Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.mft
File:                     9FQft3ll3hSln57yM94Z-SBfX5g.mft (raw, json)
Hash identifier:          EaziQZRARGTURxnDoPDHQlhGNQfLSES1h7etyaSpLZk=
Subject key identifier:   83:F2:AE:3B:0B:36:EC:3D:20:5B:E4:C5:14:84:45:D5:2E:B7:2F:99
Authority key identifier: F4:54:1F:B7:79:65:DE:14:A5:9F:9E:F2:33:DE:19:F9:20:5F:5F:98
Certificate issuer:       /CN=A9137917/serialNumber=F4541FB77965DE14A59F9EF233DE19F9205F5F98
Certificate serial:       075E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FQft3ll3hSln57yM94Z-SBfX5g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.mft
Manifest number:          0749
Signing time:             Fri 28 Mar 2025 22:04:50 +0000
Manifest this update:     Fri 28 Mar 2025 22:04:49 +0000
Manifest next update:     Fri 04 Apr 2025 22:04:49 +0000
Files and hashes:         1: 9FQft3ll3hSln57yM94Z-SBfX5g.crl (hash: TzAua6KUaZPZpCg+C6EH69qt4xRFnF0U79mfJutloAs=)
                          2: DF8912BEB1E511EB90B9DD25C4F9AE02.roa (hash: T5bntFKOXUJY90ZSt6wzx94eeco+PumRT0JCKh3cGUw=)
                          3: 992104CE2EA211EBA8D67685C4F9AE02.roa (hash: bUp2cjSjB8euJOCWev8E1H5hopCa1Aw3wJo+GROBZeQ=)
                          4: BB0569102A0411EB992DD32EC4F9AE02.roa (hash: dvmoao5w0dhRpuJXrUoAicHpE15a14VjXEHjG+ZtN2s=)
                          5: 978FBCD82A0E11EB8CC1535DC4F9AE02.roa (hash: chXP+1t4OQYuslJa71TUWuDUjFMZecLJSL+PfYVGy/A=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1886 (0x75e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137917
        Validity
            Not Before: Mar 28 22:04:49 2025 GMT
            Not After : Apr  4 22:04:49 2025 GMT
        Subject: CN=67e71d01-2bea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:23:16:34:e9:3c:70:87:ca:87:7c:62:29:a3:
                    dc:65:87:70:f5:05:57:0c:d5:ca:1d:4d:42:a0:f0:
                    77:73:e7:cd:df:58:a3:0c:aa:ed:44:06:7a:9f:d7:
                    92:2e:4e:10:55:51:65:9f:28:52:cf:92:41:15:8a:
                    b7:a6:8b:bc:39:32:dd:3c:f0:75:f6:1f:6f:2b:18:
                    3b:fa:1e:b0:bc:bf:f3:79:66:46:9f:60:e1:b3:9d:
                    c8:1e:d7:2d:c4:49:1c:a3:9e:7d:50:48:00:6e:b1:
                    f7:5b:97:a7:65:2d:6a:92:ab:83:81:da:ca:36:05:
                    64:ad:91:de:71:54:8f:6d:dc:e0:1e:d4:da:fe:83:
                    32:9c:51:fd:ec:65:14:39:41:25:10:21:f1:79:16:
                    a5:07:85:26:13:15:fc:76:77:36:03:4c:1b:98:7e:
                    f6:2e:79:22:57:e5:ee:21:12:1b:82:bf:54:44:90:
                    a1:52:0d:8a:ca:ee:fc:19:2b:c6:71:1d:32:a9:60:
                    9e:da:ef:4d:ea:2f:2b:d6:0b:69:75:b5:64:5a:93:
                    16:82:df:f4:61:b8:86:c9:2f:e3:96:13:61:d8:22:
                    97:d7:ab:4a:60:fd:87:75:20:9d:36:5b:bf:fd:d0:
                    3f:72:18:a2:87:9d:cd:c9:3e:14:53:90:89:21:7d:
                    a2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F2:AE:3B:0B:36:EC:3D:20:5B:E4:C5:14:84:45:D5:2E:B7:2F:99
            X509v3 Authority Key Identifier:
                keyid:F4:54:1F:B7:79:65:DE:14:A5:9F:9E:F2:33:DE:19:F9:20:5F:5F:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FQft3ll3hSln57yM94Z-SBfX5g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:64:7c:7b:88:8f:32:61:14:db:7b:1f:f2:9f:67:0d:7f:e5:
         09:a9:ca:99:ad:83:f0:35:d7:ea:70:8a:1b:dc:91:40:87:be:
         75:36:7e:f3:58:b2:34:7c:ae:6b:28:85:33:fb:e2:85:b4:5c:
         f6:c1:83:e3:d5:03:c5:cd:de:90:53:62:d3:76:a9:d9:6d:47:
         fd:5e:fa:6e:ec:f8:b2:57:6b:f2:84:d5:84:95:e4:a7:5e:69:
         06:4e:0b:a5:fd:41:bd:22:ca:9c:1e:16:5b:a4:fd:8a:12:d9:
         88:5d:aa:09:ff:3d:02:3f:9a:68:37:54:1c:3f:d7:58:5d:9c:
         55:e4:d5:cf:fa:b9:72:15:ef:3c:d1:73:8d:24:e7:03:11:87:
         09:7c:be:f7:f4:a4:22:fe:39:69:1f:df:3b:60:cd:53:4e:1f:
         b2:e1:6a:7f:1c:de:e6:56:be:18:6e:49:b4:c5:3e:5d:b7:97:
         ac:39:4b:9a:1d:38:10:96:79:b2:40:bc:53:71:67:fc:20:fe:
         9e:3d:fa:1f:c5:2f:6b:78:57:df:d4:06:b7:0d:37:88:fc:a6:
         c0:17:a8:e0:74:9b:a1:20:be:25:bf:0a:2f:f5:d4:1e:68:2f:
         d9:ca:61:0e:a0:ad:12:1b:dc:78:23:24:02:2b:19:53:50:7a:
         52:fc:fa:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----