Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft
File:                     9nLTtiRMpMjT_iAIJqikn6ssdhI.mft (raw, json)
Hash identifier:          wGY24zujGwOzHWuh4Ha4LW7Thhc6slzBhMMOowWS7/E=
Subject key identifier:   E6:CD:52:BF:F1:4D:55:64:FB:6E:A7:E7:58:1C:30:92:A8:17:B2:CD
Authority key identifier: F6:72:D3:B6:24:4C:A4:C8:D3:FE:20:08:26:A8:A4:9F:AB:2C:76:12
Certificate issuer:       /CN=A91DD799/serialNumber=F672D3B6244CA4C8D3FE200826A8A49FAB2C7612
Certificate serial:       3477
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft
Manifest number:          346F
Signing time:             Fri 28 Mar 2025 14:50:53 +0000
Manifest this update:     Fri 28 Mar 2025 14:50:53 +0000
Manifest next update:     Fri 04 Apr 2025 14:50:53 +0000
Files and hashes:         1: 9nLTtiRMpMjT_iAIJqikn6ssdhI.crl (hash: D4WfFluja832GgRWtLdR5uyTy9kT+Nl696Lq7rHI7iE=)
                          2: 309BECEE09DA11EBB9839313C4F9AE02.roa (hash: t/NnMy3xpmssx9DBTqRefxAqemELZw1L5Qwj8l5jaiw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13431 (0x3477)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD799
        Validity
            Not Before: Mar 28 14:50:53 2025 GMT
            Not After : Apr  4 14:50:53 2025 GMT
        Subject: CN=67e6b74d-d8c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:de:4c:0e:cf:2e:46:d9:a0:39:f9:64:f0:5e:
                    e2:69:19:b1:5e:47:4f:8c:12:a2:4c:17:3b:bd:5d:
                    f3:84:22:4f:df:5c:1f:7d:c1:2b:30:c5:b5:19:81:
                    67:f3:86:57:cf:93:fc:ec:ee:e8:55:40:53:32:bc:
                    98:31:f1:e9:c0:b3:0d:dc:e2:8f:d6:97:a5:63:58:
                    37:b9:17:14:da:cb:b0:be:15:9a:a2:e6:ca:c1:40:
                    ad:34:bb:73:45:51:71:28:32:a3:5f:05:47:c9:b6:
                    e2:2d:13:14:59:44:c8:b9:69:89:fa:c4:a2:9a:9d:
                    58:7f:d2:6f:72:b2:74:0a:ab:59:b8:e9:35:7d:96:
                    50:5a:8d:68:9d:70:73:76:94:b3:72:0e:28:fe:f1:
                    13:45:ab:b6:5c:70:82:93:fe:73:bd:3d:2a:b5:60:
                    c2:2a:16:3d:44:f1:28:76:8b:92:67:33:71:51:ca:
                    24:63:da:96:69:ab:31:a7:72:e3:04:82:80:2d:4b:
                    c5:57:fe:9b:c0:44:fe:e5:0b:29:ca:0a:64:bf:06:
                    16:cd:86:d4:86:22:fb:0c:0a:88:e9:91:e7:2d:8d:
                    9f:ba:95:27:0c:a5:b2:ae:6d:91:b7:1e:97:05:53:
                    4f:e5:75:66:5b:59:54:25:a4:8a:ff:92:09:ee:b7:
                    54:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:CD:52:BF:F1:4D:55:64:FB:6E:A7:E7:58:1C:30:92:A8:17:B2:CD
            X509v3 Authority Key Identifier:
                keyid:F6:72:D3:B6:24:4C:A4:C8:D3:FE:20:08:26:A8:A4:9F:AB:2C:76:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:b8:5f:f6:44:9a:d3:05:d0:24:45:f2:bc:c6:94:bc:4c:b0:
         c8:e5:9f:3a:07:ed:71:0f:90:ad:d2:02:49:6c:9d:3b:a8:9c:
         52:17:ae:4f:b7:42:93:ad:aa:d9:43:00:40:df:25:e9:5d:f1:
         9d:43:2c:ea:9b:f9:b7:ef:6c:fe:6c:03:2a:cb:bc:16:a4:68:
         a8:4d:fd:d4:b7:73:2d:d3:a5:c0:e8:bd:b4:20:a5:94:f9:e7:
         dc:59:c3:0c:22:d5:0a:2c:c5:e5:40:c7:28:0e:7c:1e:a1:cd:
         a1:33:c3:0b:e6:6e:34:c1:8c:42:b6:1e:26:fe:9f:8b:88:fa:
         7e:89:d0:72:49:fb:15:e0:d6:42:42:5b:e5:a1:a8:b3:bb:d9:
         1f:88:26:cd:66:43:13:65:82:eb:4e:a0:09:01:e2:fd:93:71:
         3d:80:95:2f:6c:08:25:2b:f0:69:4f:c8:2b:4d:37:f1:4a:59:
         bd:8a:65:25:54:0a:ef:9f:67:f4:15:ad:af:ea:68:84:03:1f:
         46:2d:1f:c4:06:fb:a6:09:b4:41:54:39:63:a6:f9:69:1d:92:
         07:fe:eb:0f:2c:91:a9:0e:0c:3f:0b:d0:94:a7:cc:53:33:a4:
         66:ca:6c:7c:3b:9d:e0:cd:23:6f:54:d4:0e:6f:b1:31:b4:7c:
         ac:e5:3c:4f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REQ3OTkxMTAvBgNVBAUTKEY2NzJEM0I2MjQ0Q0E0QzhEM0ZFMjAwODI2QThBNDlG
QUIyQzc2MTIwHhcNMjUwMzI4MTQ1MDUzWhcNMjUwNDA0MTQ1MDUzWjAYMRYwFAYD
VQQDEw02N2U2Yjc0ZC1kOGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAot5MDs8uRtmgOflk8F7iaRmxXkdPjBKiTBc7vV3zhCJP31wffcErMMW1GYFn
84ZXz5P87O7oVUBTMryYMfHpwLMN3OKP1pelY1g3uRcU2suwvhWaoubKwUCtNLtz
RVFxKDKjXwVHybbiLRMUWUTIuWmJ+sSimp1Yf9JvcrJ0CqtZuOk1fZZQWo1onXBz
dpSzcg4o/vETRau2XHCCk/5zvT0qtWDCKhY9RPEodouSZzNxUcokY9qWaasxp3Lj
BIKALUvFV/6bwET+5QspygpkvwYWzYbUhiL7DAqI6ZHnLY2fupUnDKWyrm2Rtx6X
BVNP5XVmW1lUJaSK/5IJ7rdUuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFObNUr/x
TVVk+26n51gcMJKoF7LNMB8GA1UdIwQYMBaAFPZy07YkTKTI0/4gCCaopJ+rLHYS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDc5OS8xNTEzNDk5ODFE
OTUxMUUyQkRFQkI5RjkwOEIwMkNEMi85bkxUdGlSTXBNalRfaUFJSnFpa242c3Nk
aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzluTFR0aVJNcE1qVF9pQUlKcWlrbjZzc2RoSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RDc5OS8xNTEzNDk5ODFEOTUxMUUyQkRFQkI5RjkwOEIwMkNEMi85bkxUdGlSTXBN
alRfaUFJSnFpa242c3NkaEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAkuF/2RJrTBdAkRfK8xpS8TLDI5Z86B+1xD5Ct0gJJbJ07qJxSF65P
t0KTrarZQwBA3yXpXfGdQyzqm/m372z+bAMqy7wWpGioTf3Ut3Mt06XA6L20IKWU
+efcWcMMItUKLMXlQMcoDnweoc2hM8ML5m40wYxCth4m/p+LiPp+idBySfsV4NZC
Qlvloaizu9kfiCbNZkMTZYLrTqAJAeL9k3E9gJUvbAglK/BpT8grTTfxSlm9imUl
VArvn2f0Fa2v6miEAx9GLR/EBvumCbRBVDljpvlpHZIH/usPLJGpDgw/C9CUp8xT
M6Rmymx8O53gzSNvVNQOb7ExtHys5TxP
-----END CERTIFICATE-----