Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.mft
File:                     USYZ3gwdG7Pld5lO4MX_MNSRzQ4.mft (raw, json)
Hash identifier:          5xZJZuaFOWGhaS+p7APUSE8vcPStmgZgS38eVb4iGiA=
Subject key identifier:   9E:53:33:CA:68:4E:D1:05:9C:46:85:D4:DA:2E:48:E7:BB:4E:3C:E0
Authority key identifier: 51:26:19:DE:0C:1D:1B:B3:E5:77:99:4E:E0:C5:FF:30:D4:91:CD:0E
Certificate issuer:       /CN=A91B9AF0/serialNumber=512619DE0C1D1BB3E577994EE0C5FF30D491CD0E
Certificate serial:       06B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.mft
Manifest number:          2261
Signing time:             Fri 31 Jan 2025 15:52:43 +0000
Manifest this update:     Fri 31 Jan 2025 15:52:42 +0000
Manifest next update:     Fri 07 Feb 2025 15:52:42 +0000
Files and hashes:         1: USYZ3gwdG7Pld5lO4MX_MNSRzQ4.crl (hash: QzIBKGK999PK8+UxB/CeAfS6dSB09rqdhBtXdIQiWA8=)
                          2: CCC98C06516B11EBB8942876C4F9AE02.roa (hash: oQ+XeX3QPr5MKR/Pv82IWUhiWxAkN4R4paMHXTKKeg8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1716 (0x6b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9AF0/serialNumber=512619DE0C1D1BB3E577994EE0C5FF30D491CD0E
        Validity
            Not Before: Jan 31 15:52:42 2025 GMT
            Not After : Feb  7 15:52:42 2025 GMT
        Subject: CN=679cf1cb-ea5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f2:af:04:03:e7:c0:8e:9e:aa:b2:69:5d:79:
                    6f:0e:d0:21:1b:45:24:56:8b:5b:e8:9a:e4:d7:b6:
                    6b:d9:51:f0:16:a0:b3:2a:f5:fb:8f:a9:d8:db:e1:
                    07:53:60:4a:ab:c1:0c:46:6a:27:46:00:cb:b8:1e:
                    bf:ed:01:31:e0:a8:14:62:64:20:45:2e:bc:b5:dd:
                    56:63:46:ad:f7:83:92:d0:cd:40:07:6f:a1:57:dc:
                    4c:bc:49:e9:b7:7f:89:4e:00:7d:a8:62:a3:2e:5c:
                    f1:4e:75:79:22:87:5a:22:0e:8f:e5:3e:a3:b3:67:
                    e3:93:57:d4:04:ec:26:88:64:2d:5e:42:5a:37:bc:
                    dd:88:7e:9e:e0:5e:9c:bd:0a:dd:e4:49:c3:08:02:
                    ab:25:46:bc:7d:f7:20:11:fa:15:db:96:8b:46:19:
                    ad:1a:48:12:d2:59:84:1a:f0:94:30:c8:52:48:7c:
                    12:34:58:a7:78:ff:17:af:f4:9b:0d:5a:87:4a:43:
                    ef:af:f7:d3:16:9b:c8:f4:cf:2c:0a:82:db:de:ed:
                    25:24:4b:28:a8:39:62:48:d3:9d:28:83:d0:c7:2a:
                    fb:2c:c6:1b:4f:6d:40:a8:99:ee:8f:10:3c:72:e6:
                    d6:e4:ef:58:1d:c1:b7:98:1f:49:e7:7c:da:99:77:
                    c8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:53:33:CA:68:4E:D1:05:9C:46:85:D4:DA:2E:48:E7:BB:4E:3C:E0
            X509v3 Authority Key Identifier:
                keyid:51:26:19:DE:0C:1D:1B:B3:E5:77:99:4E:E0:C5:FF:30:D4:91:CD:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:bf:cd:b1:25:c5:37:84:8d:01:3d:f8:c1:1b:f9:0f:ce:26:
         16:79:97:b7:03:6e:06:c0:a6:01:6c:91:0a:c4:f3:3b:9c:88:
         d5:bb:28:ae:20:99:3f:5c:d8:71:e0:a3:61:bc:20:56:8f:60:
         e4:8e:d1:f4:a1:ee:03:2f:fd:cd:15:ea:4d:21:cb:4f:c4:00:
         3b:42:5c:30:60:10:c9:a9:79:4a:c4:26:1c:7c:69:21:95:64:
         ee:47:b9:78:b4:84:d1:92:69:7f:f5:92:97:7d:53:e7:02:3c:
         24:9d:e0:2a:40:07:26:45:ba:41:25:9f:bd:09:df:40:82:78:
         7d:31:67:af:65:81:f0:73:bf:7a:b8:00:37:b9:ce:cb:d9:01:
         43:d0:86:c4:cc:64:13:9d:2e:8e:e5:70:a6:0d:a9:6f:61:16:
         a6:95:22:26:1a:b1:19:81:3a:d9:fa:76:4e:cb:26:99:e9:6c:
         7d:3f:15:e2:40:f6:4e:45:fb:f5:c1:4c:e9:46:f5:34:2c:8b:
         2f:01:3e:ae:97:b2:7a:27:ac:7e:d1:f4:a1:0f:0e:41:e3:1a:
         84:44:a1:d2:6b:92:93:b2:54:4a:6c:75:61:ed:76:81:19:5d:
         32:f1:f8:ab:cc:7c:7a:4d:04:c9:ae:e6:e1:12:4a:8a:89:fb:
         47:bd:1a:41
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBrQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjlBRjAxMTAvBgNVBAUTKDUxMjYxOURFMEMxRDFCQjNFNTc3OTk0RUUwQzVGRjMw
RDQ5MUNEMEUwHhcNMjUwMTMxMTU1MjQyWhcNMjUwMjA3MTU1MjQyWjAYMRYwFAYD
VQQDEw02NzljZjFjYi1lYTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvfKvBAPnwI6eqrJpXXlvDtAhG0UkVotb6Jrk17Zr2VHwFqCzKvX7j6nY2+EH
U2BKq8EMRmonRgDLuB6/7QEx4KgUYmQgRS68td1WY0at94OS0M1AB2+hV9xMvEnp
t3+JTgB9qGKjLlzxTnV5IodaIg6P5T6js2fjk1fUBOwmiGQtXkJaN7zdiH6e4F6c
vQrd5EnDCAKrJUa8ffcgEfoV25aLRhmtGkgS0lmEGvCUMMhSSHwSNFineP8Xr/Sb
DVqHSkPvr/fTFpvI9M8sCoLb3u0lJEsoqDliSNOdKIPQxyr7LMYbT21AqJnujxA8
cubW5O9YHcG3mB9J53zamXfIgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ5TM8po
TtEFnEaF1NouSOe7TjzgMB8GA1UdIwQYMBaAFFEmGd4MHRuz5XeZTuDF/zDUkc0O
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUFGMC9GMTYyREE0RTlG
OTcxMUU1OTQ4ODg2MEZDNEY5QUUwMi9VU1laM2d3ZEc3UGxkNWxPNE1YX01OU1J6
UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VTWVozZ3dkRzdQbGQ1bE80TVhfTU5TUnpRNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OUFGMC9GMTYyREE0RTlGOTcxMUU1OTQ4ODg2MEZDNEY5QUUwMi9VU1laM2d3ZEc3
UGxkNWxPNE1YX01OU1J6UTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCpv82xJcU3hI0BPfjBG/kPziYWeZe3A24GwKYBbJEKxPM7nIjVuyiu
IJk/XNhx4KNhvCBWj2DkjtH0oe4DL/3NFepNIctPxAA7QlwwYBDJqXlKxCYcfGkh
lWTuR7l4tITRkml/9ZKXfVPnAjwkneAqQAcmRbpBJZ+9Cd9Agnh9MWevZYHwc796
uAA3uc7L2QFD0IbEzGQTnS6O5XCmDalvYRamlSImGrEZgTrZ+nZOyyaZ6Wx9PxXi
QPZORfv1wUzpRvU0LIsvAT6ul7J6J6x+0fShDw5B4xqERKHSa5KTslRKbHVh7XaB
GV0y8firzHx6TQTJrubhEkqKiftHvRpB
-----END CERTIFICATE-----