Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft
File:                     YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft (raw, json)
Hash identifier:          e8eXjJP+4t7vOpKqDlpltFjVf2DP4qDhBysaQBf5Mek=
Subject key identifier:   A6:25:46:90:28:50:B4:5D:98:9A:76:16:85:BB:C3:1C:F0:BB:22:D4
Authority key identifier: 62:C6:B1:A0:B2:C3:A6:14:F3:CB:43:FA:BB:31:BF:81:61:6B:54:B4
Certificate issuer:       /CN=A9120FD4/serialNumber=62C6B1A0B2C3A614F3CB43FABB31BF81616B54B4
Certificate serial:       0C8D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft
Manifest number:          0C7F
Signing time:             Fri 28 Mar 2025 18:26:34 +0000
Manifest this update:     Fri 28 Mar 2025 18:26:33 +0000
Manifest next update:     Fri 04 Apr 2025 18:26:33 +0000
Files and hashes:         1: YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl (hash: qVRZd9teWDeWTxJZTVQ7DBd9AlO/FSOqHye4CthuQHg=)
                          2: 4154E51AC91311EBA6226F45C4F9AE02.roa (hash: X3uR7nkHEkJDs/4UDZXjCbVpYlI7ETxizWrqRmPT3Rg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3213 (0xc8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120FD4
        Validity
            Not Before: Mar 28 18:26:33 2025 GMT
            Not After : Apr  4 18:26:33 2025 GMT
        Subject: CN=67e6e9da-2a03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:43:b8:8e:6c:f9:d3:81:9f:5d:0c:8d:09:e4:
                    11:34:e3:47:c4:91:40:b3:d6:c3:7f:6a:84:d4:eb:
                    7d:df:70:d7:81:50:23:73:29:9d:35:6b:55:b6:be:
                    98:6b:f5:7b:87:ad:28:d7:d8:98:49:a4:d9:3e:27:
                    fa:f7:be:da:5b:bf:c2:66:54:b7:96:0d:9e:21:24:
                    88:81:8b:4e:e9:c1:60:7a:f7:2e:bf:10:d7:58:bb:
                    22:53:fd:ca:7b:f5:a9:d8:f5:50:3e:c0:15:30:6f:
                    8e:70:9f:24:1c:46:43:ee:69:68:db:e3:68:15:7f:
                    2a:c4:bc:d8:38:68:a5:c5:1e:ea:e0:ca:cb:a4:55:
                    7b:12:63:d2:c8:f5:46:e4:01:44:59:87:c6:f7:1f:
                    92:ea:58:09:fe:ee:1e:a1:18:4f:ab:e7:71:fb:98:
                    33:63:f7:ea:7c:2f:a7:7c:2f:2c:aa:f3:d3:a8:e8:
                    b7:58:17:59:e8:8e:8c:e4:45:70:27:f5:fa:ec:e1:
                    39:ab:41:94:a6:0c:ae:02:76:8d:93:fa:4e:9d:43:
                    20:11:dc:6c:4a:fd:87:ce:54:1d:73:fc:be:91:ca:
                    d6:79:34:e7:d1:eb:b1:e2:94:23:81:c0:16:34:ac:
                    3b:5b:a8:d8:20:23:de:59:5c:74:02:51:47:d4:9e:
                    23:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:25:46:90:28:50:B4:5D:98:9A:76:16:85:BB:C3:1C:F0:BB:22:D4
            X509v3 Authority Key Identifier:
                keyid:62:C6:B1:A0:B2:C3:A6:14:F3:CB:43:FA:BB:31:BF:81:61:6B:54:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:9e:a3:36:3e:c2:9c:a3:96:a1:e6:ca:0e:fa:6f:1e:07:ab:
         a4:68:2f:3e:37:58:58:da:f1:41:62:27:d8:5d:57:ad:00:80:
         ec:ad:c6:03:36:27:85:b7:34:cd:51:3e:64:dd:02:fe:7d:93:
         05:ae:c5:82:e4:b4:8e:15:04:6b:18:08:4a:6e:33:e7:52:a8:
         40:86:d6:77:fc:ff:b3:1a:f0:43:d8:ad:5a:eb:fe:0c:0f:af:
         b0:57:3b:7f:2c:38:01:1c:f6:3a:6d:d6:42:81:19:21:cb:12:
         6a:43:1b:e6:c8:47:57:34:5d:d4:7d:99:e5:8d:22:a4:12:58:
         ae:fc:02:0f:c8:be:3f:87:fb:69:95:27:0b:e3:15:12:a0:57:
         ef:5e:d5:a2:4a:e6:74:88:24:87:b4:29:ff:ff:c6:8e:71:fa:
         1c:0c:85:a9:b0:7f:7d:46:09:3e:a1:a7:cd:32:14:43:e1:2f:
         3a:06:d1:f0:c7:4f:d2:4d:d2:1e:bb:37:23:3d:ff:92:38:72:
         60:1c:85:9f:ac:d9:fc:ba:01:53:93:21:ed:f2:c9:bf:2d:f3:
         36:19:c1:c5:c2:39:a6:ad:12:96:27:fd:66:12:b9:05:c2:23:
         10:b1:44:99:34:64:52:74:bc:fc:f7:2f:ed:ff:2c:e1:3c:74:
         f9:1c:7b:27
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjBGRDQxMTAvBgNVBAUTKDYyQzZCMUEwQjJDM0E2MTRGM0NCNDNGQUJCMzFCRjgx
NjE2QjU0QjQwHhcNMjUwMzI4MTgyNjMzWhcNMjUwNDA0MTgyNjMzWjAYMRYwFAYD
VQQDEw02N2U2ZTlkYS0yYTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp0O4jmz504GfXQyNCeQRNONHxJFAs9bDf2qE1Ot933DXgVAjcymdNWtVtr6Y
a/V7h60o19iYSaTZPif6977aW7/CZlS3lg2eISSIgYtO6cFgevcuvxDXWLsiU/3K
e/Wp2PVQPsAVMG+OcJ8kHEZD7mlo2+NoFX8qxLzYOGilxR7q4MrLpFV7EmPSyPVG
5AFEWYfG9x+S6lgJ/u4eoRhPq+dx+5gzY/fqfC+nfC8sqvPTqOi3WBdZ6I6M5EVw
J/X67OE5q0GUpgyuAnaNk/pOnUMgEdxsSv2HzlQdc/y+kcrWeTTn0eux4pQjgcAW
NKw7W6jYICPeWVx0AlFH1J4jxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKYlRpAo
ULRdmJp2FoW7wxzwuyLUMB8GA1UdIwQYMBaAFGLGsaCyw6YU88tD+rsxv4Fha1S0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEZENC84MDlDMjREMkY1
NTExMUU5OUQ1QjdEM0RDNEY5QUUwMi9Zc2F4b0xMRHBoVHp5MFA2dXpHX2dXRnJW
TFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lzYXhvTExEcGhUenkwUDZ1ekdfZ1dGclZMUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MEZENC84MDlDMjREMkY1NTExMUU5OUQ1QjdEM0RDNEY5QUUwMi9Zc2F4b0xMRHBo
VHp5MFA2dXpHX2dXRnJWTFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBSnqM2PsKco5ah5soO+m8eB6ukaC8+N1hY2vFBYifYXVetAIDsrcYD
NieFtzTNUT5k3QL+fZMFrsWC5LSOFQRrGAhKbjPnUqhAhtZ3/P+zGvBD2K1a6/4M
D6+wVzt/LDgBHPY6bdZCgRkhyxJqQxvmyEdXNF3UfZnljSKkEliu/AIPyL4/h/tp
lScL4xUSoFfvXtWiSuZ0iCSHtCn//8aOcfocDIWpsH99Rgk+oafNMhRD4S86BtHw
x0/STdIeuzcjPf+SOHJgHIWfrNn8ugFTkyHt8sm/LfM2GcHFwjmmrRKWJ/1mErkF
wiMQsUSZNGRSdLz89y/t/yzhPHT5HHsn
-----END CERTIFICATE-----