Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.mft
File:                     jWEfLNc3lK-AHBv2nYhICROAtKU.mft (raw, json)
Hash identifier:          hNMwzqmx9XUMg5sdS+TVWR6X2+MOWYJ3HPVtH0g7Fas=
Subject key identifier:   67:42:63:7E:27:B4:58:73:0C:B1:45:70:EB:16:3E:46:57:F5:69:8D
Authority key identifier: 8D:61:1F:2C:D7:37:94:AF:80:1C:1B:F6:9D:88:48:09:13:80:B4:A5
Certificate issuer:       /CN=A919FF19/serialNumber=8D611F2CD73794AF801C1BF69D8848091380B4A5
Certificate serial:       3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWEfLNc3lK-AHBv2nYhICROAtKU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.mft
Manifest number:          37
Signing time:             Sat 29 Mar 2025 06:56:43 +0000
Manifest this update:     Sat 29 Mar 2025 06:56:43 +0000
Manifest next update:     Sat 05 Apr 2025 06:56:43 +0000
Files and hashes:         1: jWEfLNc3lK-AHBv2nYhICROAtKU.crl (hash: N3msMNO0VFJkeSxFjfoNMos+EjAF14AbsjshY/MhVhU=)
                          2: A1FE9790C1B111EFACAB4071C4F9AE02.roa (hash: nTebHJ2nY/z4pA9GR9Zium43gwzyk8WFga213syhwvM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FF19
        Validity
            Not Before: Mar 29 06:56:43 2025 GMT
            Not After : Apr  5 06:56:43 2025 GMT
        Subject: CN=67e799ab-f458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:38:e0:d3:5c:39:eb:0a:d4:0b:24:74:45:45:
                    46:70:a1:b3:18:f0:a7:89:4a:30:a5:1e:1f:8a:a8:
                    97:30:fd:05:d9:35:6d:fd:1b:e9:87:6a:1a:57:4e:
                    49:77:f0:56:ab:75:ba:5a:74:2b:24:49:77:35:54:
                    c3:56:5b:7f:61:d4:51:b6:a9:fb:b7:d9:a3:e9:96:
                    33:e9:b1:ac:09:d9:23:f7:83:aa:26:80:65:28:a2:
                    2f:c6:15:a2:d5:a0:d6:3f:bc:68:92:84:81:a9:e7:
                    ea:e3:8c:1a:45:4a:11:df:53:1c:78:ab:a3:a5:e6:
                    c1:89:dd:d5:44:7d:6e:c2:c2:8e:86:d2:f1:27:27:
                    b1:af:7f:1e:ce:05:e0:6c:48:1c:e7:15:39:eb:0d:
                    15:aa:7d:13:a6:44:7c:34:99:ac:33:58:99:b6:2e:
                    d2:ed:f4:b1:9f:3d:79:01:07:8c:8e:38:79:2e:7e:
                    5f:e6:76:65:6b:fd:b6:f4:10:58:67:e2:a8:a9:8d:
                    79:ff:b5:40:28:ab:74:e1:07:68:31:2a:e7:35:04:
                    01:27:69:f4:94:42:bf:0d:3d:3e:e1:3b:5c:2b:7b:
                    74:75:55:69:59:7d:13:40:a9:47:1a:2f:16:be:72:
                    ac:3b:b7:4b:0a:05:9f:08:af:89:f7:88:a1:ae:dc:
                    da:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:42:63:7E:27:B4:58:73:0C:B1:45:70:EB:16:3E:46:57:F5:69:8D
            X509v3 Authority Key Identifier:
                keyid:8D:61:1F:2C:D7:37:94:AF:80:1C:1B:F6:9D:88:48:09:13:80:B4:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWEfLNc3lK-AHBv2nYhICROAtKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:49:9f:f1:75:5a:72:de:d2:86:24:af:50:88:59:fb:37:59:
         86:71:ac:d1:4c:a0:93:80:3a:3c:20:aa:88:0e:88:ab:0b:cb:
         24:2d:0f:a0:8e:90:77:12:97:b5:95:f2:33:da:ea:40:8e:a3:
         92:d2:f8:38:61:9d:18:a1:2d:25:66:9e:87:91:3b:ec:d4:50:
         ad:e2:77:c9:c9:73:2d:57:91:b0:79:2f:3e:b2:95:54:fc:d5:
         fc:fa:6a:b4:f5:3a:66:82:7a:89:16:f1:f9:c9:c2:10:19:f2:
         e4:38:9c:d8:49:4e:13:78:e4:a7:7d:89:72:17:db:60:4b:4f:
         7e:c3:58:ed:7f:e0:52:bc:b3:99:33:4a:49:a1:99:a2:e9:e4:
         18:74:71:31:34:ed:ab:04:1e:14:0a:72:b9:1b:7a:0a:fe:93:
         f6:e7:58:6a:07:29:e5:ea:b9:cc:b5:6b:e9:88:bc:cc:19:2d:
         b4:43:4f:2e:1e:8f:2d:54:c9:b0:aa:ec:08:41:9a:d8:d4:b8:
         0b:ef:2c:b1:04:f0:54:74:75:ad:0b:43:7e:75:01:26:be:f6:
         fe:4f:05:4e:b9:a4:24:be:6f:d6:f0:56:09:d7:ad:75:6d:67:
         ab:43:35:58:b6:7f:e9:b7:b3:07:57:b9:df:9c:23:bc:4e:be:
         51:de:48:1b
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
RkYxOTExMC8GA1UEBRMoOEQ2MTFGMkNENzM3OTRBRjgwMUMxQkY2OUQ4ODQ4MDkx
MzgwQjRBNTAeFw0yNTAzMjkwNjU2NDNaFw0yNTA0MDUwNjU2NDNaMBgxFjAUBgNV
BAMTDTY3ZTc5OWFiLWY0NTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDiOODTXDnrCtQLJHRFRUZwobMY8KeJSjClHh+KqJcw/QXZNW39G+mHahpXTkl3
8FardbpadCskSXc1VMNWW39h1FG2qfu32aPpljPpsawJ2SP3g6omgGUooi/GFaLV
oNY/vGiShIGp5+rjjBpFShHfUxx4q6Ol5sGJ3dVEfW7Cwo6G0vEnJ7Gvfx7OBeBs
SBznFTnrDRWqfROmRHw0mawzWJm2LtLt9LGfPXkBB4yOOHkufl/mdmVr/bb0EFhn
4qipjXn/tUAoq3ThB2gxKuc1BAEnafSUQr8NPT7hO1wre3R1VWlZfRNAqUcaLxa+
cqw7t0sKBZ8Ir4n3iKGu3NrJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZ0Jjfie0
WHMMsUVw6xY+Rlf1aY0wHwYDVR0jBBgwFoAUjWEfLNc3lK+AHBv2nYhICROAtKUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlGRjE5L0QyM0NCMEJBQzFB
RjExRUZCRTdBMTQ1REM0RjlBRTAyL2pXRWZMTmMzbEstQUhCdjJuWWhJQ1JPQXRL
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvaldFZkxOYzNsSy1BSEJ2Mm5ZaElDUk9BdEtVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlG
RjE5L0QyM0NCMEJBQzFBRjExRUZCRTdBMTQ1REM0RjlBRTAyL2pXRWZMTmMzbEst
QUhCdjJuWWhJQ1JPQXRLVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAJhJn/F1WnLe0oYkr1CIWfs3WYZxrNFMoJOAOjwgqogOiKsLyyQtD6CO
kHcSl7WV8jPa6kCOo5LS+DhhnRihLSVmnoeRO+zUUK3id8nJcy1XkbB5Lz6ylVT8
1fz6arT1OmaCeokW8fnJwhAZ8uQ4nNhJThN45Kd9iXIX22BLT37DWO1/4FK8s5kz
SkmhmaLp5Bh0cTE07asEHhQKcrkbegr+k/bnWGoHKeXqucy1a+mIvMwZLbRDTy4e
jy1UybCq7AhBmtjUuAvvLLEE8FR0da0LQ351ASa+9v5PBU65pCS+b9bwVgnXrXVt
Z6tDNVi2f+m3swdXud+cI7xOvlHeSBs=
-----END CERTIFICATE-----