Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.mft
File:                     BzgX21Kc2-s_-TiuXuCEiOF-TpA.mft (raw, json)
Hash identifier:          mPoB9WBEK2TjE5RGIDF+xv8IswXc36esZIvPeL2bIL8=
Subject key identifier:   DB:5B:5E:D0:7F:1D:6B:54:2C:C7:18:63:91:A6:BC:33:E5:E3:3A:59
Authority key identifier: 07:38:17:DB:52:9C:DB:EB:3F:F9:38:AE:5E:E0:84:88:E1:7E:4E:90
Certificate issuer:       /CN=A915B0C9/serialNumber=073817DB529CDBEB3FF938AE5EE08488E17E4E90
Certificate serial:       01B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzgX21Kc2-s_-TiuXuCEiOF-TpA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.mft
Manifest number:          01B0
Signing time:             Sat 29 Mar 2025 02:47:01 +0000
Manifest this update:     Sat 29 Mar 2025 02:47:00 +0000
Manifest next update:     Sat 05 Apr 2025 02:47:00 +0000
Files and hashes:         1: BzgX21Kc2-s_-TiuXuCEiOF-TpA.crl (hash: QsXnhkeCo9y611rHEtSsdxY8urSk8dh58YKpJpo4Lqs=)
                          2: F0F09EAA7D1D11EDAE0CF917C4F9AE02.roa (hash: /AIOMPF379cdDnZ0oCHY5QGxjdpZh2kab3GCf0LfQ6w=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 435 (0x1b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B0C9
        Validity
            Not Before: Mar 29 02:47:00 2025 GMT
            Not After : Apr  5 02:47:00 2025 GMT
        Subject: CN=67e75f24-97c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:50:da:1b:a4:ac:46:03:fe:34:3d:b0:56:5e:
                    7b:5d:44:6b:6b:4a:d4:08:1e:60:08:cb:48:20:eb:
                    21:63:ae:33:84:00:8b:9a:fb:dd:77:8a:ac:1d:96:
                    91:ea:37:40:02:3c:c3:ba:ef:e1:2a:c9:5b:92:09:
                    92:aa:97:5c:1c:de:b2:34:dd:2d:7c:0f:ea:22:43:
                    00:67:8b:cc:b5:27:3e:8c:d5:0a:04:cb:a3:80:40:
                    a6:23:b9:1c:6d:3c:6d:bb:87:83:dd:d7:9a:b5:80:
                    52:12:0f:47:4d:ac:29:0e:6e:5b:26:1e:7c:33:29:
                    1b:70:60:76:24:45:59:43:33:06:54:d1:b2:79:b9:
                    6a:db:69:00:d0:b0:46:15:60:bc:a3:e2:f0:7e:94:
                    09:46:1c:89:96:dc:7a:88:1f:8f:07:3d:39:f7:3a:
                    10:7e:e9:4d:d3:80:7e:0c:1c:89:32:86:8c:8b:3b:
                    99:ff:0f:54:6c:c2:4b:f0:2f:b0:98:0e:b7:4b:69:
                    69:67:7f:f1:73:54:56:b3:c2:17:62:78:27:4d:d9:
                    88:b9:ef:2e:4b:f6:b3:58:dd:b0:fc:b0:e0:97:fb:
                    5f:40:06:00:91:32:8c:45:4c:d6:a2:af:33:25:97:
                    f9:bb:a0:ec:52:b2:16:ba:a3:01:3c:00:3c:c7:cf:
                    b1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:5B:5E:D0:7F:1D:6B:54:2C:C7:18:63:91:A6:BC:33:E5:E3:3A:59
            X509v3 Authority Key Identifier:
                keyid:07:38:17:DB:52:9C:DB:EB:3F:F9:38:AE:5E:E0:84:88:E1:7E:4E:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzgX21Kc2-s_-TiuXuCEiOF-TpA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:75:85:6c:7a:84:25:6f:52:c3:10:f0:3d:4e:03:c5:47:bb:
         8d:ee:e7:0b:0a:f1:71:64:71:5d:af:28:6e:fe:7f:ed:05:33:
         3c:61:6e:ae:87:1f:78:93:3e:63:d5:f6:cf:c1:c8:37:76:b4:
         f3:9a:af:06:b4:4e:7b:41:0c:7c:42:38:ea:2d:6b:a6:6f:81:
         e1:a4:e2:4a:54:68:e3:b5:77:2c:f6:9e:21:40:1d:93:6a:03:
         10:bd:ca:6a:89:26:28:77:29:c7:fd:c1:f1:35:5d:b7:34:d0:
         02:ad:2e:68:a2:c3:42:c1:b5:8f:c1:c1:a3:51:31:b3:6f:af:
         4d:3f:79:4c:9c:06:32:11:18:d7:56:d5:93:a7:78:ad:73:00:
         35:e1:5b:fa:ad:91:b0:3a:62:30:ab:69:14:49:6c:c9:24:18:
         28:a3:e7:83:07:e0:f6:3c:fa:17:10:48:6a:0b:12:d5:9f:77:
         78:59:00:90:a1:52:0c:81:bf:3d:01:07:0b:24:5d:96:36:8c:
         de:3c:f5:bf:16:ad:9d:6f:13:2d:8e:11:f6:1f:31:03:ab:57:
         ce:9f:7a:2a:bd:6f:54:17:a5:96:08:cf:c2:f2:4f:af:91:a8:
         29:64:96:94:c8:1f:64:d2:b0:90:d8:b0:47:1e:b3:75:29:1c:
         53:09:53:8e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUIwQzkxMTAvBgNVBAUTKDA3MzgxN0RCNTI5Q0RCRUIzRkY5MzhBRTVFRTA4NDg4
RTE3RTRFOTAwHhcNMjUwMzI5MDI0NzAwWhcNMjUwNDA1MDI0NzAwWjAYMRYwFAYD
VQQDEw02N2U3NWYyNC05N2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA91DaG6SsRgP+ND2wVl57XURra0rUCB5gCMtIIOshY64zhACLmvvdd4qsHZaR
6jdAAjzDuu/hKslbkgmSqpdcHN6yNN0tfA/qIkMAZ4vMtSc+jNUKBMujgECmI7kc
bTxtu4eD3deatYBSEg9HTawpDm5bJh58MykbcGB2JEVZQzMGVNGyeblq22kA0LBG
FWC8o+LwfpQJRhyJltx6iB+PBz059zoQfulN04B+DByJMoaMizuZ/w9UbMJL8C+w
mA63S2lpZ3/xc1RWs8IXYngnTdmIue8uS/azWN2w/LDgl/tfQAYAkTKMRUzWoq8z
JZf5u6DsUrIWuqMBPAA8x8+xiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNtbXtB/
HWtULMcYY5GmvDPl4zpZMB8GA1UdIwQYMBaAFAc4F9tSnNvrP/k4rl7ghIjhfk6Q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjBDOS8wQzc3OENCNDdE
MUExMUVEOEU4QkVCODJDNEY5QUUwMi9CemdYMjFLYzItc18tVGl1WHVDRWlPRi1U
cEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0J6Z1gyMUtjMi1zXy1UaXVYdUNFaU9GLVRwQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QjBDOS8wQzc3OENCNDdEMUExMUVEOEU4QkVCODJDNEY5QUUwMi9CemdYMjFLYzIt
c18tVGl1WHVDRWlPRi1UcEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC4dYVseoQlb1LDEPA9TgPFR7uN7ucLCvFxZHFdryhu/n/tBTM8YW6u
hx94kz5j1fbPwcg3drTzmq8GtE57QQx8QjjqLWumb4HhpOJKVGjjtXcs9p4hQB2T
agMQvcpqiSYodynH/cHxNV23NNACrS5oosNCwbWPwcGjUTGzb69NP3lMnAYyERjX
VtWTp3itcwA14Vv6rZGwOmIwq2kUSWzJJBgoo+eDB+D2PPoXEEhqCxLVn3d4WQCQ
oVIMgb89AQcLJF2WNozePPW/Fq2dbxMtjhH2HzEDq1fOn3oqvW9UF6WWCM/C8k+v
kagpZJaUyB9k0rCQ2LBHHrN1KRxTCVOO
-----END CERTIFICATE-----