Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft
File:                     zWXmdAuufrM71eU4ye5t6LM1RDE.mft (raw, json)
Hash identifier:          xLa7f+OYsp/D3FrfoN+4wfpFPDaiQwwhNiZtuGpeRhA=
Subject key identifier:   5F:D4:E1:0D:E7:8B:27:CF:2A:24:95:EC:7E:61:73:0C:A6:41:60:D6
Authority key identifier: CD:65:E6:74:0B:AE:7E:B3:3B:D5:E5:38:C9:EE:6D:E8:B3:35:44:31
Certificate issuer:       /CN=A916FA49/serialNumber=CD65E6740BAE7EB33BD5E538C9EE6DE8B3354431
Certificate serial:       010B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zWXmdAuufrM71eU4ye5t6LM1RDE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft
Manifest number:          0104
Signing time:             Fri 28 Mar 2025 17:26:19 +0000
Manifest this update:     Fri 28 Mar 2025 17:26:18 +0000
Manifest next update:     Fri 04 Apr 2025 17:26:18 +0000
Files and hashes:         1: zWXmdAuufrM71eU4ye5t6LM1RDE.crl (hash: es0C/XZRVfXT6HkGK3+uKRLcic3YB+kWjSWzgEzqjgI=)
                          2: 74F996F62F2511EF8D78DC62C4F9AE02.roa (hash: TReNRUcB9Slmh+4MFPwcv7z0b4ojdmnvbTh9IbkrL54=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 267 (0x10b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916FA49
        Validity
            Not Before: Mar 28 17:26:18 2025 GMT
            Not After : Apr  4 17:26:18 2025 GMT
        Subject: CN=67e6dbbb-ce75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9b:ca:7d:56:9d:31:74:10:f5:9b:6a:ea:b8:
                    bc:5f:8f:7c:1b:ce:75:0f:a3:cc:de:48:b8:e2:5d:
                    41:aa:b1:68:ad:93:a4:e5:08:c0:6a:a6:f3:d9:df:
                    63:8f:40:23:35:8c:f7:22:3f:60:f8:17:6b:d1:f3:
                    23:52:01:a2:25:2f:28:37:74:8f:5d:79:c7:25:87:
                    2c:dd:e2:f7:36:02:1e:b0:f5:ce:41:e4:78:c0:a0:
                    03:50:2b:eb:0c:08:af:e8:98:7f:c6:57:d9:5c:29:
                    91:dc:e4:0f:12:c3:c1:9d:83:4e:74:38:5c:d5:86:
                    5a:93:a4:82:31:b8:f0:ca:7b:77:d4:29:08:68:dd:
                    b0:fa:b6:2c:9b:88:5f:33:de:c4:65:69:8f:fb:78:
                    a9:c5:d4:d5:5a:5c:83:09:73:51:a9:70:d8:8c:12:
                    70:f8:b7:da:f2:da:a2:7a:14:1a:27:8c:76:39:59:
                    03:a2:3b:7b:d5:c8:5b:35:36:e3:ee:d6:38:0e:ff:
                    a7:7f:24:da:f0:76:ee:22:6e:69:c0:4e:70:a0:ce:
                    0d:2e:47:fc:12:6d:52:f7:b4:b1:73:65:f5:66:e7:
                    2a:f1:39:2f:6d:a3:8f:3f:76:70:ab:a5:36:68:a8:
                    db:6f:96:26:f7:9f:43:b8:51:41:94:87:36:5e:72:
                    98:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:D4:E1:0D:E7:8B:27:CF:2A:24:95:EC:7E:61:73:0C:A6:41:60:D6
            X509v3 Authority Key Identifier:
                keyid:CD:65:E6:74:0B:AE:7E:B3:3B:D5:E5:38:C9:EE:6D:E8:B3:35:44:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zWXmdAuufrM71eU4ye5t6LM1RDE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:b4:66:c7:e6:6a:44:97:07:c7:da:5b:76:23:05:08:72:21:
         6f:79:3d:a2:f0:c1:77:b0:5e:32:b4:27:53:9b:c7:ab:93:a9:
         e3:63:05:b2:6f:e0:bf:2f:67:46:14:83:b2:4a:88:44:16:df:
         25:3a:fb:14:04:91:75:1d:8f:14:cf:63:b9:92:c5:78:0d:f8:
         61:5c:8a:d8:6d:07:dd:a3:04:5e:fe:66:d2:76:d8:cf:3b:13:
         1b:1e:62:ca:71:25:6d:b5:7f:0c:48:db:5c:87:02:9b:c9:19:
         20:db:b6:a4:b1:41:5d:4f:e3:16:fa:ff:cb:ee:b3:54:0f:51:
         1c:18:83:4b:97:0c:a8:a1:51:4c:39:9e:34:12:fc:95:59:03:
         d9:0f:72:7e:f8:64:f1:9e:58:87:28:07:55:6c:7c:d9:b5:9b:
         54:9f:ca:47:13:80:3d:06:e3:1c:34:19:51:2d:75:15:17:37:
         08:80:c5:3f:95:8f:e7:d5:b9:45:3e:1c:25:f9:78:22:62:62:
         af:76:af:02:67:74:e6:24:93:a2:f4:69:d0:be:85:a9:46:cd:
         f9:40:46:f7:00:36:cc:ab:9c:7e:fe:03:75:fd:6f:d8:3e:15:
         ec:13:ed:ed:fb:64:fa:36:38:d2:16:1a:2f:ef:c7:84:bb:0a:
         30:07:6b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----