Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/p4kC9PDYJLQPSW1d_D6fBjO3Epk.mft
File:                     p4kC9PDYJLQPSW1d_D6fBjO3Epk.mft (raw, json)
Hash identifier:          FRM2iM/o2q2KWy9X8ERJLNsES8Bt2UjPTc/6p7yaOM4=
Subject key identifier:   99:71:58:1D:5C:8E:08:A8:A9:4F:91:BB:72:78:0E:EC:9D:80:6E:00
Authority key identifier: A7:89:02:F4:F0:D8:24:B4:0F:49:6D:5D:FC:3E:9F:06:33:B7:12:99
Certificate issuer:       /CN=A915FDCF/serialNumber=A78902F4F0D824B40F496D5DFC3E9F0633B71299
Certificate serial:       0799
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4kC9PDYJLQPSW1d_D6fBjO3Epk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/p4kC9PDYJLQPSW1d_D6fBjO3Epk.mft
Manifest number:          160A
Signing time:             Fri 28 Mar 2025 17:48:52 +0000
Manifest this update:     Fri 28 Mar 2025 17:48:52 +0000
Manifest next update:     Fri 04 Apr 2025 17:48:52 +0000
Files and hashes:         1: p4kC9PDYJLQPSW1d_D6fBjO3Epk.crl (hash: XEYSKq0k8WEWLIdmtHeCYJY83Zctu32lAwU8PEclf7I=)
                          2: 12D5B220296411EDB08A7E54C4F9AE02.roa (hash: IfNUHhPvu7UsBRDPbxmJEbxn+CUXhUXh86S7/wAn8KI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1945 (0x799)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FDCF
        Validity
            Not Before: Mar 28 17:48:52 2025 GMT
            Not After : Apr  4 17:48:52 2025 GMT
        Subject: CN=67e6e104-1ff0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:94:61:b6:1e:5a:8a:e9:a0:d2:69:47:f8:02:
                    d2:fe:3e:ab:7a:4f:ef:a0:d0:63:70:fe:59:8d:65:
                    e7:15:47:7c:99:9c:ff:ae:bf:9a:87:c9:fe:5a:c8:
                    ac:ce:64:7f:8b:41:5b:91:6b:fe:a1:30:2c:55:d9:
                    51:f1:b7:4c:8d:fb:75:97:36:f0:29:76:4c:f9:7d:
                    20:18:91:b2:ae:d9:9b:d0:00:24:6f:e1:9f:9d:9e:
                    fd:0c:7f:76:30:00:73:c6:d8:fa:24:7b:b5:b3:37:
                    97:0e:13:f2:1f:32:88:d9:9a:5e:a2:47:67:72:58:
                    32:de:94:65:0b:2d:e2:98:31:a1:e5:c3:3f:6b:61:
                    44:65:f0:89:35:57:de:ab:10:62:b5:bf:b6:4e:22:
                    9a:aa:9b:85:55:78:69:13:66:55:84:8b:53:36:92:
                    9d:fd:89:b6:24:79:84:ad:5a:2b:e2:53:fa:33:7b:
                    08:c0:a1:de:5f:ef:b5:40:26:45:f7:27:56:fa:20:
                    21:d6:5d:68:1b:f1:98:8d:02:49:1b:dc:5b:d6:d0:
                    fd:5b:54:d1:b5:e2:99:7f:71:67:7b:22:8b:e4:52:
                    9f:88:a3:b3:a0:48:99:4c:5d:71:91:ef:a8:1f:12:
                    84:35:95:7d:0c:5d:69:85:a7:4a:a7:16:3d:1a:5a:
                    6b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:71:58:1D:5C:8E:08:A8:A9:4F:91:BB:72:78:0E:EC:9D:80:6E:00
            X509v3 Authority Key Identifier:
                keyid:A7:89:02:F4:F0:D8:24:B4:0F:49:6D:5D:FC:3E:9F:06:33:B7:12:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/p4kC9PDYJLQPSW1d_D6fBjO3Epk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4kC9PDYJLQPSW1d_D6fBjO3Epk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/p4kC9PDYJLQPSW1d_D6fBjO3Epk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:46:43:3a:cf:39:33:09:e4:1c:63:90:f5:d1:ae:2e:04:8c:
         3a:94:c8:ac:3a:25:55:d2:5d:9e:f5:05:f6:71:5e:16:94:98:
         1e:1b:5d:10:e4:09:e9:f5:ed:7a:bf:02:27:79:0e:2d:53:2b:
         26:1a:c1:63:19:4f:e3:a5:c1:24:c0:4e:ec:47:9d:43:60:ec:
         0d:f6:03:2a:0a:6c:e3:88:0f:4b:1a:11:7f:de:02:21:44:3b:
         73:3a:00:1b:d0:2f:8c:b3:bd:0f:ce:f1:6e:70:f2:30:1c:25:
         f2:4f:6d:be:53:7f:d6:5a:84:71:45:75:7d:c9:98:65:7e:59:
         c7:c0:74:23:58:b2:0b:87:2b:b3:df:ed:85:b6:f4:dd:ff:d9:
         0d:23:9a:7a:ed:3e:b2:19:6d:71:55:97:2b:de:d5:02:e7:68:
         27:25:61:0a:fc:eb:9a:3a:03:5f:44:19:2f:e1:3e:2d:02:00:
         19:80:b0:79:7e:9c:34:ce:ec:59:ea:d4:8f:72:fa:ff:12:5e:
         49:d1:31:05:3d:dd:c6:0a:89:77:4c:73:01:5e:11:8b:8f:3c:
         3f:ae:61:f2:21:73:98:1e:a9:15:42:39:a5:17:a0:fb:55:f7:
         c6:8f:cc:3a:62:65:38:8b:4b:4a:51:82:6d:8f:ca:41:4a:73:
         04:8f:e1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----