Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.mft
File:                     KTzh3tGmQEsAssDM-z886vshpQg.mft (raw, json)
Hash identifier:          zgPq8dD2mDQvK3NuHgiUuQxQ6+9iw5Tuv8GeKTTbhGs=
Subject key identifier:   24:16:42:71:71:23:AD:48:BA:38:94:6B:6E:F2:77:3E:86:ED:92:F8
Authority key identifier: 29:3C:E1:DE:D1:A6:40:4B:00:B2:C0:CC:FB:3F:3C:EA:FB:21:A5:08
Certificate issuer:       /CN=A91790EC/serialNumber=293CE1DED1A6404B00B2C0CCFB3F3CEAFB21A508
Certificate serial:       8B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTzh3tGmQEsAssDM-z886vshpQg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.mft
Manifest number:          89
Signing time:             Sat 29 Mar 2025 05:51:40 +0000
Manifest this update:     Sat 29 Mar 2025 05:51:39 +0000
Manifest next update:     Sat 05 Apr 2025 05:51:39 +0000
Files and hashes:         1: KTzh3tGmQEsAssDM-z886vshpQg.crl (hash: /v7UmO4e1eVg4uToqGBJP0T2YtoDJF77ayu73ZWbnDI=)
                          2: 81AA7D1A3E5811EFAE13B943C4F9AE02.roa (hash: WIZmU+L0O9RcMZGa4g5/Y6rLFYKaR2VClhlEkEMS/7E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139 (0x8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91790EC
        Validity
            Not Before: Mar 29 05:51:39 2025 GMT
            Not After : Apr  5 05:51:39 2025 GMT
        Subject: CN=67e78a6b-6d29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c6:b1:36:57:6d:26:88:86:e2:1b:40:d3:1d:
                    50:dd:bd:3e:5e:e2:62:1a:18:9d:e9:2a:eb:41:74:
                    db:50:75:68:3c:50:cd:e9:14:2c:37:cc:a1:e4:c0:
                    4c:ee:d0:ba:70:2c:d5:3b:aa:a2:8a:76:58:4e:75:
                    a0:66:34:9d:86:09:c4:7a:24:58:8c:28:28:96:90:
                    0d:0a:72:bc:6b:90:06:24:4f:60:68:15:9f:e1:d0:
                    ab:67:16:9b:56:48:c9:fa:db:4a:0b:50:ba:05:b9:
                    72:03:aa:45:44:bd:b6:9b:ca:15:26:b5:64:75:e0:
                    f3:71:00:e6:0a:cc:5f:4f:ab:49:01:18:b6:61:49:
                    62:79:cb:4a:09:bd:05:17:2c:5a:5a:79:e0:9f:5b:
                    de:cf:e9:ee:0b:9a:69:37:28:f4:34:5d:5b:ef:fd:
                    1d:92:ce:2f:d1:fa:17:3f:73:75:6d:50:48:f2:cc:
                    c6:c7:5c:bd:7f:6e:87:5f:55:bb:ff:30:45:a4:d4:
                    05:02:d0:3c:f6:6d:fd:64:ac:9c:bc:79:77:4c:6b:
                    5d:f0:eb:f8:1a:33:15:f4:96:54:4e:21:a6:83:8f:
                    c7:84:f3:68:70:38:a5:55:2b:23:58:43:b5:e3:3a:
                    da:68:9f:89:c9:de:ee:95:4f:97:31:2b:6e:fe:ae:
                    d1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:16:42:71:71:23:AD:48:BA:38:94:6B:6E:F2:77:3E:86:ED:92:F8
            X509v3 Authority Key Identifier:
                keyid:29:3C:E1:DE:D1:A6:40:4B:00:B2:C0:CC:FB:3F:3C:EA:FB:21:A5:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTzh3tGmQEsAssDM-z886vshpQg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:8a:d3:fb:61:3e:e4:0f:c1:07:b0:9b:7c:85:e9:e7:e2:81:
         14:85:c8:3e:a5:1b:f3:fc:d1:86:1d:12:c9:2d:45:d4:fe:45:
         c1:c6:8f:7e:d3:94:f6:08:76:af:2f:3d:84:34:2c:30:e8:57:
         99:84:33:41:9b:4b:af:ae:95:fa:d5:9a:04:40:71:41:5e:2b:
         3c:21:76:9a:39:9c:03:38:c6:29:e6:0a:ba:63:b0:fb:04:3c:
         e2:fb:f5:72:f3:03:9f:bf:b2:8d:43:4d:d4:5b:e9:b5:cd:d5:
         8f:a0:30:6b:70:93:38:80:f8:e4:93:0c:1c:a8:36:78:e4:e8:
         a2:e9:c1:ec:ec:f3:2a:b6:b3:60:c5:e6:3f:a6:43:a9:0e:dc:
         4c:d4:10:dc:87:80:94:92:66:5e:7f:dd:39:f5:7f:1c:41:ce:
         32:7c:f9:98:bd:bb:1b:c6:86:b5:d4:a0:86:64:e0:e8:e7:af:
         25:c7:9d:2a:bb:00:a4:1c:36:46:f4:df:ec:5e:9c:66:87:fa:
         cc:75:05:9c:65:c3:d5:71:2a:2c:af:b1:3f:49:ff:ed:b0:e9:
         1b:67:01:7a:7a:68:df:f5:ec:4f:59:f1:c2:40:b3:be:9d:de:
         4f:5a:9d:27:c0:0f:1f:52:be:12:30:f5:8d:72:0e:70:98:b3:
         68:0f:7c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----