Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft
File:                     wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft (raw, json)
Hash identifier:          ne0qiWOIBleTHmRbZ/yRJ3lqfB+Tcyk3ReDiYRXHn3Q=
Subject key identifier:   9C:33:D1:8B:45:B7:44:17:6E:A4:B2:36:8B:9F:42:AC:C4:E8:5A:74
Authority key identifier: C2:7A:E1:D1:64:72:9F:43:D9:E0:FA:64:BE:51:D0:B6:AE:09:EB:99
Certificate issuer:       /CN=A91DD1F9/serialNumber=C27AE1D164729F43D9E0FA64BE51D0B6AE09EB99
Certificate serial:       80
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wnrh0WRyn0PZ4PpkvlHQtq4J65k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft
Manifest number:          7F
Signing time:             Sat 29 Mar 2025 05:59:02 +0000
Manifest this update:     Sat 29 Mar 2025 05:59:01 +0000
Manifest next update:     Sat 05 Apr 2025 05:59:01 +0000
Files and hashes:         1: wnrh0WRyn0PZ4PpkvlHQtq4J65k.crl (hash: XSbqdFa/5GismwLO7PrRypsoQw3c5Quj9NS9bqvVdEg=)
                          2: 36CFD1EE4AD011EF9B941D17C4F9AE02.roa (hash: EOPx00rRZjGS/73Br0xTrWoW0kA4+3+SpewBHZe+BK0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128 (0x80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD1F9
        Validity
            Not Before: Mar 29 05:59:01 2025 GMT
            Not After : Apr  5 05:59:01 2025 GMT
        Subject: CN=67e78c26-dec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9d:62:05:0c:e8:2c:5e:e3:83:a1:d3:5e:48:
                    94:85:e0:63:6d:1d:6d:ae:b5:72:10:c3:f1:25:8f:
                    f9:32:00:48:c6:11:f5:24:8f:f8:65:e8:e0:41:09:
                    18:b2:20:fd:11:43:eb:d9:f8:76:78:a1:0f:a7:4f:
                    8b:ef:26:c4:cc:0a:8d:3a:63:f5:e6:e7:f5:91:69:
                    df:a4:b6:a7:39:d9:99:e5:4a:f7:e2:ef:4d:db:ac:
                    e0:8e:89:04:9e:b2:a3:13:fe:18:eb:0e:2d:c5:99:
                    5e:ff:4a:75:59:99:f5:e2:bf:56:75:25:a4:07:60:
                    c3:ea:03:0a:7e:bb:eb:1f:c0:3f:bd:ba:e7:3a:e6:
                    cc:9e:aa:8d:6d:21:4e:91:73:3c:60:63:07:5c:d2:
                    ed:8f:e5:8d:36:24:00:05:ca:e9:6f:3c:fb:1f:0a:
                    5b:c0:22:29:c8:40:50:62:4b:56:9c:75:2a:7d:67:
                    13:65:62:99:ad:54:b6:a2:64:f7:72:8c:93:79:5a:
                    10:ef:30:2f:c4:04:1e:cf:60:b3:71:42:d7:72:03:
                    d5:fe:f2:46:a2:54:f9:ef:6d:fd:6b:01:09:23:20:
                    b8:96:da:1d:97:25:4c:10:a3:e9:44:28:4e:74:9c:
                    f3:f1:02:26:55:d8:9a:17:ab:b8:db:5e:8f:db:31:
                    65:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:33:D1:8B:45:B7:44:17:6E:A4:B2:36:8B:9F:42:AC:C4:E8:5A:74
            X509v3 Authority Key Identifier:
                keyid:C2:7A:E1:D1:64:72:9F:43:D9:E0:FA:64:BE:51:D0:B6:AE:09:EB:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wnrh0WRyn0PZ4PpkvlHQtq4J65k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:e4:1b:39:28:d4:b3:03:5b:b3:03:29:07:20:09:19:39:f0:
         b0:a1:d6:4d:1d:72:a2:f5:3e:20:09:f9:73:11:a2:98:9d:a4:
         6f:20:d7:d0:d1:2b:d9:d9:3d:1b:2d:84:e5:fc:09:57:92:20:
         5e:90:75:8f:10:07:97:0a:a1:6d:88:98:21:d7:44:34:6a:60:
         d0:fd:7c:04:63:e0:3a:69:e6:5c:68:b8:c5:f1:c2:1a:32:54:
         0a:ad:f5:f9:ea:b6:b4:1b:a1:9e:c1:cd:3a:a6:2d:0f:ea:3f:
         ab:c2:b0:42:2c:d0:19:c5:2d:4f:e5:6e:81:cf:58:a6:10:78:
         e9:9b:f9:5e:df:92:66:40:2d:76:44:d7:98:c2:68:27:2f:fc:
         bf:9c:f8:9f:f8:d5:1f:da:9f:31:71:85:e2:0b:33:1c:06:88:
         ca:22:9a:78:6c:42:10:dd:b6:df:f7:a0:a5:91:35:11:aa:a8:
         8c:df:25:72:3a:09:a1:0d:08:a6:1c:d6:97:16:69:f7:1b:eb:
         e9:25:df:16:c9:f4:67:77:5f:62:f4:c9:85:b4:eb:e1:57:82:
         eb:75:25:bb:9c:e7:16:6b:c9:b6:ed:4a:fa:8e:99:d7:06:3e:
         12:06:7e:0b:f2:d4:48:d4:32:0e:89:7b:70:00:16:00:27:7e:
         97:a6:d3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----