Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft
File:                     mlTRAXUBnPgIazCzHmUq4GAv9rw.mft (raw, json)
Hash identifier:          kI/z89Zb3Z9b8KKJAhKopBCTZTazsKfNgPnCIJh+iJw=
Subject key identifier:   9C:EB:77:F1:46:74:B3:3F:F5:C2:4A:9E:92:E7:3C:63:3E:C6:A3:BC
Authority key identifier: 9A:54:D1:01:75:01:9C:F8:08:6B:30:B3:1E:65:2A:E0:60:2F:F6:BC
Certificate issuer:       /CN=A91E57C9/serialNumber=9A54D10175019CF8086B30B31E652AE0602FF6BC
Certificate serial:       0272
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft
Manifest number:          026C
Signing time:             Fri 31 Jan 2025 01:46:07 +0000
Manifest this update:     Fri 31 Jan 2025 01:46:06 +0000
Manifest next update:     Fri 07 Feb 2025 01:46:06 +0000
Files and hashes:         1: mlTRAXUBnPgIazCzHmUq4GAv9rw.crl (hash: xlp1lrAELaE02Z3dVazn6viEap/oIumMRVES+TgvYvY=)
                          2: 2AEC4C4EF9D911ECBC381559C4F9AE02.roa (hash: vfdbKyJ3mviRT1GnKxYZo1xv2FhpXFvdbF0/IM2Mc1w=)
                          3: 2B658C44F9D911ECBC381559C4F9AE02.roa (hash: qqSsVUySdeF/mPXA1H2/Nb+W0uFPMOk9qHP5kfHhs6E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 626 (0x272)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E57C9/serialNumber=9A54D10175019CF8086B30B31E652AE0602FF6BC
        Validity
            Not Before: Jan 31 01:46:06 2025 GMT
            Not After : Feb  7 01:46:06 2025 GMT
        Subject: CN=679c2b5e-e316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:af:1d:05:4e:eb:61:81:2e:70:1b:82:8f:5e:
                    1e:af:0e:fc:38:17:00:aa:44:2c:ab:41:98:08:d5:
                    bf:d2:da:53:24:35:79:bc:ca:86:77:d7:58:cb:97:
                    1b:07:8e:f9:88:7f:81:3c:e2:e4:69:03:ce:ce:b3:
                    f9:85:5b:02:f9:00:7b:67:19:a0:74:9f:a6:e5:63:
                    b3:59:ed:cf:3d:88:35:a9:16:a7:bc:0a:51:7a:60:
                    5e:d4:6d:8f:e9:0c:b1:c0:0f:67:b5:47:d2:27:d5:
                    cd:73:47:7b:08:1c:62:48:9d:15:ac:89:11:eb:f7:
                    cd:33:a2:97:63:a3:e4:6e:04:15:19:64:99:5a:73:
                    67:e2:4e:89:4f:34:32:72:a1:3e:a5:9f:77:43:23:
                    87:7b:a7:cd:b0:75:d0:30:f6:81:e0:eb:b3:60:06:
                    bf:78:87:2f:ab:0c:b2:a5:cb:1b:5a:08:67:11:3e:
                    a9:ff:9e:03:75:f4:e4:23:c0:b1:36:9b:b1:f3:b3:
                    a7:2a:ac:8f:41:4f:8c:71:88:4a:1b:7b:69:38:7c:
                    a8:69:a5:9e:72:b6:71:d5:ba:42:fa:40:77:f2:96:
                    33:7c:c7:35:af:c9:17:0c:b5:85:fb:b6:fe:bc:64:
                    03:b4:12:75:d4:78:d1:82:08:a2:7f:94:3b:f7:b2:
                    d3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:EB:77:F1:46:74:B3:3F:F5:C2:4A:9E:92:E7:3C:63:3E:C6:A3:BC
            X509v3 Authority Key Identifier:
                keyid:9A:54:D1:01:75:01:9C:F8:08:6B:30:B3:1E:65:2A:E0:60:2F:F6:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:3d:5e:92:44:dc:7b:f1:92:63:c6:6d:59:2a:37:29:92:1f:
         d4:cb:1b:04:8e:e2:b5:c5:7c:e3:f2:6d:44:f2:6d:81:a4:0d:
         80:cd:da:1a:60:e4:64:cf:bf:42:21:84:1c:5b:c4:79:79:ea:
         04:b0:99:b7:b4:1f:55:ff:c7:a4:d7:86:f1:71:73:40:ce:ed:
         f0:1a:ce:db:79:e1:51:29:fe:ba:61:7f:b1:7c:6f:e1:17:3b:
         32:54:27:d2:8f:d1:75:36:e2:9a:d0:36:74:27:24:be:60:7d:
         5e:c6:1b:9a:25:66:20:b7:56:4f:36:23:62:5f:b6:09:a4:c7:
         aa:fd:e9:20:83:76:36:04:77:e0:54:bf:68:93:5c:2c:bd:0f:
         73:45:67:d8:df:45:73:16:bd:ca:41:f7:af:02:4f:95:23:f5:
         a0:e6:d8:fc:aa:aa:24:d8:2b:4c:75:8e:fb:d2:ff:3a:02:7a:
         f8:f5:49:f3:50:fe:ea:29:70:89:1a:45:36:5b:c6:20:e4:3d:
         39:5e:ce:2f:dd:ac:e3:6e:5a:cc:f4:84:b5:54:20:04:b9:ca:
         c6:36:4d:b0:81:27:ae:22:3e:94:bb:14:f3:68:a6:17:73:ef:
         a7:55:0f:d0:46:67:06:12:a3:7f:06:8a:64:bd:c0:07:1d:32:
         4c:ca:08:aa
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTU3QzkxMTAvBgNVBAUTKDlBNTREMTAxNzUwMTlDRjgwODZCMzBCMzFFNjUyQUUw
NjAyRkY2QkMwHhcNMjUwMTMxMDE0NjA2WhcNMjUwMjA3MDE0NjA2WjAYMRYwFAYD
VQQDEw02NzljMmI1ZS1lMzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApa8dBU7rYYEucBuCj14erw78OBcAqkQsq0GYCNW/0tpTJDV5vMqGd9dYy5cb
B475iH+BPOLkaQPOzrP5hVsC+QB7ZxmgdJ+m5WOzWe3PPYg1qRanvApRemBe1G2P
6QyxwA9ntUfSJ9XNc0d7CBxiSJ0VrIkR6/fNM6KXY6PkbgQVGWSZWnNn4k6JTzQy
cqE+pZ93QyOHe6fNsHXQMPaB4OuzYAa/eIcvqwyypcsbWghnET6p/54DdfTkI8Cx
Npux87OnKqyPQU+McYhKG3tpOHyoaaWecrZx1bpC+kB38pYzfMc1r8kXDLWF+7b+
vGQDtBJ11HjRggiif5Q797LT9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJzrd/FG
dLM/9cJKnpLnPGM+xqO8MB8GA1UdIwQYMBaAFJpU0QF1AZz4CGswsx5lKuBgL/a8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdDOS85QzZFRjc0RUY5
RDUxMUVDQjZEQ0FENTRDNEY5QUUwMi9tbFRSQVhVQm5QZ0lhekN6SG1VcTRHQXY5
cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21sVFJBWFVCblBnSWF6Q3pIbVVxNEdBdjlydy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NTdDOS85QzZFRjc0RUY5RDUxMUVDQjZEQ0FENTRDNEY5QUUwMi9tbFRSQVhVQm5Q
Z0lhekN6SG1VcTRHQXY5cncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCUPV6SRNx78ZJjxm1ZKjcpkh/UyxsEjuK1xXzj8m1E8m2BpA2Azdoa
YORkz79CIYQcW8R5eeoEsJm3tB9V/8ek14bxcXNAzu3wGs7beeFRKf66YX+xfG/h
FzsyVCfSj9F1NuKa0DZ0JyS+YH1exhuaJWYgt1ZPNiNiX7YJpMeq/ekgg3Y2BHfg
VL9ok1wsvQ9zRWfY30VzFr3KQfevAk+VI/Wg5tj8qqok2CtMdY770v86Anr49Unz
UP7qKXCJGkU2W8Yg5D05Xs4v3azjblrM9IS1VCAEucrGNk2wgSeuIj6UuxTzaKYX
c++nVQ/QRmcGEqN/BopkvcAHHTJMygiq
-----END CERTIFICATE-----