Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft
File:                     Im9yidTjf-ziJgxk07y6esAxWnU.mft (raw, json)
Hash identifier:          38SzPiwGbOrFKzM5l1fpxjacd7/YZwUUVeF8F4qVy9Y=
Subject key identifier:   C8:70:8F:F8:6C:16:BC:F0:1D:16:94:A6:E2:84:AD:4D:D1:53:DE:D7
Authority key identifier: 22:6F:72:89:D4:E3:7F:EC:E2:26:0C:64:D3:BC:BA:7A:C0:31:5A:75
Certificate issuer:       /CN=A91BC269/serialNumber=226F7289D4E37FECE2260C64D3BCBA7AC0315A75
Certificate serial:       0308
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Im9yidTjf-ziJgxk07y6esAxWnU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft
Manifest number:          0301
Signing time:             Sat 29 Mar 2025 01:32:25 +0000
Manifest this update:     Sat 29 Mar 2025 01:32:24 +0000
Manifest next update:     Sat 05 Apr 2025 01:32:24 +0000
Files and hashes:         1: Im9yidTjf-ziJgxk07y6esAxWnU.crl (hash: fmB8FletJD+psriuscTIJMZY8Vy/kpDZfwvQhk5dB4s=)
                          2: 16DDC0F4CFE811ECA193B36BC4F9AE02.roa (hash: d8hKEngO/LeUHQoe5AIEcocjfTWcuilabUG2KLlGFLg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 776 (0x308)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC269
        Validity
            Not Before: Mar 29 01:32:24 2025 GMT
            Not After : Apr  5 01:32:24 2025 GMT
        Subject: CN=67e74da9-3a92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e7:5c:29:a1:19:08:27:cd:6d:ee:55:53:95:
                    bd:c3:77:a3:fd:f3:9e:05:fe:a6:d3:1c:c8:37:bb:
                    95:39:9e:cf:42:bf:49:d0:ff:23:66:60:f4:bd:ea:
                    40:1e:aa:9e:b6:f4:81:cb:ab:c2:79:3c:ca:1b:01:
                    1a:0d:24:02:5d:e3:a5:02:27:bd:2e:67:7b:67:ed:
                    28:52:f5:7b:12:63:90:81:d8:ca:fd:64:bb:7b:18:
                    a9:30:37:fd:a4:44:8f:fe:8e:bd:16:69:35:0f:25:
                    9f:96:f4:f3:20:00:62:ef:60:37:58:24:fc:8d:49:
                    c0:b1:57:6f:8f:a7:1f:d9:88:30:97:97:58:09:52:
                    d4:8c:0d:bb:e4:4b:f4:1e:41:cf:f5:4c:7b:45:e3:
                    66:b1:57:c9:7a:49:50:f1:d6:f6:bb:0f:9f:cd:5f:
                    8f:b0:a1:08:49:01:d9:41:37:a5:e0:eb:b3:a4:0b:
                    4b:da:a2:3a:44:df:f5:30:d2:df:1b:38:99:78:f3:
                    e5:5b:f5:de:db:c0:ab:09:18:28:27:2a:89:e5:3d:
                    cd:4d:b5:4e:53:cb:29:1d:67:51:e5:b4:b1:f0:b0:
                    89:f5:8d:59:cc:8c:eb:96:08:eb:79:5e:c2:64:fe:
                    3d:a5:06:2f:85:da:cc:13:76:1d:e7:78:b1:c4:dd:
                    20:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:70:8F:F8:6C:16:BC:F0:1D:16:94:A6:E2:84:AD:4D:D1:53:DE:D7
            X509v3 Authority Key Identifier:
                keyid:22:6F:72:89:D4:E3:7F:EC:E2:26:0C:64:D3:BC:BA:7A:C0:31:5A:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Im9yidTjf-ziJgxk07y6esAxWnU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:f8:e7:85:43:be:32:26:08:17:bd:97:f9:3e:43:1b:42:5e:
         c4:3e:f0:19:e6:7b:16:f1:38:b0:0d:9d:52:dd:6b:6e:70:5c:
         e2:9c:61:62:36:72:d0:92:db:89:c9:10:1b:c8:21:08:1f:7a:
         cc:da:ba:a1:45:92:9c:13:4d:91:9e:d4:10:87:0c:21:18:d2:
         15:1c:91:14:bf:05:be:ce:d8:22:ad:41:69:15:22:a9:20:6d:
         c1:67:bf:9e:5d:c0:3f:1c:99:22:39:56:a3:1b:0c:2a:0c:e3:
         45:be:37:3a:64:d8:3a:0f:f3:ea:1c:bc:95:47:92:37:17:35:
         58:a2:79:97:1a:df:5d:2b:d4:71:09:31:4e:2c:36:5e:af:5e:
         eb:f7:9c:3c:d7:4c:7b:a2:8a:be:89:a2:2e:dc:5f:ae:c5:d5:
         21:42:85:36:30:d0:70:00:7d:46:86:99:79:68:13:e4:47:61:
         d7:c4:13:3d:85:81:2f:24:9f:be:0a:3a:3f:d9:a1:25:2f:09:
         8e:b8:a2:50:c0:57:d4:bb:2e:df:07:cd:de:b8:32:a8:f5:91:
         2f:39:45:76:e3:78:bc:d9:29:eb:2e:e2:28:c5:c2:48:6a:07:
         8f:ab:3c:d1:1e:2c:df:8d:ee:b4:e6:1b:93:d9:3f:5a:b2:fb:
         ee:1a:da:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----