5pzoVYtngAl9XSX2K+Ru0YTHA35voTriF2AB60D+Q3mYGaCaoGYEv+LfZV
NOahqBeHY9kL9wNjVFWmZpkLpg9mlLZ+FmabJzcwU+pTDH051ianJRtP20zdQ337
hEWyFljRD/zoo3gNU7juI2Fe4fX6DKvDhjC1/zvNmjhFHRqe7pad2g3gKPbE8jYZ
PppHoadZB074oE+dzl/WFdQF1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH8SncNv
Hes/+CsNAEioTGD7YZxIMB8GA1UdIwQYMBaAFCd/aGJoQHK2KhVt33XddyXDj1HQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEJFQy83QjdGMjhFMjY3
N0UxMUVBOEJEODI2MkRDNEY5QUUwMi9KMzlvWW1oQWNyWXFGVzNmZGQxM0pjT1BV
ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ozOW9ZbWhBY3JZcUZXM2ZkZDEzSmNPUFVkQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MEJFQy83QjdGMjhFMjY3N0UxMUVBOEJEODI2MkRDNEY5QUUwMi9KMzlvWW1oQWNy
WXFGVzNmZGQxM0pjT1BVZEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA04JSy4JNuShLVgx8qPEAGp3pshm+d+ygfi1kJjEkI942vulUVq+C/
JukQujeyndKnX7KGMb6xxm0mWoV1wOGLTAt8LFWyo40Vz5vzQpIfxEEtb6Twcebg
Xif+fdvk9H2HR7lgUAFYS6ceBt8l51eO7Vws+/w69lIMPFFZSNdJ8ifKl7co3AS3
wIoRUhMpJkUNomTsEZ9Q4NFeDT4uo/7WXmniXtDWtecEzCnZkvLkrtASWExg5eb4
4gLT8bOh+8agMvf95sjGTt/QtF1ToIZf2qak7MCv9Va78vtTWlV9JjEEHvTUFASf
zXzd3lWukQ+zAuz+KizIKXWwj3DvQJSg
-----END CERTIFICATE-----