Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft
File:                     ry1FO-u_318ptjrBZ1THjRsPy4g.mft (raw, json)
Hash identifier:          w1l5vhKlHUOD7ZOwsGilI4g8xZyhIaQ2eNUxnycSffg=
Subject key identifier:   AE:1B:9A:E8:AA:45:DC:D6:89:C9:3A:26:5B:F1:D9:29:4D:CB:3C:37
Authority key identifier: AF:2D:45:3B:EB:BF:DF:5F:29:B6:3A:C1:67:54:C7:8D:1B:0F:CB:88
Certificate issuer:       /CN=A91557BA/serialNumber=AF2D453BEBBFDF5F29B63AC16754C78D1B0FCB88
Certificate serial:       0C2F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry1FO-u_318ptjrBZ1THjRsPy4g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft
Manifest number:          0C26
Signing time:             Fri 28 Mar 2025 18:38:19 +0000
Manifest this update:     Fri 28 Mar 2025 18:38:18 +0000
Manifest next update:     Fri 04 Apr 2025 18:38:18 +0000
Files and hashes:         1: ry1FO-u_318ptjrBZ1THjRsPy4g.crl (hash: 54CCeK9obUkL8syfBGSDMpnpqXnJ0Yw0takUuRlsLGg=)
                          2: 157A1BFC59EE11EBA398AA0AC4F9AE02.roa (hash: JpCVaZ9JZD1Afq3DjPUJqYLTP1v40h6qnEBodBPkfj4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3119 (0xc2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91557BA
        Validity
            Not Before: Mar 28 18:38:18 2025 GMT
            Not After : Apr  4 18:38:18 2025 GMT
        Subject: CN=67e6ec9b-82ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e6:3e:52:be:c3:36:5b:a4:d2:17:da:8f:cb:
                    42:5e:41:00:84:aa:3c:4e:e3:5a:3f:63:67:b9:5c:
                    b3:f6:de:f2:b8:c6:dd:7a:41:02:4a:b1:ba:09:b4:
                    b3:70:5d:6f:c9:f8:ec:87:6e:fa:40:f5:a8:02:2e:
                    17:d1:4c:88:e5:d7:d6:eb:e6:c7:3f:7f:f2:67:93:
                    25:33:80:19:e1:4e:ea:73:a8:86:06:e1:0c:99:cd:
                    56:35:98:26:a6:d3:c4:2e:4e:b7:f3:2d:6e:1e:e9:
                    d9:12:b1:6c:e1:7d:6a:8a:11:01:63:80:dd:72:88:
                    c5:fc:c3:6f:ed:84:e4:75:c3:7c:12:31:af:78:74:
                    3a:21:60:ba:79:36:f5:8d:8d:ac:d0:ad:45:35:c7:
                    d5:6b:19:50:19:0f:0b:a5:43:43:28:1c:17:a4:0a:
                    15:8b:b2:56:8a:99:0b:67:9b:79:86:df:b9:a5:80:
                    9c:17:19:8c:63:3f:4c:14:1a:59:c5:5e:0e:6d:82:
                    3b:c7:76:7b:6b:21:e1:52:4b:70:03:7c:b7:61:c2:
                    aa:fe:e7:a5:1b:3c:a1:e8:46:7d:15:78:fc:92:4e:
                    c6:13:46:fc:52:98:e3:e4:0b:de:a0:77:c2:48:3e:
                    ea:8a:2e:4a:4b:8d:e3:16:cf:9c:70:cb:0e:8d:b7:
                    dd:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:1B:9A:E8:AA:45:DC:D6:89:C9:3A:26:5B:F1:D9:29:4D:CB:3C:37
            X509v3 Authority Key Identifier:
                keyid:AF:2D:45:3B:EB:BF:DF:5F:29:B6:3A:C1:67:54:C7:8D:1B:0F:CB:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry1FO-u_318ptjrBZ1THjRsPy4g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:69:e5:4e:34:ff:bd:9a:3a:71:72:22:c1:f0:d0:3a:9d:5f:
         a6:67:85:ce:07:3d:4f:91:6e:c6:b8:dd:68:87:21:df:c5:07:
         cb:d1:0c:df:9a:2c:0f:59:10:da:17:8f:b4:5c:84:5e:a7:6b:
         ca:86:b8:4a:02:61:02:81:31:19:25:4d:ce:26:0b:86:65:fd:
         f2:42:a9:5a:96:c5:f2:14:cd:e4:69:87:ce:79:62:25:36:4f:
         7f:27:25:bb:0b:4d:61:ac:9e:5b:34:91:fc:6f:61:da:80:7d:
         7b:8f:b5:df:48:3e:44:7e:89:2e:d2:95:40:ee:10:80:5e:b2:
         38:fb:27:48:c8:de:4d:10:a8:8f:a4:d1:24:d4:c4:45:40:6c:
         81:9e:e5:4d:8a:10:27:c9:d5:1c:ca:a7:ca:a1:c4:da:02:d3:
         39:f8:13:0a:d2:61:29:f1:c3:1f:7c:90:44:f8:64:8f:4d:73:
         af:af:8b:89:22:c4:55:56:7f:55:be:5d:d7:11:77:95:2d:0c:
         8e:64:ed:d0:04:97:49:25:2a:4b:56:a6:96:af:b9:18:57:14:
         7f:18:00:94:e7:32:1e:67:4d:04:74:da:1f:8f:af:eb:b6:8b:
         86:77:38:0e:8d:22:ae:00:d9:9a:ca:98:fe:4c:fe:ff:71:f1:
         b4:58:97:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----