Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft
File:                     -c1w52K-aV9LpJAqoguUD3cKBjg.mft (raw, json)
Hash identifier:          tT9Z+1oM+cZKRjGV36pkgqgTfvUvrBkb6DVTLNhFdSs=
Subject key identifier:   71:86:19:98:40:9A:E6:42:40:96:1B:A9:CD:64:83:BE:D6:7B:22:D4
Authority key identifier: F9:CD:70:E7:62:BE:69:5F:4B:A4:90:2A:A2:0B:94:0F:77:0A:06:38
Certificate issuer:       /CN=A91B9AB9/serialNumber=F9CD70E762BE695F4BA4902AA20B940F770A0638
Certificate serial:       69
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft
Manifest number:          68
Signing time:             Sat 29 Mar 2025 06:16:14 +0000
Manifest this update:     Sat 29 Mar 2025 06:16:13 +0000
Manifest next update:     Sat 05 Apr 2025 06:16:13 +0000
Files and hashes:         1: -c1w52K-aV9LpJAqoguUD3cKBjg.crl (hash: pIfOWyDml1lkCF/WycoZvelKUeFXnm+B5NgTyp1iFI4=)
                          2: 723EACFE6E8511EF83048D43C4F9AE02.roa (hash: SORlAdQ9FssMHlMIfPwfvKAJ6kXMG+aUvNMZPsDTNq4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9AB9
        Validity
            Not Before: Mar 29 06:16:13 2025 GMT
            Not After : Apr  5 06:16:13 2025 GMT
        Subject: CN=67e7902d-d1db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:37:82:80:06:04:02:9f:5f:85:af:1f:e5:a1:
                    1c:d6:b9:90:f7:4d:cb:de:e7:40:aa:e2:e9:6a:12:
                    2e:c1:8f:ae:e5:85:23:4f:63:04:d6:77:28:01:b9:
                    2c:d2:b7:5e:c7:2d:30:f3:5c:36:cb:93:2f:78:e3:
                    17:e4:6f:79:03:1a:7b:cb:59:7d:3d:fb:2b:05:82:
                    42:a8:cd:f5:75:ba:0e:52:7e:d9:4e:ef:3c:b0:05:
                    f7:ce:1b:a5:8b:18:b4:1b:98:88:d0:51:8e:f7:0b:
                    3c:c2:46:18:81:34:f3:92:e6:2b:61:53:1f:e6:80:
                    3d:36:de:ac:1d:a0:e3:86:d3:60:b2:9d:84:b0:f9:
                    81:ae:78:81:53:47:5f:19:2e:61:7d:8c:38:31:82:
                    c9:a7:6d:ac:6d:43:77:4d:79:6f:49:c5:cd:b5:6d:
                    58:d8:64:dc:1f:2e:bb:56:ae:cc:f7:96:e1:41:26:
                    0c:9a:d7:20:49:c8:3e:3b:9a:b0:82:21:16:3b:73:
                    d1:4a:9b:63:b2:74:39:a4:d2:fc:01:28:f9:72:c2:
                    80:07:93:4e:c6:4d:22:a8:d3:6b:38:83:55:98:cc:
                    e3:f8:b9:8d:04:df:b3:86:de:48:e9:b2:32:77:eb:
                    9a:09:f4:d8:76:63:19:3f:f9:92:45:9b:b5:42:5d:
                    38:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:86:19:98:40:9A:E6:42:40:96:1B:A9:CD:64:83:BE:D6:7B:22:D4
            X509v3 Authority Key Identifier:
                keyid:F9:CD:70:E7:62:BE:69:5F:4B:A4:90:2A:A2:0B:94:0F:77:0A:06:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:6c:8f:9b:74:21:c7:32:5d:7b:8f:a9:a7:98:be:33:17:9b:
         31:dd:c1:d4:2c:df:56:72:6f:40:a3:7f:8c:a0:10:68:c6:16:
         99:de:84:87:66:68:2e:2d:d4:50:7b:4c:9f:f4:82:d6:90:08:
         04:43:4b:eb:bd:c2:92:d2:7e:9b:f8:91:68:d3:87:04:57:95:
         35:21:0b:a8:d1:38:26:48:c0:f1:3d:d9:14:c4:07:89:55:1e:
         91:83:11:bb:49:ca:c2:b1:55:6b:c2:95:38:e7:0e:31:85:ac:
         ac:a2:10:e1:f4:8b:95:46:3c:e7:d9:8d:5e:2b:c7:53:aa:6c:
         ba:31:bb:74:da:5b:7e:1e:0d:a8:0e:47:39:75:96:b6:25:67:
         cc:69:5c:a7:ba:5c:91:3e:ab:02:be:8c:b3:47:5b:1d:d8:08:
         2b:e3:01:cc:d5:b0:0a:75:9c:00:f0:88:38:ee:22:10:2f:95:
         c8:ee:73:48:76:90:6f:41:5b:7c:75:5c:59:8c:33:75:22:22:
         dd:21:f3:ca:58:07:7c:22:60:56:57:9d:04:8e:2a:d6:da:e5:
         60:9d:4e:51:fc:28:c2:73:10:0f:3a:57:10:55:f4:61:62:4e:
         8d:c0:cf:f4:3e:d7:63:26:0f:c3:92:26:f8:0a:8b:8f:1d:e4:
         4b:87:fe:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----