Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110E7A/EADCA734D53D11EDBBBD1B22C4F9AE02/zDYXn_m6cdGcbCfuo61hG1Fj6bQ.mft
File:                     zDYXn_m6cdGcbCfuo61hG1Fj6bQ.mft (raw, json)
Hash identifier:          D1t3bFqztYtMUp5q/gotUmzypzW3FeArVYD/mc8yZyU=
Subject key identifier:   1D:C1:AE:22:A5:39:A8:93:30:73:4D:0F:E5:34:46:BE:AD:37:7A:E2
Authority key identifier: CC:36:17:9F:F9:BA:71:D1:9C:6C:27:EE:A3:AD:61:1B:51:63:E9:B4
Certificate issuer:       /CN=A9110E7A/serialNumber=CC36179FF9BA71D19C6C27EEA3AD611B5163E9B4
Certificate serial:       011D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDYXn_m6cdGcbCfuo61hG1Fj6bQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110E7A/EADCA734D53D11EDBBBD1B22C4F9AE02/zDYXn_m6cdGcbCfuo61hG1Fj6bQ.mft
Manifest number:          0119
Signing time:             Tue 17 Sep 2024 22:56:11 +0000
Manifest this update:     Tue 17 Sep 2024 22:56:11 +0000
Manifest next update:     Tue 24 Sep 2024 22:56:11 +0000
Files and hashes:         1: zDYXn_m6cdGcbCfuo61hG1Fj6bQ.crl (hash: 5x3gBOE5yVkicWQNionSNWjQ0W2/tEGBeMLrG0w0vWQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 285 (0x11d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110E7A/serialNumber=CC36179FF9BA71D19C6C27EEA3AD611B5163E9B4
        Validity
            Not Before: Sep 17 22:56:11 2024 GMT
            Not After : Sep 24 22:56:11 2024 GMT
        Subject: CN=66ea090b-429e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f3:5c:8f:83:40:df:5b:6e:8c:32:90:55:a8:
                    4e:22:c5:b1:49:63:55:62:0c:2c:f5:91:38:f4:f0:
                    12:a9:f3:99:fe:f6:04:f9:8f:50:a3:a6:0c:a3:5e:
                    b3:4d:2a:4d:ac:d3:f2:27:55:1d:6e:36:47:13:99:
                    83:3b:f1:bd:ed:f2:e3:f1:80:1f:6f:d5:b9:9e:5f:
                    47:06:a8:66:e7:00:62:01:fe:50:3e:30:d5:d5:f1:
                    90:e4:b2:cf:8a:1f:fa:5c:58:5f:4b:24:17:9f:8c:
                    f1:32:2c:4f:c5:94:c3:12:b6:01:e5:df:d1:54:27:
                    44:c8:d8:cb:a6:dc:42:ed:52:f4:0a:24:91:e0:c7:
                    e0:e6:0d:60:57:53:09:9f:9f:d0:39:fc:d5:05:f8:
                    48:74:6f:cb:3d:59:bd:3f:4a:4b:4f:6b:8a:da:25:
                    62:3f:22:d0:d4:d1:bd:8d:d5:15:b7:78:eb:11:35:
                    dd:49:ff:d4:b2:ff:b7:4e:52:bc:b3:d2:2d:a1:7a:
                    95:03:3b:1e:e2:45:94:18:a4:7d:c8:0e:0b:b8:16:
                    38:a5:91:b2:2d:79:b8:15:89:b1:e9:1a:66:d7:1a:
                    65:bd:6b:59:e8:06:2d:90:a3:ad:91:fc:e9:bd:0f:
                    dd:9a:99:08:f9:58:8c:3d:78:69:6f:5e:99:20:bf:
                    ea:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:C1:AE:22:A5:39:A8:93:30:73:4D:0F:E5:34:46:BE:AD:37:7A:E2
            X509v3 Authority Key Identifier:
                keyid:CC:36:17:9F:F9:BA:71:D1:9C:6C:27:EE:A3:AD:61:1B:51:63:E9:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110E7A/EADCA734D53D11EDBBBD1B22C4F9AE02/zDYXn_m6cdGcbCfuo61hG1Fj6bQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDYXn_m6cdGcbCfuo61hG1Fj6bQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110E7A/EADCA734D53D11EDBBBD1B22C4F9AE02/zDYXn_m6cdGcbCfuo61hG1Fj6bQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:6b:44:17:90:e2:a5:ca:f8:c0:1b:da:43:de:96:50:ef:e8:
         c1:9f:17:61:d1:fd:22:a7:c0:32:ef:ca:f0:0c:ca:d4:d2:60:
         cf:c9:5b:f0:a0:d6:0b:c2:56:ba:81:06:f7:9d:dd:df:14:61:
         0c:1d:55:2e:05:d1:e8:db:0f:40:35:1e:67:2c:8c:65:90:fc:
         eb:80:4a:ae:da:ed:f9:6d:4e:a3:6a:2f:b7:d8:c3:0a:9e:9d:
         7f:3b:83:c9:a4:a2:f3:58:4a:c9:eb:74:f9:ed:ef:bc:10:f7:
         7c:e5:68:42:10:33:b3:ed:9d:fc:5b:cc:a4:d7:68:05:00:cd:
         fb:a5:69:7f:bf:94:e9:6c:c0:40:a8:ec:db:15:12:1e:f7:f1:
         2d:0c:fe:6c:c0:1e:2e:11:50:1f:1c:81:1e:c8:ab:a7:e1:56:
         70:e6:f7:a8:7e:f9:f7:cd:87:61:ff:9d:34:fc:e7:6c:a1:90:
         2f:88:d7:c1:8c:bf:e5:fe:b4:4c:dd:4c:86:a2:c3:74:f9:bc:
         72:83:ec:2f:99:a7:f6:79:4d:a1:89:17:21:fa:8c:78:2e:05:
         ad:45:c9:95:2c:33:a4:3c:bd:02:4e:b2:b3:3f:5d:a4:6f:0e:
         55:a5:ad:09:e3:16:bb:0e:4b:e6:4e:6c:af:df:41:b4:29:98:
         75:35:cf:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----