Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft
File:                     Cc_-Rn87CcPQbySRnPrH4APku3U.mft (raw, json)
Hash identifier:          BpwKqorZgYbOdqGT/21htm59Uz5pZzo3wdKVJd2zxbw=
Subject key identifier:   B3:F0:8D:D4:4E:87:4D:2F:1A:A0:8F:3A:69:D2:90:78:E2:C5:8D:B8
Authority key identifier: 09:CF:FE:46:7F:3B:09:C3:D0:6F:24:91:9C:FA:C7:E0:03:E4:BB:75
Certificate issuer:       /CN=A918AA78/serialNumber=09CFFE467F3B09C3D06F24919CFAC7E003E4BB75
Certificate serial:       1BD6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft
Manifest number:          1BB4
Signing time:             Fri 28 Mar 2025 16:22:28 +0000
Manifest this update:     Fri 28 Mar 2025 16:22:28 +0000
Manifest next update:     Fri 04 Apr 2025 16:22:27 +0000
Files and hashes:         1: Cc_-Rn87CcPQbySRnPrH4APku3U.crl (hash: 8fzlP4kjHhtooEK+LDmdZGXcot+NcP2+yiu5+k64rqI=)
                          2: F7CC52C45DF611EC8F523217C4F9AE02.roa (hash: l1Lp6717izpzzjuLJ/WIAZ1x52OL2D3LQu0E5xm6nH8=)
                          3: 398C15006B8711EF96847F5FC4F9AE02.roa (hash: /yvn8ijOa8FBDJ5ASQ/Lery7dqjE4HE5gFGgvkPmpE0=)
                          4: 6996CEB84E7011EFA4A32D5CC4F9AE02.roa (hash: 06vkEMgrkkkWPxaN6n0p0hSzGNVGXFIfC5HD0mArdMk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7126 (0x1bd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918AA78
        Validity
            Not Before: Mar 28 16:22:28 2025 GMT
            Not After : Apr  4 16:22:27 2025 GMT
        Subject: CN=67e6ccc4-550f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b7:f6:fb:d6:5d:92:2e:29:b0:d9:dd:bd:20:
                    3e:18:b6:53:4d:b2:53:a6:9c:55:23:41:a3:d9:d8:
                    15:e2:26:bc:53:73:bd:95:4a:1b:be:8e:54:16:c5:
                    95:b1:6a:9f:c0:1e:5d:11:36:93:6b:a9:09:e1:b9:
                    3f:2a:63:9e:84:d9:ee:8d:8a:8f:f5:b9:f3:2e:27:
                    0c:83:b6:ae:48:47:04:a4:ca:54:70:cd:31:00:2c:
                    13:10:ef:e2:28:2b:1a:54:d5:56:79:58:82:31:b4:
                    39:b6:ef:65:e5:68:96:85:f5:37:9f:68:a2:05:3d:
                    fd:bf:b0:d1:e1:e6:11:a8:34:b6:33:9b:f9:5a:df:
                    b2:19:76:ce:c7:0b:1e:02:9b:8d:50:14:b2:86:48:
                    a5:0a:b6:9e:8c:14:23:f5:85:99:93:9e:bf:d7:03:
                    b3:b2:1a:66:1a:ec:98:b9:63:d7:3a:43:c7:31:c1:
                    00:3c:fe:39:ed:71:71:a2:0c:53:a8:e0:ff:b9:1d:
                    4d:9b:65:4b:51:28:7f:d5:5c:bf:0a:53:16:63:d0:
                    1b:a8:c6:1f:7c:17:9d:bb:cf:30:d0:39:c7:ac:d5:
                    ac:ae:23:81:e2:01:11:d5:46:f2:89:86:32:88:99:
                    a4:b7:c3:98:cc:9a:69:b4:f7:a1:85:d5:db:54:34:
                    a3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:F0:8D:D4:4E:87:4D:2F:1A:A0:8F:3A:69:D2:90:78:E2:C5:8D:B8
            X509v3 Authority Key Identifier:
                keyid:09:CF:FE:46:7F:3B:09:C3:D0:6F:24:91:9C:FA:C7:E0:03:E4:BB:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:b4:44:01:ea:57:fc:db:ca:93:3b:f2:1f:17:9e:3c:b8:85:
         55:12:ea:b7:47:da:93:a1:80:91:92:5a:ce:30:a1:44:34:89:
         f2:9d:d8:98:36:7c:b7:c9:91:c2:a2:47:73:31:1e:f0:39:d1:
         25:46:8e:40:95:dd:48:83:09:c9:1a:22:26:5e:ef:f8:16:2f:
         a3:85:a6:e2:38:b8:a4:df:4e:a7:ac:15:a8:6b:7d:52:e4:80:
         7a:f6:02:ff:ec:22:53:4d:57:94:11:8d:33:0b:78:78:23:4d:
         bd:3d:98:73:46:dd:c0:de:03:b0:34:7d:c0:99:f3:43:1b:d4:
         47:41:fa:80:6c:06:b1:db:6f:a6:58:d2:53:9a:ac:0d:65:23:
         ed:9d:0c:e6:31:28:aa:a6:22:97:b1:a8:25:7a:28:68:92:9c:
         92:a0:38:2e:a9:db:7a:23:59:93:58:1e:14:40:0f:74:2b:60:
         1a:06:c9:a7:82:73:69:5a:24:13:a0:56:15:64:54:fa:33:9c:
         8b:4d:5c:78:96:f8:b3:c8:07:a4:c5:c5:0d:f6:bb:3d:8d:ce:
         b0:49:43:8d:2d:8f:4a:a1:26:72:e4:cc:a9:02:aa:45:07:b5:
         a6:c0:1f:92:f0:97:2b:ef:ce:60:ff:43:62:6b:8e:89:a5:0d:
         6c:b1:6f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----