Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
File:                     TbA103TIQSzmgNnaCtvsBkKdiLg.mft (raw, json)
Hash identifier:          //TMH2IRFBlv1aDQTm/kAJjwuhTLZDyltzjpYjnL7+M=
Subject key identifier:   81:6C:D9:3D:62:CE:5D:5F:A5:70:57:B8:D2:4E:2F:AE:4B:90:B2:AF
Authority key identifier: 4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8
Certificate issuer:       /CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8
Certificate serial:       1810
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
Manifest number:          16A7
Signing time:             Fri 28 Mar 2025 17:01:49 +0000
Manifest this update:     Fri 28 Mar 2025 17:01:49 +0000
Manifest next update:     Fri 04 Apr 2025 17:01:49 +0000
Files and hashes:         1: TbA103TIQSzmgNnaCtvsBkKdiLg.crl (hash: ls+kvMq1i2Ifyv84/ucsAqLlvpRLOtspH5jT+sfN4EY=)
                          2: 1F24033CDF7111EEB534147FC4F9AE02.roa (hash: F7+/UI/IdrG7UJylIwMQeWeh8x4KccRZsFSY0IMAJig=)
                          3: B62B9156280611ED8BEBC536C4F9AE02.roa (hash: G9R6UKF81vPpeZEj71HVNBUREkX7yk3WJ1Q6tTRHYYM=)
                          4: 820BE5609CEE11EF9001717EC4F9AE02.roa (hash: kIvT/50E2laNc1gLfjO5rKE/sWwcpe4nrifpeBT23BI=)
                          5: 0D08636C75D611EB920B5162C4F9AE02.roa (hash: j6prxSOt5QlgU/NV/soMWbDX95ZjTIwaOn33GpJLHDk=)
                          6: 6D8B68F2ED9A11EF9E539B3FC4F9AE02.roa (hash: fiR9dIixoq5GbmEt1b/wlfXc0EAUbcwj6cE5+U01hho=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6160 (0x1810)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E678
        Validity
            Not Before: Mar 28 17:01:49 2025 GMT
            Not After : Apr  4 17:01:49 2025 GMT
        Subject: CN=67e6d5fd-b9c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:bf:32:8b:2d:57:b9:9f:8e:fd:83:67:ed:20:
                    4a:30:01:c5:3b:4f:15:dc:98:7d:bf:8f:6d:c5:9c:
                    c2:67:3f:29:aa:4f:47:56:bd:fa:d6:85:1a:d9:e5:
                    3f:49:8a:35:71:ed:ed:e9:1f:a7:5d:43:fb:25:12:
                    81:e0:79:24:10:20:b6:65:eb:93:8c:ee:70:93:64:
                    17:b1:62:2b:99:74:00:4a:c2:ed:66:a6:a0:ba:f1:
                    94:74:e0:61:0c:73:56:69:7b:0f:14:72:96:d7:50:
                    ba:3d:3a:d4:de:0f:b6:08:f0:19:14:6c:13:b6:47:
                    51:93:03:b0:17:6f:8a:b3:68:6d:94:ac:d1:bc:1b:
                    1d:61:a3:5e:13:09:d3:a1:80:0c:33:ef:99:2e:9d:
                    15:67:26:53:83:c5:bf:97:22:93:f6:6d:01:35:3e:
                    3c:47:67:4d:26:ef:b0:75:28:36:cd:75:ef:82:3f:
                    9a:54:98:95:f8:83:45:c2:1c:23:9c:aa:2f:62:53:
                    cc:78:5d:45:99:45:ec:6e:a8:54:3b:bf:0f:48:60:
                    c1:90:d2:d2:c0:42:eb:6a:85:0c:a4:77:20:d4:dd:
                    1a:51:df:1c:14:90:99:6c:8e:9b:0f:9c:cc:61:50:
                    63:e3:d4:07:b5:a8:47:f4:0c:8d:af:a1:e2:6c:f1:
                    e0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:6C:D9:3D:62:CE:5D:5F:A5:70:57:B8:D2:4E:2F:AE:4B:90:B2:AF
            X509v3 Authority Key Identifier:
                keyid:4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:f7:b5:3c:79:9d:77:70:3f:be:b7:2f:75:0d:42:dc:72:cd:
         39:0d:70:4c:85:24:c4:f7:bb:d5:5c:3c:84:f5:d4:ad:6a:f8:
         72:9d:64:25:18:cf:17:9c:5e:3d:9b:59:d3:72:d1:0e:66:99:
         52:5c:84:3b:b7:7b:7e:4c:01:36:3c:4a:e8:98:70:f8:31:23:
         bc:5d:e0:ac:fb:9b:59:f3:84:ea:f7:23:15:5f:ce:95:f9:d3:
         1b:d5:67:04:df:a7:ff:5b:74:4c:65:a2:74:5a:ce:2f:8f:a8:
         05:5b:01:5d:9f:08:b2:9b:42:92:25:b9:ab:8c:c7:4a:5b:5a:
         6c:0d:3a:06:db:a5:0e:33:23:63:31:d2:36:48:55:16:f3:53:
         a9:9e:98:99:fb:af:cf:7e:dc:b2:2c:9e:59:42:39:4b:c8:e2:
         ad:31:5a:21:59:a4:57:59:16:e1:1a:26:91:cb:ca:59:71:06:
         86:08:d3:b4:08:29:1e:47:63:13:79:b1:02:51:54:68:f5:8a:
         87:f4:27:f7:64:87:a2:29:b0:21:04:b5:9a:1d:b5:74:24:38:
         cb:5f:b2:3b:0a:cd:73:e6:a8:fc:ee:f3:bb:00:45:41:c6:da:
         8c:71:84:63:a5:99:a3:a0:9d:fd:c6:7a:cf:34:ea:0b:bd:6d:
         8b:ed:ac:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----