Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft
File:                     c_S729eiHW57nkv1sMgXIszCHWc.mft (raw, json)
Hash identifier:          0zqDjgt+/MAMsZJErzXuty+Od04kJw6F5jPfBLnzfU4=
Subject key identifier:   2E:81:E0:51:B1:BF:FF:78:08:46:0C:4E:6B:49:FC:55:00:FF:90:25
Authority key identifier: 73:F4:BB:DB:D7:A2:1D:6E:7B:9E:4B:F5:B0:C8:17:22:CC:C2:1D:67
Certificate issuer:       /CN=A91BDDB8/serialNumber=73F4BBDBD7A21D6E7B9E4BF5B0C81722CCC21D67
Certificate serial:       11AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_S729eiHW57nkv1sMgXIszCHWc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft
Manifest number:          119F
Signing time:             Fri 28 Mar 2025 17:19:41 +0000
Manifest this update:     Fri 28 Mar 2025 17:19:41 +0000
Manifest next update:     Fri 04 Apr 2025 17:19:41 +0000
Files and hashes:         1: c_S729eiHW57nkv1sMgXIszCHWc.crl (hash: 0ElyUkWLagVaQHXjVTK89lV89fGQOkGPfe6toRTJppM=)
                          2: 732BAF02BF5D11EB8199C943C4F9AE02.roa (hash: 19PePHoFF22nUkndMtbal1vAJr/Bweg8ayj4IBTrMGk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4525 (0x11ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDDB8
        Validity
            Not Before: Mar 28 17:19:41 2025 GMT
            Not After : Apr  4 17:19:41 2025 GMT
        Subject: CN=67e6da2d-3adb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:35:38:2c:5d:a2:33:8c:62:63:0f:ac:b4:65:
                    25:77:26:59:3f:c8:8f:24:4c:1e:f6:ae:fb:7d:0c:
                    44:b4:f7:07:60:de:67:62:55:b3:a3:df:5b:44:95:
                    b3:46:43:94:dc:b6:70:16:2c:e0:65:9f:a1:86:35:
                    04:3d:80:cf:9a:64:f1:1a:40:1c:17:1f:c8:37:dd:
                    c7:10:bf:3d:9c:df:44:ef:69:86:e9:f1:4d:74:2e:
                    e2:50:f7:cb:f2:76:d2:ba:b5:f3:64:a9:27:02:cf:
                    70:2b:0f:06:ef:4a:71:35:e6:33:9c:d6:1c:ca:a7:
                    76:c7:f0:1b:e8:12:a3:f9:8b:0f:86:7c:ae:2e:65:
                    44:37:96:ed:10:ed:f8:76:a0:12:fe:48:34:c6:cb:
                    b2:99:53:7a:36:71:62:14:f2:74:c8:5b:84:b8:39:
                    4e:0d:9d:ab:b4:c2:7f:bc:49:95:1d:0e:b2:8f:51:
                    88:7c:f8:72:b8:4e:c3:5c:3b:72:6d:75:cd:86:a1:
                    38:4c:b7:c9:56:db:78:b0:b6:17:1c:93:25:04:66:
                    27:9d:ca:24:60:e7:ef:08:f4:77:5c:6d:e0:a6:1c:
                    a5:1e:f8:53:8e:f6:a3:33:0a:97:a8:03:49:0a:48:
                    69:ee:c2:d4:20:b0:9d:7e:44:55:3f:9d:4e:1f:66:
                    16:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:81:E0:51:B1:BF:FF:78:08:46:0C:4E:6B:49:FC:55:00:FF:90:25
            X509v3 Authority Key Identifier:
                keyid:73:F4:BB:DB:D7:A2:1D:6E:7B:9E:4B:F5:B0:C8:17:22:CC:C2:1D:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_S729eiHW57nkv1sMgXIszCHWc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:4e:03:82:c8:2c:ee:10:b8:c9:e0:cb:8c:de:0e:76:a7:07:
         29:2c:a5:6d:04:1e:83:bc:09:26:ed:5a:54:ae:bb:c2:ba:8e:
         24:c6:80:ce:30:f5:20:a0:c9:22:81:ac:5e:fd:a7:58:9a:83:
         05:25:27:28:51:fc:85:68:59:30:ad:c4:86:bc:32:5b:ed:be:
         7b:30:3d:28:db:0c:c9:6b:0b:f5:50:ef:18:a9:2a:1b:a1:ea:
         8b:0d:e5:97:66:f2:73:14:cb:1a:ea:83:20:fb:c2:6d:09:46:
         7c:46:cb:08:74:2e:7f:08:0d:40:17:9f:18:b8:b3:b5:e8:b3:
         2f:cd:17:8e:74:c5:4c:5c:49:cc:d9:7c:71:fd:4b:b2:5b:5b:
         b5:0e:a3:cb:ee:38:01:a6:a5:02:e8:5e:32:83:4b:b7:15:33:
         10:b3:4e:fb:51:83:97:44:13:9a:6e:7b:8d:da:26:d6:82:5b:
         29:21:23:a7:c6:a6:be:d3:7c:8d:cf:d8:be:cf:52:0e:36:c4:
         db:8d:b7:81:39:b7:48:0f:ab:99:39:50:a0:65:bd:94:95:f1:
         b9:42:15:98:8a:cd:0c:87:89:e2:43:81:32:36:2a:bb:29:e0:
         3e:ce:40:a0:95:ff:3e:c2:94:a4:24:16:d2:99:53:5a:92:b9:
         12:6b:76:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----