Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.mft
File:                     yvC3hLE-FADutCJboi1vmDiCTsM.mft (raw, json)
Hash identifier:          QIeyMdJfa/pfekcMfUoN/pPFB6lGz2JuDITjtqGazjA=
Subject key identifier:   EE:D7:B7:F1:08:57:2D:D1:DB:65:61:D5:40:90:46:3E:CD:10:8E:C7
Authority key identifier: CA:F0:B7:84:B1:3E:14:00:EE:B4:22:5B:A2:2D:6F:98:38:82:4E:C3
Certificate issuer:       /CN=A912D99E/serialNumber=CAF0B784B13E1400EEB4225BA22D6F9838824EC3
Certificate serial:       1527
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvC3hLE-FADutCJboi1vmDiCTsM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.mft
Manifest number:          150A
Signing time:             Fri 28 Mar 2025 16:56:08 +0000
Manifest this update:     Fri 28 Mar 2025 16:56:08 +0000
Manifest next update:     Fri 04 Apr 2025 16:56:08 +0000
Files and hashes:         1: yvC3hLE-FADutCJboi1vmDiCTsM.crl (hash: AKGBj5s7a7TE5g3H7jbulSXmHYD6xs23GHEJ7d7qHLk=)
                          2: 4861945C599A11ED99A5B776C4F9AE02.roa (hash: T/iBe2dOkx7zzvxg/wmUc7S9pQxzrtqgSuY0naWemjs=)
                          3: 4964556A599A11ED99A5B776C4F9AE02.roa (hash: 9e7ICQ4jW3D1WMroavfa4Tl30ubr7SxEPMasiVYbPNU=)
                          4: 1F265C7C55E911EC8D6F804DC4F9AE02.roa (hash: rpY42lZ0PYRsXEONCJv0/Z9/FyNu31Pn/qQQWh3e8vA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5415 (0x1527)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D99E
        Validity
            Not Before: Mar 28 16:56:08 2025 GMT
            Not After : Apr  4 16:56:08 2025 GMT
        Subject: CN=67e6d4a8-1e55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a1:46:9e:2f:8d:03:dd:7e:59:2e:7f:76:86:
                    8c:37:53:9e:6f:a9:98:15:ba:9c:07:e0:1b:08:20:
                    bc:5f:9e:13:0f:e6:12:2b:86:a8:03:0f:0c:8a:3e:
                    10:f0:d3:c2:a6:07:f5:e4:1f:72:f5:cf:e4:94:09:
                    d7:e5:68:92:77:70:55:a4:01:dd:1c:a6:53:04:41:
                    e2:2b:08:6e:f9:c1:59:e5:92:9d:43:c3:e0:a6:5d:
                    4a:75:78:5a:7f:9c:b6:0a:83:e2:46:85:ae:06:c1:
                    bb:4a:04:78:64:37:61:21:e4:41:15:37:e5:47:3f:
                    7f:67:45:ed:8f:f8:1c:64:50:27:26:aa:9d:0f:fc:
                    2c:76:6c:84:50:4a:c4:1c:8b:da:c7:90:5d:50:eb:
                    51:4a:8f:e4:7d:70:48:c8:cb:46:7a:88:08:84:b7:
                    07:68:33:4f:28:60:87:cb:7e:a0:54:e5:d3:b0:5f:
                    9e:8c:c2:f0:34:7f:60:db:f4:d5:fc:8b:c6:1a:97:
                    00:9a:b2:fe:19:6a:2c:d7:cf:1d:99:38:0d:94:fc:
                    c0:75:05:d5:ae:ed:24:14:4e:14:8e:97:c0:d3:c3:
                    31:16:d8:f1:40:15:db:bf:22:b5:be:9c:69:2e:92:
                    4c:6c:83:d1:78:80:2c:76:10:51:b7:2e:8e:cb:3f:
                    50:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D7:B7:F1:08:57:2D:D1:DB:65:61:D5:40:90:46:3E:CD:10:8E:C7
            X509v3 Authority Key Identifier:
                keyid:CA:F0:B7:84:B1:3E:14:00:EE:B4:22:5B:A2:2D:6F:98:38:82:4E:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvC3hLE-FADutCJboi1vmDiCTsM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:6a:f2:86:46:e5:fa:4b:a4:54:82:01:56:f9:1c:25:1b:1c:
         b7:91:2e:92:5e:ea:7b:ab:65:5d:b2:60:eb:7a:bb:78:7f:32:
         56:6d:ed:8c:9d:d2:f4:dd:65:d3:d8:7f:9a:66:17:6f:d9:c0:
         07:80:28:ea:db:57:d1:c1:27:98:15:87:8d:e4:01:2d:85:62:
         04:62:9f:05:08:d1:ed:07:ef:4e:67:44:a9:f7:27:ea:ec:cc:
         7d:44:12:f9:6a:46:cb:a6:65:61:5c:7f:ae:13:47:c3:b3:fe:
         a1:ba:da:01:cd:49:ef:79:cd:d8:59:6b:4e:6f:4a:00:52:57:
         57:6a:3c:6b:98:25:5c:5a:07:53:76:43:21:61:28:2d:09:74:
         44:7f:77:7e:89:ff:4e:67:ba:2f:36:cf:68:12:cf:23:0d:ae:
         b2:c0:43:2c:ef:98:12:72:49:9e:9c:79:bd:b7:86:a7:8a:fb:
         da:1e:08:04:86:d7:68:34:4f:a4:f4:68:4f:ff:54:a9:28:e7:
         9a:12:1d:33:37:e3:10:35:c7:d7:11:21:40:37:e2:cd:ed:d0:
         dd:1a:8b:5c:03:7f:9c:f1:0e:3e:2c:b2:d0:7e:6d:82:b5:9f:
         5b:27:3a:00:a8:81:88:35:c8:7d:da:c4:55:70:41:f2:2c:6d:
         ae:b9:4c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----