Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft
File:                     6Ihh_0pFOAJnqBtY-pnkia0AG70.mft (raw, json)
Hash identifier:          NrNfjQui0u1y09ALNcaPTWBglxOogVpxRl/OIr5xyKc=
Subject key identifier:   AB:C7:20:8D:B8:68:BB:B0:5D:CE:01:FB:84:64:92:5A:4A:DC:6F:52
Authority key identifier: E8:88:61:FF:4A:45:38:02:67:A8:1B:58:FA:99:E4:89:AD:00:1B:BD
Certificate issuer:       /CN=A918ACB2/serialNumber=E88861FF4A45380267A81B58FA99E489AD001BBD
Certificate serial:       ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ihh_0pFOAJnqBtY-pnkia0AG70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft
Manifest number:          E6
Signing time:             Sat 29 Mar 2025 04:52:38 +0000
Manifest this update:     Sat 29 Mar 2025 04:52:37 +0000
Manifest next update:     Sat 05 Apr 2025 04:52:37 +0000
Files and hashes:         1: 6Ihh_0pFOAJnqBtY-pnkia0AG70.crl (hash: Xbk/V7AP5ocEPR5uKSD6sZl53vSksR1oAUgJmwzgTmQ=)
                          2: B66B434EBCE011EE98AEB646C4F9AE02.roa (hash: 4+NB3j+Ku9z9DW7nQRzRq87llzJ2sOudlesGDx2vWI8=)
                          3: BD1A38D4984B11EFB342C220C4F9AE02.roa (hash: EIknsqOvV+3/e4OowMHbRVdsbkd9a/wu1lD+d08gIWM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 237 (0xed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918ACB2
        Validity
            Not Before: Mar 29 04:52:37 2025 GMT
            Not After : Apr  5 04:52:37 2025 GMT
        Subject: CN=67e77c96-4129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:82:07:29:c0:3a:52:df:29:d9:2b:cb:8e:f2:
                    3b:f1:37:00:38:7c:c1:8e:ab:63:b5:a4:b1:22:25:
                    3b:b7:cf:64:8c:2a:1f:25:51:58:2f:dd:bd:ec:0f:
                    8a:56:2b:ab:fd:90:85:af:d6:b6:cb:ff:86:0c:6c:
                    64:da:d5:e3:65:22:5f:00:f5:22:01:49:46:af:36:
                    9e:e7:82:c6:51:ba:0a:c4:db:3c:78:5c:f9:51:25:
                    8b:3e:1b:01:11:5e:31:a5:22:de:26:4d:e5:60:f3:
                    f7:a7:be:c0:95:a0:82:89:e8:5c:bf:8f:79:bf:cf:
                    8b:9a:f6:db:3a:98:16:e7:16:fd:fb:d3:09:d5:07:
                    2e:79:e4:29:44:ae:93:ab:35:a6:e5:18:18:e5:ca:
                    94:d8:f3:b9:65:4d:45:b5:c9:12:98:5e:03:39:44:
                    7d:0f:64:03:64:3f:b1:a9:e9:b4:7c:c3:da:f2:00:
                    b3:e9:de:fc:8f:45:b0:3b:21:d9:1e:21:31:f2:73:
                    d2:bf:b5:06:63:62:a2:cf:8c:9a:eb:de:b3:28:99:
                    e8:95:c7:0e:b6:0c:61:6c:03:fb:ae:ca:51:31:28:
                    e3:11:59:10:21:72:b2:76:c4:11:b5:2d:ae:0e:69:
                    07:20:dd:6b:aa:3e:bf:32:c2:1f:89:11:f5:37:e2:
                    f6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:C7:20:8D:B8:68:BB:B0:5D:CE:01:FB:84:64:92:5A:4A:DC:6F:52
            X509v3 Authority Key Identifier:
                keyid:E8:88:61:FF:4A:45:38:02:67:A8:1B:58:FA:99:E4:89:AD:00:1B:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ihh_0pFOAJnqBtY-pnkia0AG70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:86:c4:50:b2:c8:1a:af:9f:3b:f2:31:ef:52:61:d0:54:4d:
         20:8f:f7:25:f9:35:70:09:1d:ff:67:f3:a2:99:84:f4:dc:8d:
         03:11:5a:c4:f6:2c:69:ea:58:3f:27:01:4f:1d:15:d7:9d:5d:
         c2:eb:38:5b:e3:cf:40:92:07:81:62:f9:22:21:aa:44:d7:e3:
         f0:84:d7:48:78:fb:ed:66:a9:b5:71:7e:c0:7c:9f:b1:ad:69:
         53:d5:ae:18:08:72:71:12:1f:44:9d:6c:7b:d0:54:94:9d:9d:
         b7:82:f9:72:af:8d:63:f4:a7:5a:c9:e2:3e:05:35:0b:ab:43:
         38:ea:c6:bc:a2:2a:b4:6d:9a:d1:51:72:99:30:9b:a6:b7:35:
         29:6a:7c:7d:63:ca:58:4d:72:7f:57:2b:95:61:0c:b7:be:37:
         ab:37:bb:5e:1e:7d:1b:f5:79:87:b5:9d:94:2d:70:8d:ca:2b:
         ef:34:7c:60:72:ec:38:f0:e7:6b:24:9c:4a:16:e7:54:b0:89:
         aa:eb:dc:16:04:e3:df:09:d0:54:00:dc:ee:a8:9f:a2:68:b2:
         bc:f1:22:66:0b:5e:6f:d2:53:d1:86:53:e2:87:8e:5e:b2:61:
         94:51:28:aa:50:44:d6:99:f2:d2:af:75:1c:d0:79:4f:61:7e:
         ef:bd:a9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----