Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft
File:                     mZsvZTnCPq60aeZ1OfstyTPZgEA.mft (raw, json)
Hash identifier:          5Qt4c+ouCATXLNMvEx5x9d0pwFJUNaBQ6CAoQuO6cic=
Subject key identifier:   BB:56:DC:13:81:B4:D5:91:BB:98:84:DF:FC:1D:54:0D:D7:F6:FD:71
Authority key identifier: 99:9B:2F:65:39:C2:3E:AE:B4:69:E6:75:39:FB:2D:C9:33:D9:80:40
Certificate issuer:       /CN=A91AB055/serialNumber=999B2F6539C23EAEB469E67539FB2DC933D98040
Certificate serial:       9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZsvZTnCPq60aeZ1OfstyTPZgEA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft
Manifest number:          99
Signing time:             Fri 31 Jan 2025 05:26:45 +0000
Manifest this update:     Fri 31 Jan 2025 05:26:44 +0000
Manifest next update:     Fri 07 Feb 2025 05:26:44 +0000
Files and hashes:         1: mZsvZTnCPq60aeZ1OfstyTPZgEA.crl (hash: pEw128w9KeLm/bMln7wV8XR8TRsW3/R4X+4EHy+MyQY=)
                          2: 83CA613CF55611EE8CE6274DC4F9AE02.roa (hash: BonjniXMbmI4yDYc3ynOZLv8pgVSOdRZa/c5jpsq0Ug=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155 (0x9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB055/serialNumber=999B2F6539C23EAEB469E67539FB2DC933D98040
        Validity
            Not Before: Jan 31 05:26:44 2025 GMT
            Not After : Feb  7 05:26:44 2025 GMT
        Subject: CN=679c5f14-49fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8d:b7:2f:61:d5:6b:63:c3:ff:1b:ac:1c:98:
                    b8:e2:3a:95:93:ce:43:35:65:12:51:3a:ef:52:34:
                    0a:5c:0c:03:9d:ad:ed:eb:a4:81:b8:94:b7:e7:fd:
                    05:7f:c8:bc:15:2a:37:72:97:45:bd:74:e7:12:13:
                    01:dd:4f:a8:2e:a0:5b:8b:17:c6:a0:1f:6d:06:75:
                    a9:d3:17:d7:40:e2:80:8e:76:c4:a6:f3:30:6a:c6:
                    c5:87:fb:b3:d8:8d:33:73:58:9a:60:ea:25:5e:d8:
                    82:b5:e2:86:dd:6b:98:1f:2c:65:55:24:60:cf:3b:
                    8d:2e:30:66:3c:a0:e8:2f:f9:0b:23:e3:13:c8:1b:
                    af:15:5e:18:db:10:e2:3a:99:8a:33:a9:ba:7c:b1:
                    e1:e2:68:40:d9:01:70:29:f2:6b:c7:20:1d:d0:59:
                    24:a5:44:25:32:0a:b6:42:6e:7d:40:43:6e:23:3d:
                    a1:a3:6d:05:09:e3:b9:3c:9a:77:00:d6:fb:73:f6:
                    ec:6d:22:57:01:96:24:b9:56:d1:40:7e:17:d2:48:
                    70:b8:52:c6:d4:76:f8:c0:52:70:52:b2:f8:51:79:
                    54:22:cd:9e:43:2e:59:eb:0a:4c:4d:f7:f7:0e:42:
                    4a:00:fd:c5:bc:6e:83:85:d8:9c:cb:aa:2f:33:e1:
                    1c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:56:DC:13:81:B4:D5:91:BB:98:84:DF:FC:1D:54:0D:D7:F6:FD:71
            X509v3 Authority Key Identifier:
                keyid:99:9B:2F:65:39:C2:3E:AE:B4:69:E6:75:39:FB:2D:C9:33:D9:80:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZsvZTnCPq60aeZ1OfstyTPZgEA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:9b:8d:ce:b6:39:1a:08:87:2b:b4:94:8e:8a:fe:a5:b6:d5:
         c9:ff:5f:fc:55:b5:ca:7e:54:78:a0:be:5a:97:01:8b:20:a3:
         4a:63:b5:96:36:07:d9:9e:a8:85:7c:9a:51:70:f8:86:cd:3e:
         51:94:51:6f:e0:c3:85:76:fd:2a:70:b4:de:2b:9d:78:18:f9:
         fa:1e:d2:e4:95:d5:d4:0e:8d:95:cf:0e:0c:dc:9d:b7:d2:0a:
         9f:6a:70:64:3f:ee:b2:0d:b0:b4:1d:8b:51:36:4a:10:0e:70:
         8f:34:5b:3d:62:62:96:38:8e:18:d6:46:ca:69:1d:8e:d1:c3:
         8e:a3:21:00:59:26:28:c4:94:20:50:53:59:32:75:10:eb:b2:
         f4:e8:db:64:8b:93:7a:26:54:26:88:9e:69:90:b6:f7:2d:93:
         1c:be:b8:b9:be:52:76:62:c1:50:e8:58:0b:24:09:cd:94:56:
         d1:c2:cc:64:c4:ae:95:fc:eb:f3:de:90:c9:75:c0:6e:83:1a:
         fa:67:8d:be:d7:5e:04:8e:f1:c6:0e:9c:0f:fc:89:3c:2b:17:
         bf:fc:13:eb:ae:bb:79:b0:51:28:ca:72:22:09:c7:d4:5c:cc:
         c1:53:fd:ee:11:44:30:4a:1e:45:e6:21:34:8d:ff:3d:a1:34:
         86:bc:e9:a1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUIwNTUxMTAvBgNVBAUTKDk5OUIyRjY1MzlDMjNFQUVCNDY5RTY3NTM5RkIyREM5
MzNEOTgwNDAwHhcNMjUwMTMxMDUyNjQ0WhcNMjUwMjA3MDUyNjQ0WjAYMRYwFAYD
VQQDEw02NzljNWYxNC00OWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArI23L2HVa2PD/xusHJi44jqVk85DNWUSUTrvUjQKXAwDna3t66SBuJS35/0F
f8i8FSo3cpdFvXTnEhMB3U+oLqBbixfGoB9tBnWp0xfXQOKAjnbEpvMwasbFh/uz
2I0zc1iaYOolXtiCteKG3WuYHyxlVSRgzzuNLjBmPKDoL/kLI+MTyBuvFV4Y2xDi
OpmKM6m6fLHh4mhA2QFwKfJrxyAd0FkkpUQlMgq2Qm59QENuIz2ho20FCeO5PJp3
ANb7c/bsbSJXAZYkuVbRQH4X0khwuFLG1Hb4wFJwUrL4UXlUIs2eQy5Z6wpMTff3
DkJKAP3FvG6Dhdicy6ovM+EcGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLtW3BOB
tNWRu5iE3/wdVA3X9v1xMB8GA1UdIwQYMBaAFJmbL2U5wj6utGnmdTn7Lckz2YBA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjA1NS80QUJCQzAxQ0Y1
NTUxMUVFQUNGMTIzNEJDNEY5QUUwMi9tWnN2WlRuQ1BxNjBhZVoxT2ZzdHlUUFpn
RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21ac3ZaVG5DUHE2MGFlWjFPZnN0eVRQWmdFQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QjA1NS80QUJCQzAxQ0Y1NTUxMUVFQUNGMTIzNEJDNEY5QUUwMi9tWnN2WlRuQ1Bx
NjBhZVoxT2ZzdHlUUFpnRUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBMm43OtjkaCIcrtJSOiv6lttXJ/1/8VbXKflR4oL5alwGLIKNKY7WW
NgfZnqiFfJpRcPiGzT5RlFFv4MOFdv0qcLTeK514GPn6HtLkldXUDo2Vzw4M3J23
0gqfanBkP+6yDbC0HYtRNkoQDnCPNFs9YmKWOI4Y1kbKaR2O0cOOoyEAWSYoxJQg
UFNZMnUQ67L06Ntki5N6JlQmiJ5pkLb3LZMcvri5vlJ2YsFQ6FgLJAnNlFbRwsxk
xK6V/Ovz3pDJdcBugxr6Z42+114EjvHGDpwP/Ik8Kxe//BPrrrt5sFEoynIiCcfU
XMzBU/3uEUQwSh5F5iE0jf89oTSGvOmh
-----END CERTIFICATE-----