Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft
File:                     OS824KRQBTw9xm0uOJThDKcz3aY.mft (raw, json)
Hash identifier:          hwKbG12dPn2YrMKahQaUqAV7vomS77l87hco+n1jLnU=
Subject key identifier:   CF:DC:A1:A5:63:11:36:26:65:D8:05:9E:4D:4F:85:AE:81:01:3D:D7
Authority key identifier: 39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6
Certificate issuer:       /CN=A91C326F/serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6
Certificate serial:       06B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft
Manifest number:          068C
Signing time:             Thu 30 Jan 2025 22:21:26 +0000
Manifest this update:     Thu 30 Jan 2025 22:21:25 +0000
Manifest next update:     Thu 06 Feb 2025 22:21:25 +0000
Files and hashes:         1: OS824KRQBTw9xm0uOJThDKcz3aY.crl (hash: kXZw6DpkFWnTudAzSv8sat6ZmpwPpAVP1+Yl2Md9Hwc=)
                          2: 8A1515887C7D11EFB24A9F51C4F9AE02.roa (hash: yu+vAXz85+ImzGtz2dS0WwomfVbOz0/fHg5Ts/b0h74=)
                          3: 59DE107A14CF11EE81C44276C4F9AE02.roa (hash: dorNefehc4jcrYiPb1SmTT9WWjQeQbu3xTbAJUr9xp0=)
                          4: B9CCEC5A72E411ED833AE326C4F9AE02.roa (hash: 7STuNNvyySdvKLv0ZARurOGrWZyKElkT0Pp3fy6yFYY=)
                          5: BCC1E04E33C011EE83E9A61BC4F9AE02.roa (hash: gEcFdCTf52NARTThJUnsykol1LheMWgXpMpHapO3A8E=)
                          6: BC41A65E33C011EE83E9A61BC4F9AE02.roa (hash: CaitNOKQkm3AvYSLSTJmnVLMkDD1jkPzfCvAkZPYXwc=)
                          7: B76C776472E411ED833AE326C4F9AE02.roa (hash: G40zS/jPmT/MABYrNCr8KjGZKmGs9oISV/lw5AZ1PqY=)
                          8: B8D1689472E411ED833AE326C4F9AE02.roa (hash: JSwTLZ+Ks+XHKVTbFIphlZkac86sl1CWT662kq+fPJ0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1712 (0x6b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C326F/serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6
        Validity
            Not Before: Jan 30 22:21:25 2025 GMT
            Not After : Feb  6 22:21:25 2025 GMT
        Subject: CN=679bfb65-3207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:23:46:2f:6c:8e:56:9e:d0:a4:71:e7:b6:c0:
                    e2:64:bd:cb:2c:4d:a0:74:ec:be:4f:4d:cc:e4:91:
                    a5:31:8a:64:58:f9:b4:87:c2:a4:c1:8e:88:48:a9:
                    29:23:ba:39:33:f8:35:30:e1:37:0a:1a:47:f9:38:
                    6e:5b:26:a2:8a:50:df:d9:eb:2e:d6:c2:85:66:59:
                    1f:5e:b3:25:21:f6:52:56:2b:01:0c:74:6f:ec:df:
                    13:74:de:78:59:40:fc:cd:7a:1e:6a:c7:fd:48:78:
                    bc:bb:56:90:04:07:ab:9c:d6:b0:d3:30:c0:ab:fe:
                    98:af:c3:55:4e:bf:dd:28:a8:6f:62:ab:61:5a:e9:
                    c4:50:81:53:d1:39:66:3b:26:2d:24:ca:f8:3e:38:
                    a5:dc:c5:a0:3f:18:bc:11:a0:a6:10:88:a4:84:fe:
                    d2:c4:67:db:a4:d8:37:24:73:a8:a2:4f:8e:1b:59:
                    11:c0:58:76:40:cb:59:61:dc:cd:62:a6:43:bb:47:
                    13:bb:be:28:ce:13:03:79:e5:58:65:79:4b:5b:05:
                    d0:1a:de:de:62:ae:20:37:fd:c0:60:b1:6d:a0:40:
                    a4:f4:c6:43:2a:cf:10:ec:e2:7f:b3:6b:c9:6a:2d:
                    83:90:79:a1:03:64:3a:6c:a0:7a:a0:8a:a0:17:78:
                    72:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:DC:A1:A5:63:11:36:26:65:D8:05:9E:4D:4F:85:AE:81:01:3D:D7
            X509v3 Authority Key Identifier:
                keyid:39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:86:ca:11:5a:8d:fe:ea:22:db:5e:1b:c8:f4:13:08:c5:aa:
         10:cc:6c:5d:70:26:0f:50:52:46:98:d0:61:21:a4:ab:90:e1:
         4e:3f:55:43:3b:47:fa:13:74:08:4d:c8:25:df:3a:5a:ff:1f:
         61:93:9f:67:ae:f8:ad:4b:78:96:25:58:72:42:2a:c4:e1:99:
         d8:81:7c:1a:e8:7f:2b:11:b4:90:92:83:1e:36:65:fb:9f:49:
         56:d1:ec:0e:3f:91:89:fa:39:5a:35:f7:d7:2d:02:dc:23:16:
         a0:c7:3d:b4:e3:fc:ba:21:07:0e:79:56:f5:d9:0d:65:53:11:
         13:7f:a8:b8:c1:a0:b7:54:92:96:60:6d:3b:86:8d:de:f5:73:
         4c:58:57:43:2c:94:3b:2c:ca:dc:c8:e7:6b:28:7e:c9:b3:f4:
         c3:5c:42:0d:06:94:06:14:ee:9e:a5:d2:17:12:33:ee:6b:bf:
         81:3f:c6:54:24:39:22:f7:40:ba:bd:38:88:82:d3:71:af:e4:
         fb:b0:76:fc:f0:b8:2c:f8:de:90:60:b8:1b:9d:35:06:58:7d:
         da:c8:69:43:aa:3c:b4:dc:30:01:5c:52:19:07:9a:96:a8:a7:
         eb:78:b5:96:08:39:08:02:13:35:21:2b:5f:0b:bd:e1:ae:ff:
         e6:80:02:a4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBrAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzMyNkYxMTAvBgNVBAUTKDM5MkYzNkUwQTQ1MDA1M0MzREM2NkQyRTM4OTRFMTBD
QTczM0REQTYwHhcNMjUwMTMwMjIyMTI1WhcNMjUwMjA2MjIyMTI1WjAYMRYwFAYD
VQQDEw02NzliZmI2NS0zMjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApSNGL2yOVp7QpHHntsDiZL3LLE2gdOy+T03M5JGlMYpkWPm0h8KkwY6ISKkp
I7o5M/g1MOE3ChpH+ThuWyaiilDf2esu1sKFZlkfXrMlIfZSVisBDHRv7N8TdN54
WUD8zXoeasf9SHi8u1aQBAernNaw0zDAq/6Yr8NVTr/dKKhvYqthWunEUIFT0Tlm
OyYtJMr4Pjil3MWgPxi8EaCmEIikhP7SxGfbpNg3JHOook+OG1kRwFh2QMtZYdzN
YqZDu0cTu74ozhMDeeVYZXlLWwXQGt7eYq4gN/3AYLFtoECk9MZDKs8Q7OJ/s2vJ
ai2DkHmhA2Q6bKB6oIqgF3hy5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM/coaVj
ETYmZdgFnk1Pha6BAT3XMB8GA1UdIwQYMBaAFDkvNuCkUAU8PcZtLjiU4QynM92m
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzI2Ri83ODY2RjUzMDVG
QzcxMUVCOEE2OTIwMkVDNEY5QUUwMi9PUzgyNEtSUUJUdzl4bTB1T0pUaERLY3oz
YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09TODI0S1JRQlR3OXhtMHVPSlRoREtjejNhWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MzI2Ri83ODY2RjUzMDVGQzcxMUVCOEE2OTIwMkVDNEY5QUUwMi9PUzgyNEtSUUJU
dzl4bTB1T0pUaERLY3ozYVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAthsoRWo3+6iLbXhvI9BMIxaoQzGxdcCYPUFJGmNBhIaSrkOFOP1VD
O0f6E3QITcgl3zpa/x9hk59nrvitS3iWJVhyQirE4ZnYgXwa6H8rEbSQkoMeNmX7
n0lW0ewOP5GJ+jlaNffXLQLcIxagxz204/y6IQcOeVb12Q1lUxETf6i4waC3VJKW
YG07ho3e9XNMWFdDLJQ7LMrcyOdrKH7Js/TDXEINBpQGFO6epdIXEjPua7+BP8ZU
JDki90C6vTiIgtNxr+T7sHb88Lgs+N6QYLgbnTUGWH3ayGlDqjy03DABXFIZB5qW
qKfreLWWCDkIAhM1IStfC73hrv/mgAKk
-----END CERTIFICATE-----