Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.mft
File:                     p8GCywxW7MaNdJGikUFEtHdPdzI.mft (raw, json)
Hash identifier:          0GqeH9ZTdv/XXASAvQE4V6X+LmRW245az8RnkN9XZKQ=
Subject key identifier:   4C:B3:61:B2:D9:B7:7B:EA:70:1E:ED:91:E8:97:05:78:AA:4D:93:8F
Authority key identifier: A7:C1:82:CB:0C:56:EC:C6:8D:74:91:A2:91:41:44:B4:77:4F:77:32
Certificate issuer:       /CN=A9133C64/serialNumber=A7C182CB0C56ECC68D7491A2914144B4774F7732
Certificate serial:       018B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p8GCywxW7MaNdJGikUFEtHdPdzI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.mft
Manifest number:          0188
Signing time:             Sat 29 Mar 2025 03:04:42 +0000
Manifest this update:     Sat 29 Mar 2025 03:04:41 +0000
Manifest next update:     Sat 05 Apr 2025 03:04:41 +0000
Files and hashes:         1: p8GCywxW7MaNdJGikUFEtHdPdzI.crl (hash: cOfhHYkSXGxNpUK/8ZDIm/iyW6gFgi6qDQ73FvJnB7U=)
                          2: 4E2597ACB30F11EDA610E01FC4F9AE02.roa (hash: 5g7RrFvBwgNiKlK3rQGnarO7ApLyrSM6Xg9ERGMGz5U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 395 (0x18b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133C64
        Validity
            Not Before: Mar 29 03:04:41 2025 GMT
            Not After : Apr  5 03:04:41 2025 GMT
        Subject: CN=67e76349-b29d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:68:c8:6c:4b:d2:f9:0f:11:0d:e9:6b:f5:a7:
                    b1:0c:b5:6b:0f:8e:6c:fe:de:1d:2f:2a:24:91:15:
                    c2:0b:e7:33:fd:8e:98:75:72:79:0a:b5:dd:e5:36:
                    d7:31:88:93:9f:e6:3c:04:6c:76:b8:1f:d9:af:0e:
                    a8:eb:2b:82:2d:39:9f:fd:58:49:77:57:22:dc:84:
                    63:df:56:70:9f:a8:76:f4:1a:4c:14:22:e9:15:75:
                    2a:c4:b3:e1:21:ea:50:75:52:d1:27:ff:5d:ef:e7:
                    8f:de:c4:d8:e4:58:f0:83:76:a3:5a:d8:3a:de:fd:
                    11:fa:a2:3b:16:86:76:1b:a3:ec:b9:69:dc:5d:24:
                    b6:58:4c:e5:ba:a7:38:08:95:3e:e1:8b:0e:51:d0:
                    ff:21:71:7f:bc:ed:0a:bc:ab:c8:4b:23:0b:e5:53:
                    00:85:cb:f2:49:a4:88:ae:15:c0:e5:42:c3:ea:ac:
                    5e:b5:cc:fb:04:23:e7:53:31:0d:e4:90:1c:1b:54:
                    c9:8a:39:fb:60:1f:4b:35:12:96:de:9b:56:ba:5c:
                    4c:84:d6:3d:cf:b7:cc:9b:c2:64:46:33:98:15:64:
                    eb:a7:88:40:6f:43:97:1f:b8:fa:57:41:ef:2b:14:
                    4e:4e:2c:62:08:ef:a8:21:65:aa:1d:13:64:93:d0:
                    6d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:B3:61:B2:D9:B7:7B:EA:70:1E:ED:91:E8:97:05:78:AA:4D:93:8F
            X509v3 Authority Key Identifier:
                keyid:A7:C1:82:CB:0C:56:EC:C6:8D:74:91:A2:91:41:44:B4:77:4F:77:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p8GCywxW7MaNdJGikUFEtHdPdzI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:8b:a1:0b:d1:6b:c6:65:65:f4:b3:ba:d5:d2:90:68:9d:fd:
         6c:ee:c1:13:18:8b:d4:3a:10:30:67:cd:2e:9c:49:c5:e1:62:
         d5:5b:ab:5a:2c:fd:15:04:4b:f9:8a:c3:35:d2:c5:7b:ac:e2:
         b6:1a:28:84:8c:22:6d:6c:54:52:ac:e0:ad:f4:44:f4:ed:8b:
         75:f3:ab:f9:93:48:b8:6d:ec:2e:83:1b:e9:95:b1:38:67:86:
         9d:8b:1f:28:b8:58:d6:f2:03:ae:67:de:6b:9a:09:d7:81:3d:
         fc:48:78:e2:58:9e:1f:c0:ed:1e:ed:d1:e9:0b:96:13:f2:2c:
         53:51:be:a3:7f:a8:e7:ae:65:98:d6:45:c1:f5:9c:1f:dc:9a:
         aa:86:ad:e5:a5:a7:6c:e7:c8:20:8c:07:42:72:97:d3:0b:cf:
         da:ad:d0:33:5e:6c:c0:0a:97:9a:c7:8b:06:2d:d3:5e:6d:e6:
         88:41:89:3b:8d:b2:2d:e8:4f:59:75:d8:0a:e3:35:a0:92:98:
         9d:6f:06:3d:8f:32:77:06:ec:81:0e:c2:79:6c:c5:29:79:3d:
         bf:f0:d3:9c:b0:81:ee:de:cb:9b:5c:39:5c:a1:65:e6:f9:f7:
         b2:cc:ee:ad:da:c2:53:bd:de:68:1b:b9:51:51:41:51:0c:57:
         12:5f:8f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----