Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.mft
File:                     3gyPQrygWy9Vgea8y0wUpuZxthk.mft (raw, json)
Hash identifier:          Lkylqt2gRGI5c/exz6aiCa2cFNEaTWyGOFLjBHOn1cU=
Subject key identifier:   C6:B6:B1:0B:F4:3A:DF:8E:09:28:6C:D7:95:6A:BC:A2:F0:91:F0:7E
Authority key identifier: DE:0C:8F:42:BC:A0:5B:2F:55:81:E6:BC:CB:4C:14:A6:E6:71:B6:19
Certificate issuer:       /CN=A9187386/serialNumber=DE0C8F42BCA05B2F5581E6BCCB4C14A6E671B619
Certificate serial:       1039
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3gyPQrygWy9Vgea8y0wUpuZxthk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.mft
Manifest number:          102C
Signing time:             Fri 28 Mar 2025 17:32:26 +0000
Manifest this update:     Fri 28 Mar 2025 17:32:26 +0000
Manifest next update:     Fri 04 Apr 2025 17:32:26 +0000
Files and hashes:         1: 3gyPQrygWy9Vgea8y0wUpuZxthk.crl (hash: 7owdMw/6k0v8RMym22xM8uFFfycVmyh2KEgtkO/DMHU=)
                          2: E366C4B83B2611E9906E7B81C4F9AE02.roa (hash: OXCPrFm+EsQzPLUI+MTG5d83HdT10aUJkR72TyytJ18=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4153 (0x1039)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187386
        Validity
            Not Before: Mar 28 17:32:26 2025 GMT
            Not After : Apr  4 17:32:26 2025 GMT
        Subject: CN=67e6dd2a-4d85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:02:88:f2:3b:42:21:f7:ec:45:11:6b:db:57:
                    bb:5b:b5:db:51:84:8f:0e:13:1c:07:0c:38:64:fd:
                    63:36:45:46:fa:53:f5:ce:6d:63:8b:47:95:ad:1d:
                    e8:47:1e:4a:c0:f1:62:05:b8:33:4a:81:ca:53:4d:
                    43:71:52:57:e0:b7:2f:73:d2:74:8a:cb:2e:55:14:
                    76:6f:3c:79:88:61:31:80:88:a7:69:75:0c:29:a1:
                    8a:2d:4e:10:7a:81:9c:ed:47:93:40:ae:fc:15:d5:
                    17:28:12:e1:88:05:53:4e:b9:c2:1a:aa:ca:e9:dd:
                    4f:5e:d5:ba:c8:28:3a:0c:83:11:13:97:24:76:b6:
                    16:3d:ea:0f:b0:8c:a1:d6:bd:1b:16:24:85:3e:8e:
                    44:51:06:9d:6f:45:d3:a1:5e:ed:b7:b7:68:7a:20:
                    71:57:b0:ad:db:d5:7c:c9:36:a3:16:0d:be:14:20:
                    b5:f9:42:88:1e:58:3a:8c:64:66:b7:cb:86:59:73:
                    f3:84:bb:78:58:76:4e:86:74:57:26:bb:22:be:7d:
                    a6:3b:ff:25:09:f8:92:5b:3f:e8:07:77:fc:0f:fb:
                    c4:bf:f4:74:2e:46:42:fe:00:03:63:9c:a7:b7:7c:
                    da:68:38:2d:3d:92:8e:45:be:fe:3d:57:8d:a7:b6:
                    3a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:B6:B1:0B:F4:3A:DF:8E:09:28:6C:D7:95:6A:BC:A2:F0:91:F0:7E
            X509v3 Authority Key Identifier:
                keyid:DE:0C:8F:42:BC:A0:5B:2F:55:81:E6:BC:CB:4C:14:A6:E6:71:B6:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3gyPQrygWy9Vgea8y0wUpuZxthk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:cc:5d:94:84:cb:20:2a:c3:7e:27:4b:b6:c6:35:b6:fe:00:
         38:9c:87:53:01:90:25:00:5f:7b:72:b9:cb:34:94:a8:10:32:
         ad:4c:11:c4:15:ba:ff:2b:ba:7f:08:e1:2e:4c:f8:36:d2:ac:
         b0:41:32:65:58:0e:d9:a2:51:4e:bc:64:22:04:40:5b:c5:fc:
         b4:27:bd:d3:ca:d4:4a:45:1e:26:7d:3c:db:58:c4:d8:c4:c1:
         e1:32:2c:f3:a3:75:f1:d0:a0:8b:24:dc:24:fc:d2:e3:09:68:
         41:b0:f2:62:75:36:37:1f:e7:aa:8b:54:87:0b:27:13:58:e2:
         4f:0d:fb:27:4f:41:db:d3:bc:8f:38:a3:48:a2:6e:12:d9:c0:
         28:c9:17:99:d4:7a:73:4d:3e:af:b1:5b:1e:4b:cd:c0:45:85:
         c5:ea:23:42:ba:b6:dc:e5:5b:67:99:e3:8f:bb:9d:c2:49:46:
         76:24:08:2f:ec:6d:99:1f:5c:ba:e8:30:1c:28:9a:d6:77:e2:
         f9:70:4e:b0:31:d6:0d:69:ab:97:95:79:c1:b9:8d:47:dd:20:
         6a:57:6b:9d:c6:43:f9:1b:4d:47:8a:6c:c2:19:a6:8a:e4:ce:
         33:a6:07:54:49:3b:b3:f4:22:2b:dd:66:4f:a8:b8:18:cd:23:
         95:68:b3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----