Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/VuOUrxtay4_0gsjGAmn-oOTEJ74.mft
File:                     VuOUrxtay4_0gsjGAmn-oOTEJ74.mft (raw, json)
Hash identifier:          LLsFGRalcd5DboGAAKmqfgvI/wjgdvMSxcZvEoZ05Pw=
Subject key identifier:   87:B1:03:C4:35:DC:25:1F:D5:E5:02:DD:AC:60:C8:F6:A9:22:51:24
Authority key identifier: 56:E3:94:AF:1B:5A:CB:8F:F4:82:C8:C6:02:69:FE:A0:E4:C4:27:BE
Certificate issuer:       /CN=A91A995E/serialNumber=56E394AF1B5ACB8FF482C8C60269FEA0E4C427BE
Certificate serial:       11
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VuOUrxtay4_0gsjGAmn-oOTEJ74.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/VuOUrxtay4_0gsjGAmn-oOTEJ74.mft
Manifest number:          10
Signing time:             Sat 29 Mar 2025 07:23:49 +0000
Manifest this update:     Sat 29 Mar 2025 07:23:49 +0000
Manifest next update:     Sat 05 Apr 2025 07:23:49 +0000
Files and hashes:         1: VuOUrxtay4_0gsjGAmn-oOTEJ74.crl (hash: zqfXvbS0hQuh/2c8mnsBy3GZ7Tf0lG4J8O0/Bh0a/tI=)
                          2: 3E41E766FA6411EFB8C12C50C4F9AE02.roa (hash: DEF0xkvw3q1tLXUQiXU0nzrLNhOtTutlaMvyugUJMpQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A995E
        Validity
            Not Before: Mar 29 07:23:49 2025 GMT
            Not After : Apr  5 07:23:49 2025 GMT
        Subject: CN=67e7a005-a534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:dc:fe:a4:01:04:fe:27:f1:1c:14:ce:f2:b4:
                    0d:f8:4e:8a:f8:f9:28:36:47:0d:6e:26:b0:21:36:
                    58:f8:6c:a6:d0:b8:bf:61:b4:c5:1f:b1:e9:de:86:
                    c0:49:9f:69:6f:24:6e:21:af:9d:6e:79:ea:99:1e:
                    b3:5d:4b:f8:d6:ba:9f:24:f1:fc:82:22:d6:66:0f:
                    8f:55:86:96:53:79:d2:32:0b:6d:06:8d:26:ed:5f:
                    52:bc:62:86:df:35:1a:a7:34:07:5a:f5:87:09:b9:
                    94:a4:29:65:ce:61:b2:7d:44:e3:8d:d2:16:07:2e:
                    32:45:95:9a:6d:f2:fa:94:f4:b3:32:f5:5d:98:b0:
                    9b:8e:59:67:9c:63:97:d5:0f:35:ff:98:76:da:12:
                    fd:de:19:f4:67:c6:9c:70:78:60:ad:0a:c8:63:b4:
                    e7:12:45:d6:0e:3e:ca:da:78:9b:7e:8d:04:40:2e:
                    a3:3b:10:52:03:9f:e1:ca:22:a9:e1:c6:2a:0e:62:
                    61:a9:3a:ed:dc:c6:a9:ba:df:90:ae:1a:9b:be:e2:
                    e3:d4:a4:3b:5f:12:6d:fa:0e:77:5b:a3:48:fe:ba:
                    86:67:84:e6:4a:ff:d6:42:5c:98:cf:01:a2:e4:61:
                    d0:e1:a6:c3:e8:f6:d5:3b:af:0e:51:10:fe:d6:8f:
                    d9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:B1:03:C4:35:DC:25:1F:D5:E5:02:DD:AC:60:C8:F6:A9:22:51:24
            X509v3 Authority Key Identifier:
                keyid:56:E3:94:AF:1B:5A:CB:8F:F4:82:C8:C6:02:69:FE:A0:E4:C4:27:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/VuOUrxtay4_0gsjGAmn-oOTEJ74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VuOUrxtay4_0gsjGAmn-oOTEJ74.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/VuOUrxtay4_0gsjGAmn-oOTEJ74.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:b5:d6:bc:ac:49:0a:38:7c:c5:03:a7:f7:06:d7:9b:25:82:
         35:1b:4a:2b:27:fc:a3:ed:20:8f:24:ed:8a:6b:5f:6e:81:41:
         7c:98:f2:f2:63:e8:4a:01:2a:85:cb:40:76:43:f8:f1:2e:00:
         66:83:f9:93:d2:2b:34:90:92:8b:3b:96:2a:85:5c:45:6a:dc:
         41:e6:9b:c6:f5:1c:e5:65:d2:fb:85:fa:e4:c8:91:ee:83:3c:
         e8:f1:3d:c2:69:6a:e3:53:ea:c5:11:01:66:f4:f0:df:1a:91:
         c8:99:15:e2:9a:ff:f5:56:ff:92:4b:50:96:b0:82:20:2d:c2:
         60:f6:93:0d:38:18:91:c2:83:c4:4f:0f:32:4b:44:c6:00:d0:
         37:0d:de:89:e4:54:87:30:5b:f8:32:a5:d1:73:03:28:6a:66:
         58:a6:73:94:ed:d4:05:45:c0:b7:19:e2:04:5f:34:05:c2:8f:
         f9:b6:de:2b:8b:44:f5:ae:bf:bc:16:6f:c2:d2:ab:87:a5:18:
         90:e2:5b:0d:6f:f8:2f:8e:7c:f4:7d:e6:50:e4:5b:1c:20:65:
         4e:19:6b:c2:a5:62:a5:df:2b:7c:b2:f2:23:ce:8e:96:90:ac:
         48:ea:f5:ca:e2:58:5e:5a:11:b8:b8:e8:ab:fc:33:10:8f:ab:
         3e:57:b7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----