Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft
File:                     Yt3ChdqLPiCesA6qNnGEXaps8oY.mft (raw, json)
Hash identifier:          iHU6nelUPWdCQ6/A3ra5ioQ73Elr31l/f8Jt4JTMKZY=
Subject key identifier:   F3:57:BB:BE:BB:0D:27:C3:10:F8:F6:9A:48:D2:D4:A4:04:46:17:CC
Authority key identifier: 62:DD:C2:85:DA:8B:3E:20:9E:B0:0E:AA:36:71:84:5D:AA:6C:F2:86
Certificate issuer:       /CN=A91CE5A6/serialNumber=62DDC285DA8B3E209EB00EAA3671845DAA6CF286
Certificate serial:       0122
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft
Manifest number:          011E
Signing time:             Sat 29 Mar 2025 04:10:58 +0000
Manifest this update:     Sat 29 Mar 2025 04:10:57 +0000
Manifest next update:     Sat 05 Apr 2025 04:10:57 +0000
Files and hashes:         1: Yt3ChdqLPiCesA6qNnGEXaps8oY.crl (hash: 09dQn28CZFN4gla7nWozC91+I0YhmmXVq+HmstcEIeQ=)
                          2: 64120230B2C211EFA43BF057C4F9AE02.roa (hash: SBq6U2fKZQoYlgN406N7QsixzZWHu2G7waxuF+whPro=)
                          3: 3B8DEFBCB2CD11EFBEB6A532C4F9AE02.roa (hash: WL6FJ37BF6+nRU/enhuWBdT+cL9d9qTA2zpf1E+vlQA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 290 (0x122)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE5A6
        Validity
            Not Before: Mar 29 04:10:57 2025 GMT
            Not After : Apr  5 04:10:57 2025 GMT
        Subject: CN=67e772d2-72f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6b:f9:8e:47:1e:62:5b:d7:95:dd:2c:68:1b:
                    bb:8f:ef:db:3f:1b:84:77:a2:56:86:be:dd:bd:16:
                    eb:29:35:58:fd:56:66:93:82:f3:74:00:72:69:38:
                    44:fc:e1:a0:de:88:0b:92:6c:6d:5c:23:39:aa:21:
                    6c:e5:bc:06:76:3e:88:33:e0:04:44:a1:82:74:da:
                    3c:00:41:b3:a9:ef:6e:da:90:0b:98:14:54:23:35:
                    0d:77:0a:c5:26:c1:d3:66:04:56:bb:93:bc:1f:b2:
                    56:89:13:dd:ab:36:fc:a1:78:f8:f4:66:a3:0d:4c:
                    83:b5:35:cf:3d:b1:aa:50:26:71:cc:c6:44:73:ae:
                    49:3a:d9:8e:cc:c8:4b:9a:2f:60:b9:d5:8e:82:ff:
                    22:33:ce:fa:01:2c:f0:6b:42:3a:12:52:ae:dc:99:
                    b2:9d:6b:3d:5c:a4:8a:ea:a2:be:79:7f:1e:4d:c4:
                    3a:36:57:3f:c4:f2:fb:4c:f2:8c:91:f1:e4:de:71:
                    fd:f4:62:06:ec:ee:48:75:7e:4f:f0:17:e1:5c:da:
                    1c:ac:59:d8:ae:f9:04:bb:b0:e8:b0:11:8d:76:9e:
                    67:c4:bc:4d:08:8b:91:14:31:bc:02:16:f3:b3:b4:
                    96:35:ef:cb:05:f4:56:43:ee:87:95:7c:19:28:3d:
                    34:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:57:BB:BE:BB:0D:27:C3:10:F8:F6:9A:48:D2:D4:A4:04:46:17:CC
            X509v3 Authority Key Identifier:
                keyid:62:DD:C2:85:DA:8B:3E:20:9E:B0:0E:AA:36:71:84:5D:AA:6C:F2:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e1:e8:6a:2e:35:cd:48:12:91:d1:b9:2a:60:6c:38:9c:e8:d5:
         36:cc:89:2d:c4:f8:ba:95:07:bd:aa:e3:1a:46:c6:83:19:8c:
         25:fd:33:49:8e:9a:45:18:8a:4e:83:6a:e6:f4:05:bf:37:c0:
         a0:7c:21:eb:24:49:bb:9c:35:1f:24:28:47:f2:b1:f8:4a:00:
         13:03:b0:de:57:38:e8:8e:f4:38:79:1f:c9:9e:0f:1e:35:63:
         fc:04:dc:a9:fb:a4:36:a7:09:4d:26:2b:4c:2a:88:c9:b7:dc:
         16:d9:f8:02:0a:51:d4:32:f4:14:7e:89:d7:12:db:dc:53:67:
         b8:ce:9e:a1:62:0f:75:6a:e0:42:a6:bb:3f:54:1a:6f:0d:55:
         fb:ae:4f:f1:cc:dd:5d:d6:99:6d:eb:1d:9d:2b:f9:58:4c:c9:
         42:d7:c1:09:02:43:43:c1:f5:c8:a3:0d:15:0e:1a:3f:66:51:
         db:e5:2f:53:49:30:e1:e5:54:9b:fa:83:4f:0a:13:bf:91:b9:
         2a:36:40:17:3d:8a:1a:14:a5:cc:f9:83:cb:ee:b7:d7:d8:a7:
         53:39:bd:63:bb:9d:e4:bf:e9:dc:07:52:ca:c4:6e:de:43:3e:
         c8:63:a5:0a:29:83:23:e5:3e:11:c8:c2:e3:b6:de:49:b2:00:
         92:68:9f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----