Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.mft
File:                     V2xUR8CbWXEHt3DBAciTJ_EFvTM.mft (raw, json)
Hash identifier:          vVaCkJehiFZrXBZkBsSYDRAzY5QKgC7jTjd1bYLTdks=
Subject key identifier:   16:84:EC:A4:D0:D1:44:C5:60:C7:03:E7:37:F1:7D:64:06:00:DC:0B
Authority key identifier: 57:6C:54:47:C0:9B:59:71:07:B7:70:C1:01:C8:93:27:F1:05:BD:33
Certificate issuer:       /CN=A91B7A3F/serialNumber=576C5447C09B597107B770C101C89327F105BD33
Certificate serial:       039A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V2xUR8CbWXEHt3DBAciTJ_EFvTM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.mft
Manifest number:          0394
Signing time:             Sat 29 Mar 2025 01:02:33 +0000
Manifest this update:     Sat 29 Mar 2025 01:02:33 +0000
Manifest next update:     Sat 05 Apr 2025 01:02:33 +0000
Files and hashes:         1: V2xUR8CbWXEHt3DBAciTJ_EFvTM.crl (hash: ckTsi2fUSumdUpiH9nVuQTv0r0Zf0MMqaVh5xcCY/3s=)
                          2: 821CAFEE923811EC955B7A3AC4F9AE02.roa (hash: 9KQWUlz6QNm+2IJYVtG7dsHf8uD3C5dcvLfvCk8SVA8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 922 (0x39a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7A3F
        Validity
            Not Before: Mar 29 01:02:33 2025 GMT
            Not After : Apr  5 01:02:33 2025 GMT
        Subject: CN=67e746a9-92c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:9c:ad:77:08:76:b6:66:5e:6d:84:db:59:ca:
                    ab:f6:2a:08:e0:07:13:4f:6e:2a:20:63:6b:43:2a:
                    8f:ff:ad:80:93:c1:4f:86:f9:21:9f:01:db:5c:9c:
                    c6:96:1c:c5:31:ad:79:1c:fd:86:44:7d:10:85:c7:
                    59:b9:d4:d3:df:0b:16:94:60:23:d1:66:f6:3b:4e:
                    ad:83:9b:74:e1:80:e4:eb:a7:53:79:4a:a0:2b:de:
                    03:06:04:22:9f:64:fd:8d:4f:b9:ce:ee:0c:88:e9:
                    39:63:e2:1c:5f:d5:5c:64:53:ca:66:f2:7e:d7:7a:
                    cf:04:f5:13:01:0f:d3:c4:5b:1a:8c:ce:86:78:8b:
                    35:6a:d7:f2:55:55:2f:61:9d:07:e2:4b:cb:5e:f9:
                    17:82:a3:eb:c2:49:0b:b5:c4:26:7a:85:3f:7f:4f:
                    9b:37:83:ac:73:8b:20:4e:29:fd:d2:f7:01:09:c0:
                    66:75:5e:ae:55:b5:6b:ab:6b:33:6b:0a:76:a4:d8:
                    8e:49:de:c8:d2:54:bf:88:aa:cc:d6:44:ea:6c:42:
                    4a:e3:63:c3:a5:ea:40:19:45:ac:50:31:11:24:19:
                    ce:63:24:5d:8f:b2:39:74:3d:bb:94:db:1f:ee:5b:
                    05:d1:0a:15:d2:c1:46:f3:43:69:02:e2:8f:2b:60:
                    72:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:84:EC:A4:D0:D1:44:C5:60:C7:03:E7:37:F1:7D:64:06:00:DC:0B
            X509v3 Authority Key Identifier:
                keyid:57:6C:54:47:C0:9B:59:71:07:B7:70:C1:01:C8:93:27:F1:05:BD:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V2xUR8CbWXEHt3DBAciTJ_EFvTM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:f3:2e:3f:4d:10:2a:6b:27:6d:9f:13:70:f9:62:53:88:14:
         91:c5:27:33:62:98:24:07:d7:e4:30:e4:8b:22:c3:6c:89:11:
         7f:33:1f:a2:97:06:93:43:17:4c:38:2e:5e:76:e2:15:ca:99:
         b0:16:98:25:df:db:93:a9:d5:53:ab:f8:a5:3a:91:1c:65:37:
         d3:a4:65:48:a4:bb:38:9e:b5:42:5d:92:87:ed:d1:de:8e:d3:
         28:93:37:30:5f:35:92:5a:71:92:18:57:71:0f:8e:d0:18:20:
         3f:99:47:f3:b0:3c:4e:bd:1e:a7:d0:0e:74:54:4c:ec:14:6e:
         83:a8:bc:4b:e2:bf:97:09:5b:19:69:10:40:f6:79:02:4e:0e:
         f7:b2:3f:e4:c9:4d:e7:c3:3f:bf:06:67:5d:84:d1:c8:8a:89:
         68:e2:37:60:bf:dc:b8:7b:2d:ad:0a:dd:78:a3:1f:b7:f1:a8:
         32:e9:84:7a:19:fd:7e:d0:b3:64:85:b0:c8:0e:3f:8c:c0:40:
         dc:5a:6b:4a:28:1c:9e:19:d8:32:f6:31:80:5e:27:4d:05:54:
         58:15:88:26:20:05:11:f3:e7:59:ca:02:ee:b2:78:a0:b5:e4:
         7e:e0:4e:b3:19:05:e0:9c:e2:9b:cb:41:1d:64:d1:eb:19:66:
         6f:8d:13:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----