Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft
File:                     OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft (raw, json)
Hash identifier:          WaJ9xFCRVqCtUq9zYwW9gzi/pqcDnHU2DScSXQ6X/bk=
Subject key identifier:   6D:10:89:C2:D9:98:84:EE:A3:DC:6F:9E:98:D6:51:CD:3E:35:A1:2B
Authority key identifier: 39:9A:5E:17:D9:CA:43:B6:C3:3A:C3:30:20:6D:CB:DD:93:5E:78:71
Certificate issuer:       /CN=A916879A/serialNumber=399A5E17D9CA43B6C33AC330206DCBDD935E7871
Certificate serial:       A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft
Manifest number:          A0
Signing time:             Sat 29 Mar 2025 05:35:37 +0000
Manifest this update:     Sat 29 Mar 2025 05:35:36 +0000
Manifest next update:     Sat 05 Apr 2025 05:35:36 +0000
Files and hashes:         1: OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.crl (hash: 138WL5tmcVCQ9fvbbFw8kDXnzC5Fz0LzF5Uv7WT/abM=)
                          2: 74EAEAC41ED211EFA618AB5EC4F9AE02.roa (hash: TR/9w+oCqGCqjfN5wK6VX8rAdbT3DnBKMOm4/b1iJZA=)
                          3: 36AEBDD61C9C11EF9953E67EC4F9AE02.roa (hash: y9ipesVJF6530t8WVs2qEr0X7RGO4yWHPQGA3YKJeHw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164 (0xa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916879A
        Validity
            Not Before: Mar 29 05:35:36 2025 GMT
            Not After : Apr  5 05:35:36 2025 GMT
        Subject: CN=67e786a9-0300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6a:fb:8b:1b:3c:90:38:bc:f1:d7:ee:01:e7:
                    a1:e7:f3:f8:5a:66:66:0b:1e:7f:ab:48:52:bf:49:
                    52:86:31:1a:33:b6:5b:0e:42:b3:63:ef:fa:82:9f:
                    4a:2d:f7:f5:3d:ed:eb:d1:f2:58:dd:f9:f8:13:65:
                    f8:88:3f:20:9c:72:c1:8e:92:f9:6f:9c:22:fb:34:
                    83:bc:09:13:24:d1:c7:77:5a:61:8d:4b:e3:68:dd:
                    47:14:17:bd:aa:1c:06:35:4a:2e:9e:7f:b3:68:72:
                    be:2d:dc:3a:11:71:7f:56:01:01:cf:f8:dc:b9:cf:
                    e1:ae:3a:73:77:e8:4f:a9:ff:4a:3a:f1:36:24:01:
                    44:72:98:7b:27:64:ca:e6:8e:2d:c5:4a:42:8b:3d:
                    41:cd:e6:dd:9d:34:eb:f9:a8:2a:39:07:37:55:d7:
                    aa:c2:04:f4:50:f1:64:40:26:97:d4:95:8b:91:8d:
                    83:d3:58:9d:62:fc:98:50:fd:d0:94:2b:88:8a:ae:
                    aa:d3:61:8b:9e:f0:12:c2:9e:21:36:e5:e8:53:d1:
                    c2:42:83:10:22:72:c3:d4:82:81:63:c6:3a:c0:bc:
                    23:9c:09:e3:1c:6a:8b:5a:16:58:91:fb:3a:66:02:
                    4d:0c:44:e6:7b:bb:6e:80:30:bd:0e:4e:67:58:20:
                    40:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:10:89:C2:D9:98:84:EE:A3:DC:6F:9E:98:D6:51:CD:3E:35:A1:2B
            X509v3 Authority Key Identifier:
                keyid:39:9A:5E:17:D9:CA:43:B6:C3:3A:C3:30:20:6D:CB:DD:93:5E:78:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:5e:cc:95:78:ee:35:9e:c9:79:da:97:10:19:41:6d:a2:e9:
         92:a9:71:5d:dd:e5:20:73:dc:ab:7c:cd:e0:69:ca:b8:55:94:
         22:1f:ae:40:dc:d4:09:8a:50:55:19:4f:25:8c:2d:a0:b8:79:
         af:64:9d:5c:b9:1a:74:29:05:2e:4c:99:81:67:b9:d4:48:be:
         a7:89:0a:e5:a3:7a:ab:b4:53:9e:1a:0c:52:df:44:0c:61:bf:
         8f:85:fa:71:ea:f0:03:98:9d:eb:d3:ce:db:20:9e:22:44:0d:
         12:c6:bd:e6:28:d5:c8:c7:da:11:82:f4:c8:7c:64:d9:e0:20:
         56:51:1e:9b:36:24:99:0f:bc:05:d6:22:69:58:f2:83:8f:5f:
         3e:15:56:12:2e:0f:bf:19:f7:69:c0:04:47:c4:b9:ba:00:87:
         a1:62:a4:ce:97:89:f1:29:44:ad:f4:99:c5:30:75:97:f7:9d:
         ab:0b:97:42:92:1d:e5:a9:29:28:9e:26:2c:6e:18:00:e7:9c:
         f7:3d:16:6a:b9:40:05:5d:f4:e1:60:22:f9:75:98:bb:4f:27:
         8e:d6:7f:de:e5:fc:98:16:20:c1:ef:0d:d9:66:1c:6d:41:cd:
         a2:24:f4:be:2a:9a:d4:db:40:76:d5:ed:bd:48:9e:b2:f7:6f:
         a5:9f:2e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----