Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft
File:                     Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft (raw, json)
Hash identifier:          B5zlH3SGhs04f6uWjKwnqjZwNcnrfpcjmluNtKgMN04=
Subject key identifier:   69:21:30:C4:AD:6A:39:D5:D6:A8:F2:61:C6:BC:DD:A8:14:C6:47:81
Authority key identifier: 2A:47:75:37:F3:23:EF:B5:9D:BD:8D:BE:B3:AF:AB:1F:15:82:F5:46
Certificate issuer:       /CN=A916DDB4/serialNumber=2A477537F323EFB59DBD8DBEB3AFAB1F1582F546
Certificate serial:       05C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft
Manifest number:          05BC
Signing time:             Fri 28 Mar 2025 23:21:13 +0000
Manifest this update:     Fri 28 Mar 2025 23:21:13 +0000
Manifest next update:     Fri 04 Apr 2025 23:21:13 +0000
Files and hashes:         1: Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl (hash: XpaqLtJYrmJHHJQrS23dRPZx6gpgh0FI9LX7agxZD6A=)
                          2: B951F87ABE6D11EF933FE870C4F9AE02.roa (hash: z/OvD5EQcBmWZhdA8ip/E6h0FRzhkXq6osJ4yXLXzHc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1475 (0x5c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DDB4
        Validity
            Not Before: Mar 28 23:21:13 2025 GMT
            Not After : Apr  4 23:21:13 2025 GMT
        Subject: CN=67e72ee9-a764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f7:d8:b7:37:be:05:54:94:38:f3:44:58:4e:
                    98:3f:5b:3a:06:3f:94:04:91:a4:70:6b:2b:07:af:
                    db:fb:7f:77:79:cc:f4:ce:7d:3a:51:58:af:8c:64:
                    9f:f3:2a:5a:58:68:55:2f:6e:33:35:48:3b:48:2f:
                    dd:a3:18:77:0a:b9:e3:02:6c:49:3a:3a:cb:99:6a:
                    08:0d:b8:1c:98:f6:3b:83:14:20:40:b4:60:7b:6a:
                    ee:64:4e:4a:89:84:15:ae:e6:e1:4e:c9:24:18:35:
                    63:03:40:5c:ad:3d:6f:71:6c:eb:97:b0:2a:bf:ef:
                    9c:d2:84:4a:df:69:b5:06:89:e8:78:5a:fc:37:d5:
                    b8:bf:77:4c:62:09:6c:05:99:41:fd:c8:64:e0:54:
                    0a:7b:76:a9:83:8e:a5:24:c2:40:cf:7d:e1:d2:a9:
                    f2:cb:93:d0:a4:03:18:b7:3f:ed:8a:b9:32:d5:73:
                    ea:70:00:c0:51:fa:d1:28:20:8a:88:41:a9:03:c2:
                    22:4a:48:23:1b:fc:76:0c:08:20:c3:c0:e9:d0:01:
                    f9:60:05:06:2d:16:6a:e5:d7:62:db:48:e9:0d:05:
                    48:ed:c0:42:b6:c7:62:f1:06:96:69:eb:3f:c7:19:
                    94:ee:e6:73:a8:9d:c0:02:bd:83:5a:7b:bb:e7:87:
                    01:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:21:30:C4:AD:6A:39:D5:D6:A8:F2:61:C6:BC:DD:A8:14:C6:47:81
            X509v3 Authority Key Identifier:
                keyid:2A:47:75:37:F3:23:EF:B5:9D:BD:8D:BE:B3:AF:AB:1F:15:82:F5:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:ff:03:b9:8e:e0:ab:5f:4b:7a:cb:fd:51:3f:de:19:b5:12:
         c2:ec:7c:ca:f9:21:bc:56:65:e8:80:46:44:59:df:de:66:68:
         1e:8c:c2:41:67:25:92:ab:26:de:c5:8a:5d:06:b7:2f:8f:a7:
         23:7b:e0:97:a6:3d:c8:98:1a:07:86:d8:49:a3:32:40:29:c9:
         01:a4:42:4e:a6:52:19:58:69:b9:48:df:c2:d1:34:68:22:ef:
         c1:2b:f1:ab:cc:fb:a2:3c:2b:79:15:bc:df:6c:fc:20:e2:d8:
         34:d1:85:d0:87:91:f7:be:9c:80:6d:61:49:71:f3:dc:96:b2:
         31:b5:07:90:b2:3a:0f:a2:53:e3:95:d6:0f:f7:df:87:08:a4:
         16:6b:43:a5:3d:28:dc:07:ba:b2:25:6f:40:59:a6:a3:35:e2:
         4b:a1:58:55:7e:1d:2e:69:38:32:ba:e2:33:eb:a3:12:ad:18:
         b3:b2:1c:af:ce:7c:56:18:eb:c2:e7:b5:b2:0d:13:69:ab:a2:
         54:43:7a:1e:88:84:ce:84:de:08:fa:2f:da:fa:2f:ba:c0:b5:
         55:38:c2:04:0b:90:6a:ba:da:55:4f:5d:06:86:0e:61:8e:6c:
         b7:78:bc:7b:ac:5b:99:57:6b:6e:31:14:cb:ff:64:69:e0:50:
         86:5d:62:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----