Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.mft
File:                     EZQLtYNEqix5xJU51t-RUZbv6CY.mft (raw, json)
Hash identifier:          TbBRJLznfzRSKJ6lcPD0e1Jwp5XB1WETe+/W1NHuKWA=
Subject key identifier:   72:8C:95:6C:1A:E9:18:97:D7:69:8A:8D:F4:2B:D6:B1:78:9B:2D:C9
Authority key identifier: 11:94:0B:B5:83:44:AA:2C:79:C4:95:39:D6:DF:91:51:96:EF:E8:26
Certificate issuer:       /CN=A912B600/serialNumber=11940BB58344AA2C79C49539D6DF915196EFE826
Certificate serial:       078F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EZQLtYNEqix5xJU51t-RUZbv6CY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.mft
Manifest number:          0789
Signing time:             Fri 28 Mar 2025 14:47:02 +0000
Manifest this update:     Fri 28 Mar 2025 14:47:01 +0000
Manifest next update:     Fri 04 Apr 2025 14:47:01 +0000
Files and hashes:         1: EZQLtYNEqix5xJU51t-RUZbv6CY.crl (hash: Bo9YZD6f76uURYNwgKyON4MsSrBFEvibGLcdx6pNbz0=)
                          2: 5DE12890180311EBA311E181C4F9AE02.roa (hash: F8xinTLI0D4YZKI6rrpI2+NEMkL5MZGo2LQqsqaOFZA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1935 (0x78f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B600
        Validity
            Not Before: Mar 28 14:47:01 2025 GMT
            Not After : Apr  4 14:47:01 2025 GMT
        Subject: CN=67e6b666-a9ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5f:16:d2:bc:44:44:6f:c4:55:e9:f5:fe:40:
                    3e:30:ab:1c:89:16:5e:f0:ed:74:f6:3b:69:48:e4:
                    55:ae:11:c4:94:87:f5:68:34:43:3d:9e:b4:63:30:
                    ff:3e:c5:2a:bc:66:01:be:34:60:25:cb:43:bc:fc:
                    33:cd:ac:96:ac:e5:15:37:65:49:63:be:39:1c:5c:
                    f6:51:f1:60:e9:2f:6c:39:76:46:31:53:ef:d1:e4:
                    f2:3c:d9:8a:65:cb:ba:35:fd:8d:be:79:58:52:11:
                    e4:1a:1d:33:f5:a6:7c:7f:6a:24:80:24:5b:c5:bc:
                    7b:21:a0:9d:17:44:01:4c:9b:7e:5d:f6:6e:c8:fb:
                    a5:d6:0e:4e:63:45:47:fa:bd:af:cd:66:df:69:64:
                    e5:67:8d:9b:1b:73:37:2b:82:54:60:66:36:f6:50:
                    24:4d:72:3e:32:c4:a7:b2:22:91:88:1b:a1:03:c2:
                    81:8c:19:17:e1:f8:70:a2:cd:11:98:83:bd:a7:3f:
                    d7:af:b3:a2:7f:37:cf:7a:6f:18:c5:41:f0:90:96:
                    a3:34:a8:83:36:4c:d6:2b:03:57:ea:a9:62:5a:17:
                    07:ef:fb:3c:f5:6b:f7:5a:d4:56:0f:53:6d:c3:98:
                    3a:d0:58:23:36:23:71:5f:fb:1d:40:ce:c6:63:3d:
                    f2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:8C:95:6C:1A:E9:18:97:D7:69:8A:8D:F4:2B:D6:B1:78:9B:2D:C9
            X509v3 Authority Key Identifier:
                keyid:11:94:0B:B5:83:44:AA:2C:79:C4:95:39:D6:DF:91:51:96:EF:E8:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EZQLtYNEqix5xJU51t-RUZbv6CY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:ec:e0:a6:76:a4:cf:52:c8:e9:dd:7a:d9:1f:51:37:5c:2d:
         21:eb:6c:e6:6c:0d:73:74:49:1e:0b:34:0c:57:e5:cc:49:4b:
         36:31:9a:4d:72:df:04:8a:ad:ee:1d:c6:66:ba:af:de:0f:23:
         f1:16:29:c4:e4:aa:8f:43:11:0a:a9:ca:00:ab:81:54:0b:6a:
         9f:ed:bf:19:6c:60:2f:43:7a:4f:c1:b8:05:68:10:94:3c:4d:
         0f:25:c7:9c:c6:ff:bd:b7:3a:c1:ea:14:5a:a1:47:ca:ce:4a:
         a1:2b:3c:40:b6:ff:8f:36:f9:c3:7f:91:18:90:ed:9c:ac:5b:
         ce:f6:50:5b:9d:79:a7:b9:2d:1e:64:1e:83:f5:db:49:18:b3:
         3f:af:86:4b:7c:4a:85:16:61:48:7f:af:06:d1:29:66:39:cf:
         6d:20:a7:1e:6a:c5:c9:4b:ba:d9:12:ff:96:15:75:29:e9:0f:
         06:80:a3:fb:d9:b7:3f:5c:14:c6:6f:9a:cb:25:78:9c:70:a6:
         d3:b1:d2:fd:b1:24:bd:45:2a:84:69:d5:3c:42:c5:cb:04:74:
         5a:8b:67:c6:81:dc:7b:2a:c4:ef:fb:ae:67:f5:a5:15:e9:f6:
         09:f2:db:e0:b7:a9:ce:41:47:fc:fa:11:a0:16:68:12:ff:af:
         7a:fc:2e:28
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB48wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkI2MDAxMTAvBgNVBAUTKDExOTQwQkI1ODM0NEFBMkM3OUM0OTUzOUQ2REY5MTUx
OTZFRkU4MjYwHhcNMjUwMzI4MTQ0NzAxWhcNMjUwNDA0MTQ0NzAxWjAYMRYwFAYD
VQQDEw02N2U2YjY2Ni1hOWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxl8W0rxERG/EVen1/kA+MKsciRZe8O109jtpSORVrhHElIf1aDRDPZ60YzD/
PsUqvGYBvjRgJctDvPwzzayWrOUVN2VJY745HFz2UfFg6S9sOXZGMVPv0eTyPNmK
Zcu6Nf2NvnlYUhHkGh0z9aZ8f2okgCRbxbx7IaCdF0QBTJt+XfZuyPul1g5OY0VH
+r2vzWbfaWTlZ42bG3M3K4JUYGY29lAkTXI+MsSnsiKRiBuhA8KBjBkX4fhwos0R
mIO9pz/Xr7OifzfPem8YxUHwkJajNKiDNkzWKwNX6qliWhcH7/s89Wv3WtRWD1Nt
w5g60FgjNiNxX/sdQM7GYz3ykQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHKMlWwa
6RiX12mKjfQr1rF4my3JMB8GA1UdIwQYMBaAFBGUC7WDRKosecSVOdbfkVGW7+gm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjYwMC9DMEI1NzQyMjA5
NzUxMUVCOUQ0NjFCMzBDNEY5QUUwMi9FWlFMdFlORXFpeDV4SlU1MXQtUlVaYnY2
Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0VaUUx0WU5FcWl4NXhKVTUxdC1SVVpidjZDWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QjYwMC9DMEI1NzQyMjA5NzUxMUVCOUQ0NjFCMzBDNEY5QUUwMi9FWlFMdFlORXFp
eDV4SlU1MXQtUlVaYnY2Q1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAP7OCmdqTPUsjp3XrZH1E3XC0h62zmbA1zdEkeCzQMV+XMSUs2MZpN
ct8Eiq3uHcZmuq/eDyPxFinE5KqPQxEKqcoAq4FUC2qf7b8ZbGAvQ3pPwbgFaBCU
PE0PJcecxv+9tzrB6hRaoUfKzkqhKzxAtv+PNvnDf5EYkO2crFvO9lBbnXmnuS0e
ZB6D9dtJGLM/r4ZLfEqFFmFIf68G0SlmOc9tIKceasXJS7rZEv+WFXUp6Q8GgKP7
2bc/XBTGb5rLJXiccKbTsdL9sSS9RSqEadU8QsXLBHRai2fGgdx7KsTv+65n9aUV
6fYJ8tvgt6nOQUf8+hGgFmgS/696/C4o
-----END CERTIFICATE-----