Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.mft
File:                     npKCbPR9rsiFyZgQKH24bmlXaOo.mft (raw, json)
Hash identifier:          vc4VLYbs3856M1G/Sh50Xf4TTk4pfsxy2jtK+J4u0eg=
Subject key identifier:   A6:BC:40:31:D4:67:74:CF:DD:12:BB:96:41:B5:E9:9D:25:AE:12:73
Authority key identifier: 9E:92:82:6C:F4:7D:AE:C8:85:C9:98:10:28:7D:B8:6E:69:57:68:EA
Certificate issuer:       /CN=A9187000/serialNumber=9E92826CF47DAEC885C99810287DB86E695768EA
Certificate serial:       1535
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npKCbPR9rsiFyZgQKH24bmlXaOo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.mft
Manifest number:          1515
Signing time:             Fri 28 Mar 2025 16:55:52 +0000
Manifest this update:     Fri 28 Mar 2025 16:55:52 +0000
Manifest next update:     Fri 04 Apr 2025 16:55:52 +0000
Files and hashes:         1: npKCbPR9rsiFyZgQKH24bmlXaOo.crl (hash: fbHHi3psU2uefZ2uN9IhMS5+ZzBrf5lBMCngzo6+GEs=)
                          2: FC45B5BE63A911EF954C7983C4F9AE02.roa (hash: vrCV2cvfB8WdbRn0Uoy+kWpWz93WOhrgMiccdZKbwQ0=)
                          3: 08C486D0E47311EBB62C361EC4F9AE02.roa (hash: D8HX0WH7pAjYuo2j6ZFLWQO7IUpWu3UjBYkQNGYy+7A=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5429 (0x1535)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187000
        Validity
            Not Before: Mar 28 16:55:52 2025 GMT
            Not After : Apr  4 16:55:52 2025 GMT
        Subject: CN=67e6d498-a748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b5:c1:5a:07:c4:3c:24:1f:72:02:6e:0f:39:
                    c1:92:79:86:d4:03:b3:8f:79:cb:1e:05:f6:0e:6f:
                    49:46:9a:fd:c4:13:f3:a9:cf:67:d6:6c:2b:21:d2:
                    e3:be:1b:bf:a2:65:fb:45:1a:28:6f:0c:7e:5a:cb:
                    4a:53:a7:82:3b:cb:ad:c7:d5:65:49:63:39:d1:f9:
                    e8:7e:e0:42:0a:a5:1f:ff:1a:84:ee:2e:35:ed:72:
                    b6:02:05:ed:f5:8c:20:24:f8:27:2a:c3:8b:7e:0d:
                    03:06:b0:47:9f:87:0e:e6:ba:0e:c9:8c:bd:b4:0e:
                    54:4a:a9:95:14:51:f9:8f:c6:8c:c4:8d:80:7a:ee:
                    d5:21:95:6a:57:6e:23:9b:73:97:82:90:d9:3a:54:
                    9f:21:db:38:d2:55:82:14:b4:fd:f4:7a:aa:97:a9:
                    54:4a:f6:bc:a8:fa:31:74:e5:31:28:0e:e0:f7:18:
                    1a:f3:e4:62:6a:5c:5c:88:42:9f:87:f0:f9:01:33:
                    8c:e2:f4:f5:83:28:73:d9:d4:52:e5:4d:5a:4f:ae:
                    29:56:32:19:d4:1c:d0:82:64:88:d5:e0:8d:db:da:
                    18:66:d8:e0:5c:d8:c5:48:ee:c2:0e:c4:5f:3a:05:
                    3a:78:6f:2c:cf:21:4e:e9:24:7f:6c:be:88:3c:8a:
                    03:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:BC:40:31:D4:67:74:CF:DD:12:BB:96:41:B5:E9:9D:25:AE:12:73
            X509v3 Authority Key Identifier:
                keyid:9E:92:82:6C:F4:7D:AE:C8:85:C9:98:10:28:7D:B8:6E:69:57:68:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npKCbPR9rsiFyZgQKH24bmlXaOo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:cd:1b:0c:9a:f2:9c:7c:d2:f1:76:47:d5:7e:c4:e0:4e:d4:
         32:d0:08:10:29:ca:ec:e8:62:4a:2a:37:1f:dd:fe:2f:3c:f7:
         92:30:d3:09:4c:11:ae:b5:a5:c2:d5:0e:57:ba:5d:41:9d:85:
         1d:23:a0:9b:c1:0c:e9:de:f2:9b:af:e1:c2:24:a9:30:22:e3:
         91:5e:4d:6b:a8:d0:31:b5:ee:8e:ae:50:92:ca:53:59:de:3f:
         94:b1:4f:3d:91:34:6a:26:f1:c4:2a:2c:54:b4:93:ed:0a:c2:
         cf:bf:26:ea:07:af:c6:83:da:32:ba:dd:66:a6:6c:a7:36:b4:
         96:5b:8e:b6:8f:03:af:7c:8e:03:48:9e:2e:6f:8d:b9:66:47:
         b3:b6:83:76:25:b7:bb:64:9a:e0:72:73:00:eb:72:22:04:e0:
         e9:4e:3a:e8:81:1d:fe:dd:d3:a5:7c:b4:31:8f:4b:8d:d0:31:
         19:27:27:15:20:ce:d6:c3:0e:97:80:41:96:f3:21:55:af:a7:
         36:92:0f:c0:63:69:2a:68:8d:b2:fc:5b:c2:ee:97:4a:b9:b5:
         e5:77:54:ce:8c:9d:d8:45:0d:f6:6c:27:39:29:fc:9e:88:89:
         e4:4a:c4:1f:3c:12:54:b4:4f:f6:8a:0e:8a:77:73:29:25:d1:
         b8:99:5f:71
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICFTUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODcwMDAxMTAvBgNVBAUTKDlFOTI4MjZDRjQ3REFFQzg4NUM5OTgxMDI4N0RCODZF
Njk1NzY4RUEwHhcNMjUwMzI4MTY1NTUyWhcNMjUwNDA0MTY1NTUyWjAYMRYwFAYD
VQQDEw02N2U2ZDQ5OC1hNzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAobXBWgfEPCQfcgJuDznBknmG1AOzj3nLHgX2Dm9JRpr9xBPzqc9n1mwrIdLj
vhu/omX7RRoobwx+WstKU6eCO8utx9VlSWM50fnofuBCCqUf/xqE7i417XK2AgXt
9YwgJPgnKsOLfg0DBrBHn4cO5roOyYy9tA5USqmVFFH5j8aMxI2Aeu7VIZVqV24j
m3OXgpDZOlSfIds40lWCFLT99Hqql6lUSva8qPoxdOUxKA7g9xga8+RialxciEKf
h/D5ATOM4vT1gyhz2dRS5U1aT64pVjIZ1BzQgmSI1eCN29oYZtjgXNjFSO7CDsRf
OgU6eG8szyFO6SR/bL6IPIoDCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKa8QDHU
Z3TP3RK7lkG16Z0lrhJzMB8GA1UdIwQYMBaAFJ6Sgmz0fa7IhcmYECh9uG5pV2jq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzAwMC8wNjdENkZBMjQ3
ODkxMUU4ODlENURCNDlDNEY5QUUwMi9ucEtDYlBSOXJzaUZ5WmdRS0gyNGJtbFhh
T28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25wS0NiUFI5cnNpRnlaZ1FLSDI0Ym1sWGFPby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NzAwMC8wNjdENkZBMjQ3ODkxMUU4ODlENURCNDlDNEY5QUUwMi9ucEtDYlBSOXJz
aUZ5WmdRS0gyNGJtbFhhT28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAWzRsMmvKcfNLxdkfVfsTgTtQy0AgQKcrs6GJKKjcf3f4vPPeSMNMJ
TBGutaXC1Q5Xul1BnYUdI6CbwQzp3vKbr+HCJKkwIuORXk1rqNAxte6OrlCSylNZ
3j+UsU89kTRqJvHEKixUtJPtCsLPvybqB6/Gg9oyut1mpmynNrSWW462jwOvfI4D
SJ4ub425ZkeztoN2Jbe7ZJrgcnMA63IiBODpTjrogR3+3dOlfLQxj0uN0DEZJycV
IM7Www6XgEGW8yFVr6c2kg/AY2kqaI2y/FvC7pdKubXld1TOjJ3YRQ32bCc5Kfye
iInkSsQfPBJUtE/2ig6Kd3MpJdG4mV9x
-----END CERTIFICATE-----