Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.mft
File:                     PgzfiCrujHIh1YijxSYBjh1kyWg.mft (raw, json)
Hash identifier:          uQEbnrfVyDyiYZtw96fMm9sRdlAaM+rU0EavrjSxSUs=
Subject key identifier:   E4:50:F6:B4:2C:79:C8:82:6B:19:0E:7E:C0:30:65:61:22:93:2C:5B
Authority key identifier: 3E:0C:DF:88:2A:EE:8C:72:21:D5:88:A3:C5:26:01:8E:1D:64:C9:68
Certificate issuer:       /CN=A91CED30/serialNumber=3E0CDF882AEE8C7221D588A3C526018E1D64C968
Certificate serial:       EB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PgzfiCrujHIh1YijxSYBjh1kyWg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.mft
Manifest number:          E8
Signing time:             Sat 29 Mar 2025 04:46:38 +0000
Manifest this update:     Sat 29 Mar 2025 04:46:37 +0000
Manifest next update:     Sat 05 Apr 2025 04:46:37 +0000
Files and hashes:         1: PgzfiCrujHIh1YijxSYBjh1kyWg.crl (hash: h1niLEnil6U/HBtlpLxVu0sMdR6rtWr1K5V1HZGePjw=)
                          2: 41E0B402AE1F11EE96A5C977C4F9AE02.roa (hash: 92n4boJHjJIj9KtZ2gabfQc0rIkNAgV+GGdiupr7NM8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 235 (0xeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CED30
        Validity
            Not Before: Mar 29 04:46:37 2025 GMT
            Not After : Apr  5 04:46:37 2025 GMT
        Subject: CN=67e77b2e-5dfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a4:45:c9:93:ed:32:b0:a3:f3:cd:a2:0f:72:
                    49:4a:46:2c:e5:73:91:18:f9:49:bf:49:f1:85:b5:
                    b6:01:b1:9e:62:3e:a1:1e:d0:5e:a8:0b:01:8a:39:
                    2b:e5:7a:9e:56:b1:71:5f:9e:dc:f2:e2:7f:84:1c:
                    54:25:43:0d:a1:fc:63:06:73:62:7c:53:13:d4:0e:
                    83:ac:93:eb:fb:34:ce:3d:ad:80:46:6f:4d:55:f8:
                    dc:7c:fd:31:85:5f:29:f6:64:fd:b1:3e:a0:be:94:
                    2b:1c:71:e9:5d:40:11:80:69:c2:3c:59:fe:83:39:
                    cc:b9:40:0f:8e:e7:0f:cd:4f:a0:45:de:38:8e:cc:
                    20:35:32:86:a9:d3:6b:48:07:9e:20:53:4b:67:2a:
                    c2:d1:b0:67:e3:f2:0d:1c:b2:58:20:e6:b4:56:94:
                    d2:52:b0:fc:48:ee:56:39:fc:b3:91:ef:36:c5:db:
                    9a:3a:32:ad:ba:72:26:34:99:39:72:b4:64:bc:60:
                    8e:a2:f4:ab:51:dc:62:5f:78:67:68:81:e5:61:07:
                    cd:4d:7c:07:f9:a7:fa:3e:dd:fb:db:c6:89:b0:c5:
                    15:dd:2c:be:81:a4:ff:9b:9c:07:ec:9a:1a:a6:e6:
                    e0:a9:15:d9:35:d4:e0:73:0e:65:61:5a:4e:e5:fe:
                    8b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:50:F6:B4:2C:79:C8:82:6B:19:0E:7E:C0:30:65:61:22:93:2C:5B
            X509v3 Authority Key Identifier:
                keyid:3E:0C:DF:88:2A:EE:8C:72:21:D5:88:A3:C5:26:01:8E:1D:64:C9:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PgzfiCrujHIh1YijxSYBjh1kyWg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         df:17:c5:e1:42:0b:b6:7b:cd:44:dd:ee:09:12:69:56:85:42:
         8e:1c:d1:45:43:d8:8d:df:fc:bc:51:a1:78:9b:ce:a3:79:de:
         71:02:c1:54:21:4c:67:0f:b2:00:58:91:d0:a4:9f:60:6e:4d:
         a0:f3:de:f9:1d:77:3c:ee:d7:c0:2d:b2:14:84:b2:ae:03:d7:
         4a:95:56:3b:95:d2:71:d4:1f:b5:e9:a4:b5:db:b8:fd:92:15:
         e2:8a:cf:68:3b:a4:1d:c2:83:d7:a4:e7:65:36:e3:64:34:98:
         96:65:dc:0a:43:ad:cb:5d:4d:23:2f:c4:66:98:ae:b3:40:6b:
         78:d3:85:2b:4e:11:a9:b9:9f:63:62:2a:9e:2a:7d:8b:07:41:
         70:48:2a:59:04:ee:4b:4d:66:8e:43:d5:ea:a8:e4:38:29:da:
         02:8d:01:0c:f1:81:c2:36:b1:7e:24:bf:5e:18:5b:2c:a8:cf:
         51:12:0a:41:30:45:3e:2d:c0:59:e3:78:49:48:13:b2:96:24:
         a5:9c:59:b7:d9:72:02:ea:64:66:c6:4f:5a:26:82:7d:e1:9b:
         d5:5c:3c:eb:ea:15:ae:79:1a:83:67:8e:c6:3a:ea:a0:3b:d6:
         c6:00:77:96:86:1b:d9:70:13:1c:0b:81:e9:c9:07:2a:44:4a:
         32:95:9a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----