Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft
File:                     EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft (raw, json)
Hash identifier:          ZKsMajYw+EofWLvlIBakKlnGqs8mtBLAdknBKmyr5sI=
Subject key identifier:   53:C6:83:27:27:6B:AB:4D:4E:71:AC:6D:C6:D5:D7:07:5A:FE:FC:F1
Authority key identifier: 13:24:04:30:21:BB:45:D7:FF:66:F2:0A:FC:68:39:34:31:30:C3:F2
Certificate issuer:       /CN=A917FFB0/serialNumber=1324043021BB45D7FF66F20AFC6839343130C3F2
Certificate serial:       34E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft
Manifest number:          34A9
Signing time:             Fri 28 Mar 2025 14:45:55 +0000
Manifest this update:     Fri 28 Mar 2025 14:45:55 +0000
Manifest next update:     Fri 04 Apr 2025 14:45:55 +0000
Files and hashes:         1: EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.crl (hash: QzuzkJTSMPF5c4vKAGmX1XOplgoXHhEwSL5JM3buOcI=)
                          2: 80B30FA48F5611EA9C04912BC4F9AE02.roa (hash: pAR1FgGTlUIXKdXPzl2g83tghG6tiadwAtJ5qGgzg7c=)
                          3: 19CCFBDE6F0911ED8A7BD268C4F9AE02.roa (hash: JTK51f8dfP+bxciKZy6FgqfkHpvTyTd0gqBndr+pK/M=)
                          4: A88A36D0003A11EEB8430127C4F9AE02.roa (hash: S9c42K/e6Cb4RZkOmU2A+Wc3g/Elgh6iQKBCJml/etM=)
                          5: 187F92966F0911ED8A7BD268C4F9AE02.roa (hash: WY+AEtZNGfOw12yKOfvg/F8cjo6zbb8RMRrGslASsW0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13539 (0x34e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917FFB0
        Validity
            Not Before: Mar 28 14:45:55 2025 GMT
            Not After : Apr  4 14:45:55 2025 GMT
        Subject: CN=67e6b623-5b74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9c:16:62:19:88:9b:24:af:97:ca:79:01:49:
                    98:50:3d:4f:b1:df:d0:af:77:4c:95:16:12:19:be:
                    74:a8:7b:e3:aa:2f:43:57:6e:ad:39:4b:be:0c:d2:
                    3f:d8:ab:7f:04:d6:a9:10:9b:75:60:ff:c0:a4:63:
                    d9:88:1a:15:94:da:71:bf:eb:a5:43:21:41:fc:12:
                    f9:9e:69:ff:e6:3e:5b:2f:65:fc:53:f8:87:0e:65:
                    24:a9:f2:6e:01:e8:e1:df:aa:e9:a2:3f:62:2c:99:
                    2d:d8:67:48:32:80:c5:98:5b:94:fc:9b:97:0e:b3:
                    dc:1c:24:b7:4e:84:a0:91:14:d0:a3:f1:13:96:e2:
                    92:29:23:5d:01:72:db:c2:9b:2f:15:75:09:18:e8:
                    1b:de:64:65:05:40:d7:fd:3a:87:a6:a8:24:5b:97:
                    4e:66:35:58:a7:ef:3d:0b:d6:06:05:cc:38:16:ce:
                    5d:02:69:3a:f6:f7:cc:5a:8f:f4:57:ef:38:29:86:
                    d3:81:d8:f1:03:02:34:0f:3a:af:6e:29:f9:c7:90:
                    96:64:7a:b9:9c:9b:ef:6e:bf:b8:dd:3a:68:b9:6c:
                    5e:5d:65:58:0b:ee:11:ba:e3:5d:17:4c:8e:2f:eb:
                    ca:bb:e5:bb:b3:18:d9:03:44:d2:ab:28:4a:30:38:
                    a1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C6:83:27:27:6B:AB:4D:4E:71:AC:6D:C6:D5:D7:07:5A:FE:FC:F1
            X509v3 Authority Key Identifier:
                keyid:13:24:04:30:21:BB:45:D7:FF:66:F2:0A:FC:68:39:34:31:30:C3:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:60:d3:4f:8d:17:4b:b3:27:9e:b0:fc:63:87:2f:f9:5b:93:
         08:77:c4:eb:02:b5:b0:e7:ae:4b:a3:54:3b:f7:3e:7f:13:9d:
         d0:d0:15:20:2b:e8:69:51:87:56:e9:c0:b0:81:58:1a:f5:f8:
         97:12:7f:34:32:f5:c6:1e:be:34:28:14:eb:29:6e:57:c6:38:
         ce:9d:5e:8d:00:a8:45:d4:06:f1:e9:9a:fe:cd:b5:74:6d:74:
         53:81:42:aa:1b:6a:69:a3:2c:83:59:68:d3:e8:d6:63:13:9f:
         ec:cf:ac:37:43:5e:f9:09:d1:3a:9a:6c:20:f5:c4:6a:10:39:
         69:3c:22:da:ac:f0:1f:cc:8c:5f:2f:df:86:e4:86:a6:60:1e:
         b1:2c:06:52:be:88:6e:18:42:39:ec:77:e0:d8:fc:ef:06:d5:
         51:57:15:03:3c:f1:a0:55:c8:91:52:68:de:c3:aa:5d:fe:73:
         fb:cd:9d:f2:cb:06:78:9f:59:58:fc:0a:0e:2f:2d:21:5b:64:
         fd:de:36:29:87:f7:ce:35:08:a9:d7:2b:51:b9:4f:ca:2a:50:
         20:b4:85:4a:b9:80:ed:ba:b1:b1:45:75:41:cb:5d:cf:74:a6:
         7a:e3:be:64:8b:8f:a7:0a:a1:d1:fe:7d:9e:73:74:2d:b0:69:
         79:b6:7f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----