Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft
File:                     asqbm3MwkHBq_T-FI8wMwYzWjjE.mft (raw, json)
Hash identifier:          ERziUlT6NDeXDX1ZhifGas97CdQ4mRQq3EoQ8ebthvk=
Subject key identifier:   14:5D:DD:A7:C7:C2:C7:C9:3A:AA:D2:E6:03:54:B5:E5:31:9C:10:24
Authority key identifier: 6A:CA:9B:9B:73:30:90:70:6A:FD:3F:85:23:CC:0C:C1:8C:D6:8E:31
Certificate issuer:       /CN=A9130EA4/serialNumber=6ACA9B9B733090706AFD3F8523CC0CC18CD68E31
Certificate serial:       0BA3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft
Manifest number:          0B98
Signing time:             Fri 28 Mar 2025 19:11:05 +0000
Manifest this update:     Fri 28 Mar 2025 19:11:04 +0000
Manifest next update:     Fri 04 Apr 2025 19:11:04 +0000
Files and hashes:         1: asqbm3MwkHBq_T-FI8wMwYzWjjE.crl (hash: qmNhDGpCKdhehgxrtJ3Vx6R40IKTmMPup5W0zfZE+Q4=)
                          2: 08754752218611EAA5DF883CC4F9AE02.roa (hash: gxdwZieFTn54JsEYN33sdU/rLYZSttG97jPAuU0togE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2979 (0xba3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130EA4
        Validity
            Not Before: Mar 28 19:11:04 2025 GMT
            Not After : Apr  4 19:11:04 2025 GMT
        Subject: CN=67e6f449-bc1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1b:16:89:e8:e5:b7:3d:38:61:d5:74:05:a1:
                    4b:06:a7:4b:a9:c7:cd:f7:44:4d:21:d6:2f:69:a7:
                    16:5f:19:d1:8c:49:da:a3:6b:22:07:c5:c7:39:a3:
                    b7:9b:cc:c6:29:ff:22:f7:11:6b:55:02:f9:d2:8c:
                    f2:94:01:06:b4:e1:fd:cb:04:8d:25:c3:cb:08:94:
                    e4:1f:32:4e:7a:7c:50:c8:2d:2f:aa:80:45:f9:48:
                    03:b3:2d:20:00:37:45:14:16:81:6f:29:a9:b1:2d:
                    83:b2:41:62:3d:60:48:4f:86:0e:dd:8c:75:c4:0d:
                    8a:61:a2:55:0a:f6:af:ad:6b:fc:f3:55:6b:29:2a:
                    79:01:74:ac:6d:1b:02:98:f8:0e:f5:3c:54:3c:fe:
                    39:d2:27:52:6d:5c:e7:8b:53:7e:7f:7f:12:dc:cc:
                    55:a5:c9:f9:21:d5:df:7a:47:04:7b:2e:84:d1:64:
                    a1:53:6d:58:e2:00:63:54:0e:42:74:d8:6d:de:15:
                    65:08:13:32:2a:aa:6b:05:36:2c:30:f1:11:88:74:
                    73:19:62:f9:0a:b0:f1:d5:c6:05:37:7b:e6:0c:3a:
                    9a:b7:95:f0:57:c8:a8:94:02:4e:66:ff:64:5d:31:
                    30:d1:62:04:19:ba:e2:b3:9d:50:18:b2:92:53:34:
                    38:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:5D:DD:A7:C7:C2:C7:C9:3A:AA:D2:E6:03:54:B5:E5:31:9C:10:24
            X509v3 Authority Key Identifier:
                keyid:6A:CA:9B:9B:73:30:90:70:6A:FD:3F:85:23:CC:0C:C1:8C:D6:8E:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:64:3b:a7:0c:33:af:bc:9c:f1:47:93:5a:19:b4:ab:6a:17:
         ce:32:0d:30:2d:e1:ff:af:02:01:6e:12:b0:87:9e:34:b8:ea:
         bd:5d:c2:02:a3:2b:47:78:b6:87:d9:cc:fa:bf:a8:f1:f8:0c:
         56:c2:d4:a9:60:d4:3e:04:2c:8e:f2:61:7f:01:70:08:06:e8:
         f8:0f:bf:20:fb:08:b4:54:8f:53:d9:bc:aa:cd:9a:d4:77:35:
         a1:40:f2:12:7a:da:21:4a:ee:3f:17:2b:ec:65:98:91:cb:f4:
         4d:04:cf:19:b1:05:4a:c7:40:5d:d3:5e:8f:56:b9:86:73:10:
         b2:be:69:fd:38:ec:17:0a:f3:61:b1:4a:1b:32:91:2a:89:7d:
         ae:70:98:63:f4:54:89:c3:2e:bf:00:b6:22:bd:d9:20:29:d4:
         ef:bc:6f:e3:a6:26:2a:bb:63:c3:67:d0:14:61:7d:7d:c6:7d:
         8b:ad:18:77:e4:62:06:27:07:99:07:59:9e:27:32:8a:e7:24:
         5e:3a:60:bd:08:ad:63:eb:fc:8e:e6:9e:5f:04:a5:83:4a:ac:
         e0:c5:08:d2:4c:e1:2c:0b:37:18:35:b3:cb:ee:17:d8:ef:a1:
         e6:37:41:8e:5a:ad:ca:fc:e0:68:12:5d:62:af:7f:ce:18:32:
         73:7a:56:bc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC6MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzBFQTQxMTAvBgNVBAUTKDZBQ0E5QjlCNzMzMDkwNzA2QUZEM0Y4NTIzQ0MwQ0Mx
OENENjhFMzEwHhcNMjUwMzI4MTkxMTA0WhcNMjUwNDA0MTkxMTA0WjAYMRYwFAYD
VQQDEw02N2U2ZjQ0OS1iYzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuBsWiejltz04YdV0BaFLBqdLqcfN90RNIdYvaacWXxnRjEnao2siB8XHOaO3
m8zGKf8i9xFrVQL50ozylAEGtOH9ywSNJcPLCJTkHzJOenxQyC0vqoBF+UgDsy0g
ADdFFBaBbympsS2DskFiPWBIT4YO3Yx1xA2KYaJVCvavrWv881VrKSp5AXSsbRsC
mPgO9TxUPP450idSbVzni1N+f38S3MxVpcn5IdXfekcEey6E0WShU21Y4gBjVA5C
dNht3hVlCBMyKqprBTYsMPERiHRzGWL5CrDx1cYFN3vmDDqat5XwV8iolAJOZv9k
XTEw0WIEGbris51QGLKSUzQ4DQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBRd3afH
wsfJOqrS5gNUteUxnBAkMB8GA1UdIwQYMBaAFGrKm5tzMJBwav0/hSPMDMGM1o4x
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEVBNC9CNjJDQ0U4MDIx
ODQxMUVBQTJEMDQxM0FDNEY5QUUwMi9hc3FibTNNd2tIQnFfVC1GSTh3TXdZeldq
akUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FzcWJtM013a0hCcV9ULUZJOHdNd1l6V2pqRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MEVBNC9CNjJDQ0U4MDIxODQxMUVBQTJEMDQxM0FDNEY5QUUwMi9hc3FibTNNd2tI
QnFfVC1GSTh3TXdZeldqakUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA8ZDunDDOvvJzxR5NaGbSrahfOMg0wLeH/rwIBbhKwh540uOq9XcIC
oytHeLaH2cz6v6jx+AxWwtSpYNQ+BCyO8mF/AXAIBuj4D78g+wi0VI9T2byqzZrU
dzWhQPISetohSu4/FyvsZZiRy/RNBM8ZsQVKx0Bd016PVrmGcxCyvmn9OOwXCvNh
sUobMpEqiX2ucJhj9FSJwy6/ALYivdkgKdTvvG/jpiYqu2PDZ9AUYX19xn2LrRh3
5GIGJweZB1meJzKK5yReOmC9CK1j6/yO5p5fBKWDSqzgxQjSTOEsCzcYNbPL7hfY
76HmN0GOWq3K/OBoEl1ir3/OGDJzela8
-----END CERTIFICATE-----