Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.mft
File:                     TnWast4kVGn4MRuSc7VVOH51CpA.mft (raw, json)
Hash identifier:          ZDvnJPjBTqW3GP0KlVKYYB1v48vHU5v2BH/PnZWAe0E=
Subject key identifier:   77:D7:08:A9:0A:26:C3:43:3B:01:29:96:AA:1E:37:20:C2:7D:33:75
Authority key identifier: 4E:75:9A:B2:DE:24:54:69:F8:31:1B:92:73:B5:55:38:7E:75:0A:90
Certificate issuer:       /CN=A91DF233/serialNumber=4E759AB2DE245469F8311B9273B555387E750A90
Certificate serial:       3D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TnWast4kVGn4MRuSc7VVOH51CpA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.mft
Manifest number:          3C
Signing time:             Sat 29 Mar 2025 06:51:31 +0000
Manifest this update:     Sat 29 Mar 2025 06:51:30 +0000
Manifest next update:     Sat 05 Apr 2025 06:51:30 +0000
Files and hashes:         1: TnWast4kVGn4MRuSc7VVOH51CpA.crl (hash: 5hbnSYZyKWi55SKlcYJFKA4bmEkI+LkECdwmz6nSNEo=)
                          2: 1FE0E016B37D11EFBDE18263C4F9AE02.roa (hash: i4QqretrMrfllRlkSz0xUOac9qaskNbaHtNPO9MoQA0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61 (0x3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF233
        Validity
            Not Before: Mar 29 06:51:30 2025 GMT
            Not After : Apr  5 06:51:30 2025 GMT
        Subject: CN=67e79872-dc12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5e:8e:aa:a4:34:30:21:cc:26:c2:e2:6c:85:
                    94:fe:75:71:21:83:37:a2:66:29:ad:e2:75:0f:95:
                    fd:3b:4f:e8:d0:ac:20:c1:c6:4b:6c:b6:de:ab:a3:
                    07:ac:7d:e0:04:19:41:a4:62:bf:35:d2:7d:cf:13:
                    4b:38:90:06:bb:71:3f:58:cd:87:8e:25:b2:63:15:
                    c7:0b:43:71:1e:56:a7:f6:53:69:ee:cd:dd:8a:fd:
                    7b:f0:7e:3e:83:5d:88:83:cd:58:a8:ea:f8:1c:01:
                    53:4a:1b:85:16:85:3e:b7:85:94:d4:d9:ac:7b:c3:
                    30:51:1c:8f:8b:13:2d:8f:40:4a:bb:a4:59:85:e7:
                    51:f0:3c:40:50:83:3c:ae:02:f5:d5:1e:81:14:1a:
                    88:ce:a1:32:3f:74:ed:b7:72:72:a8:3b:a2:fb:a8:
                    6a:2e:95:7a:c6:ee:46:7f:7b:45:65:27:15:d9:e7:
                    dc:b5:1f:bf:a3:0b:34:f5:0b:c1:1f:bf:31:e7:f5:
                    14:55:16:96:fb:7a:a3:7f:9c:91:53:51:39:39:99:
                    65:37:0b:81:f2:b9:58:ab:64:cb:e2:c8:d8:25:6a:
                    c1:35:83:e2:6c:74:71:89:27:6c:54:05:ae:53:35:
                    88:91:f9:51:15:df:d6:44:5f:ff:ce:85:1c:ab:77:
                    68:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:D7:08:A9:0A:26:C3:43:3B:01:29:96:AA:1E:37:20:C2:7D:33:75
            X509v3 Authority Key Identifier:
                keyid:4E:75:9A:B2:DE:24:54:69:F8:31:1B:92:73:B5:55:38:7E:75:0A:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TnWast4kVGn4MRuSc7VVOH51CpA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:2f:84:b1:8e:f9:73:7a:d5:1e:8e:98:c9:2b:38:d1:dc:5d:
         c4:b2:c0:74:51:a0:2f:73:c1:25:c7:19:88:88:f6:2d:c8:3e:
         59:e4:5c:29:9b:46:bf:d6:59:2b:12:18:13:53:e8:9c:f7:b8:
         e2:6c:bb:40:c5:ea:b6:a9:52:a3:2a:5b:92:b4:bc:3a:1e:ff:
         da:3b:71:dc:00:19:35:dd:4e:f3:3b:b9:61:a6:38:1d:01:0a:
         07:d2:c9:94:fa:54:da:9a:de:15:98:d9:10:07:5f:29:7a:90:
         7f:7b:40:42:1b:65:93:09:d4:6c:03:24:79:9f:68:f6:c5:f8:
         8e:e7:f5:0d:bf:a5:e6:55:06:ea:69:59:9b:9e:5b:23:80:10:
         04:44:15:b7:49:17:22:90:da:63:a6:6c:4c:ae:17:e1:b5:e3:
         ce:45:9c:69:de:f1:3f:74:9a:0d:e0:17:b0:f7:6b:7b:fc:6e:
         79:3d:84:48:e6:90:f7:36:5f:8a:bf:b3:ce:70:5e:cd:7c:05:
         98:56:bb:de:88:f1:10:64:5b:b2:03:6d:00:4b:56:32:ee:9a:
         3b:9c:79:01:86:e5:6e:85:1b:21:6c:d5:3e:76:fd:3f:ca:56:
         39:c5:03:fa:4e:09:8c:bb:a9:43:ac:29:86:f8:36:6e:a1:c7:
         aa:cc:4e:49
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
RjIzMzExMC8GA1UEBRMoNEU3NTlBQjJERTI0NTQ2OUY4MzExQjkyNzNCNTU1Mzg3
RTc1MEE5MDAeFw0yNTAzMjkwNjUxMzBaFw0yNTA0MDUwNjUxMzBaMBgxFjAUBgNV
BAMTDTY3ZTc5ODcyLWRjMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDGXo6qpDQwIcwmwuJshZT+dXEhgzeiZimt4nUPlf07T+jQrCDBxktstt6rowes
feAEGUGkYr810n3PE0s4kAa7cT9YzYeOJbJjFccLQ3EeVqf2U2nuzd2K/Xvwfj6D
XYiDzVio6vgcAVNKG4UWhT63hZTU2ax7wzBRHI+LEy2PQEq7pFmF51HwPEBQgzyu
AvXVHoEUGojOoTI/dO23cnKoO6L7qGoulXrG7kZ/e0VlJxXZ59y1H7+jCzT1C8Ef
vzHn9RRVFpb7eqN/nJFTUTk5mWU3C4HyuVirZMviyNglasE1g+JsdHGJJ2xUBa5T
NYiR+VEV39ZEX//OhRyrd2h1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUd9cIqQom
w0M7ASmWqh43IMJ9M3UwHwYDVR0jBBgwFoAUTnWast4kVGn4MRuSc7VVOH51CpAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURGMjMzLzA4RjA1MjYwQjM3
ODExRUY4ODMyMkIwRkM0RjlBRTAyL1RuV2FzdDRrVkduNE1SdVNjN1ZWT0g1MUNw
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvVG5XYXN0NGtWR240TVJ1U2M3VlZPSDUxQ3BBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURG
MjMzLzA4RjA1MjYwQjM3ODExRUY4ODMyMkIwRkM0RjlBRTAyL1RuV2FzdDRrVkdu
NE1SdVNjN1ZWT0g1MUNwQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAIsvhLGO+XN61R6OmMkrONHcXcSywHRRoC9zwSXHGYiI9i3IPlnkXCmb
Rr/WWSsSGBNT6Jz3uOJsu0DF6rapUqMqW5K0vDoe/9o7cdwAGTXdTvM7uWGmOB0B
CgfSyZT6VNqa3hWY2RAHXyl6kH97QEIbZZMJ1GwDJHmfaPbF+I7n9Q2/peZVBupp
WZueWyOAEAREFbdJFyKQ2mOmbEyuF+G1485FnGne8T90mg3gF7D3a3v8bnk9hEjm
kPc2X4q/s85wXs18BZhWu96I8RBkW7IDbQBLVjLumjuceQGG5W6FGyFs1T52/T/K
VjnFA/pOCYy7qUOsKYb4Nm6hx6rMTkk=
-----END CERTIFICATE-----