Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft
File:                     FyftFR9AiSEOw-Nopaae45SE4-Y.mft (raw, json)
Hash identifier:          F+hePm468mUpjc2teurNe6GQkOPqGKAApK6RHqzK64U=
Subject key identifier:   73:97:0F:72:9C:40:AA:46:20:04:F8:5C:A1:88:53:B0:66:62:21:56
Authority key identifier: 17:27:ED:15:1F:40:89:21:0E:C3:E3:68:A5:A6:9E:E3:94:84:E3:E6
Certificate issuer:       /CN=A9145B5E/serialNumber=1727ED151F4089210EC3E368A5A69EE39484E3E6
Certificate serial:       86
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FyftFR9AiSEOw-Nopaae45SE4-Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft
Manifest number:          84
Signing time:             Sat 29 Mar 2025 05:56:23 +0000
Manifest this update:     Sat 29 Mar 2025 05:56:23 +0000
Manifest next update:     Sat 05 Apr 2025 05:56:23 +0000
Files and hashes:         1: FyftFR9AiSEOw-Nopaae45SE4-Y.crl (hash: /r623TUQV8SvJ47pXPZy+mo9T8RcsrH7D1DAl1IdTtc=)
                          2: F149E6BE45B611EFA10B0632C4F9AE02.roa (hash: oxyCeNFM/JV3FlgREEjrGNxGIzoK5Vk5MzO+fwua+7Q=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134 (0x86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145B5E
        Validity
            Not Before: Mar 29 05:56:23 2025 GMT
            Not After : Apr  5 05:56:23 2025 GMT
        Subject: CN=67e78b87-ecf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c2:21:34:a9:c7:74:ed:fc:1b:90:cc:b9:98:
                    4d:0d:86:84:8e:59:c3:2e:57:8c:84:34:24:15:80:
                    50:d1:63:6b:fa:c1:25:7f:96:8e:89:df:c1:bb:84:
                    dc:2e:10:d8:f3:f5:85:6d:a1:26:40:46:bb:07:25:
                    a5:e3:80:bd:79:05:c6:a5:0c:52:57:e6:8e:d2:78:
                    92:33:ef:6a:4c:5b:11:6a:24:43:67:b9:b4:a8:74:
                    01:3f:a3:f9:a6:49:84:ee:86:8b:37:4c:d7:96:81:
                    0c:53:bb:31:b2:e1:d4:fd:28:80:cd:73:07:a2:5f:
                    90:5d:98:28:9b:cf:34:49:91:02:62:0f:98:3a:f6:
                    bd:fc:82:2f:eb:28:97:8d:68:cb:d5:80:a4:d3:08:
                    1a:d4:f7:4f:4d:d7:b1:91:39:53:15:81:39:06:d5:
                    d9:a9:ed:70:a0:69:3f:bc:61:a3:3b:d9:23:a0:d9:
                    88:76:f1:1f:40:95:fc:e7:df:b2:91:7b:83:48:ee:
                    2f:47:ec:c1:6e:7b:d4:00:c4:a5:6f:c3:6d:96:0a:
                    b4:4d:28:82:8f:cb:9e:bd:9d:1a:3a:be:b4:5e:46:
                    6f:2e:fc:48:20:51:3c:a4:18:d7:00:ee:07:2a:d5:
                    d8:8e:be:d4:a2:28:35:b0:71:8c:e4:bf:80:f1:ee:
                    c0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:97:0F:72:9C:40:AA:46:20:04:F8:5C:A1:88:53:B0:66:62:21:56
            X509v3 Authority Key Identifier:
                keyid:17:27:ED:15:1F:40:89:21:0E:C3:E3:68:A5:A6:9E:E3:94:84:E3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FyftFR9AiSEOw-Nopaae45SE4-Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:7a:88:3c:04:46:c5:33:38:39:40:8a:2b:e0:6c:ca:7e:12:
         7f:59:4a:5c:cf:46:a0:a7:9c:c3:b6:d8:8c:96:7a:53:79:f2:
         84:a9:fd:c9:c7:ea:cf:a7:78:a3:59:ce:c6:18:8c:f1:f9:97:
         0a:d5:e2:41:a9:a8:56:22:fc:30:92:26:83:19:b3:3d:5e:56:
         48:28:fe:e6:63:f5:19:4e:86:7f:41:05:d5:75:a6:3e:de:be:
         e8:08:e7:9c:35:d4:b7:0d:61:60:4b:56:6b:d4:7c:31:61:de:
         2b:c0:38:cc:e0:ec:41:26:8c:89:72:cf:06:dc:9f:b8:cd:5e:
         3a:31:2a:43:09:8b:3b:1b:c2:75:15:64:a1:d7:26:22:61:29:
         78:ae:3d:83:19:78:13:e3:73:f2:16:13:af:c6:7d:1b:4a:a2:
         8c:97:91:a4:e8:d0:40:30:11:0d:df:a3:2d:b8:fb:7d:4b:ad:
         8a:02:2b:01:bf:20:cf:79:0c:6b:0c:33:5b:cc:80:79:31:8a:
         82:4b:00:a9:27:16:80:e6:1a:03:a7:70:96:d5:32:27:ea:4b:
         0c:d3:7b:f8:74:a3:c7:dc:10:c3:87:61:15:31:50:76:52:8e:
         5a:f1:1b:4a:78:83:47:22:79:f8:fc:55:97:5c:ca:28:0f:56:
         62:a1:1c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----