Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/JLnt5SwDqG4PIShpO2weCock7RU.mft
File:                     JLnt5SwDqG4PIShpO2weCock7RU.mft (raw, json)
Hash identifier:          MooPUKoym9gO22Y7atES1XkOjGHLw7xRBhahFRMQvvE=
Subject key identifier:   EC:E8:A9:16:74:06:66:D6:17:4D:62:F7:EE:75:1B:43:E6:B9:9F:D5
Authority key identifier: 24:B9:ED:E5:2C:03:A8:6E:0F:21:28:69:3B:6C:1E:0A:87:24:ED:15
Certificate issuer:       /CN=A919D2AF/serialNumber=24B9EDE52C03A86E0F2128693B6C1E0A8724ED15
Certificate serial:       0181
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLnt5SwDqG4PIShpO2weCock7RU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/JLnt5SwDqG4PIShpO2weCock7RU.mft
Manifest number:          0179
Signing time:             Mon 17 Feb 2025 04:25:37 +0000
Manifest this update:     Mon 17 Feb 2025 04:25:36 +0000
Manifest next update:     Mon 24 Feb 2025 04:25:36 +0000
Files and hashes:         1: JLnt5SwDqG4PIShpO2weCock7RU.crl (hash: p977rmvMbr8Ca7nlbSd58PiA59O+woxO296N71o5Q4o=)
                          2: 761318C4BCC011EDA67EF02DC4F9AE02.roa (hash: eI5apWR0zMm4xnDILGv49LNX7IaWBYgGW0HW5FhcVfo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 385 (0x181)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D2AF, serialNumber=24B9EDE52C03A86E0F2128693B6C1E0A8724ED15
        Validity
            Not Before: Feb 17 04:25:36 2025 GMT
            Not After : Feb 24 04:25:36 2025 GMT
        Subject: CN=67b2ba41-5a9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:25:4c:7f:4c:9a:de:09:cd:9d:ae:c6:62:ca:
                    59:3c:3f:03:b3:6c:a0:80:4b:33:6b:71:47:08:97:
                    3b:d2:d4:f2:6b:da:57:be:29:26:a0:3a:15:53:f4:
                    eb:1b:7c:92:9c:78:e0:d4:14:66:f7:30:c6:b0:ca:
                    96:c3:07:0f:cb:ab:25:58:c6:0d:da:47:90:37:53:
                    c9:3c:45:f2:d4:cf:49:07:e4:07:30:b9:88:cc:04:
                    f6:34:e1:b5:71:55:1f:68:e0:4a:9e:f7:ec:b5:cc:
                    23:93:4c:a2:bb:8c:20:a1:99:79:75:2b:c4:f7:e1:
                    cf:86:20:f3:8f:fc:90:f7:c9:f4:47:b4:72:f5:f4:
                    61:9c:dd:f1:e1:06:e1:10:bd:08:c0:8d:30:ba:e8:
                    9c:5e:3c:68:cc:ea:85:e0:8f:36:33:28:b4:4e:74:
                    ad:40:c2:1b:b0:b3:df:9f:0a:eb:f2:6f:eb:dd:15:
                    9d:39:f8:ae:a3:14:b8:4c:5c:80:44:ef:02:08:b9:
                    75:b0:db:85:8d:d5:a4:e8:1c:81:7d:77:22:65:6a:
                    d5:70:79:85:05:b9:e7:57:61:cd:cd:ca:5c:fc:5e:
                    44:3b:64:9c:05:98:37:d9:a1:69:1b:ef:f4:69:07:
                    de:dd:f9:1d:e3:cb:72:31:e4:b8:bd:1a:cf:20:be:
                    f2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:E8:A9:16:74:06:66:D6:17:4D:62:F7:EE:75:1B:43:E6:B9:9F:D5
            X509v3 Authority Key Identifier:
                keyid:24:B9:ED:E5:2C:03:A8:6E:0F:21:28:69:3B:6C:1E:0A:87:24:ED:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/JLnt5SwDqG4PIShpO2weCock7RU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLnt5SwDqG4PIShpO2weCock7RU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/JLnt5SwDqG4PIShpO2weCock7RU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:f1:60:37:68:34:4c:03:eb:e0:f2:57:5d:2c:9c:95:6b:35:
         80:a0:1d:28:a8:8f:21:b1:71:5f:36:ec:42:e1:f1:e0:a7:a6:
         4e:04:a5:4a:cf:ba:3c:ec:d0:dc:b5:96:d5:88:c0:b9:ff:f2:
         69:5e:a2:fd:44:aa:37:a7:70:6f:96:7d:76:31:44:05:23:56:
         2c:95:19:dd:a9:03:28:d1:a1:1d:f0:50:88:f1:49:4f:e7:e4:
         3c:95:67:39:e0:87:0a:81:54:aa:1f:1b:2f:03:d9:c3:73:1e:
         c9:3d:4b:8e:aa:f0:10:28:ca:b6:c0:b7:aa:ab:a7:4a:52:6c:
         d7:46:82:82:f8:ef:db:19:cd:0f:e7:90:c2:03:0b:de:de:9a:
         69:03:96:b5:96:33:0c:55:79:05:b9:88:b5:1e:02:8a:e1:5b:
         a8:fc:3f:fd:54:6e:24:48:7a:e4:ad:ef:68:cd:d1:a3:b0:5d:
         c3:dd:73:9b:f7:43:4d:35:5d:e4:d2:3b:07:a0:5e:51:61:e5:
         d7:e3:b4:0e:0c:2e:06:05:4b:3f:01:06:8e:cf:88:3b:fc:02:
         a4:49:4d:55:28:3b:21:3e:0f:d5:38:8d:32:fb:b2:db:ab:d4:
         63:05:e4:6a:0b:0c:13:46:a0:39:dc:d0:d3:a8:a2:4e:53:e7:
         ef:69:4d:f9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUQyQUYxMTAvBgNVBAUTKDI0QjlFREU1MkMwM0E4NkUwRjIxMjg2OTNCNkMxRTBB
ODcyNEVEMTUwHhcNMjUwMjE3MDQyNTM2WhcNMjUwMjI0MDQyNTM2WjAYMRYwFAYD
VQQDEw02N2IyYmE0MS01YTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAryVMf0ya3gnNna7GYspZPD8Ds2yggEsza3FHCJc70tTya9pXvikmoDoVU/Tr
G3ySnHjg1BRm9zDGsMqWwwcPy6slWMYN2keQN1PJPEXy1M9JB+QHMLmIzAT2NOG1
cVUfaOBKnvfstcwjk0yiu4wgoZl5dSvE9+HPhiDzj/yQ98n0R7Ry9fRhnN3x4Qbh
EL0IwI0wuuicXjxozOqF4I82Myi0TnStQMIbsLPfnwrr8m/r3RWdOfiuoxS4TFyA
RO8CCLl1sNuFjdWk6ByBfXciZWrVcHmFBbnnV2HNzcpc/F5EO2ScBZg32aFpG+/0
aQfe3fkd48tyMeS4vRrPIL7yLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOzoqRZ0
BmbWF01i9+51G0PmuZ/VMB8GA1UdIwQYMBaAFCS57eUsA6huDyEoaTtsHgqHJO0V
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDJBRi9GM0VGQjg5OEJD
QkExMUVEOUM5QUZBMjVDNEY5QUUwMi9KTG50NVN3RHFHNFBJU2hwTzJ3ZUNvY2s3
UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pMbnQ1U3dEcUc0UElTaHBPMndlQ29jazdSVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RDJBRi9GM0VGQjg5OEJDQkExMUVEOUM5QUZBMjVDNEY5QUUwMi9KTG50NVN3RHFH
NFBJU2hwTzJ3ZUNvY2s3UlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDE8WA3aDRMA+vg8lddLJyVazWAoB0oqI8hsXFfNuxC4fHgp6ZOBKVK
z7o87NDctZbViMC5//JpXqL9RKo3p3Bvln12MUQFI1YslRndqQMo0aEd8FCI8UlP
5+Q8lWc54IcKgVSqHxsvA9nDcx7JPUuOqvAQKMq2wLeqq6dKUmzXRoKC+O/bGc0P
55DCAwve3pppA5a1ljMMVXkFuYi1HgKK4Vuo/D/9VG4kSHrkre9ozdGjsF3D3XOb
90NNNV3k0jsHoF5RYeXX47QODC4GBUs/AQaOz4g7/AKkSU1VKDshPg/VOI0y+7Lb
q9RjBeRqCwwTRqA53NDTqKJOU+fvaU35
-----END CERTIFICATE-----