Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180484/6925BD8ED2C111E9A925CD29C4F9AE02/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.mft
File:                     Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.mft (raw, json)
Hash identifier:          TLdr1wOh3U/KicChO1wcHHncOXqeol4xy1C+a/BA8tM=
Subject key identifier:   40:E7:CF:36:1D:AE:49:48:EB:33:1F:58:2D:70:9D:C6:67:64:AD:7C
Authority key identifier: 43:5B:DF:93:03:04:19:4A:08:69:AD:EE:87:A0:B5:56:C5:88:F6:F4
Certificate issuer:       /CN=A9180484/serialNumber=435BDF930304194A0869ADEE87A0B556C588F6F4
Certificate serial:       0D2D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180484/6925BD8ED2C111E9A925CD29C4F9AE02/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.mft
Manifest number:          0D24
Signing time:             Fri 28 Mar 2025 18:10:53 +0000
Manifest this update:     Fri 28 Mar 2025 18:10:53 +0000
Manifest next update:     Fri 04 Apr 2025 18:10:53 +0000
Files and hashes:         1: Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.crl (hash: eXCuRNyLEmUXayJchSIQh6UE8yEdMMs+t1Ywlr2lP4A=)
                          2: D2588FA2D2C111E9B5D20B2AC4F9AE02.roa (hash: 3lfdylanDHmeBtco3xOY3EFynIvyeVsjRU7spFbzglc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3373 (0xd2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180484
        Validity
            Not Before: Mar 28 18:10:53 2025 GMT
            Not After : Apr  4 18:10:53 2025 GMT
        Subject: CN=67e6e62d-a130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1a:99:39:8e:be:57:9a:60:8b:a4:70:7c:02:
                    e3:75:61:6b:2c:59:56:10:f8:60:c1:bc:1e:32:14:
                    92:f0:66:c9:db:e0:c6:89:f8:ef:c1:9e:8f:c6:d0:
                    14:4c:25:3f:4e:ab:4f:a4:5f:8c:c8:f8:a4:cf:0f:
                    c4:3a:c9:71:df:96:86:d1:25:75:76:c5:0b:82:7a:
                    38:5c:74:a4:43:c3:26:36:bb:43:7a:91:b0:e4:9c:
                    d1:b7:e5:24:3f:f2:f6:7d:3f:28:aa:9a:96:00:a9:
                    ff:6a:b6:7d:92:ec:ae:90:3e:2b:fd:ae:0b:23:ad:
                    0f:71:5f:4c:5d:ac:42:03:aa:6f:50:65:bd:fb:bd:
                    17:b3:f1:61:2d:a7:1f:2a:1d:12:5f:07:8e:64:99:
                    79:59:3e:cf:d8:98:4f:a5:26:7f:1a:21:bc:b4:d0:
                    38:e6:3d:d0:6b:55:06:2f:9c:ad:01:d8:7d:bf:dd:
                    dc:05:50:a4:fc:62:b6:4f:56:1f:e3:b6:2f:d6:9b:
                    68:cc:bd:dc:26:e0:06:19:fd:37:cb:a7:6a:3c:c3:
                    a2:40:06:1d:22:ce:98:d0:d9:2d:63:af:f5:18:13:
                    bc:4e:7d:26:bc:9a:25:35:28:bd:84:8f:93:e6:da:
                    3e:a7:a4:65:42:5e:e4:13:59:33:95:2b:c1:13:38:
                    75:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:E7:CF:36:1D:AE:49:48:EB:33:1F:58:2D:70:9D:C6:67:64:AD:7C
            X509v3 Authority Key Identifier:
                keyid:43:5B:DF:93:03:04:19:4A:08:69:AD:EE:87:A0:B5:56:C5:88:F6:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180484/6925BD8ED2C111E9A925CD29C4F9AE02/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180484/6925BD8ED2C111E9A925CD29C4F9AE02/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:bd:33:35:cf:3d:7d:d5:a8:0b:d5:f5:97:5a:0b:cc:ae:f4:
         64:19:1a:2f:c8:a4:ef:b2:4b:0d:1c:44:bb:19:f5:4a:9d:57:
         b9:6d:d0:a7:0c:93:e3:34:ff:98:06:13:ce:b9:aa:30:24:dc:
         17:08:14:16:b8:74:7b:35:2f:eb:73:0e:8a:f5:53:0c:e5:b4:
         00:6b:d0:c9:40:2d:fc:ac:58:ac:9d:67:0d:78:b9:3c:3c:f9:
         c4:cd:3d:91:e0:fb:0e:6a:be:b6:65:c3:ed:4e:63:89:9f:08:
         91:f6:1b:00:8d:bf:16:54:aa:ac:2d:05:b1:e3:f3:74:47:9f:
         f1:76:5d:70:e0:98:fd:ec:1c:6c:4f:7a:b2:7e:a2:08:34:82:
         55:7e:9c:be:12:7a:22:4f:f9:37:e5:73:fb:be:73:50:79:65:
         e6:db:7f:5d:49:19:b3:17:8f:b0:86:6f:6c:1c:3b:1c:9d:dc:
         8d:02:5f:dd:27:b2:34:9c:5b:de:d3:a5:5a:20:c1:01:5a:3a:
         ca:67:49:bc:ac:67:e5:77:3e:9c:5c:55:30:12:f3:de:af:fb:
         f4:18:90:5b:ae:74:cb:7b:86:71:b6:d3:15:12:14:ae:8c:ed:
         e0:9f:8b:4f:1b:c5:86:54:5f:b1:ba:48:08:fa:7a:47:8e:30:
         4d:0d:f3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----