Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/ctH2ecltIFwtRxyUqA3vYNkRJhw.mft
File:                     ctH2ecltIFwtRxyUqA3vYNkRJhw.mft (raw, json)
Hash identifier:          FbzO73QpcuASTucaB9RB/+od9lkE2HAphOsyeldu8TQ=
Subject key identifier:   BE:D2:DC:B4:AE:5B:84:0A:FA:F4:DA:27:0B:AB:56:C8:97:92:1B:13
Authority key identifier: 72:D1:F6:79:C9:6D:20:5C:2D:47:1C:94:A8:0D:EF:60:D9:11:26:1C
Certificate issuer:       /CN=A918E85E/serialNumber=72D1F679C96D205C2D471C94A80DEF60D911261C
Certificate serial:       BB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ctH2ecltIFwtRxyUqA3vYNkRJhw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/ctH2ecltIFwtRxyUqA3vYNkRJhw.mft
Manifest number:          B9
Signing time:             Sat 29 Mar 2025 05:31:10 +0000
Manifest this update:     Sat 29 Mar 2025 05:31:10 +0000
Manifest next update:     Sat 05 Apr 2025 05:31:10 +0000
Files and hashes:         1: ctH2ecltIFwtRxyUqA3vYNkRJhw.crl (hash: wML0Sz0pkOySov1KpxFBZTL+JsssM4maQw0nvY6cDk8=)
                          2: 255842A2EFF411EE853CC833C4F9AE02.roa (hash: 0a/19rU1zoR8HPG3b9KrbOC4Srzy59tAkTtlFRC+aqM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 187 (0xbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E85E
        Validity
            Not Before: Mar 29 05:31:10 2025 GMT
            Not After : Apr  5 05:31:10 2025 GMT
        Subject: CN=67e7859e-ee8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:4e:24:92:cf:4c:4a:8b:9c:06:86:37:ef:b9:
                    84:04:53:ce:fd:98:d1:05:65:cf:78:af:62:21:d6:
                    e1:2d:90:d8:05:9f:1a:b1:72:53:f4:f2:a6:50:08:
                    0c:70:16:4f:a0:05:c6:a0:b1:e7:9b:68:42:04:cc:
                    cb:1b:24:bc:f7:11:01:aa:e2:10:58:f5:18:1c:d1:
                    9b:fb:b4:e5:ba:d6:b2:f5:ac:44:de:83:2e:4e:aa:
                    9c:a4:c5:6f:69:bd:53:7c:d5:cb:04:1a:a3:0e:c2:
                    ce:3e:93:6a:f3:e0:7c:a8:18:fc:0e:80:4b:00:7e:
                    50:0a:c2:af:ab:de:23:28:3e:8a:81:ff:3e:a8:d3:
                    20:fc:85:2b:06:9d:a4:05:27:99:c2:27:7f:b2:38:
                    bf:90:d4:53:cf:ce:ad:29:38:b1:ba:15:48:94:92:
                    eb:b4:b8:46:cb:67:cb:25:51:d3:30:05:52:4a:4f:
                    14:66:a4:2d:48:fe:da:82:1b:41:10:89:c6:93:db:
                    0b:fc:9e:04:08:e1:c6:1a:31:f6:87:7b:6b:a8:11:
                    f0:d2:b7:48:1d:df:cf:25:49:e6:7b:c4:c9:21:57:
                    d8:17:a8:35:64:91:82:50:4e:8c:97:5b:ce:d7:0b:
                    1e:b1:6a:02:0b:7f:3e:2f:ce:36:57:bf:b5:1c:95:
                    14:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D2:DC:B4:AE:5B:84:0A:FA:F4:DA:27:0B:AB:56:C8:97:92:1B:13
            X509v3 Authority Key Identifier:
                keyid:72:D1:F6:79:C9:6D:20:5C:2D:47:1C:94:A8:0D:EF:60:D9:11:26:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/ctH2ecltIFwtRxyUqA3vYNkRJhw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ctH2ecltIFwtRxyUqA3vYNkRJhw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/ctH2ecltIFwtRxyUqA3vYNkRJhw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:63:a5:a1:84:88:fb:b1:52:15:f2:02:fb:86:79:81:6b:73:
         f3:1d:34:a3:1d:46:0f:07:72:2f:4e:aa:4c:6e:03:47:df:55:
         7b:25:8d:f7:7a:d6:d8:70:d3:58:a2:7a:f0:e1:91:59:84:a1:
         dd:8f:20:25:75:34:38:25:d3:25:84:aa:6c:ca:1f:dd:18:a2:
         97:0b:6f:e2:93:c6:58:ab:3b:2b:4c:41:a5:93:3f:fb:4a:ca:
         f9:30:56:85:9e:e6:3c:96:40:e2:9b:ca:ee:f5:98:4f:98:ee:
         b6:e7:f3:c5:ad:f4:a7:a1:08:bb:c9:12:ce:48:b8:81:8f:31:
         6d:15:cb:6c:ab:08:42:d3:b7:d8:aa:d5:c6:a7:87:44:a0:6b:
         67:0f:71:cc:25:c5:8a:50:11:e3:6c:b5:9c:ee:5a:06:f4:aa:
         9e:3c:92:c7:c5:69:7d:a7:90:af:63:e3:e9:76:8a:38:f8:84:
         df:9b:da:12:86:57:1a:5e:5d:2b:45:f1:61:4e:77:08:72:ee:
         a5:e0:8f:5e:f8:3b:4f:e7:2c:1c:de:24:0e:9f:40:49:8c:e2:
         5d:2e:ac:76:76:a9:dd:73:01:ea:bc:60:69:63:61:5e:9d:81:
         74:9c:49:4d:6a:45:b2:59:6d:cc:25:5b:e9:f8:7b:82:6e:ef:
         c1:1e:03:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----