Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.mft
File:                     XerjhTD4FfvwubP472N1B4bIrAo.mft (raw, json)
Hash identifier:          sMYnsJ6d7pTimdOaR9FSf/UxzblEbMcqNGZNROC2Vrc=
Subject key identifier:   7E:35:DA:E7:AD:5F:60:2E:9D:2A:54:84:AD:D0:89:A9:BB:33:51:7C
Authority key identifier: 5D:EA:E3:85:30:F8:15:FB:F0:B9:B3:F8:EF:63:75:07:86:C8:AC:0A
Certificate issuer:       /CN=A91A4481/serialNumber=5DEAE38530F815FBF0B9B3F8EF63750786C8AC0A
Certificate serial:       AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XerjhTD4FfvwubP472N1B4bIrAo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.mft
Manifest number:          AC
Signing time:             Sat 29 Mar 2025 05:26:17 +0000
Manifest this update:     Sat 29 Mar 2025 05:26:17 +0000
Manifest next update:     Sat 05 Apr 2025 05:26:17 +0000
Files and hashes:         1: XerjhTD4FfvwubP472N1B4bIrAo.crl (hash: O8de5tzEM392GUmUDAyqtuLZX0hoOscNfBuNyWenujY=)
                          2: 5B08B12602C211EF9A1E4567C4F9AE02.roa (hash: LMERtpQp+DLty4Wivq0OeREYwOOHlqWpDYnqAURaibM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 173 (0xad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4481
        Validity
            Not Before: Mar 29 05:26:17 2025 GMT
            Not After : Apr  5 05:26:17 2025 GMT
        Subject: CN=67e78479-2522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:16:53:eb:90:3e:22:c5:f5:70:60:ab:e0:71:
                    43:25:f1:8a:5c:6a:d4:a8:22:33:08:6e:be:9a:31:
                    fa:76:dc:51:7a:ff:2b:3f:22:21:13:e8:d2:eb:61:
                    18:72:1d:0f:35:9e:23:cb:7c:d5:ab:75:5a:37:7a:
                    e9:ac:50:a0:90:b7:bd:da:88:eb:48:ad:9c:10:af:
                    44:94:87:af:8a:ee:4c:fb:05:79:fe:8f:9e:3b:8c:
                    a3:9e:99:99:d6:4f:5e:ba:1f:d8:64:28:55:bc:62:
                    57:ff:28:44:0f:bb:b4:67:c4:fd:5b:94:00:20:c8:
                    96:f5:a3:56:b7:fc:0d:58:ff:3f:93:a1:d5:0d:0d:
                    95:5e:be:08:b8:40:9b:ec:64:e5:58:ba:45:84:80:
                    f3:44:05:54:be:f3:c3:17:ef:5c:48:67:b5:c5:64:
                    fd:24:5b:cc:ca:8f:ab:65:b6:d0:e7:d0:7b:76:97:
                    04:a1:69:9b:59:a2:fa:2e:b3:3e:75:cd:3b:d9:a0:
                    d7:1f:f3:a4:10:be:fe:1c:5e:39:e2:94:c2:98:d2:
                    d4:04:15:89:34:c0:30:3c:a8:23:04:88:b6:47:1a:
                    f5:29:55:a7:bb:8a:70:8a:30:c6:05:a0:db:65:d7:
                    d4:0d:fa:73:99:00:2f:5e:00:bf:bc:64:24:b7:e2:
                    0d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:35:DA:E7:AD:5F:60:2E:9D:2A:54:84:AD:D0:89:A9:BB:33:51:7C
            X509v3 Authority Key Identifier:
                keyid:5D:EA:E3:85:30:F8:15:FB:F0:B9:B3:F8:EF:63:75:07:86:C8:AC:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XerjhTD4FfvwubP472N1B4bIrAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:84:28:67:37:90:12:aa:0a:82:90:e2:22:f6:14:2d:f6:d3:
         3e:08:55:1b:3e:8f:1c:fd:03:0a:12:14:39:fe:19:1e:85:07:
         28:5a:b9:96:f5:cc:49:dc:5a:00:2e:dc:76:0f:70:2e:26:bf:
         a5:b0:27:eb:19:b5:5d:4f:7c:68:56:52:62:c2:8b:11:f7:bd:
         1a:c1:40:d2:dd:74:5f:41:d2:af:03:4f:71:87:aa:8b:37:33:
         5e:76:8e:a7:ae:83:88:58:b6:dd:47:b3:2b:23:b5:b6:c9:2f:
         58:dd:3d:de:74:35:20:56:d1:57:33:77:43:da:9a:27:3b:47:
         6d:63:fe:c7:a4:76:7d:fd:83:5e:ab:33:88:56:6e:7e:ec:91:
         84:b1:cd:70:5d:88:ac:a5:04:f6:5a:3a:e4:c3:e7:1d:58:33:
         68:df:ca:12:7e:9f:0a:4c:74:4f:39:b8:5f:3d:e3:14:af:0e:
         3b:71:b6:26:b6:4b:1a:f7:10:77:2d:99:f4:a5:f5:d6:f1:18:
         ac:b0:e4:03:db:73:50:e5:28:e5:b1:d3:af:3c:42:fd:bf:1d:
         67:f8:df:88:26:f8:ae:9c:5a:51:8b:f9:72:07:85:9c:99:13:
         fc:71:04:3f:61:c8:68:21:de:91:14:97:0a:ed:87:bd:41:8c:
         2e:a8:c0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----