Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DFF7/332D0ED6236711EDA8AC1F28C4F9AE02/xYjecPKsY-wWHdqc3CADirBHKkU.mft
File:                     xYjecPKsY-wWHdqc3CADirBHKkU.mft (raw, json)
Hash identifier:          MTbIA7kBUkCphQv0yUz6pko+uxnQ89l2+d6WjLLSKFE=
Subject key identifier:   78:CA:8B:E9:07:AA:D9:82:92:31:31:ED:F6:94:B5:35:DC:1F:F7:AE
Authority key identifier: C5:88:DE:70:F2:AC:63:EC:16:1D:DA:9C:DC:20:03:8A:B0:47:2A:45
Certificate issuer:       /CN=A919DFF7/serialNumber=C588DE70F2AC63EC161DDA9CDC20038AB0472A45
Certificate serial:       020C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xYjecPKsY-wWHdqc3CADirBHKkU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DFF7/332D0ED6236711EDA8AC1F28C4F9AE02/xYjecPKsY-wWHdqc3CADirBHKkU.mft
Manifest number:          0209
Signing time:             Fri 07 Feb 2025 01:22:40 +0000
Manifest this update:     Fri 07 Feb 2025 01:22:39 +0000
Manifest next update:     Fri 14 Feb 2025 01:22:39 +0000
Files and hashes:         1: xYjecPKsY-wWHdqc3CADirBHKkU.crl (hash: 9i+DeIq3PaCuVnlzV95bpicVepunIDvrp7a7St7z9BY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 524 (0x20c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DFF7, serialNumber=C588DE70F2AC63EC161DDA9CDC20038AB0472A45
        Validity
            Not Before: Feb  7 01:22:39 2025 GMT
            Not After : Feb 14 01:22:39 2025 GMT
        Subject: CN=67a56060-fac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bc:cd:6e:08:bb:bc:1f:97:0b:9d:a7:9f:f9:
                    5a:08:df:43:d4:17:35:d4:96:de:7b:09:02:41:c6:
                    68:9d:c3:2e:49:84:64:ae:f8:1a:81:8b:50:82:87:
                    47:b4:3f:b8:0a:b6:3b:b1:68:6f:62:31:ef:9d:c8:
                    38:10:43:7e:88:e4:96:ee:17:60:ee:f3:d0:73:a2:
                    cb:db:5c:58:f2:2c:9c:4d:55:3e:04:9c:29:ce:85:
                    35:ce:03:48:f7:79:c6:75:ba:dc:a3:68:27:62:3a:
                    73:a8:80:c0:cf:0f:f1:f0:fb:f9:68:9a:ef:37:be:
                    68:2d:b2:d4:08:d8:71:bc:82:0c:cb:03:ca:63:1e:
                    2e:ec:7a:6b:53:77:44:6e:2d:ec:3e:42:70:23:38:
                    50:f6:0e:dc:f5:35:47:19:8a:2e:80:b4:34:78:8f:
                    05:43:0b:86:78:61:91:d4:6e:b8:8d:c3:4e:65:0b:
                    fe:a7:fc:0d:75:a4:2b:be:5e:ba:eb:ca:f8:dd:a5:
                    d4:0c:22:e7:bf:7b:d2:e3:c4:7d:e3:d7:b7:13:bf:
                    cd:3d:77:bb:f6:0b:0d:e5:a5:77:f7:15:69:f7:a8:
                    ac:be:f3:8b:dc:ab:ce:1d:4f:f8:35:59:7a:06:ee:
                    c0:d1:f6:62:6f:ab:27:ed:43:f1:68:5e:9f:7b:e5:
                    fd:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:CA:8B:E9:07:AA:D9:82:92:31:31:ED:F6:94:B5:35:DC:1F:F7:AE
            X509v3 Authority Key Identifier:
                keyid:C5:88:DE:70:F2:AC:63:EC:16:1D:DA:9C:DC:20:03:8A:B0:47:2A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DFF7/332D0ED6236711EDA8AC1F28C4F9AE02/xYjecPKsY-wWHdqc3CADirBHKkU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xYjecPKsY-wWHdqc3CADirBHKkU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DFF7/332D0ED6236711EDA8AC1F28C4F9AE02/xYjecPKsY-wWHdqc3CADirBHKkU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:f2:cf:29:ec:d5:15:3d:e2:01:18:c5:46:b9:24:b3:5f:3e:
         44:14:ee:0e:8c:99:ee:c8:3b:e0:54:f7:b0:53:82:7d:ca:2a:
         54:43:70:e5:04:bf:51:1b:bf:48:9f:09:6d:3e:00:6c:b5:6e:
         70:00:35:6b:5a:a3:43:95:df:4d:2c:dd:33:25:7a:67:48:5d:
         1b:60:87:42:c8:ab:e5:a9:41:59:95:df:ce:99:f4:b7:b3:e3:
         ed:7d:36:e6:15:cd:ae:00:cc:2d:60:95:a8:66:cc:68:80:a2:
         1d:bd:15:84:db:8a:14:d7:41:cf:d2:62:af:40:56:44:53:9d:
         7e:f3:f6:a5:b0:c3:bf:f0:a3:da:43:e4:99:05:9e:ee:f7:26:
         96:62:83:d1:8b:21:17:f4:05:38:c8:9e:f5:4a:f6:07:9a:5d:
         d4:33:44:2f:25:e5:8c:30:fb:08:f9:a0:ac:e9:29:03:81:e3:
         06:5e:40:0e:e4:99:4e:17:e7:43:5b:a7:d7:c8:7e:d7:f2:dd:
         2b:b7:6a:59:a0:9d:76:53:a8:91:93:a3:62:90:b1:0c:a5:e4:
         3e:3c:d1:3f:44:ea:5e:5e:0c:99:f5:e3:19:07:8c:52:d4:e0:
         98:33:0a:6c:5e:de:ca:18:2a:34:c7:71:ab:65:b4:73:20:fd:
         20:84:b9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----