Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft
File:                     VzWraqwyeVRCT5_oyoUzQpnde8I.mft (raw, json)
Hash identifier:          jAeAXHWIt5jpCxlABe+hjpx9XO9dKJ/oSeiyZpKNaKo=
Subject key identifier:   A4:0D:CD:D6:4F:66:6F:F0:6D:56:F1:3B:46:0D:BB:66:48:C7:DA:02
Authority key identifier: 57:35:AB:6A:AC:32:79:54:42:4F:9F:E8:CA:85:33:42:99:DD:7B:C2
Certificate issuer:       /CN=A91CE392/serialNumber=5735AB6AAC327954424F9FE8CA85334299DD7BC2
Certificate serial:       0F3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft
Manifest number:          0F2F
Signing time:             Fri 28 Mar 2025 17:43:12 +0000
Manifest this update:     Fri 28 Mar 2025 17:43:11 +0000
Manifest next update:     Fri 04 Apr 2025 17:43:11 +0000
Files and hashes:         1: VzWraqwyeVRCT5_oyoUzQpnde8I.crl (hash: yV8+YENhbi1mQ/Wt6BZrC7wnK2k/9pXF8RvUu52ynKE=)
                          2: F27C04B8779E11E997C0204AC4F9AE02.roa (hash: DZGyjsonfYGjBw4hHPzT7rTakbn4N6VzJZPth34e8Gc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3898 (0xf3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE392
        Validity
            Not Before: Mar 28 17:43:11 2025 GMT
            Not After : Apr  4 17:43:11 2025 GMT
        Subject: CN=67e6dfb0-343d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:42:3e:95:13:f0:16:b9:06:b2:80:ef:02:9a:
                    ff:b3:2b:ad:21:a0:d5:4f:77:79:3e:49:be:f7:66:
                    af:e4:04:78:ea:a2:0c:f6:de:83:a7:93:b8:9c:b2:
                    dc:9d:fc:96:a6:b3:89:4b:3a:03:e0:f5:0c:8c:a5:
                    aa:e6:5b:55:df:85:c2:d7:60:55:2d:25:1c:df:9f:
                    bc:7a:1a:2e:ab:e9:2a:d1:f2:60:a7:52:6d:a1:16:
                    af:67:a1:4c:55:cd:81:5b:95:69:dc:ce:0e:fe:fd:
                    fa:43:61:41:b7:15:d6:89:2c:c3:38:de:fe:2c:46:
                    2e:a1:4d:68:d5:77:d0:0c:84:12:1b:b4:b6:6e:ad:
                    fa:41:06:5a:81:4e:6c:91:8b:33:0f:31:8a:6a:a5:
                    77:75:15:24:fe:0c:1a:9b:ad:1f:a9:43:dd:07:2e:
                    29:b9:30:f9:55:40:d3:cc:e5:24:8a:58:70:7c:2f:
                    93:02:02:d4:bb:23:47:97:37:f5:99:c9:54:3d:f5:
                    02:8a:46:47:5e:84:e0:8b:ac:49:1f:e3:50:3d:87:
                    75:a6:ec:c9:c3:d8:10:51:e4:ef:7f:29:b2:7d:1a:
                    6e:1a:f3:2c:cd:f6:87:55:41:6d:38:00:0b:90:da:
                    d8:45:5b:21:45:3e:ac:f5:11:c9:68:32:86:20:d8:
                    72:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:0D:CD:D6:4F:66:6F:F0:6D:56:F1:3B:46:0D:BB:66:48:C7:DA:02
            X509v3 Authority Key Identifier:
                keyid:57:35:AB:6A:AC:32:79:54:42:4F:9F:E8:CA:85:33:42:99:DD:7B:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:52:ac:b4:ff:45:ae:f9:cf:0f:e8:14:fb:fb:88:57:be:fd:
         ea:c4:67:b2:4f:39:0b:ea:c9:cc:a8:cc:08:8b:aa:c8:1a:ae:
         26:38:45:5d:b9:ec:a6:f9:9d:30:16:70:99:b1:e4:54:ce:b0:
         71:98:17:66:bf:20:0d:26:b6:b0:ef:a2:06:bd:e1:0c:33:53:
         e8:86:a2:d3:e8:a2:c2:ec:6a:83:12:6d:52:e4:53:5b:33:3d:
         5d:c0:17:5c:92:32:fb:4e:71:12:78:f6:c1:3a:bf:c1:f6:77:
         8e:88:8d:23:8f:b0:27:86:c4:f4:3f:ac:94:12:81:ac:7d:5a:
         f8:70:ac:e9:47:0b:e8:5f:35:34:01:73:08:bf:6c:dd:eb:c3:
         f7:6f:12:b4:ed:59:d9:e6:a7:b2:7f:34:53:56:d7:6a:67:d6:
         65:e7:03:58:9e:d5:6f:d5:93:5a:37:fc:90:63:6b:82:59:d5:
         d1:99:76:02:97:a2:9e:95:92:bd:17:74:01:32:04:ff:32:5c:
         0d:43:04:b5:71:ee:01:34:77:7c:43:13:af:1e:5c:80:39:a7:
         7b:79:a3:f9:ea:44:f1:8c:77:20:1a:27:29:50:b9:be:41:f2:
         3c:80:a5:8a:95:4d:88:9d:ab:94:e9:25:63:99:4b:9c:1b:8d:
         15:d3:0b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----