Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D3B/B2499858313811E99DE3266FC4F9AE02/xKVYu3wj5_co1s5omYU0FMh2f0c.mft
File:                     xKVYu3wj5_co1s5omYU0FMh2f0c.mft (raw, json)
Hash identifier:          o4LxFW+yPz2YTH8MlFn7YAWov+mvsFb6zdkKJ0fVHqI=
Subject key identifier:   9B:E6:05:6D:6B:CA:D6:35:71:45:A3:2C:DA:59:56:B8:F0:C2:ED:DA
Authority key identifier: C4:A5:58:BB:7C:23:E7:F7:28:D6:CE:68:99:85:34:14:C8:76:7F:47
Certificate issuer:       /CN=A9171D3B/serialNumber=C4A558BB7C23E7F728D6CE6899853414C8767F47
Certificate serial:       03F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xKVYu3wj5_co1s5omYU0FMh2f0c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171D3B/B2499858313811E99DE3266FC4F9AE02/xKVYu3wj5_co1s5omYU0FMh2f0c.mft
Manifest number:          13EE
Signing time:             Mon 14 Oct 2024 01:35:49 +0000
Manifest this update:     Mon 14 Oct 2024 01:35:49 +0000
Manifest next update:     Mon 21 Oct 2024 01:35:49 +0000
Files and hashes:         1: xKVYu3wj5_co1s5omYU0FMh2f0c.crl (hash: Jr+wgMQl2Mv5mXQpnCTDTgIrSEEZJ+5ehJFhSCvVFpo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1008 (0x3f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171D3B/serialNumber=C4A558BB7C23E7F728D6CE6899853414C8767F47
        Validity
            Not Before: Oct 14 01:35:49 2024 GMT
            Not After : Oct 21 01:35:49 2024 GMT
        Subject: CN=670c7575-5fb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:96:67:a6:83:6d:88:49:e4:34:a6:ac:4f:70:
                    a7:25:70:ef:ef:12:5f:24:a4:5f:35:f9:1f:04:8f:
                    8e:2e:9a:1f:26:24:03:85:4c:15:d8:30:9b:d7:b1:
                    01:f5:89:f9:e4:a0:9d:95:37:66:04:0f:3b:d8:b6:
                    7d:a8:b2:d8:35:46:9d:f7:dc:8a:d6:1b:87:60:64:
                    88:b1:ee:13:c6:f4:89:0f:fc:35:b3:a7:fd:cb:b1:
                    06:30:83:d1:2c:2a:df:86:e3:00:cd:77:b7:2d:22:
                    26:f0:06:26:e5:45:e6:fc:34:6a:f6:96:62:fc:ad:
                    c6:2f:f2:9c:98:28:34:32:4a:d6:92:f5:ec:93:55:
                    14:72:a5:12:2c:30:26:f5:4e:ff:c0:59:24:5d:a2:
                    06:ef:82:d6:0a:39:5d:d7:e0:e3:32:ed:06:0e:ae:
                    0b:e7:ed:25:da:15:22:bc:06:f7:b6:fa:16:bb:a0:
                    31:45:ff:c1:5e:83:cf:67:6f:17:de:54:aa:d3:4b:
                    1e:59:1d:f8:82:ec:83:52:1a:19:54:04:3b:64:d4:
                    05:5d:81:34:d3:91:98:bf:31:52:d4:21:c8:99:16:
                    44:02:59:55:34:eb:9b:a8:7d:f0:3b:96:e8:0d:24:
                    74:b3:cd:f6:c2:6b:40:a9:d2:89:c8:7d:59:52:dd:
                    ad:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E6:05:6D:6B:CA:D6:35:71:45:A3:2C:DA:59:56:B8:F0:C2:ED:DA
            X509v3 Authority Key Identifier:
                keyid:C4:A5:58:BB:7C:23:E7:F7:28:D6:CE:68:99:85:34:14:C8:76:7F:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171D3B/B2499858313811E99DE3266FC4F9AE02/xKVYu3wj5_co1s5omYU0FMh2f0c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xKVYu3wj5_co1s5omYU0FMh2f0c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D3B/B2499858313811E99DE3266FC4F9AE02/xKVYu3wj5_co1s5omYU0FMh2f0c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:d9:b6:55:4d:e0:a8:5d:22:e5:8a:58:a7:d2:d3:4b:4f:c2:
         0f:92:77:f5:06:ab:a9:df:33:00:82:22:46:07:b9:fc:05:b8:
         ba:e7:97:d6:7b:5d:25:19:5f:f1:df:10:9f:89:3e:92:3c:7d:
         ff:db:31:07:94:52:3a:4b:94:8d:df:1f:de:76:1e:a9:fa:4d:
         3f:0a:94:78:74:3d:5b:d8:6d:f8:ea:61:6b:28:0f:a2:a8:08:
         49:46:78:0a:66:92:c9:9b:e1:40:83:7b:37:f2:a2:d0:85:16:
         78:eb:f5:45:09:37:1a:0a:9c:fd:02:66:0d:f4:87:d0:3e:67:
         70:09:48:c3:af:23:7c:22:d4:dd:93:9c:3d:0a:1a:39:a3:26:
         01:be:a2:0b:e8:31:6e:29:e1:d7:3f:ab:9b:a1:ea:d6:a4:0d:
         6b:7e:2a:9e:9a:76:a4:7d:2a:07:e8:ba:d4:ef:ab:3a:c0:33:
         f6:a3:c5:2a:3a:95:73:cb:ac:15:88:0a:0e:6f:db:a2:24:4e:
         af:70:54:08:2d:9a:f9:c3:ca:f9:00:33:3a:70:83:75:bb:3b:
         15:d0:f1:b4:0f:a8:eb:05:68:59:5a:56:b8:41:5a:70:6f:ac:
         9f:7a:0a:e0:14:97:0b:eb:07:aa:2f:1a:a2:62:09:e6:9a:3d:
         f7:28:fc:d5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA/AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzFEM0IxMTAvBgNVBAUTKEM0QTU1OEJCN0MyM0U3RjcyOEQ2Q0U2ODk5ODUzNDE0
Qzg3NjdGNDcwHhcNMjQxMDE0MDEzNTQ5WhcNMjQxMDIxMDEzNTQ5WjAYMRYwFAYD
VQQDEw02NzBjNzU3NS01ZmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtJZnpoNtiEnkNKasT3CnJXDv7xJfJKRfNfkfBI+OLpofJiQDhUwV2DCb17EB
9Yn55KCdlTdmBA872LZ9qLLYNUad99yK1huHYGSIse4TxvSJD/w1s6f9y7EGMIPR
LCrfhuMAzXe3LSIm8AYm5UXm/DRq9pZi/K3GL/KcmCg0MkrWkvXsk1UUcqUSLDAm
9U7/wFkkXaIG74LWCjld1+DjMu0GDq4L5+0l2hUivAb3tvoWu6AxRf/BXoPPZ28X
3lSq00seWR34guyDUhoZVAQ7ZNQFXYE005GYvzFS1CHImRZEAllVNOubqH3wO5bo
DSR0s832wmtAqdKJyH1ZUt2tCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJvmBW1r
ytY1cUWjLNpZVrjwwu3aMB8GA1UdIwQYMBaAFMSlWLt8I+f3KNbOaJmFNBTIdn9H
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUQzQi9CMjQ5OTg1ODMx
MzgxMUU5OURFMzI2NkZDNEY5QUUwMi94S1ZZdTN3ajVfY28xczVvbVlVMEZNaDJm
MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hLVll1M3dqNV9jbzFzNW9tWVUwRk1oMmYwYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MUQzQi9CMjQ5OTg1ODMxMzgxMUU5OURFMzI2NkZDNEY5QUUwMi94S1ZZdTN3ajVf
Y28xczVvbVlVMEZNaDJmMGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB+2bZVTeCoXSLlilin0tNLT8IPknf1Bqup3zMAgiJGB7n8Bbi655fW
e10lGV/x3xCfiT6SPH3/2zEHlFI6S5SN3x/edh6p+k0/CpR4dD1b2G346mFrKA+i
qAhJRngKZpLJm+FAg3s38qLQhRZ46/VFCTcaCpz9AmYN9IfQPmdwCUjDryN8ItTd
k5w9Cho5oyYBvqIL6DFuKeHXP6uboerWpA1rfiqemnakfSoH6LrU76s6wDP2o8Uq
OpVzy6wViAoOb9uiJE6vcFQILZr5w8r5ADM6cIN1uzsV0PG0D6jrBWhZWla4QVpw
b6yfegrgFJcL6weqLxqiYgnmmj33KPzV
-----END CERTIFICATE-----