Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft
File:                     ZhNNob_trAyRnSax9_nhaK-dK04.mft (raw, json)
Hash identifier:          Wk1P4mCDyzbJf6AnSBFPU8rAABAgcUR1ND5n4TIGZqU=
Subject key identifier:   FC:D2:70:B4:C8:1E:69:57:0B:CE:F0:5C:57:F9:55:93:54:B6:9B:31
Authority key identifier: 66:13:4D:A1:BF:ED:AC:0C:91:9D:26:B1:F7:F9:E1:68:AF:9D:2B:4E
Certificate issuer:       /CN=A912A5D4/serialNumber=66134DA1BFEDAC0C919D26B1F7F9E168AF9D2B4E
Certificate serial:       16
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft
Manifest number:          14
Signing time:             Sat 29 Mar 2025 07:20:06 +0000
Manifest this update:     Sat 29 Mar 2025 07:20:06 +0000
Manifest next update:     Sat 05 Apr 2025 07:20:06 +0000
Files and hashes:         1: ZhNNob_trAyRnSax9_nhaK-dK04.crl (hash: fBi45vL+6D9/UP40rXBLTjqUTbllaS85524vyvQlygU=)
                          2: 25922C44F3CF11EFBCC75246C4F9AE02.roa (hash: /+v7Ksoid33z04XmzwyzW93GCN47u5aOiXMh700TRNk=)
                          3: 4801BE3EF3CF11EF93538346C4F9AE02.roa (hash: r5071xQo7/PgibLwPNn05K7+0v7I1Jv+CGRNijITcBs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A5D4
        Validity
            Not Before: Mar 29 07:20:06 2025 GMT
            Not After : Apr  5 07:20:06 2025 GMT
        Subject: CN=67e79f26-2566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b0:c7:c6:c3:8c:6c:be:69:19:35:d3:a1:88:
                    ef:82:ce:31:3b:1d:9c:70:5e:9e:31:53:07:b0:8e:
                    ff:1a:c0:49:29:c7:50:b2:f3:14:fe:ae:7e:62:64:
                    80:4c:2a:44:b5:e1:ef:f2:08:ec:c9:cc:6a:cd:69:
                    cb:5f:d5:c3:d5:47:94:d7:83:fc:fa:c2:dd:f9:66:
                    16:dd:91:c8:5a:71:fc:b2:a6:c9:fc:b4:e6:59:3f:
                    b0:90:5e:45:2b:07:22:65:0b:b1:3e:82:c2:ab:49:
                    c1:bc:a8:91:ff:f2:46:b3:39:ba:48:2c:ba:b3:c5:
                    bd:7c:12:b7:02:5e:bb:97:cd:af:8e:9d:9c:89:1c:
                    95:80:9f:ae:d8:b8:b1:02:4f:4c:a8:57:72:a8:4a:
                    ac:fa:41:66:4a:b3:7f:a9:c8:ff:15:16:84:7d:3e:
                    35:a4:69:15:f1:4d:96:c5:10:8f:45:96:45:31:a7:
                    7b:98:2d:41:99:5b:48:60:3d:8a:db:4a:21:4b:89:
                    77:58:4e:39:fb:fe:da:84:0d:ab:11:95:e3:85:00:
                    2e:21:5a:96:42:e7:b0:22:8d:05:bf:61:ce:f8:b2:
                    d6:2d:75:ae:e6:10:41:50:88:dd:03:82:36:c9:64:
                    d1:67:59:01:f7:1e:7d:8d:2d:f6:ba:fe:d1:0e:fd:
                    f3:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D2:70:B4:C8:1E:69:57:0B:CE:F0:5C:57:F9:55:93:54:B6:9B:31
            X509v3 Authority Key Identifier:
                keyid:66:13:4D:A1:BF:ED:AC:0C:91:9D:26:B1:F7:F9:E1:68:AF:9D:2B:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:36:23:1e:23:05:99:7f:34:8e:23:96:6f:eb:78:d4:da:5c:
         42:c8:5e:5d:13:11:a6:17:69:7d:13:96:1a:0f:ed:96:99:e3:
         bb:10:2f:ac:04:40:dc:e9:ff:aa:3c:57:dc:f4:e3:c0:b9:d3:
         8b:c2:10:e7:95:a0:82:b6:96:0f:b5:04:c6:8f:a4:0c:b1:48:
         a2:f8:e7:17:02:b7:af:24:96:c6:7c:70:a3:4d:0f:2b:8a:55:
         15:90:8c:87:c6:98:22:0d:e3:cb:e2:3a:a3:1d:4c:3f:41:f8:
         e7:92:1c:02:64:3c:f0:60:19:e7:a0:71:45:f7:86:ab:93:c5:
         c4:ea:c3:bb:ec:e2:7c:69:5d:1b:4b:8b:87:51:92:ee:d4:8a:
         96:b5:fb:73:61:50:aa:5f:e5:f2:74:d7:c8:b0:42:52:1b:6c:
         b3:c5:e8:e2:bb:a4:77:58:8d:bf:f4:94:40:8a:d5:b6:11:9c:
         7f:d0:66:ec:d5:7f:c8:87:04:88:ed:b0:04:9e:e8:f0:33:3f:
         00:ba:52:d7:dc:20:db:c1:2e:43:39:0f:42:f4:5a:7c:63:1d:
         3f:93:76:e9:b4:d5:68:b5:1c:6b:0f:46:b7:e2:6d:df:c6:59:
         82:a3:a1:c5:47:af:5a:de:dd:fd:8b:8d:c7:18:46:ff:bc:c8:
         7e:ce:84:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----