Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.mft
File:                     pIqTm2fbIrr3fgB7Id87dFtig5A.mft (raw, json)
Hash identifier:          Ol7LCFUAPJ6pwTz9GxoXfWsroDDN5YzFmASc/+64HsA=
Subject key identifier:   40:30:5C:46:59:61:2F:4E:ED:2C:33:8F:0D:D5:E3:B0:2B:ED:9C:7F
Authority key identifier: A4:8A:93:9B:67:DB:22:BA:F7:7E:00:7B:21:DF:3B:74:5B:62:83:90
Certificate issuer:       /CN=A91E1ED2/serialNumber=A48A939B67DB22BAF77E007B21DF3B745B628390
Certificate serial:       0627
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIqTm2fbIrr3fgB7Id87dFtig5A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.mft
Manifest number:          0622
Signing time:             Thu 30 Jan 2025 22:39:56 +0000
Manifest this update:     Thu 30 Jan 2025 22:39:56 +0000
Manifest next update:     Thu 06 Feb 2025 22:39:56 +0000
Files and hashes:         1: pIqTm2fbIrr3fgB7Id87dFtig5A.crl (hash: g6KXoawkMPmqyXq/r3H5GdObxKy5oiAiQ07mXBYmvuA=)
                          2: A3AA461082BE11EB93A19A35C4F9AE02.roa (hash: giAuMNdUQbQxU3qFD/XGoGW0oQf3mtKr16RicuaHSew=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1575 (0x627)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1ED2/serialNumber=A48A939B67DB22BAF77E007B21DF3B745B628390
        Validity
            Not Before: Jan 30 22:39:56 2025 GMT
            Not After : Feb  6 22:39:56 2025 GMT
        Subject: CN=679bffbc-e1f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d6:77:72:d2:d9:a2:bd:08:c4:62:c8:4f:f1:
                    f4:03:3a:27:e3:b7:6f:5c:69:a2:ff:2d:b9:ca:6d:
                    41:ec:da:60:d1:1c:64:c4:cd:23:4e:e6:25:5a:58:
                    f4:84:c9:d2:6d:b9:ba:62:67:62:93:65:87:f1:c4:
                    66:0b:f5:99:93:5b:a9:5c:67:60:a3:5e:a3:4d:6f:
                    3c:99:3b:15:35:9a:97:e3:8d:6e:15:45:cd:17:4f:
                    8c:83:da:80:e9:8d:10:01:08:c9:ad:83:86:6d:f9:
                    cc:26:2e:46:33:8c:33:9d:2e:62:3a:1b:83:62:a0:
                    d5:9d:8e:bb:08:bd:ed:6a:9a:39:c7:e5:70:7b:4c:
                    98:10:7c:bd:ef:d7:1a:db:de:7c:32:e6:04:b3:ed:
                    c8:53:7e:cb:22:76:18:7a:12:ef:67:43:8a:ef:e8:
                    da:94:69:fa:81:1f:40:c3:68:b1:d9:51:d1:10:2c:
                    5e:d1:76:9f:dc:75:5d:40:8f:31:f8:0c:44:cc:36:
                    a1:b3:26:87:22:be:9d:eb:68:20:2f:7a:70:ea:1d:
                    4c:8f:6c:ec:be:3d:e3:7a:f5:e5:23:74:be:ac:d4:
                    35:66:17:92:87:ab:2a:22:45:f6:0f:dc:a3:be:28:
                    e1:52:a7:64:3b:f3:84:b8:c1:ec:95:37:a2:d0:cd:
                    ab:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:30:5C:46:59:61:2F:4E:ED:2C:33:8F:0D:D5:E3:B0:2B:ED:9C:7F
            X509v3 Authority Key Identifier:
                keyid:A4:8A:93:9B:67:DB:22:BA:F7:7E:00:7B:21:DF:3B:74:5B:62:83:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIqTm2fbIrr3fgB7Id87dFtig5A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:f6:fb:5d:79:88:3f:ce:55:18:c3:66:39:e6:c4:e0:88:87:
         1c:a5:57:eb:af:a3:cb:a5:d5:84:ba:ca:66:2b:ac:e0:ab:6a:
         9b:ac:fe:1e:10:92:10:07:c6:0f:a7:43:70:e9:c4:c4:34:04:
         55:aa:f2:b4:7c:0a:cf:64:99:65:6e:cb:fd:2b:91:7a:93:b8:
         47:74:4c:91:33:3d:b0:6a:03:65:8e:22:5b:89:ff:12:7d:ae:
         48:73:3f:41:2a:ee:b3:52:86:13:64:b9:51:07:8b:85:7d:e0:
         0a:0f:5e:52:0c:74:67:93:ae:4f:98:47:6f:0d:82:d5:dc:fb:
         5d:c1:42:c1:8f:c9:b5:fb:f7:1b:50:8c:fc:17:f5:40:7b:18:
         e7:d0:44:dc:31:ba:ef:86:fe:05:02:0b:c4:95:67:a6:87:f3:
         fb:25:40:ef:c8:bb:22:7a:20:4f:cf:b6:62:44:04:a8:76:7b:
         b2:ec:70:97:99:07:ac:5d:37:2f:ff:09:77:10:e3:ae:3e:6f:
         0b:ae:ce:78:f5:b6:df:06:04:c7:13:25:b1:9a:2e:48:9a:2e:
         4a:71:ff:16:4f:cf:8f:2f:2b:b4:a7:b2:9c:56:aa:d2:72:86:
         b8:fe:fc:f6:d2:03:78:c1:1e:80:7b:0c:ca:7f:56:b5:b7:ad:
         a2:b0:e2:ef
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTFFRDIxMTAvBgNVBAUTKEE0OEE5MzlCNjdEQjIyQkFGNzdFMDA3QjIxREYzQjc0
NUI2MjgzOTAwHhcNMjUwMTMwMjIzOTU2WhcNMjUwMjA2MjIzOTU2WjAYMRYwFAYD
VQQDEw02NzliZmZiYy1lMWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxtZ3ctLZor0IxGLIT/H0Azon47dvXGmi/y25ym1B7Npg0RxkxM0jTuYlWlj0
hMnSbbm6Ymdik2WH8cRmC/WZk1upXGdgo16jTW88mTsVNZqX441uFUXNF0+Mg9qA
6Y0QAQjJrYOGbfnMJi5GM4wznS5iOhuDYqDVnY67CL3tapo5x+Vwe0yYEHy979ca
2958MuYEs+3IU37LInYYehLvZ0OK7+jalGn6gR9Aw2ix2VHRECxe0Xaf3HVdQI8x
+AxEzDahsyaHIr6d62ggL3pw6h1Mj2zsvj3jevXlI3S+rNQ1ZheSh6sqIkX2D9yj
vijhUqdkO/OEuMHslTei0M2rTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEAwXEZZ
YS9O7Swzjw3V47Ar7Zx/MB8GA1UdIwQYMBaAFKSKk5tn2yK6934AeyHfO3RbYoOQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUVEMi8zRkU4REU2Qzgy
QkQxMUVCOUJDNUQzMzRDNEY5QUUwMi9wSXFUbTJmYklycjNmZ0I3SWQ4N2RGdGln
NUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BJcVRtMmZiSXJyM2ZnQjdJZDg3ZEZ0aWc1QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MUVEMi8zRkU4REU2QzgyQkQxMUVCOUJDNUQzMzRDNEY5QUUwMi9wSXFUbTJmYkly
cjNmZ0I3SWQ4N2RGdGlnNUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCH9vtdeYg/zlUYw2Y55sTgiIccpVfrr6PLpdWEuspmK6zgq2qbrP4e
EJIQB8YPp0Nw6cTENARVqvK0fArPZJllbsv9K5F6k7hHdEyRMz2wagNljiJbif8S
fa5Icz9BKu6zUoYTZLlRB4uFfeAKD15SDHRnk65PmEdvDYLV3PtdwULBj8m1+/cb
UIz8F/VAexjn0ETcMbrvhv4FAgvElWemh/P7JUDvyLsieiBPz7ZiRASodnuy7HCX
mQesXTcv/wl3EOOuPm8Lrs549bbfBgTHEyWxmi5Imi5Kcf8WT8+PLyu0p7KcVqrS
coa4/vz20gN4wR6AewzKf1a1t62isOLv
-----END CERTIFICATE-----