Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.mft
File:                     _h1b-QL6kS1-C16YDPkdvf0rtk8.mft (raw, json)
Hash identifier:          dxd/X8u4xqdW4Ft6jZqG/sCucpS+vRWfswt29H8Np4Q=
Subject key identifier:   8C:53:16:E5:A2:EB:8C:EF:EE:A6:ED:51:62:84:49:6D:1C:7A:39:9B
Authority key identifier: FE:1D:5B:F9:02:FA:91:2D:7E:0B:5E:98:0C:F9:1D:BD:FD:2B:B6:4F
Certificate issuer:       /CN=A91F8534/serialNumber=FE1D5BF902FA912D7E0B5E980CF91DBDFD2BB64F
Certificate serial:       20A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_h1b-QL6kS1-C16YDPkdvf0rtk8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.mft
Manifest number:          2098
Signing time:             Fri 31 Jan 2025 15:57:56 +0000
Manifest this update:     Fri 31 Jan 2025 15:57:56 +0000
Manifest next update:     Fri 07 Feb 2025 15:57:56 +0000
Files and hashes:         1: _h1b-QL6kS1-C16YDPkdvf0rtk8.crl (hash: NK4miqXY8c9osrz3JXGVF87t/E7o0dzhV8VQ88cB8O0=)
                          2: 173CA1AABCA011ED914D176DC4F9AE02.roa (hash: ZtA42MiYiR48zZwCRwa0egur+P+IXymEJJp62pzAS3Q=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8361 (0x20a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8534/serialNumber=FE1D5BF902FA912D7E0B5E980CF91DBDFD2BB64F
        Validity
            Not Before: Jan 31 15:57:56 2025 GMT
            Not After : Feb  7 15:57:56 2025 GMT
        Subject: CN=679cf304-936c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:82:e3:08:5b:43:ae:6e:9d:6b:34:38:28:f9:
                    8c:78:56:a0:d9:f8:b9:4b:d5:f6:d0:36:fe:72:bc:
                    7f:e3:34:d4:cd:f3:1f:ed:27:03:ca:91:85:da:8f:
                    95:d5:b4:4c:5f:d1:23:7a:81:bd:e1:58:91:c8:56:
                    c8:bf:f2:1a:da:cd:e7:a8:37:f5:f6:50:1d:2d:a6:
                    a9:24:ca:96:a2:1e:d8:d1:ab:21:31:39:a8:c7:2a:
                    85:c7:d5:ae:8b:66:b4:a1:3a:06:86:e1:c0:20:f6:
                    26:08:02:d9:6e:51:cb:33:2b:73:75:d5:95:06:6d:
                    15:ae:da:85:1e:f7:26:ca:87:ce:55:40:2d:a7:7a:
                    fe:13:5e:aa:33:17:a8:16:c4:6b:91:16:10:6c:49:
                    be:ef:52:46:54:86:77:72:d2:cb:e4:f2:55:2f:96:
                    7f:c6:89:8e:81:d5:26:a0:e1:45:83:1a:75:41:bb:
                    66:d6:0a:3c:01:73:3f:fd:ce:a1:24:7a:d4:2b:6a:
                    59:27:b1:78:8f:6f:04:4c:fb:8c:9d:cb:d1:ad:3a:
                    4c:31:90:7d:19:7c:05:dd:cf:be:71:13:ec:12:ea:
                    89:62:16:a1:a7:83:54:f4:dc:8e:da:68:a4:09:6f:
                    8c:8b:5e:28:62:5e:0e:a2:f6:e5:f8:6e:8a:20:e1:
                    8b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:53:16:E5:A2:EB:8C:EF:EE:A6:ED:51:62:84:49:6D:1C:7A:39:9B
            X509v3 Authority Key Identifier:
                keyid:FE:1D:5B:F9:02:FA:91:2D:7E:0B:5E:98:0C:F9:1D:BD:FD:2B:B6:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_h1b-QL6kS1-C16YDPkdvf0rtk8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:9e:a8:53:85:7f:c3:99:38:54:37:ff:cd:b6:79:ad:82:a9:
         14:a4:d5:17:6e:ae:45:0c:32:fa:92:b9:49:02:a1:30:0f:a9:
         2e:e0:94:27:de:1b:c8:8f:9c:b2:69:29:2f:8e:e9:22:ca:e0:
         ee:84:dd:15:83:e4:29:0d:97:de:72:81:e9:df:0a:db:fc:16:
         42:07:4d:fc:0b:51:02:46:7f:5c:22:54:16:4d:fb:53:74:06:
         eb:c6:9b:ba:66:0b:77:71:77:89:ae:1a:ca:f5:21:05:30:79:
         7f:69:49:1c:93:eb:da:9f:7e:ce:c9:7a:6e:17:f0:a1:fc:da:
         1c:90:61:82:ce:a4:f5:55:08:09:7f:1e:23:a0:cc:f4:d0:74:
         83:9b:c7:60:4e:73:8b:66:24:c7:55:5f:09:de:f6:a4:4d:00:
         ab:cd:3f:36:f1:71:27:2e:23:dd:20:bd:55:7c:bb:af:a2:b1:
         17:a0:9f:38:88:75:00:3e:9d:9b:c4:13:1c:9e:91:33:d1:bc:
         92:e0:ff:e4:c0:27:74:5f:43:75:c8:a3:89:f7:27:71:8e:59:
         ef:60:e3:59:c8:01:b1:0a:59:c9:32:3d:74:c1:54:a7:5c:c7:
         5f:7e:21:a3:b5:08:b7:4d:94:01:bb:39:d9:0e:0d:b1:c4:17:
         13:a6:5f:df
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICIKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjg1MzQxMTAvBgNVBAUTKEZFMUQ1QkY5MDJGQTkxMkQ3RTBCNUU5ODBDRjkxREJE
RkQyQkI2NEYwHhcNMjUwMTMxMTU1NzU2WhcNMjUwMjA3MTU1NzU2WjAYMRYwFAYD
VQQDEw02NzljZjMwNC05MzZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs4LjCFtDrm6dazQ4KPmMeFag2fi5S9X20Db+crx/4zTUzfMf7ScDypGF2o+V
1bRMX9EjeoG94ViRyFbIv/Ia2s3nqDf19lAdLaapJMqWoh7Y0ashMTmoxyqFx9Wu
i2a0oToGhuHAIPYmCALZblHLMytzddWVBm0VrtqFHvcmyofOVUAtp3r+E16qMxeo
FsRrkRYQbEm+71JGVIZ3ctLL5PJVL5Z/xomOgdUmoOFFgxp1Qbtm1go8AXM//c6h
JHrUK2pZJ7F4j28ETPuMncvRrTpMMZB9GXwF3c++cRPsEuqJYhahp4NU9NyO2mik
CW+Mi14oYl4Oovbl+G6KIOGLbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIxTFuWi
64zv7qbtUWKESW0cejmbMB8GA1UdIwQYMBaAFP4dW/kC+pEtfgtemAz5Hb39K7ZP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODUzNC82RTZBNDYyQ0ZF
REQxMUU1QjQ5MDVEN0NDNEY5QUUwMi9faDFiLVFMNmtTMS1DMTZZRFBrZHZmMHJ0
azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19oMWItUUw2a1MxLUMxNllEUGtkdmYwcnRrOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
ODUzNC82RTZBNDYyQ0ZFREQxMUU1QjQ5MDVEN0NDNEY5QUUwMi9faDFiLVFMNmtT
MS1DMTZZRFBrZHZmMHJ0azgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC6nqhThX/DmThUN//NtnmtgqkUpNUXbq5FDDL6krlJAqEwD6ku4JQn
3hvIj5yyaSkvjukiyuDuhN0Vg+QpDZfecoHp3wrb/BZCB038C1ECRn9cIlQWTftT
dAbrxpu6Zgt3cXeJrhrK9SEFMHl/aUkck+van37OyXpuF/Ch/NockGGCzqT1VQgJ
fx4joMz00HSDm8dgTnOLZiTHVV8J3vakTQCrzT828XEnLiPdIL1VfLuvorEXoJ84
iHUAPp2bxBMcnpEz0byS4P/kwCd0X0N1yKOJ9ydxjlnvYONZyAGxClnJMj10wVSn
XMdffiGjtQi3TZQBuznZDg2xxBcTpl/f
-----END CERTIFICATE-----