Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.mft
File:                     VyN5TNgiazMfp2TbnkH16ZS9FJU.mft (raw, json)
Hash identifier:          AfpPR8l0STM2u3bLoutIi+SteOrrgC5qik2sibMLLRQ=
Subject key identifier:   D6:E6:F2:D0:6F:54:9A:2C:5C:AC:21:83:66:1C:D3:06:47:5C:EE:B6
Authority key identifier: 57:23:79:4C:D8:22:6B:33:1F:A7:64:DB:9E:41:F5:E9:94:BD:14:95
Certificate issuer:       /CN=A919CAB5/serialNumber=5723794CD8226B331FA764DB9E41F5E994BD1495
Certificate serial:       05F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VyN5TNgiazMfp2TbnkH16ZS9FJU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.mft
Manifest number:          05EA
Signing time:             Fri 28 Mar 2025 23:14:41 +0000
Manifest this update:     Fri 28 Mar 2025 23:14:41 +0000
Manifest next update:     Fri 04 Apr 2025 23:14:41 +0000
Files and hashes:         1: VyN5TNgiazMfp2TbnkH16ZS9FJU.crl (hash: 085GSkb9zQAGITbPcJFanBTHAbbMpsYCATE9zMItZ9Y=)
                          2: BA9447BCA7D111EB8F85BA22C4F9AE02.roa (hash: GC/6oaD4AQ/2H6+sX9Xz5uvEcf7TzkAqzavO0iAfjKE=)
                          3: 5533E6AEBD3711EB8D76EF31C4F9AE02.roa (hash: WALscRknOOfWfuWELmo7B7jUjxlqno4poZ1zMYtG2IA=)
                          4: CE84D1823BFF11EE80C18D54C4F9AE02.roa (hash: riMjOPqSGjKyCo++U5ix378hYNiW38uauHvvf7Cl25I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1525 (0x5f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919CAB5
        Validity
            Not Before: Mar 28 23:14:41 2025 GMT
            Not After : Apr  4 23:14:41 2025 GMT
        Subject: CN=67e72d61-0aa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3e:90:c2:80:64:b8:34:38:8e:c3:ed:b8:e1:
                    76:4c:79:67:55:c0:e4:93:97:51:a2:10:03:d8:a1:
                    40:9c:99:85:13:df:48:1e:d0:58:3e:43:5c:1b:78:
                    02:3e:21:d9:94:30:44:84:4c:34:9c:8c:bd:11:e1:
                    e6:35:b4:8c:75:23:d3:e9:59:1a:f0:34:90:ea:fe:
                    10:88:8c:a4:9f:c1:c1:3b:db:91:c6:20:b6:f5:81:
                    4e:94:1b:7e:05:20:f5:90:42:dc:74:d9:74:9b:7f:
                    d6:28:7c:11:59:a6:e8:df:b2:10:4c:42:b5:2a:98:
                    b5:02:86:f2:a9:6c:40:e4:f5:b8:c5:d0:7a:eb:f6:
                    67:df:9e:ba:68:67:46:4e:80:ca:9c:07:f6:9d:05:
                    e7:c7:d7:af:10:c0:d6:92:ec:60:11:c3:5f:e1:23:
                    fb:2a:8d:08:10:e1:f1:25:c0:cb:9e:9c:75:a3:f8:
                    20:67:0a:d6:d0:99:b9:c0:87:f8:45:e3:7a:50:67:
                    21:70:0d:d9:e7:52:7b:90:db:53:e4:b3:a1:78:57:
                    de:a0:aa:53:7d:cd:a3:22:df:a5:8c:b4:8c:a0:ec:
                    e2:ba:02:64:9e:ce:df:74:f3:23:06:a7:60:67:8e:
                    0f:62:16:55:12:60:c7:11:6b:1b:9e:3e:9d:b3:82:
                    0e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:E6:F2:D0:6F:54:9A:2C:5C:AC:21:83:66:1C:D3:06:47:5C:EE:B6
            X509v3 Authority Key Identifier:
                keyid:57:23:79:4C:D8:22:6B:33:1F:A7:64:DB:9E:41:F5:E9:94:BD:14:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VyN5TNgiazMfp2TbnkH16ZS9FJU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:a2:f3:f0:dd:e0:0f:a6:14:4b:0e:f6:d5:dd:36:20:36:7a:
         dd:8f:ea:9a:ad:32:b2:7d:18:22:e5:ec:2d:c6:49:88:db:f9:
         73:49:68:cf:b5:1d:b7:cc:e4:61:96:e0:48:05:b5:3d:6c:91:
         a0:f7:20:9b:f9:7f:f1:54:72:9f:91:f9:65:d4:a9:a1:41:eb:
         89:1a:d5:ba:bb:22:64:99:52:2d:d7:6d:e8:a6:1e:e9:25:82:
         ed:70:51:60:dd:af:56:e4:fe:51:b5:67:57:a4:5b:e0:0e:05:
         c9:92:4c:e6:94:85:cf:8e:21:8d:bf:26:b5:22:a1:fe:80:3e:
         96:bf:db:07:ab:80:f8:f3:37:45:c5:ad:30:eb:1b:9e:df:88:
         cc:61:0c:da:50:72:78:bc:04:fc:b2:84:0f:86:fc:e9:f5:dd:
         c4:5e:f4:ec:33:06:3d:4d:84:55:77:83:07:ef:f9:cc:8e:65:
         bf:6d:a2:8c:1f:8c:b2:93:3a:7e:49:e8:8b:da:cc:ea:f1:3d:
         85:48:03:44:cc:65:da:69:21:d6:20:07:3a:85:c4:97:68:20:
         d0:e7:a2:be:3f:6d:2b:af:52:e6:05:c6:b7:ff:c7:8d:ed:b3:
         e8:3f:65:6e:3b:07:17:c7:5e:43:03:d6:a0:82:43:38:e8:c0:
         d5:8f:63:e3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUNBQjUxMTAvBgNVBAUTKDU3MjM3OTRDRDgyMjZCMzMxRkE3NjREQjlFNDFGNUU5
OTRCRDE0OTUwHhcNMjUwMzI4MjMxNDQxWhcNMjUwNDA0MjMxNDQxWjAYMRYwFAYD
VQQDEw02N2U3MmQ2MS0wYWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsT6QwoBkuDQ4jsPtuOF2THlnVcDkk5dRohAD2KFAnJmFE99IHtBYPkNcG3gC
PiHZlDBEhEw0nIy9EeHmNbSMdSPT6Vka8DSQ6v4QiIykn8HBO9uRxiC29YFOlBt+
BSD1kELcdNl0m3/WKHwRWabo37IQTEK1Kpi1AobyqWxA5PW4xdB66/Zn3566aGdG
ToDKnAf2nQXnx9evEMDWkuxgEcNf4SP7Ko0IEOHxJcDLnpx1o/ggZwrW0Jm5wIf4
ReN6UGchcA3Z51J7kNtT5LOheFfeoKpTfc2jIt+ljLSMoOziugJkns7fdPMjBqdg
Z44PYhZVEmDHEWsbnj6ds4IO5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNbm8tBv
VJosXKwhg2Yc0wZHXO62MB8GA1UdIwQYMBaAFFcjeUzYImszH6dk255B9emUvRSV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0FCNS83MkZCQUQ4OEE3
RDAxMUVCQkE1MTE1MjJDNEY5QUUwMi9WeU41VE5naWF6TWZwMlRibmtIMTZaUzlG
SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Z5TjVUTmdpYXpNZnAyVGJua0gxNlpTOUZKVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
Q0FCNS83MkZCQUQ4OEE3RDAxMUVCQkE1MTE1MjJDNEY5QUUwMi9WeU41VE5naWF6
TWZwMlRibmtIMTZaUzlGSlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAIovPw3eAPphRLDvbV3TYgNnrdj+qarTKyfRgi5ewtxkmI2/lzSWjP
tR23zORhluBIBbU9bJGg9yCb+X/xVHKfkfll1KmhQeuJGtW6uyJkmVIt123oph7p
JYLtcFFg3a9W5P5RtWdXpFvgDgXJkkzmlIXPjiGNvya1IqH+gD6Wv9sHq4D48zdF
xa0w6xue34jMYQzaUHJ4vAT8soQPhvzp9d3EXvTsMwY9TYRVd4MH7/nMjmW/baKM
H4yykzp+SeiL2szq8T2FSANEzGXaaSHWIAc6hcSXaCDQ56K+P20rr1LmBca3/8eN
7bPoP2VuOwcXx15DA9aggkM46MDVj2Pj
-----END CERTIFICATE-----