Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft
File:                     vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft (raw, json)
Hash identifier:          xA+RChnHhZ2olA8mlXCGUezo+LV8kLUUUgUp2KDm4VM=
Subject key identifier:   A1:6E:41:8D:7F:3B:BE:A1:6C:9D:0A:4C:31:65:38:67:A5:5F:28:EE
Authority key identifier: BD:5F:08:88:94:D9:DA:75:65:D4:43:61:43:EE:02:6C:32:0E:4A:2A
Certificate issuer:       /CN=A9157861/serialNumber=BD5F088894D9DA7565D4436143EE026C320E4A2A
Certificate serial:       1E3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft
Manifest number:          1E17
Signing time:             Fri 28 Mar 2025 16:11:34 +0000
Manifest this update:     Fri 28 Mar 2025 16:11:33 +0000
Manifest next update:     Fri 04 Apr 2025 16:11:33 +0000
Files and hashes:         1: vV8IiJTZ2nVl1ENhQ-4CbDIOSio.crl (hash: Pfe4i+SYi8h7fVfSzsjh6xt704scNKbH7cPY/vtPJJ4=)
                          2: C22F80E4D1F011EEB68A503EC4F9AE02.roa (hash: b7pdRooRIYxeq417I4r+N7hToQ0VSgAm22j8JdCbQTY=)
                          3: BE047E02DBA411EAAF00CC6CC4F9AE02.roa (hash: NSYgbjxaHQUqVX7cmhBmev0VQjPDBDIHp8wuQxin4zo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7742 (0x1e3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157861
        Validity
            Not Before: Mar 28 16:11:33 2025 GMT
            Not After : Apr  4 16:11:33 2025 GMT
        Subject: CN=67e6ca36-409d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:74:27:07:21:98:f1:d1:a1:bb:12:e2:ba:d2:
                    37:4b:9d:11:71:1d:f2:58:ab:5a:8c:23:19:fb:46:
                    a4:92:3e:a0:5e:fc:5b:06:64:63:e3:2f:ba:f0:fe:
                    dc:79:86:fd:ca:4a:73:82:6f:da:02:ee:8a:76:77:
                    ef:b1:56:47:f7:6b:9c:e2:83:64:63:d8:b9:4c:c1:
                    98:f5:68:fe:16:54:20:54:0f:d0:be:4c:85:34:40:
                    3d:fb:f0:cc:be:7f:83:03:6f:3c:53:5f:8b:97:36:
                    d4:4f:9e:68:b2:45:ed:a3:3d:99:ec:65:71:d0:de:
                    c1:60:c1:37:2b:55:22:30:95:24:7a:ce:7e:06:6c:
                    e6:8b:57:52:c2:bc:60:d7:fe:63:6e:6d:f7:e5:5e:
                    28:e0:ba:18:3f:67:82:1f:c3:8e:44:f5:62:21:24:
                    a4:6f:8b:94:f0:00:28:61:a4:68:22:4e:84:ef:11:
                    a4:61:8b:79:51:85:96:d3:b5:66:60:21:0d:8f:cf:
                    4e:f9:55:ea:7e:56:8e:ae:77:87:41:67:cb:f2:0c:
                    cc:98:d9:71:0e:10:be:38:40:cf:bd:4c:6a:a8:64:
                    08:72:52:13:ca:08:2f:7b:be:d2:94:07:87:4d:cb:
                    9e:82:e8:ee:0c:06:17:5f:b0:23:90:68:f8:14:77:
                    00:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:6E:41:8D:7F:3B:BE:A1:6C:9D:0A:4C:31:65:38:67:A5:5F:28:EE
            X509v3 Authority Key Identifier:
                keyid:BD:5F:08:88:94:D9:DA:75:65:D4:43:61:43:EE:02:6C:32:0E:4A:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:7d:66:c7:1f:1f:33:cc:36:21:f1:6c:1c:54:93:98:f6:fe:
         a1:3e:ab:5a:47:1d:37:be:a4:d2:cb:d3:20:4d:6c:ce:1c:c2:
         bd:f6:89:8d:f1:e9:cd:bf:95:5f:a0:35:c9:4d:48:0d:a7:37:
         81:ec:cc:aa:4c:15:69:0c:1a:0b:66:c0:2a:cd:b2:46:63:bb:
         6f:ba:25:55:d3:69:97:45:32:83:de:56:1d:cd:dd:df:02:29:
         97:15:2b:bb:1d:27:bd:66:5d:02:24:3f:bc:1a:c6:65:20:3b:
         0b:39:e5:13:88:76:32:50:b8:de:a9:d2:e8:62:42:9b:5b:ab:
         22:34:25:be:4b:fd:72:53:26:47:67:cd:12:eb:0a:71:4b:0f:
         4f:8e:68:cc:a7:d3:3b:b6:28:83:6d:59:6b:fa:d0:cf:1a:cc:
         09:95:73:52:03:93:4b:86:60:b9:0a:d1:83:6e:ce:a0:30:25:
         0b:b7:91:56:06:10:2b:19:fc:4c:df:15:d8:69:d0:4f:6d:3e:
         91:57:09:d0:34:3e:e7:68:a0:e7:66:b9:6c:4c:e4:92:bf:7a:
         1f:66:09:4b:66:08:87:7a:e1:f5:f1:a2:77:2e:10:3c:82:45:
         73:db:8c:c7:68:4d:78:d4:12:7a:2f:0f:3e:44:e1:ed:46:00:
         5e:30:80:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----