Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3B91/A365336E3E2411EC9B55E152C4F9AE02/rRAu0CidxOT63nCzTXZgyg0rvSs.mft
File:                     rRAu0CidxOT63nCzTXZgyg0rvSs.mft (raw, json)
Hash identifier:          HOkF9Yws+XOBUTb0So33VYUXwZoPwwbUKM/LeUUDUAA=
Subject key identifier:   61:5B:BF:65:8C:D9:21:FE:BD:74:17:62:AC:F2:94:02:88:45:87:97
Authority key identifier: AD:10:2E:D0:28:9D:C4:E4:FA:DE:70:B3:4D:76:60:CA:0D:2B:BD:2B
Certificate issuer:       /CN=A91A3B91/serialNumber=AD102ED0289DC4E4FADE70B34D7660CA0D2BBD2B
Certificate serial:       0482
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRAu0CidxOT63nCzTXZgyg0rvSs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3B91/A365336E3E2411EC9B55E152C4F9AE02/rRAu0CidxOT63nCzTXZgyg0rvSs.mft
Manifest number:          0474
Signing time:             Tue 25 Mar 2025 00:00:03 +0000
Manifest this update:     Tue 25 Mar 2025 00:00:03 +0000
Manifest next update:     Tue 01 Apr 2025 00:00:03 +0000
Files and hashes:         1: rRAu0CidxOT63nCzTXZgyg0rvSs.crl (hash: hB4yTHoPFyMA79WyzoBi1Tkb2O+f1+1YLcb99ccB5EI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1154 (0x482)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3B91, serialNumber=AD102ED0289DC4E4FADE70B34D7660CA0D2BBD2B
        Validity
            Not Before: Mar 25 00:00:03 2025 GMT
            Not After : Apr  1 00:00:03 2025 GMT
        Subject: CN=67e1f203-13d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:40:3f:a9:1a:0b:a3:44:1d:45:72:aa:07:7d:
                    0c:50:b3:78:e7:97:32:5d:c6:ae:ae:b1:04:9d:4d:
                    6a:98:32:c1:91:99:5b:69:ad:a2:b0:4a:57:a7:c8:
                    e8:db:8b:99:58:f6:23:ba:a1:67:5f:cd:20:74:84:
                    76:1d:fc:b8:c2:34:01:04:97:19:64:ec:f4:e8:1b:
                    8f:00:df:71:42:50:c5:b0:4f:15:ed:26:74:37:88:
                    27:a3:c7:71:9e:59:0f:eb:38:e5:a7:25:78:51:c0:
                    fe:ae:3b:e9:fe:0b:ef:b1:8d:4e:c4:8d:82:38:91:
                    d6:a7:ad:85:ff:f2:e3:de:eb:e6:12:ba:46:8c:a2:
                    19:92:a6:bb:ff:ff:62:f8:1c:1a:9c:d3:fa:a3:cb:
                    15:11:49:d3:8b:9a:6b:f2:e4:d6:ef:1c:b5:61:0b:
                    a3:9a:97:32:56:ad:84:69:07:6b:d3:7e:f3:3f:c6:
                    4d:4a:a2:e5:e8:7a:5e:7c:3d:0a:c3:af:2e:ed:ad:
                    c1:90:d7:f0:3b:5e:e4:30:85:21:1c:c0:be:0f:9d:
                    f5:83:67:d1:2f:da:7b:f4:d6:b3:ea:47:5d:08:59:
                    1d:c2:8d:fb:c7:22:4a:6a:6a:1e:43:e4:20:72:b5:
                    12:ab:7f:ae:21:41:1a:b3:c0:fb:ab:db:f1:45:f5:
                    37:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:5B:BF:65:8C:D9:21:FE:BD:74:17:62:AC:F2:94:02:88:45:87:97
            X509v3 Authority Key Identifier:
                keyid:AD:10:2E:D0:28:9D:C4:E4:FA:DE:70:B3:4D:76:60:CA:0D:2B:BD:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3B91/A365336E3E2411EC9B55E152C4F9AE02/rRAu0CidxOT63nCzTXZgyg0rvSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRAu0CidxOT63nCzTXZgyg0rvSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3B91/A365336E3E2411EC9B55E152C4F9AE02/rRAu0CidxOT63nCzTXZgyg0rvSs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:42:7c:25:78:5a:1c:86:e5:b5:0f:8a:1b:22:e0:a1:8f:dc:
         f5:77:2f:24:28:da:0d:db:81:53:24:f4:73:1a:0a:ed:c5:26:
         69:8d:a6:84:93:7c:8d:c4:5b:15:bb:35:70:3b:9b:eb:be:5b:
         30:05:85:0f:70:18:d3:3c:89:44:46:50:64:90:0e:22:0a:2c:
         4b:3f:d2:48:bc:ad:e1:c4:f1:e2:c0:a2:60:fb:5a:57:d2:c8:
         65:d0:e1:63:02:b0:85:2d:95:2e:e8:fb:73:84:f9:42:11:85:
         02:4a:c9:24:66:fe:ea:7c:dd:3d:43:eb:71:db:bd:94:02:eb:
         b3:3a:54:01:82:8b:89:54:70:dd:4d:a6:bb:d3:7e:c9:1b:f0:
         aa:de:17:78:a2:d0:d6:16:16:b2:d2:5c:03:2b:96:12:01:92:
         e6:d5:92:a2:e2:16:7a:cf:d4:33:2c:50:e1:d3:96:9d:40:2f:
         25:85:17:05:c7:40:b3:42:de:84:03:86:75:e6:1c:fc:c8:4f:
         cb:92:29:dc:59:db:8f:be:56:8d:75:80:26:77:37:1a:c6:30:
         8b:77:f2:58:4f:5d:a6:cc:90:24:b8:0a:08:36:1a:5b:39:ea:
         12:dd:2b:90:fe:0e:93:bd:ae:2b:16:74:ce:e1:e7:46:49:57:
         df:77:df:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----