Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft
File:                     XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft (raw, json)
Hash identifier:          KwznrJ+FTRH/U3e4EPtp+6nf8ugrwjScxfOh42Z2wt0=
Subject key identifier:   B5:33:EB:4E:3F:C4:2C:3D:71:2F:DC:4C:7B:2D:8A:D5:A9:EB:FD:AD
Authority key identifier: 5F:1C:53:4A:EE:FF:4E:38:0C:E5:A0:9A:10:84:BF:8F:57:09:ED:08
Certificate issuer:       /CN=A91A467D/serialNumber=5F1C534AEEFF4E380CE5A09A1084BF8F5709ED08
Certificate serial:       0AAA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft
Manifest number:          0AA4
Signing time:             Thu 30 Jan 2025 19:38:37 +0000
Manifest this update:     Thu 30 Jan 2025 19:38:36 +0000
Manifest next update:     Thu 06 Feb 2025 19:38:36 +0000
Files and hashes:         1: XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.crl (hash: HnNbwxBzN1sik3/jqg4Zvx5W1LgudO4J2mTa9NGUpZI=)
                          2: 43272DE249AA11EABABC8610C4F9AE02.roa (hash: hxpdqiJcuo669SSUUPg0Lc1pfzm9vN1gIm7p4lkjs2k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2730 (0xaaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A467D/serialNumber=5F1C534AEEFF4E380CE5A09A1084BF8F5709ED08
        Validity
            Not Before: Jan 30 19:38:36 2025 GMT
            Not After : Feb  6 19:38:36 2025 GMT
        Subject: CN=679bd53d-9786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a7:46:04:84:11:38:a8:35:42:34:97:a1:1a:
                    79:56:4b:6e:9b:d3:1c:84:28:a5:0d:48:a6:2b:81:
                    14:66:93:16:81:c5:b0:0c:19:51:8d:67:10:d4:c6:
                    40:12:44:22:18:5e:62:b8:d2:26:5a:ca:b7:ab:5c:
                    fa:0c:59:33:56:30:0e:0f:cd:db:af:a0:69:0a:33:
                    f8:97:c9:b5:ee:94:99:41:19:ca:f2:ee:5c:4c:0f:
                    ef:54:a8:54:e2:19:63:59:86:e5:b9:42:8e:0d:b4:
                    d2:fa:22:cd:64:4e:57:28:c5:82:b8:57:b3:25:6f:
                    3b:df:24:4e:bb:94:ac:2f:81:9b:36:c0:9f:4d:d6:
                    c6:db:23:84:9d:46:a3:ce:37:19:5f:1d:98:bb:0b:
                    7a:d5:e3:64:0d:0b:37:38:bd:a9:d3:69:31:be:ad:
                    65:18:75:60:6f:76:d0:a7:73:34:37:ae:e4:92:19:
                    d9:16:fb:43:9a:72:ad:52:ec:5d:22:c4:e5:a4:90:
                    c3:17:b7:79:29:af:8e:72:12:f8:95:b9:6d:ae:cf:
                    6c:91:63:20:d3:0a:22:0e:23:93:47:a3:3f:7f:3e:
                    f9:ee:94:1d:ef:5f:ec:fe:c8:1b:c8:75:a3:51:4b:
                    61:c5:ac:59:e4:f0:e4:55:06:b1:68:41:b0:8f:84:
                    fb:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:33:EB:4E:3F:C4:2C:3D:71:2F:DC:4C:7B:2D:8A:D5:A9:EB:FD:AD
            X509v3 Authority Key Identifier:
                keyid:5F:1C:53:4A:EE:FF:4E:38:0C:E5:A0:9A:10:84:BF:8F:57:09:ED:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:23:36:c0:e8:05:73:bb:0e:0f:b9:17:cb:82:77:2f:d0:de:
         04:c1:2d:59:1b:b1:c4:ec:33:f2:28:1b:a0:4b:b8:6e:25:cf:
         f4:2d:96:2b:18:00:88:99:97:83:60:a8:a4:84:52:31:38:43:
         13:95:8b:5e:8c:ac:65:79:00:7e:fa:c7:a4:b5:06:a7:29:5b:
         9a:53:ed:37:5d:71:c9:e3:3e:ed:c4:20:d1:d0:ec:43:a4:5f:
         32:48:f2:29:4d:a4:50:da:41:89:5f:c1:26:ba:59:d9:0a:c2:
         18:88:0c:21:e1:bc:a2:9e:74:49:b7:4d:f2:0d:a7:2f:db:fa:
         ba:ad:45:27:94:25:65:14:0e:1d:34:d5:13:ef:c3:8d:f4:1c:
         0a:2d:25:3e:e2:42:9e:c4:f0:4d:ca:bb:c5:56:ec:e1:98:f0:
         c5:12:e2:c0:6a:09:44:f3:33:79:7a:72:59:8f:58:3a:08:cb:
         69:b3:c5:f5:73:07:c4:63:1f:0c:03:ff:7b:cb:5c:75:ae:69:
         41:88:e5:91:ad:b7:77:49:20:54:ab:47:f0:15:53:41:d5:fa:
         58:fc:8d:e4:9e:08:0b:ef:37:4f:a1:3c:c9:62:41:75:17:85:
         b0:6f:47:c5:a3:3c:34:51:e3:ee:c9:f8:aa:e8:b8:b1:cb:23:
         8a:b1:51:fb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTQ2N0QxMTAvBgNVBAUTKDVGMUM1MzRBRUVGRjRFMzgwQ0U1QTA5QTEwODRCRjhG
NTcwOUVEMDgwHhcNMjUwMTMwMTkzODM2WhcNMjUwMjA2MTkzODM2WjAYMRYwFAYD
VQQDEw02NzliZDUzZC05Nzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmadGBIQROKg1QjSXoRp5Vktum9MchCilDUimK4EUZpMWgcWwDBlRjWcQ1MZA
EkQiGF5iuNImWsq3q1z6DFkzVjAOD83br6BpCjP4l8m17pSZQRnK8u5cTA/vVKhU
4hljWYbluUKODbTS+iLNZE5XKMWCuFezJW873yROu5SsL4GbNsCfTdbG2yOEnUaj
zjcZXx2Yuwt61eNkDQs3OL2p02kxvq1lGHVgb3bQp3M0N67kkhnZFvtDmnKtUuxd
IsTlpJDDF7d5Ka+OchL4lbltrs9skWMg0woiDiOTR6M/fz757pQd71/s/sgbyHWj
UUthxaxZ5PDkVQaxaEGwj4T7eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLUz604/
xCw9cS/cTHstitWp6/2tMB8GA1UdIwQYMBaAFF8cU0ru/044DOWgmhCEv49XCe0I
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDY3RC84NDhFN0QxODQ5
QTkxMUVBQTZGREQzMEZDNEY5QUUwMi9YeHhUU3U3X1RqZ001YUNhRUlTX2oxY0o3
UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1h4eFRTdTdfVGpnTTVhQ2FFSVNfajFjSjdRZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NDY3RC84NDhFN0QxODQ5QTkxMUVBQTZGREQzMEZDNEY5QUUwMi9YeHhUU3U3X1Rq
Z001YUNhRUlTX2oxY0o3UWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCHIzbA6AVzuw4PuRfLgncv0N4EwS1ZG7HE7DPyKBugS7huJc/0LZYr
GACImZeDYKikhFIxOEMTlYtejKxleQB++sektQanKVuaU+03XXHJ4z7txCDR0OxD
pF8ySPIpTaRQ2kGJX8EmulnZCsIYiAwh4byinnRJt03yDacv2/q6rUUnlCVlFA4d
NNUT78ON9BwKLSU+4kKexPBNyrvFVuzhmPDFEuLAaglE8zN5enJZj1g6CMtps8X1
cwfEYx8MA/97y1x1rmlBiOWRrbd3SSBUq0fwFVNB1fpY/I3knggL7zdPoTzJYkF1
F4Wwb0fFozw0UePuyfiq6LixyyOKsVH7
-----END CERTIFICATE-----