Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.mft
File:                     i29QUS89IfFe7mdUeBjiY79cXRQ.mft (raw, json)
Hash identifier:          AZg2/9OkzAz8/7m/hH9ByeQ8nLX0mpCLesYzVM+Pj68=
Subject key identifier:   63:2F:C3:2E:6F:66:E2:C4:E1:26:5F:33:7D:47:B4:2E:34:58:81:3E
Authority key identifier: 8B:6F:50:51:2F:3D:21:F1:5E:EE:67:54:78:18:E2:63:BF:5C:5D:14
Certificate issuer:       /CN=A91E431E/serialNumber=8B6F50512F3D21F15EEE67547818E263BF5C5D14
Certificate serial:       0610
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i29QUS89IfFe7mdUeBjiY79cXRQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.mft
Manifest number:          060B
Signing time:             Thu 30 Jan 2025 22:46:07 +0000
Manifest this update:     Thu 30 Jan 2025 22:46:06 +0000
Manifest next update:     Thu 06 Feb 2025 22:46:06 +0000
Files and hashes:         1: i29QUS89IfFe7mdUeBjiY79cXRQ.crl (hash: BMCjOW59wkdAQNkSQSveu4EYVdjVNQQZl/ZLirEQ814=)
                          2: 51CBE4868C6711EB98B7B279C4F9AE02.roa (hash: am0gLM47UswkhQ7d8ve9CDz5IVO8+0wgLFBI3jyuYpA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1552 (0x610)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E431E/serialNumber=8B6F50512F3D21F15EEE67547818E263BF5C5D14
        Validity
            Not Before: Jan 30 22:46:06 2025 GMT
            Not After : Feb  6 22:46:06 2025 GMT
        Subject: CN=679c012f-785c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:5f:af:b2:21:83:75:e9:dc:e8:a8:4a:9f:6a:
                    c8:a9:7f:c8:25:89:0a:c6:ac:7c:bc:38:d2:5f:38:
                    1e:44:34:8c:20:9f:26:f3:14:22:10:61:27:26:53:
                    1c:3b:93:4b:df:5d:93:d7:07:bf:cc:51:09:f5:a9:
                    8f:99:17:8e:5f:e4:c6:78:57:9a:f7:88:23:71:88:
                    5a:b5:5a:21:69:49:1e:97:6f:2f:59:30:25:92:fa:
                    c6:ec:62:83:36:d1:3f:0e:66:0b:e1:ed:69:f8:8d:
                    c4:31:e8:1b:16:8b:6f:54:2a:d5:a5:b4:d8:1c:c4:
                    df:ce:19:40:56:51:28:ad:f5:6e:95:8d:31:9d:ae:
                    5e:32:45:43:ab:b3:fd:e1:21:f0:dc:a9:56:f7:f4:
                    67:31:31:ec:a0:e3:db:05:77:e6:01:8d:ef:03:6b:
                    70:9c:f7:22:94:b7:4b:b2:39:0e:11:8e:99:e9:d1:
                    33:46:56:c5:08:0c:53:2f:b2:aa:3e:88:35:4c:cd:
                    e8:dc:61:75:a1:5c:73:78:fb:72:c2:77:03:f9:40:
                    0a:53:d5:a1:8e:45:8b:b6:73:65:00:05:19:29:0f:
                    a4:6f:dc:09:e2:0c:ba:22:84:5b:ba:8d:a4:3b:d9:
                    4e:6d:3e:d4:8f:af:f2:94:8f:a2:3c:f8:c5:02:49:
                    15:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:2F:C3:2E:6F:66:E2:C4:E1:26:5F:33:7D:47:B4:2E:34:58:81:3E
            X509v3 Authority Key Identifier:
                keyid:8B:6F:50:51:2F:3D:21:F1:5E:EE:67:54:78:18:E2:63:BF:5C:5D:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i29QUS89IfFe7mdUeBjiY79cXRQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:54:ba:f4:a9:bc:52:f6:e4:94:1a:29:fb:9d:16:6e:16:41:
         e3:1e:f8:b0:3a:2a:62:68:56:f2:00:36:78:c2:83:40:9a:fc:
         37:fa:a1:a2:b4:71:bf:c2:cf:fc:25:5b:53:a4:ed:bc:f3:4a:
         0a:d3:f7:24:de:1d:f9:2b:6e:ad:9c:c7:a4:de:b7:aa:76:cf:
         80:19:a6:a9:8d:f5:b4:b0:d3:96:59:c1:23:42:54:8a:c7:39:
         bd:05:6d:c4:ab:70:01:cc:dd:81:d4:90:16:d3:16:9f:7d:e0:
         d7:c7:ab:38:c4:9c:38:91:14:1d:85:fa:f6:58:bc:27:70:e6:
         4e:48:c9:67:04:f1:ea:4e:55:c2:bb:c6:6a:05:eb:1b:d3:40:
         b8:8e:cd:fe:ed:93:87:65:72:b1:76:75:4e:9c:a4:84:6a:21:
         b1:ac:55:5b:66:18:48:5d:a9:84:20:b6:f3:11:e0:85:8c:2a:
         38:81:62:e9:18:c2:7e:a7:3e:ae:ef:8b:d2:b4:10:79:38:e9:
         ef:48:dd:4e:2b:76:bf:a2:13:13:a2:d2:1e:26:c2:8f:09:61:
         ef:dd:ae:d7:2c:d4:98:21:56:27:7a:1f:95:49:85:0c:32:1b:
         c7:95:f3:73:4e:68:12:42:a8:86:65:db:4c:ed:f5:20:3f:b6:
         53:5d:04:03
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTQzMUUxMTAvBgNVBAUTKDhCNkY1MDUxMkYzRDIxRjE1RUVFNjc1NDc4MThFMjYz
QkY1QzVEMTQwHhcNMjUwMTMwMjI0NjA2WhcNMjUwMjA2MjI0NjA2WjAYMRYwFAYD
VQQDEw02NzljMDEyZi03ODVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4l+vsiGDdenc6KhKn2rIqX/IJYkKxqx8vDjSXzgeRDSMIJ8m8xQiEGEnJlMc
O5NL312T1we/zFEJ9amPmReOX+TGeFea94gjcYhatVohaUkel28vWTAlkvrG7GKD
NtE/DmYL4e1p+I3EMegbFotvVCrVpbTYHMTfzhlAVlEorfVulY0xna5eMkVDq7P9
4SHw3KlW9/RnMTHsoOPbBXfmAY3vA2twnPcilLdLsjkOEY6Z6dEzRlbFCAxTL7Kq
Pog1TM3o3GF1oVxzePtywncD+UAKU9WhjkWLtnNlAAUZKQ+kb9wJ4gy6IoRbuo2k
O9lObT7Uj6/ylI+iPPjFAkkVgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGMvwy5v
ZuLE4SZfM31HtC40WIE+MB8GA1UdIwQYMBaAFItvUFEvPSHxXu5nVHgY4mO/XF0U
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDMxRS83QTg0ODE5NjhD
NjUxMUVCQUFGODAzNzZDNEY5QUUwMi9pMjlRVVM4OUlmRmU3bWRVZUJqaVk3OWNY
UlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2kyOVFVUzg5SWZGZTdtZFVlQmppWTc5Y1hSUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NDMxRS83QTg0ODE5NjhDNjUxMUVCQUFGODAzNzZDNEY5QUUwMi9pMjlRVVM4OUlm
RmU3bWRVZUJqaVk3OWNYUlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB/VLr0qbxS9uSUGin7nRZuFkHjHviwOipiaFbyADZ4woNAmvw3+qGi
tHG/ws/8JVtTpO2880oK0/ck3h35K26tnMek3reqds+AGaapjfW0sNOWWcEjQlSK
xzm9BW3Eq3ABzN2B1JAW0xaffeDXx6s4xJw4kRQdhfr2WLwncOZOSMlnBPHqTlXC
u8ZqBesb00C4js3+7ZOHZXKxdnVOnKSEaiGxrFVbZhhIXamEILbzEeCFjCo4gWLp
GMJ+pz6u74vStBB5OOnvSN1OK3a/ohMTotIeJsKPCWHv3a7XLNSYIVYneh+VSYUM
MhvHlfNzTmgSQqiGZdtM7fUgP7ZTXQQD
-----END CERTIFICATE-----